last executing test programs: 55.041027101s ago: executing program 1 (id=389): ioprio_set$uid(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4008000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}], 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002780)=[{&(0x7f0000000880)='\x00', 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f00000014c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001400)="b7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x80000001, 0x4, 0xa12, 0x9040, r6, 0x40000, '\x00', r7, r6, 0x0, 0x5, 0x5, 0xe, @value=r6, @void, @void, @value}, 0x50) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 54.277345478s ago: executing program 3 (id=393): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e26, 0x3, 'dh\x00', 0x30, 0x7, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @remote, 0x4e20, 0x3, 'lblc\x00', 0x15, 0x2, 0x2a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0xc24, 0x0, 0xfffffffb}}, 0x44) 52.722740607s ago: executing program 3 (id=397): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = eventfd2(0xc, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0) close_range(r1, r3, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000000b00)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x3, 0x0, 0x0, 0x200000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0xa, 0x0, 0xfffffffffffffffd, 0x0, 0xc6a, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xbd4f, 0x0, 0x4000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0xa13e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1020000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9710, 0x0, 0x9]}) socketpair(0x26, 0x4, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[0x0]) close(0xffffffffffffffff) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, 0x10) io_submit(r8, 0x7, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000001000)="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", 0x1000, 0xfffffffffffffffb}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe9, r1, &(0x7f0000000280)="2143a5d6b3b12132181cd80b5752a8de6743f982ea870b2cb850ff32091157f23ecd56eb5862fd98ef1570b5a82c46a3f9fa12109c8b7c41aa9979d6fe0d4484232b70000e27cdc21791b2bece11d8e6300a2cc4f7401a1c8e74d495505c24c542fa415362b8ab71b5645487fc1025a8c8491d27700a67394c96bf0610a9175eebdfa2171f", 0x85, 0x6, 0x0, 0x3, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xfff, r0, &(0x7f0000000400)="5e00d2bf1c767b08d9d423b13c41e582122b3cd1001d0bd6a3cce5774dc88184042688f0038ff13182b2673156e462875a0cd9776bfa7d24a2052c66bf340a239ffca00d753316ef2d028c9f6d02b75745c7e98e0dc5926eeb8687045003a83101d42c5d4462b46a223451b2f2830de4016ad29526abf1f33114caa0173282423b203db6a0", 0x85, 0x7f, 0x0, 0x3, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x800, r7, &(0x7f0000000500)="fe3d02089c33a3a92fe524c56093e9244daae325a062617f0c6a3d4e8298fd93f8f5b73c2e676c680c35116b48717e287ae6230c439a882e7a623e5a42899eb6d8851381caa902996156205617a67e087b38995c06c19cc970c34f430c8846973f853e7e027dc476b2fc80a396763d43a619d95028c36d49a3031c11dfec1126eb2b62a6674bc499aa8a930cb65760500ca34ef7b4a4e2ca54036771d2b580e418662595ff7ce04ff628ac9065a90df441908ccab82943354b0932ee7bbf6de07c9d2941d15e7a422149ff5f7995c0a9bdd379912cd84810545fb9898ac82f1f31963b172eb823caa8476c1b278a71947ac95758fa3f7dbb8fe95fc14c10", 0xfe, 0x1, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000640)="934525a4884a9f962bcc754f3b2b389b0e2316573ffd777565e33bdf2592", 0x1e, 0x6, 0x0, 0x2, r2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f00000006c0)="9f75fa60e72061edfd62a1f84c37c6e343ca0bdec7d9902d3fc241d80b61589677c5614f43f4fb3263388327003c2352e7f18526a6f1cd184ef3b0c86705a70dc93571c1c92072b37af1ca824124e7923caf50cf6dd145e653c9e17e85666b280ada778b4a576b79806c9e59a9faba2d1f5122177748cff89d0559bb35c84ad87b167a205c3a77a6b039f0d3ba1588f32f7f211f6e75772bc9c579eee6f76cd3deef07777f8da7a34aeee51062ba96b79ca1798a06b3cf6d3e318f8ef4b6092f8c4df6c6bfc1a1ae237b3a31061f08b5bb5b000cdde699f6eee135b9dfbb", 0xde, 0x1a8, 0x0, 0x0, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0xcd, r6, &(0x7f0000000800)="02858173d62949c3da0d97a99192722aa66f39789feec12420f21c9c3298bf242f5b3f53eb809624b73024fbd7d40d00be5af3a0bd6b759dda65b4721061cb4ab4abfa41a7539b1ed3f957cf8880aa482a9ae1c91470534e91f23b8b0afaab4cb9f99001929a408bc9190ebb4e51e62079ae4875", 0x74, 0xfffffffffffffff7, 0x0, 0x1, r2}]) r9 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', 0x0}) io_uring_enter(r9, 0x184c, 0x0, 0x0, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000000, r10) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r11, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$VIDIOC_S_AUDIO(r11, 0x40345622, &(0x7f0000000240)={0x8, "7c8da66efa731f5beeec03cf644d1e3a8b38263b362aba54db0ffb597c8571a7", 0x2, 0x1}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) 52.594814878s ago: executing program 2 (id=398): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x12) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) ioctl$sock_netrom_SIOCADDRT(r4, 0x541b, &(0x7f0000000000)={0x0, @default, @bpq0, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = io_uring_setup(0xc, &(0x7f0000000080)={0x0, 0x8470, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="e600"/20, @ANYRES32=0x0, @ANYBLOB="e802a17636c3e30df1ac001000000000000000000000000000000000000000000000000000000000000eab399fa7b65e0c2c587873617592708bcb72c0811556faf464f9924a78e544d6d3167506c60ed6c38188f14a683bbeafeed94aa98d0e37e650ee498cb41cc2dd5a4c48114bf9d900646ca65ae26732f7b5a6e1c1df828d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='efs\x00', 0x208000, 0x0) 51.54657369s ago: executing program 3 (id=402): munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2e1, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) 51.272998947s ago: executing program 3 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r1, 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000200)={0x70005, 0x200}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000380)=""/106, 0xbe}], 0x1, 0x40fb, 0x9) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006", @ANYRES8], 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c8004e004a00010002030400030000b7c5e94a5379aaec7d40375988306094726390e552caeb114eb80b85e5ba9a33939c070004000300ff7f0c01050003000a0003"], 0x53) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) write$selinux_create(r7, &(0x7f0000000440)=@access={'system_u:object_r:setrans_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x100000000}, 0x48) setreuid(0xffffffffffffffff, 0xee00) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_usb_disconnect(r6) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 49.31751177s ago: executing program 1 (id=410): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0xd, 0xfffd, 0x3, 0x800, 0xca4, 0x2, 0xf, 0x7, 0x3, 0x0]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x10, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x19) syz_usb_connect(0x4, 0x210, &(0x7f0000000480)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRES64], 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r3, &(0x7f0000000540)=""/95, 0x47) write$nci(r3, &(0x7f0000000100)=ANY=[], 0x4) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x1) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e}}) 48.295814454s ago: executing program 2 (id=412): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = eventfd2(0xc, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0) close_range(r1, r3, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000000b00)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x3, 0x0, 0x0, 0x200000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0xa, 0x0, 0xfffffffffffffffd, 0x0, 0xc6a, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xbd4f, 0x0, 0x4000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0xa13e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1020000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9710, 0x0, 0x9]}) socketpair(0x26, 0x4, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) close(0xffffffffffffffff) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, 0x10) io_submit(r8, 0x7, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000001000)="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", 0x1000, 0xfffffffffffffffb}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe9, r1, &(0x7f0000000280)="2143a5d6b3b12132181cd80b5752a8de6743f982ea870b2cb850ff32091157f23ecd56eb5862fd98ef1570b5a82c46a3f9fa12109c8b7c41aa9979d6fe0d4484232b70000e27cdc21791b2bece11d8e6300a2cc4f7401a1c8e74d495505c24c542fa415362b8ab71b5645487fc1025a8c8491d27700a67394c96bf0610a9175eebdfa2171f", 0x85, 0x6, 0x0, 0x3, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xfff, r0, &(0x7f0000000400)="5e00d2bf1c767b08d9d423b13c41e582122b3cd1001d0bd6a3cce5774dc88184042688f0038ff13182b2673156e462875a0cd9776bfa7d24a2052c66bf340a239ffca00d753316ef2d028c9f6d02b75745c7e98e0dc5926eeb8687045003a83101d42c5d4462b46a223451b2f2830de4016ad29526abf1f33114caa0173282423b203db6a0", 0x85, 0x7f, 0x0, 0x3, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x800, r7, &(0x7f0000000500)="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", 0xfe, 0x1, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000640)="934525a4884a9f962bcc754f3b2b389b0e2316573ffd777565e33bdf2592", 0x1e, 0x6, 0x0, 0x2, r2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f00000006c0)="9f75fa60e72061edfd62a1f84c37c6e343ca0bdec7d9902d3fc241d80b61589677c5614f43f4fb3263388327003c2352e7f18526a6f1cd184ef3b0c86705a70dc93571c1c92072b37af1ca824124e7923caf50cf6dd145e653c9e17e85666b280ada778b4a576b79806c9e59a9faba2d1f5122177748cff89d0559bb35c84ad87b167a205c3a77a6b039f0d3ba1588f32f7f211f6e75772bc9c579eee6f76cd3deef07777f8da7a34aeee51062ba96b79ca1798a06b3cf6d3e318f8ef4b6092f8c4df6c6bfc1a1ae237b3a31061f08b5bb5b000cdde699f6eee135b9dfbb", 0xde, 0x1a8, 0x0, 0x0, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0xcd, r6, &(0x7f0000000800)="02858173d62949c3da0d97a99192722aa66f39789feec12420f21c9c3298bf242f5b3f53eb809624b73024fbd7d40d00be5af3a0bd6b759dda65b4721061cb4ab4abfa41a7539b1ed3f957cf8880aa482a9ae1c91470534e91f23b8b0afaab4cb9f99001929a408bc9190ebb4e51e62079ae4875", 0x74, 0xfffffffffffffff7, 0x0, 0x1, r2}]) r9 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', 0x0}) io_uring_enter(r9, 0x184c, 0x0, 0x0, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000000, r10) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r11, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$VIDIOC_S_AUDIO(r11, 0x40345622, &(0x7f0000000240)={0x8, "7c8da66efa731f5beeec03cf644d1e3a8b38263b362aba54db0ffb597c8571a7", 0x2, 0x1}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) 47.872105799s ago: executing program 2 (id=413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x37, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000000000008500000000000000", @ANYRES32, @ANYBLOB="00000000000000008510000000000000851000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_vhci(&(0x7f00000019c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}}, 0x9) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="900fff9fb98e12986ee8f03dc720e8880a43ee3d363ab7ebe3dd9d83e65456eb7942b7ac13b8c2e34b7bf6f7dd3bfa8e0f6a9acdc1ee816d8cbfceca0715f42ad9451d7eeda62e8094e99dadc30c63f5943dd4a295b0413f52c1fe3ca0110fac8d60a68b0d73d06b93fc40cb2d9cbfa65d27a7c7ddb32d13cc2dfd5964a183877f6fd5f48cb256e378ad", 0x8a, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 46.697695887s ago: executing program 2 (id=414): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000300)={0x9, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0, 0xffffffff}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 46.242864358s ago: executing program 3 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x810, r0, 0xa7fc0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x6a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x900000000000000, 0x0) io_destroy(0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000080)={r7, r9}) 45.785171301s ago: executing program 2 (id=417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c000480050003000100000005000300000000000500030000050000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 45.78463465s ago: executing program 1 (id=418): socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 45.734985275s ago: executing program 2 (id=419): r0 = bpf$MAP_CREATE(0x3f, &(0x7f00000000c0)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000000000004000000ff030000020502008ced140e6eec86744e87e55a36f1ee3d865b19b8200bb3914c8dedf76da0f23d3690306003c42e2c70c4a1ca580969701e01478fc429ff0a791f05de878a7f6951ac3961bc0da5d5d48e71c9f9fab2ef8878", @ANYRES32=r0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000f0673b900000000000000000f000000050001000700000006000b0003000000c153161b09b1788a0368dee1b9f9b47b04530ff7dfe0b9ad3d4f1ea924df0e1737164077faeffc972273fb3c1d0e266434c1d3ada50dec703b"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xf3a, 0x0) tee(r6, r5, 0x6, 0x4) write$binfmt_script(r7, 0x0, 0xfffffe48) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) read(r3, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x4}, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) 45.734573606s ago: executing program 3 (id=420): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x4}, 0x2) 44.840153825s ago: executing program 1 (id=423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000001c0)={[0x80]}, &(0x7f00000005c0), &(0x7f0000000340)={0x0, 0x989680}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf773, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf00001, 0xffffbfff, '\x00', @p_u32=0x0}}) 43.820300351s ago: executing program 1 (id=424): setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xfeffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 43.531954561s ago: executing program 1 (id=426): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e26, 0x3, 'dh\x00', 0x30, 0x7, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @remote, 0x4e20, 0x3, 'lblc\x00', 0x15, 0x2, 0x2a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0xc24, 0x0, 0xfffffffb}}, 0x44) 32.896843409s ago: executing program 4 (id=443): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000440)={0x80, "421ae375378525f149154c9422ad0644f47d3bd7aaa45d6bb4823ab4c98100"}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r5, 0x0, 0x1c) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100030600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001001100000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7], 0xb4}}, 0x0) 30.361618949s ago: executing program 32 (id=419): r0 = bpf$MAP_CREATE(0x3f, &(0x7f00000000c0)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000000000004000000ff030000020502008ced140e6eec86744e87e55a36f1ee3d865b19b8200bb3914c8dedf76da0f23d3690306003c42e2c70c4a1ca580969701e01478fc429ff0a791f05de878a7f6951ac3961bc0da5d5d48e71c9f9fab2ef8878", @ANYRES32=r0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000f0673b900000000000000000f000000050001000700000006000b0003000000c153161b09b1788a0368dee1b9f9b47b04530ff7dfe0b9ad3d4f1ea924df0e1737164077faeffc972273fb3c1d0e266434c1d3ada50dec703b"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xf3a, 0x0) tee(r6, r5, 0x6, 0x4) write$binfmt_script(r7, 0x0, 0xfffffe48) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) read(r3, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x4}, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) 30.214031577s ago: executing program 33 (id=420): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x4}, 0x2) 28.266928338s ago: executing program 34 (id=426): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e26, 0x3, 'dh\x00', 0x30, 0x7, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @remote, 0x4e20, 0x3, 'lblc\x00', 0x15, 0x2, 0x2a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0xc24, 0x0, 0xfffffffb}}, 0x44) 27.700918392s ago: executing program 4 (id=450): r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0205647, &(0x7f0000000000)=0x2) r1 = syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000306"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) chdir(0x0) listen(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) 13.563526615s ago: executing program 4 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) capget(0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000540)="f20ea8accdb7d9e23df464", 0xb, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x891c, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) getdents64(r3, &(0x7f00000002c0)=""/4120, 0x1018) 12.344994655s ago: executing program 4 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x18b, 0x80000000000000}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000200)="ee"}) 11.713402572s ago: executing program 0 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0xffffffffffffff3a) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 10.711608945s ago: executing program 0 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000000)={0x0, 0x3, 0xe}, 0xc) 9.729996593s ago: executing program 0 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x7000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000000fffc0500010007"], 0x1c}}, 0x8000) 9.508201231s ago: executing program 0 (id=468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 9.35765961s ago: executing program 5 (id=445): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x100000, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450) 8.963579162s ago: executing program 5 (id=469): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) 8.738530647s ago: executing program 6 (id=470): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.653984612s ago: executing program 5 (id=471): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffffffffff3b) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000022000000000000900000000f7de91d072f5d271a57f91024139aece8db91e1d8e82288ca8649f63a521a2dc1a2307dd600c404fc2870600000000000000538e739da7e6d848be9059c849be16c7ddbd9876bdbd1b030fe15f551495ba607fe175bb93027dd1960091a59610b358333150481d3ed6b64ec0cc765e330833a5bbfdeb920c795ac183db423e8dab23646405ba18"], 0x1c}}, 0x24040018) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r8, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x400000000000006, 0x800040000000206b}) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 7.481287678s ago: executing program 4 (id=473): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000740)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "7ebb2f", 0x0, 0x2c, 0x0, @local, @mcast1}}}}, 0x0) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) getsockopt$inet_mreq(r1, 0x0, 0x50, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2200"/56, @ANYRES32=0x0, @ANYBLOB="010000008100000000000000002000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2002, 0x0) 7.285320323s ago: executing program 7 (id=474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e22, @private=0xfffffffe}}) 7.2191032s ago: executing program 6 (id=475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000f14010000000000000000000d0045"], 0x20}, 0x1, 0x0, 0x0, 0xdb4ce876ffba1343}, 0x20040004) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)=ANY=[@ANYBLOB="300000000514ffffffff7000fddbdf340800010001000000080003000200000008000100000000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/warn_count', 0x80040, 0x10a) socket$kcm(0x10, 0x2, 0x0) 7.005887913s ago: executing program 7 (id=476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 6.632128637s ago: executing program 7 (id=477): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) connect$netlink(r0, &(0x7f0000000000)=@unspec={0x0, 0xe803}, 0xc) 6.508796437s ago: executing program 6 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) openat$dir(0xffffffffffffff9c, 0x0, 0x80102, 0x10e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2, 0x1], [], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000010) 6.503652012s ago: executing program 5 (id=479): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.044709542s ago: executing program 7 (id=480): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x21000) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, 0x0, 0x0) 6.044299298s ago: executing program 5 (id=481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x12) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) io_uring_setup(0x39e5, &(0x7f0000000300)={0x0, 0x1d6, 0x80, 0x3, 0x2ab}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) 2.272966957s ago: executing program 7 (id=482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002a40), 0x4a0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000002a80)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 1.999353344s ago: executing program 6 (id=483): syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x1a, 0x0, @none, 0xa1, 0x92, 0x2, 0x7, 0xfc, 0x4, 0x79, @none}]}}}}, 0x1d) 1.715206691s ago: executing program 6 (id=484): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x3000, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0, 0x0, 0xf000000}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) 1.407235201s ago: executing program 6 (id=485): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.011492743s ago: executing program 0 (id=486): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 641.177275ms ago: executing program 0 (id=487): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 60.998831ms ago: executing program 7 (id=488): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=489): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="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", 0xfb}], 0x1}}], 0x1, 0x81) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)='2', 0x1}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): :sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 66.043541][ T6011] vlan2: entered promiscuous mode [ 66.052469][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 66.062253][ T6011] vlan2: entered allmulticast mode [ 66.082128][ T6011] hsr_slave_1: entered allmulticast mode [ 66.137897][ T29] audit: type=1400 audit(1737303961.887:170): avc: denied { ioctl } for pid=6010 comm="syz.1.14" path="socket:[8399]" dev="sockfs" ino=8399 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.162332][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.171741][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 66.296292][ T6011] hsr_slave_1 (unregistering): left allmulticast mode [ 66.303617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.327212][ T6011] hsr_slave_1 (unregistering): left promiscuous mode [ 66.733522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.621889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.681004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 67.961293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.090579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.163179][ T6029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 68.255908][ T6029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 68.562840][ T6036] Zero length message leads to an empty skb [ 69.672991][ T6042] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 69.680750][ T6042] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 70.099095][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 70.099137][ T29] audit: type=1400 audit(1737303965.847:190): avc: denied { connect } for pid=6038 comm="syz.4.24" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.429162][ T5853] IPVS: starting estimator thread 0... [ 70.434949][ T29] audit: type=1400 audit(1737303965.867:191): avc: denied { write } for pid=6038 comm="syz.4.24" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.520351][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 70.571586][ T6051] IPVS: using max 25 ests per chain, 60000 per kthread [ 70.614555][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 70.837060][ T29] audit: type=1400 audit(1737303966.577:192): avc: denied { read write } for pid=6058 comm="syz.2.28" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 70.926932][ T6063] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 70.938859][ T6063] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 70.956255][ T29] audit: type=1400 audit(1737303966.577:193): avc: denied { open } for pid=6058 comm="syz.2.28" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.382735][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389191][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.469129][ T29] audit: type=1400 audit(1737303966.587:194): avc: denied { search } for pid=5483 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.499998][ T29] audit: type=1400 audit(1737303966.827:195): avc: denied { mounton } for pid=6058 comm="syz.2.28" path="/2/file0" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.610435][ T29] audit: type=1400 audit(1737303967.327:196): avc: denied { read } for pid=6067 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.635661][ T29] audit: type=1400 audit(1737303967.327:197): avc: denied { open } for pid=6067 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.662410][ T29] audit: type=1400 audit(1737303967.327:198): avc: denied { getattr } for pid=6067 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.688658][ T29] audit: type=1800 audit(1737303967.357:199): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.26" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 72.159253][ T5853] IPVS: starting estimator thread 0... [ 72.227698][ T6080] process 'syz.3.30' launched '/dev/fd/9/./file1' with NULL argv: empty string added [ 72.300964][ T6076] IPVS: using max 25 ests per chain, 60000 per kthread [ 72.541532][ T6090] vivid-000: disconnect [ 72.612822][ T6086] vivid-000: reconnect [ 74.008292][ T6107] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.38'. [ 74.028807][ T6107] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 75.121836][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 75.121846][ T29] audit: type=1400 audit(1737303970.877:231): avc: denied { shutdown } for pid=6123 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.147834][ T5872] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.404432][ T5867] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 75.591052][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 75.684106][ T6135] input: syz1 as /devices/virtual/input/input5 [ 76.160511][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.183332][ T29] audit: type=1400 audit(1737303971.417:232): avc: denied { read } for pid=6131 comm="syz.1.44" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.206349][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.216203][ T5872] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 76.225969][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.234054][ T29] audit: type=1400 audit(1737303971.427:233): avc: denied { ioctl } for pid=6131 comm="syz.1.44" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.260234][ T29] audit: type=1400 audit(1737303971.517:234): avc: denied { setopt } for pid=6131 comm="syz.1.44" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.280473][ T29] audit: type=1400 audit(1737303971.677:235): avc: denied { read } for pid=5174 comm="acpid" name="js0" dev="devtmpfs" ino=2726 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.303014][ T29] audit: type=1400 audit(1737303971.677:236): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2726 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.326548][ T29] audit: type=1400 audit(1737303971.697:237): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2726 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.351269][ T5867] usb 5-1: device descriptor read/64, error -71 [ 76.364541][ T5872] usb 3-1: config 0 descriptor?? [ 76.527311][ T972] cfg80211: failed to load regulatory.db [ 76.631138][ T5867] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 76.921672][ T5867] usb 5-1: device descriptor read/64, error -71 [ 76.950698][ T29] audit: type=1400 audit(1737303972.697:238): avc: denied { shutdown } for pid=6125 comm="syz.0.42" lport=38965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.022726][ T29] audit: type=1400 audit(1737303972.777:239): avc: denied { getopt } for pid=6125 comm="syz.0.42" lport=38965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.076707][ T5867] usb usb5-port1: attempt power cycle [ 77.115016][ T5872] greenasia 0003:0E8F:0012.0001: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 77.119877][ T29] audit: type=1400 audit(1737303972.867:240): avc: denied { create } for pid=6125 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.127725][ T5872] greenasia 0003:0E8F:0012.0001: no inputs found [ 77.218960][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 77.228268][ T5865] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.259546][ T6150] vlan2: entered allmulticast mode [ 77.282786][ T969] usb 3-1: USB disconnect, device number 2 [ 77.440948][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 77.451868][ T5865] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 77.461082][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.481630][ T5867] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 77.501866][ T5867] usb 5-1: device descriptor read/8, error -71 [ 77.662746][ T5865] usb 2-1: config 0 has no interface number 0 [ 77.675882][ T5865] usb 2-1: config 0 interface 101 has no altsetting 0 [ 77.824598][ T5867] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 77.914799][ T5867] usb 5-1: device descriptor read/8, error -71 [ 78.109643][ T5867] usb usb5-port1: unable to enumerate USB device [ 78.309370][ T5865] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 78.318726][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.326827][ T5865] usb 2-1: Product: syz [ 78.331965][ T5865] usb 2-1: Manufacturer: syz [ 78.336581][ T5865] usb 2-1: SerialNumber: syz [ 78.389723][ T5865] usb 2-1: config 0 descriptor?? [ 78.755619][ T6176] netlink: 'syz.2.48': attribute type 10 has an invalid length. [ 78.763414][ T6176] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 79.232756][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 79.245095][ T9] usb 2-1: USB disconnect, device number 2 [ 79.492497][ T5827] udevd[5827]: failed to send result of seq 10905 to main daemon: Connection refused [ 79.791095][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.962614][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 80.102203][ T5865] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 80.197640][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.237243][ T5865] usb 1-1: Product: syz [ 80.266614][ T5865] usb 1-1: Manufacturer: syz [ 80.290974][ T5865] usb 1-1: SerialNumber: syz [ 80.362149][ T5865] usb 1-1: config 0 descriptor?? [ 80.392981][ T5865] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 80.401980][ T5866] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.432682][ T6197] input: syz1 as /devices/virtual/input/input6 [ 80.561516][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 80.587532][ T5866] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 80.648441][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.667008][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 80.667025][ T29] audit: type=1400 audit(1737303976.417:245): avc: denied { map } for pid=6199 comm="syz.3.55" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.734422][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.745142][ T29] audit: type=1400 audit(1737303976.417:246): avc: denied { read write } for pid=6199 comm="syz.3.55" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.750994][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.779937][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.793588][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.803429][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.815316][ T5865] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 80.901967][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 80.936636][ T6206] vlan2: entered allmulticast mode [ 80.959148][ T6206] erspan0: entered allmulticast mode [ 81.035044][ T5866] usb 3-1: usb_control_msg returned -32 [ 81.040707][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 81.292202][ T29] audit: type=1400 audit(1737303977.047:247): avc: denied { read } for pid=6183 comm="syz.0.51" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.324946][ T29] audit: type=1400 audit(1737303977.047:248): avc: denied { open } for pid=6183 comm="syz.0.51" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.349908][ T29] audit: type=1400 audit(1737303977.097:249): avc: denied { ioctl } for pid=6183 comm="syz.0.51" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.483393][ T6216] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 81.551101][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.761071][ T29] audit: type=1400 audit(1737303977.437:250): avc: denied { create } for pid=6217 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.078594][ T6223] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.58'. [ 82.107553][ T6223] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 82.156698][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.167958][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.177176][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.193372][ T9] usb 2-1: config 0 descriptor?? [ 82.206071][ T6222] syz.3.59 (6222) used greatest stack depth: 21232 bytes left [ 82.371787][ T29] audit: type=1400 audit(1737303978.127:251): avc: denied { unmount } for pid=6233 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.839397][ T5863] usb 1-1: USB disconnect, device number 2 [ 83.392762][ T5866] usb 3-1: USB disconnect, device number 3 [ 83.808333][ T6255] netlink: 'syz.2.62': attribute type 10 has an invalid length. [ 83.816165][ T6255] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 84.271025][ T29] audit: type=1400 audit(1737303980.017:252): avc: denied { sys_module } for pid=6245 comm="syz.0.61" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.454069][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 84.460048][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 84.471069][ T9] usb 2-1: USB disconnect, device number 3 [ 84.554422][ T29] audit: type=1400 audit(1737303980.307:253): avc: denied { getopt } for pid=6262 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.587263][ T6263] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 84.615714][ T29] audit: type=1400 audit(1737303980.307:254): avc: denied { ioctl } for pid=6262 comm="syz.0.63" path="socket:[9412]" dev="sockfs" ino=9412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.674485][ T6263] batman_adv: batadv0: Adding interface: team0 [ 84.689605][ T6263] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.721634][ T6266] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 84.729271][ T6266] netlink: 2 bytes leftover after parsing attributes in process `syz.0.63'. [ 84.753287][ T6263] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 84.807736][ T6266] team0: entered promiscuous mode [ 84.814468][ T6266] team_slave_0: entered promiscuous mode [ 84.836903][ T6266] team_slave_1: entered promiscuous mode [ 84.907482][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.973936][ T6266] batman_adv: batadv0: Interface activated: team0 [ 85.019270][ T6266] batman_adv: batadv0: Interface deactivated: team0 [ 85.038724][ T6266] batman_adv: batadv0: Removing interface: team0 [ 85.051046][ T6310] capability: warning: `syz.4.66' uses deprecated v2 capabilities in a way that may be insecure [ 85.217108][ T6266] bridge0: port 3(team0) entered blocking state [ 85.223686][ T6266] bridge0: port 3(team0) entered disabled state [ 85.230150][ T6266] team0: entered allmulticast mode [ 85.235548][ T6266] team_slave_0: entered allmulticast mode [ 85.241414][ T6266] team_slave_1: entered allmulticast mode [ 85.249162][ T6266] bridge0: port 3(team0) entered blocking state [ 85.255725][ T6266] bridge0: port 3(team0) entered forwarding state [ 85.292362][ T6318] syz.1.68 uses obsolete (PF_INET,SOCK_PACKET) [ 85.841638][ T6328] input: syz1 as /devices/virtual/input/input7 [ 85.979584][ T5865] IPVS: starting estimator thread 0... [ 85.982419][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.71'. [ 86.210977][ T6333] IPVS: using max 26 ests per chain, 62400 per kthread [ 86.591112][ T6345] netlink: 'syz.1.73': attribute type 3 has an invalid length. [ 86.609713][ T6347] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.577280][ T6345] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 87.691000][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 87.691014][ T29] audit: type=1400 audit(1737303982.377:262): avc: denied { ioctl } for pid=6343 comm="syz.3.76" path="socket:[8733]" dev="sockfs" ino=8733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.701017][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 87.998072][ T29] audit: type=1400 audit(1737303983.747:263): avc: denied { write } for pid=6350 comm="syz.3.77" name="ip_vs" dev="proc" ino=4026533431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.384571][ T6363] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.78'. [ 88.393736][ T6363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.087870][ T29] audit: type=1400 audit(1737303985.387:264): avc: denied { create } for pid=6354 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.108770][ T29] audit: type=1400 audit(1737303985.387:265): avc: denied { read } for pid=6354 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.129378][ T29] audit: type=1400 audit(1737303985.467:266): avc: denied { write } for pid=6354 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.154773][ T29] audit: type=1400 audit(1737303985.897:267): avc: denied { bind } for pid=6366 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.411097][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.528971][ T29] audit: type=1400 audit(1737303986.277:268): avc: denied { name_bind } for pid=6376 comm="syz.2.85" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.591013][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 90.608086][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.621164][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.641712][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.654383][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 90.664343][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.737581][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 90.783824][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 90.800977][ T25] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 90.849179][ T25] usb 1-1: Manufacturer: syz [ 90.912667][ T25] usb 1-1: config 0 descriptor?? [ 91.082039][ T29] audit: type=1400 audit(1737303986.837:269): avc: denied { sqpoll } for pid=6387 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.114568][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 91.136825][ T6390] vlan2: entered allmulticast mode [ 91.149164][ T6390] erspan0: entered allmulticast mode [ 91.171058][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.207820][ T25] rc_core: IR keymap rc-hauppauge not found [ 91.215949][ T25] Registered IR keymap rc-empty [ 91.227848][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.253085][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.286694][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 91.348296][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.359654][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.446469][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 91.479902][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.483893][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.473598][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.577887][ T29] audit: type=1400 audit(1737303988.297:270): avc: denied { create } for pid=6366 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 92.599231][ T6386] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.146683][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 93.233993][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 93.238874][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.391032][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 93.491312][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 93.647334][ T29] audit: type=1400 audit(1737303989.397:271): avc: denied { append } for pid=6384 comm="syz.1.86" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.042261][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 94.192239][ T29] audit: type=1400 audit(1737303989.787:272): avc: granted { setsecparam } for pid=6398 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 94.276342][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 94.288419][ T29] audit: type=1400 audit(1737303990.037:273): avc: denied { write } for pid=6410 comm="syz.4.91" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.301679][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 94.340990][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 94.374482][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 94.401694][ T6416] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 94.412760][ T25] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 94.422154][ T6416] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 94.437637][ T25] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 94.445733][ T29] audit: type=1400 audit(1737303990.077:274): avc: denied { ioctl } for pid=6366 comm="syz.0.81" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9716 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.449648][ T6416] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 94.471667][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.718220][ T29] audit: type=1400 audit(1737303990.387:275): avc: denied { create } for pid=6415 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.860430][ T29] audit: type=1400 audit(1737303990.397:276): avc: denied { write } for pid=6415 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.960989][ T29] audit: type=1400 audit(1737303990.507:277): avc: denied { create } for pid=6422 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.051563][ T29] audit: type=1400 audit(1737303990.517:278): avc: denied { setopt } for pid=6422 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.071357][ T25] usb 1-1: USB disconnect, device number 3 [ 95.089305][ T29] audit: type=1400 audit(1737303990.517:279): avc: denied { write } for pid=6422 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.137564][ T5866] usb 2-1: USB disconnect, device number 4 [ 95.313751][ T29] audit: type=1400 audit(1737303991.057:280): avc: denied { recv } for pid=5801 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.221 dest=44056 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 95.339214][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.522718][ T6440] Bluetooth: MGMT ver 1.23 [ 96.377707][ T6448] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 97.830981][ T5866] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.221973][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 98.737733][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 98.772923][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 98.786443][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.795258][ T5866] usb 5-1: Product: syz [ 98.800205][ T5866] usb 5-1: Manufacturer: syz [ 98.817685][ T5866] usb 5-1: SerialNumber: syz [ 98.835291][ T5866] usb 5-1: config 0 descriptor?? [ 98.859082][ T5866] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 98.900024][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 98.900063][ T29] audit: type=1400 audit(1737303994.647:326): avc: denied { name_connect } for pid=6479 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 98.954585][ T29] audit: type=1400 audit(1737303994.707:327): avc: denied { execute } for pid=6479 comm="syz.2.111" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 98.980531][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.080972][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.234664][ T25] usb 1-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 99.243920][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.252257][ T25] usb 1-1: Product: syz [ 99.256941][ T25] usb 1-1: Manufacturer: syz [ 99.261693][ T25] usb 1-1: SerialNumber: syz [ 99.267922][ T25] usb 1-1: config 0 descriptor?? [ 99.274636][ T25] upd78f0730 1-1:0.0: upd78f0730 converter detected [ 99.285730][ T25] usb 1-1: upd78f0730 converter now attached to ttyUSB0 [ 99.469989][ T29] audit: type=1400 audit(1737303995.217:328): avc: denied { setopt } for pid=6459 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.493537][ T29] audit: type=1400 audit(1737303995.247:329): avc: denied { ioctl } for pid=6475 comm="syz.0.109" path="socket:[9112]" dev="sockfs" ino=9112 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.513022][ T9] usb 1-1: USB disconnect, device number 4 [ 99.517951][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.535518][ T9] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 99.547792][ T9] upd78f0730 1-1:0.0: device disconnected [ 99.679210][ T29] audit: type=1400 audit(1737303995.427:330): avc: denied { getopt } for pid=6459 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.702379][ T5866] gspca_zc3xx: reg_w_i err -71 [ 100.230895][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.291079][ T5866] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 100.316182][ T5866] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 100.392927][ T5866] usb 5-1: USB disconnect, device number 6 [ 100.561200][ T9] usb 2-1: device descriptor read/64, error -71 [ 100.752857][ T29] audit: type=1400 audit(1737303996.497:331): avc: denied { create } for pid=6503 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 101.096746][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 101.130237][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 101.139263][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.157587][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 101.176230][ T6508] vlan2: entered allmulticast mode [ 101.197185][ T6508] erspan0: entered allmulticast mode [ 101.208789][ T6514] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 101.229494][ T6514] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 101.401363][ T9] usb 2-1: device descriptor read/64, error -71 [ 102.026468][ T9] usb usb2-port1: attempt power cycle [ 102.520968][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.541839][ T9] usb 2-1: device descriptor read/8, error -71 [ 103.841226][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 104.027920][ T29] audit: type=1400 audit(1737303999.667:332): avc: denied { create } for pid=6550 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.411986][ T9] usb 2-1: device not accepting address 8, error -71 [ 104.435206][ T9] usb usb2-port1: unable to enumerate USB device [ 104.465959][ T6542] sp0: Synchronizing with TNC [ 104.528032][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 104.566685][ T6559] vlan2: entered allmulticast mode [ 104.814045][ T5867] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.921477][ T6567] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.137'. [ 104.930644][ T6567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.042938][ T29] audit: type=1400 audit(1737304000.727:333): avc: denied { create } for pid=6561 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.682382][ T29] audit: type=1400 audit(1737304000.727:334): avc: denied { write } for pid=6561 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.738940][ T29] audit: type=1400 audit(1737304001.487:335): avc: denied { mounton } for pid=6570 comm="syz.1.138" path="/26/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.761405][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.915130][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 105.941021][ T29] audit: type=1400 audit(1737304001.487:336): avc: denied { getattr } for pid=6570 comm="syz.1.138" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.963338][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.008127][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 106.456588][ T5867] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 106.466906][ T5867] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 106.521014][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.530088][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.544513][ T5867] usb 5-1: Product: syz [ 106.549780][ T5867] usb 5-1: Manufacturer: ꜫ馠✇☐邶厮맪퓜帻⽱ꡰꂒ堺 [ 106.559983][ T5867] usb 5-1: SerialNumber: syz [ 106.847578][ T29] audit: type=1400 audit(1737304002.597:337): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.372734][ T6579] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 108.380540][ T6579] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 108.447738][ T5867] usb 5-1: can't set config #1, error -71 [ 108.660091][ T5867] usb 5-1: USB disconnect, device number 7 [ 108.731210][ T25] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 108.733255][ T9] IPVS: starting estimator thread 0... [ 108.764776][ T29] audit: type=1400 audit(1737304004.517:338): avc: denied { getopt } for pid=6586 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.061137][ T6591] IPVS: using max 26 ests per chain, 62400 per kthread [ 112.004486][ T6610] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.145'. [ 112.013841][ T6610] openvswitch: netlink: Flow actions attr not present in new flow. [ 112.591022][ T6615] capability: warning: `syz.2.144' uses 32-bit capabilities (legacy support in use) [ 112.653203][ T972] psmouse serio2: Failed to reset mouse on : -5 [ 112.801090][ T5867] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.371267][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.381041][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.393020][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.408392][ T5867] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.417530][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.427134][ T5867] usb 1-1: config 0 descriptor?? [ 113.531215][ T5863] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.538822][ T5872] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.546640][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 113.553925][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.563630][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 113.572895][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.581154][ T9] usb 3-1: Product: syz [ 113.585355][ T9] usb 3-1: Manufacturer: syz [ 113.589982][ T9] usb 3-1: SerialNumber: syz [ 113.596463][ T9] usb 3-1: config 0 descriptor?? [ 113.704201][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.715342][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.726397][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.736252][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.746128][ T5872] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.755287][ T5863] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.765113][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.773221][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.784548][ T5872] usb 5-1: config 0 descriptor?? [ 113.790445][ T5863] usb 2-1: config 0 descriptor?? [ 113.839562][ T5867] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 113.853439][ T5867] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input10 [ 113.934437][ T5867] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 114.040163][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 114.097056][ T25] usb 1-1: USB disconnect, device number 5 [ 114.193365][ T5872] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 114.207176][ T5863] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 114.218237][ T5872] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input11 [ 114.232848][ T5863] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input12 [ 114.308011][ T5872] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 114.368518][ T5863] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 114.397916][ T5863] usb 5-1: USB disconnect, device number 8 [ 114.411505][ T25] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 114.448317][ T5865] usb 2-1: USB disconnect, device number 9 [ 114.573043][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.584111][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.593175][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.606399][ T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.615542][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.628312][ T25] hub 1-1:1.0: bad descriptor, ignoring hub [ 114.634311][ T25] hub 1-1:1.0: probe with driver hub failed with error -5 [ 114.642711][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 114.647970][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 114.653415][ T25] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 114.761086][ T5863] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 114.770991][ T5865] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 114.892322][ T9] gs_usb 3-1:0.0: Couldn't get device config: (err=-110) [ 114.899433][ T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 114.923071][ T5865] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.933539][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.942241][ T5863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.942571][ T5865] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.959326][ T5863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.965458][ T5865] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.981206][ T5863] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.983510][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.997038][ T5872] usb 1-1: USB disconnect, device number 6 [ 115.016302][ T5863] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 115.017479][ T5865] hub 2-1:1.0: bad descriptor, ignoring hub [ 115.025424][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.039740][ T5865] hub 2-1:1.0: probe with driver hub failed with error -5 [ 115.043094][ T5863] hub 5-1:1.0: bad descriptor, ignoring hub [ 115.047666][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 115.054285][ T5863] hub 5-1:1.0: probe with driver hub failed with error -5 [ 115.064405][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 115.066473][ T5863] cdc_wdm 5-1:1.0: skipping garbage [ 115.073836][ T5865] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 115.083572][ T5863] cdc_wdm 5-1:1.0: skipping garbage [ 115.088808][ T5863] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 115.190097][ T5865] usb 3-1: USB disconnect, device number 4 [ 115.217732][ T6622] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.237212][ T29] audit: type=1400 audit(1737304010.987:339): avc: denied { read } for pid=6621 comm="syz.2.152" name="sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.244863][ T6622] ipvlan2: entered promiscuous mode [ 115.285547][ T6622] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 115.302921][ T29] audit: type=1400 audit(1737304010.987:340): avc: denied { open } for pid=6621 comm="syz.2.152" path="/dev/sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.331670][ T6622] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.395204][ T5863] usb 5-1: USB disconnect, device number 9 [ 115.441198][ T5872] usb 2-1: USB disconnect, device number 10 [ 115.870403][ T29] audit: type=1400 audit(1737304011.617:341): avc: denied { watch } for pid=6623 comm="syz.0.153" path="/28" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.109279][ T29] audit: type=1400 audit(1737304011.857:342): avc: denied { create } for pid=6629 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.170113][ T29] audit: type=1400 audit(1737304011.917:343): avc: denied { connect } for pid=6634 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.421385][ T5872] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.661009][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 116.730263][ T5872] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 116.739153][ T5872] usb 5-1: config 179 has no interface number 0 [ 116.745741][ T972] misc userio: Buffer overflowed, userio client isn't keeping up [ 116.757615][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 116.770775][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 116.782220][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.799028][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 116.813335][ T29] audit: type=1400 audit(1737304012.567:344): avc: denied { egress } for pid=6636 comm="syz.1.158" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 116.836516][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.860992][ T29] audit: type=1400 audit(1737304012.567:345): avc: denied { sendto } for pid=6636 comm="syz.1.158" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 116.884026][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.923463][ T5872] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 117.055751][ T5872] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 117.079868][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.257192][ T6647] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.160'. [ 117.266616][ T6647] openvswitch: netlink: Flow actions attr not present in new flow. [ 118.253935][ T6630] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.453097][ T972] input: PS/2 Generic Mouse as /devices/serio2/input/input9 [ 118.478705][ T5867] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13 [ 118.488529][ T6651] input: syz1 as /devices/virtual/input/input14 [ 118.813282][ T6655] x_tables: duplicate underflow at hook 1 [ 118.947229][ T5865] usb 5-1: USB disconnect, device number 10 [ 118.947229][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 118.962751][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 118.962749][ T5865] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 119.098212][ T972] psmouse serio2: Failed to enable mouse on [ 119.232501][ T6668] netlink: 'syz.0.164': attribute type 10 has an invalid length. [ 119.240340][ T6668] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 119.391168][ T5872] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 119.693121][ T29] audit: type=1400 audit(1737304015.447:346): avc: denied { nlmsg_read } for pid=6671 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.750021][ T29] audit: type=1400 audit(1737304015.467:347): avc: denied { ioctl } for pid=6671 comm="syz.0.167" path="socket:[10494]" dev="sockfs" ino=10494 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.834788][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.834823][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.834856][ T5872] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.834881][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.836923][ T5872] usb 2-1: config 0 descriptor?? [ 119.893137][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 119.935541][ T6678] vlan3: entered allmulticast mode [ 120.513328][ T5872] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 120.514722][ T5872] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input15 [ 120.527217][ T5867] hid-generic 0000:0003:0000.0006: item fetching failed at offset 0/2 [ 120.540638][ T5867] hid-generic 0000:0003:0000.0006: probe with driver hid-generic failed with error -22 [ 120.542688][ T29] audit: type=1400 audit(1737304016.277:348): avc: denied { read write } for pid=6670 comm="syz.3.168" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.542726][ T29] audit: type=1400 audit(1737304016.277:349): avc: denied { open } for pid=6670 comm="syz.3.168" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.881126][ T5872] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 120.901969][ T5872] usb 2-1: USB disconnect, device number 11 [ 121.292134][ T6698] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.173'. [ 121.302108][ T6698] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.018721][ T29] audit: type=1400 audit(1737304017.767:350): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.575262][ T5872] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 123.041356][ T6723] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 123.049146][ T6723] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 124.488805][ T29] audit: type=1400 audit(1737304020.237:351): avc: denied { read write } for pid=6729 comm="syz.3.183" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.551369][ T29] audit: type=1400 audit(1737304020.237:352): avc: denied { open } for pid=6729 comm="syz.3.183" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.661012][ T5866] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.822979][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 124.830884][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.841328][ T5866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.850552][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.870682][ T5866] usb 1-1: Product: syz [ 124.875021][ T5866] usb 1-1: Manufacturer: syz [ 124.879626][ T5866] usb 1-1: SerialNumber: syz [ 125.956662][ T5866] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 126.733901][ T5866] usb 1-1: USB disconnect, device number 7 [ 127.252428][ T6755] random: crng reseeded on system resumption [ 127.501307][ T5872] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.496586][ T29] audit: type=1326 audit(1737304023.687:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 128.741049][ T29] audit: type=1326 audit(1737304023.687:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 128.792328][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.814413][ T29] audit: type=1326 audit(1737304023.837:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 128.838547][ T29] audit: type=1326 audit(1737304023.837:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 128.903121][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.929667][ T29] audit: type=1326 audit(1737304023.837:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 128.963017][ T5872] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.963023][ T29] audit: type=1326 audit(1737304024.037:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa310384690 code=0x7ffc0000 [ 128.963050][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.978577][ T29] audit: type=1326 audit(1737304024.037:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 129.034661][ T29] audit: type=1326 audit(1737304024.037:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 129.062686][ T29] audit: type=1326 audit(1737304024.177:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 129.093039][ T29] audit: type=1326 audit(1737304024.177:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.4.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa310385d29 code=0x7ffc0000 [ 129.817970][ T5872] usb 4-1: config 0 descriptor?? [ 129.865299][ T5872] usbhid 4-1:0.0: can't add hid device: -71 [ 129.871386][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 129.885756][ T5872] usb 4-1: USB disconnect, device number 3 [ 130.074270][ T6780] ipvlan2: entered promiscuous mode [ 130.080335][ T6780] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 130.095850][ T6780] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 131.951131][ T5867] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.684287][ T6821] input: syz1 as /devices/virtual/input/input16 [ 132.822038][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828465][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.939260][ T6826] openvswitch: netlink: Invalid VLAN frame [ 133.228667][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 133.611749][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 133.611767][ T29] audit: type=1400 audit(1737304029.357:408): avc: denied { bind } for pid=6847 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 133.637476][ T29] audit: type=1400 audit(1737304029.357:409): avc: denied { name_bind } for pid=6847 comm="syz.2.218" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 133.659098][ T29] audit: type=1400 audit(1737304029.357:410): avc: denied { node_bind } for pid=6847 comm="syz.2.218" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 134.652864][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 134.675401][ T6867] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.225'. [ 134.684696][ T6867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.890734][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.227'. [ 134.908080][ T6873] netlink: 'syz.4.227': attribute type 7 has an invalid length. [ 134.922155][ T6873] netlink: 'syz.4.227': attribute type 8 has an invalid length. [ 134.937350][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 135.025757][ T6878] Cannot find add_set index 0 as target [ 136.048938][ T6886] warning: `syz.2.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.062028][ T29] audit: type=1400 audit(1737304031.817:411): avc: denied { bind } for pid=6881 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.092625][ T6886] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 136.099368][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 136.108268][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 136.228491][ T6896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.232'. [ 136.477153][ T5867] vhci_hcd: vhci_device speed not set [ 136.569082][ T5867] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 136.831394][ T6891] vhci_hcd: connection reset by peer [ 137.034791][ T6898] netlink: 108 bytes leftover after parsing attributes in process `syz.3.234'. [ 137.044422][ T6898] netlink: 108 bytes leftover after parsing attributes in process `syz.3.234'. [ 137.053888][ T6898] netlink: 108 bytes leftover after parsing attributes in process `syz.3.234'. [ 137.531450][ T67] vhci_hcd: stop threads [ 137.682144][ T67] vhci_hcd: release socket [ 137.690892][ T67] vhci_hcd: disconnect device [ 138.099676][ T6919] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.240'. [ 138.108921][ T6919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.172882][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.062519][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.083835][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.130471][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.191992][ T9] usb 3-1: config 0 descriptor?? [ 140.253160][ T29] audit: type=1400 audit(1737304036.007:412): avc: denied { bind } for pid=6906 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.244517][ T5863] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.446875][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 141.453208][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 141.464183][ T9] usb 3-1: USB disconnect, device number 5 [ 141.972246][ T6942] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.246'. [ 141.990938][ T5867] vhci_hcd: vhci_device speed not set [ 142.002535][ T5863] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 142.012977][ T5863] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 142.057069][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.084301][ T5863] usb 2-1: config 0 descriptor?? [ 143.053164][ T5863] usb 2-1: can't set config #0, error -71 [ 143.060450][ T5863] usb 2-1: USB disconnect, device number 13 [ 143.211826][ T6950] input: syz1 as /devices/virtual/input/input17 [ 144.295704][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 144.737079][ T6962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.010569][ T6971] Bluetooth: MGMT ver 1.23 [ 145.030335][ T29] audit: type=1400 audit(1737304040.777:413): avc: denied { read write } for pid=6970 comm="syz.4.255" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.057862][ T29] audit: type=1400 audit(1737304040.787:414): avc: denied { open } for pid=6970 comm="syz.4.255" path="/58/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.183796][ T5867] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.241202][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.471390][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.564710][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.594406][ T5863] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.607810][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.652068][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.667523][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.755921][ T5863] usb 3-1: config 0 descriptor?? [ 145.770224][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.791046][ T5867] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.791074][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.792841][ T5867] usb 1-1: config 0 descriptor?? [ 146.391046][ T5867] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 146.431448][ T5867] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 146.455999][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 146.462300][ T5863] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 146.476357][ T5863] usb 3-1: USB disconnect, device number 6 [ 146.602979][ T29] audit: type=1400 audit(1737304042.357:415): avc: denied { ioctl } for pid=6961 comm="syz.0.251" path="mnt:[4026532945]" dev="nsfs" ino=4026532945 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 146.670033][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 146.681733][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.691268][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 146.714687][ T6989] vlan3: entered allmulticast mode [ 146.722402][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.546564][ T6962] usb 1-1: string descriptor 0 read error: -71 [ 147.651633][ T5865] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 148.076330][ T5863] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.177492][ T7011] input: syz0 as /devices/virtual/input/input18 [ 148.268156][ T29] audit: type=1400 audit(1737304044.017:416): avc: denied { setopt } for pid=7010 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.382946][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.400914][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.440343][ T5863] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 148.464943][ T25] usb 1-1: USB disconnect, device number 8 [ 148.561555][ T5867] psmouse serio3: Failed to reset mouse on : -5 [ 148.563461][ T29] audit: type=1400 audit(1737304044.317:417): avc: denied { bind } for pid=7025 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.579550][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.686809][ T29] audit: type=1400 audit(1737304044.347:418): avc: denied { name_bind } for pid=7025 comm="syz.0.270" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 148.882573][ T5863] usb 5-1: config 0 descriptor?? [ 148.892619][ T29] audit: type=1400 audit(1737304044.347:419): avc: denied { node_bind } for pid=7025 comm="syz.0.270" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 148.934188][ T7031] input: syz1 as /devices/virtual/input/input20 [ 149.051440][ T7034] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.273'. [ 149.063920][ T7035] openvswitch: netlink: Invalid VLAN frame [ 149.361025][ T972] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.401798][ T5863] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 150.022729][ T5863] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input21 [ 150.076734][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.076781][ T972] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.076807][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.078621][ T972] usb 4-1: config 0 descriptor?? [ 150.433012][ T5863] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 150.481984][ T5863] usb 5-1: USB disconnect, device number 12 [ 150.839599][ T972] usbhid 4-1:0.0: can't add hid device: -71 [ 150.839691][ T972] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 150.842028][ T972] usb 4-1: USB disconnect, device number 4 [ 150.855794][ T7053] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.279'. [ 150.855824][ T7053] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 151.221084][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 151.241082][ T5863] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 151.372554][ T25] usb 2-1: too many configurations: 164, using maximum allowed: 8 [ 151.401831][ T5863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.416567][ T25] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 151.420980][ T5863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.429552][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.449469][ T5863] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.455716][ T25] usb 2-1: config 0 descriptor?? [ 151.473967][ T5863] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 151.485411][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.498614][ T5863] hub 5-1:1.0: bad descriptor, ignoring hub [ 151.504916][ T5863] hub 5-1:1.0: probe with driver hub failed with error -5 [ 151.512686][ T5863] cdc_wdm 5-1:1.0: skipping garbage [ 151.517992][ T5863] cdc_wdm 5-1:1.0: skipping garbage [ 151.523368][ T5863] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 151.610193][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 151.690725][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.707680][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.717684][ T7067] --map-set only usable from mangle table [ 151.731546][ T7067] --map-set only usable from mangle table [ 151.737338][ T5863] usb 2-1: USB disconnect, device number 14 [ 151.737496][ T7067] --map-set only usable from mangle table [ 151.757556][ T7067] --map-set only usable from mangle table [ 151.911237][ T972] usb 5-1: USB disconnect, device number 13 [ 152.521246][ T5867] misc userio: Buffer overflowed, userio client isn't keeping up [ 153.694018][ T5867] input: PS/2 Generic Mouse as /devices/serio3/input/input19 [ 153.797369][ T7106] Cannot find add_set index 0 as target [ 153.933258][ T5867] psmouse serio3: Failed to enable mouse on [ 154.466873][ T29] audit: type=1400 audit(1737304050.217:420): avc: denied { create } for pid=7111 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.517010][ T7114] SET target dimension over the limit! [ 154.534577][ T7117] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.550325][ T29] audit: type=1400 audit(1737304050.247:421): avc: denied { bind } for pid=7111 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.606195][ T7117] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 154.629232][ T7117] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 154.661237][ T7124] xt_policy: output policy not valid in PREROUTING and INPUT [ 156.221108][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 156.390969][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 156.415324][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 156.430888][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.439832][ T25] usb 5-1: Product: syz [ 156.449210][ T25] usb 5-1: Manufacturer: syz [ 156.454024][ T25] usb 5-1: SerialNumber: syz [ 156.462323][ T25] usb 5-1: config 0 descriptor?? [ 156.470400][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 157.602094][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.636553][ T25] gspca_sonixj: reg_w1 err -110 [ 157.643717][ T25] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 157.659876][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.694850][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 157.851011][ T29] audit: type=1400 audit(1737304053.597:422): avc: denied { getopt } for pid=7136 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.879357][ T7159] vlan3: entered allmulticast mode [ 158.794108][ T25] usb 5-1: USB disconnect, device number 14 [ 160.734054][ T29] audit: type=1400 audit(1737304056.487:423): avc: denied { watch watch_reads } for pid=7186 comm="syz.2.316" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.859871][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 161.652891][ T7197] input: syz1 as /devices/virtual/input/input23 [ 162.273912][ T25] psmouse serio5: Failed to reset mouse on : -5 [ 162.650790][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.779559][ T7214] netlink: 'syz.4.324': attribute type 10 has an invalid length. [ 162.787462][ T7214] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 163.680966][ T5865] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 163.773104][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.784096][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.794078][ T5867] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 163.803295][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.812552][ T5867] usb 4-1: config 0 descriptor?? [ 163.840994][ T5865] usb 5-1: Invalid ep0 maxpacket: 16 [ 163.972145][ T5865] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 164.130987][ T5865] usb 5-1: Invalid ep0 maxpacket: 16 [ 164.137809][ T5865] usb usb5-port1: attempt power cycle [ 164.170381][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 164.199140][ T7221] vlan4: entered allmulticast mode [ 164.234792][ T5867] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 164.246106][ T5867] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 164.254527][ T5867] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 164.266813][ T5867] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 164.276302][ T5867] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 164.285877][ T5867] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 164.294503][ T5867] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 164.305585][ T5867] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 164.449641][ T29] audit: type=1400 audit(1737304060.197:424): avc: denied { audit_write } for pid=7205 comm="syz.3.323" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 164.476866][ T29] audit: type=1400 audit(1737304060.227:425): avc: denied { read } for pid=7205 comm="syz.3.323" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.501121][ T5865] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 164.507548][ T5867] cp2112 0003:10C4:EA90.0009: error requesting version [ 164.510238][ T29] audit: type=1400 audit(1737304060.227:426): avc: denied { open } for pid=7205 comm="syz.3.323" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.527024][ T5867] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71 [ 164.541706][ T5865] usb 5-1: Invalid ep0 maxpacket: 16 [ 164.558181][ T5867] usb 4-1: USB disconnect, device number 5 [ 164.681098][ T5865] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 164.712017][ T5865] usb 5-1: Invalid ep0 maxpacket: 16 [ 164.717595][ T5865] usb usb5-port1: unable to enumerate USB device [ 164.855423][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 165.090468][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 165.099446][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 165.312489][ T7230] vlan3: entered allmulticast mode [ 165.712955][ T7235] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 166.639834][ T29] audit: type=1326 audit(1737304062.387:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc94b85d29 code=0x7ffc0000 [ 166.663081][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.741347][ T29] audit: type=1326 audit(1737304062.387:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.1.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc94b85d29 code=0x7ffc0000 [ 166.764851][ T29] audit: type=1400 audit(1737304062.467:429): avc: denied { open } for pid=7247 comm="syz.4.334" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 167.922080][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.337'. [ 168.539338][ T29] audit: type=1400 audit(1737304064.287:430): avc: denied { ioctl } for pid=7262 comm="syz.1.338" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 168.631298][ T29] audit: type=1400 audit(1737304064.367:431): avc: denied { read } for pid=7262 comm="syz.1.338" path="socket:[12733]" dev="sockfs" ino=12733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.800254][ T5866] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 168.812619][ T25] misc userio: Buffer overflowed, userio client isn't keeping up [ 168.987945][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.999751][ T5866] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.008905][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.034089][ T5866] usb 5-1: config 0 descriptor?? [ 169.341525][ T972] IPVS: starting estimator thread 0... [ 169.445009][ T7277] IPVS: using max 26 ests per chain, 62400 per kthread [ 170.001302][ T25] input: PS/2 Generic Mouse as /devices/serio5/input/input24 [ 170.243994][ T25] psmouse serio5: Failed to enable mouse on [ 170.750418][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 170.758343][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 170.778619][ T5866] usb 5-1: USB disconnect, device number 19 [ 170.974360][ T7296] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.345'. [ 170.983613][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.321042][ T972] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.422583][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.433569][ T972] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 172.443265][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.930817][ T972] usb 4-1: config 0 descriptor?? [ 173.899878][ T7316] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 173.962961][ T972] usbhid 4-1:0.0: can't add hid device: -71 [ 173.969032][ T972] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 173.980280][ T972] usb 4-1: USB disconnect, device number 6 [ 173.997407][ T7316] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.005853][ T7316] gretap1: entered promiscuous mode [ 174.013047][ T7316] gretap1: entered allmulticast mode [ 174.268184][ T5866] psmouse serio8: Failed to reset mouse on : -5 [ 175.469732][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 177.186407][ T5819] Bluetooth: hci3: Unable to find connection with handle 0x0081 [ 179.176503][ T7374] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.196817][ T7374] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 179.208299][ T7374] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 179.512073][ T29] audit: type=1400 audit(1737304075.257:432): avc: denied { write } for pid=7375 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.760970][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.930981][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 179.931000][ T5866] misc userio: Buffer overflowed, userio client isn't keeping up [ 179.937616][ T5867] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 179.953707][ T5867] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 179.967694][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.976843][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.984943][ T5867] usb 4-1: SerialNumber: syz [ 179.991528][ T7376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.030955][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.070961][ T969] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.180923][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 180.187468][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.197300][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.201835][ T5867] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 180.207225][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.226264][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.228069][ T5867] usb 4-1: USB disconnect, device number 7 [ 180.240113][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.255809][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 180.261038][ T25] usb 2-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 180.269072][ T25] usb 2-1: Product: syz [ 180.275820][ T969] usb 3-1: config 150 has an invalid interface number: 244 but max is 2 [ 180.284270][ T969] usb 3-1: config 150 contains an unexpected descriptor of type 0x2, skipping [ 180.294541][ T969] usb 3-1: config 150 has an invalid interface number: 152 but max is 2 [ 180.302950][ T969] usb 3-1: config 150 has an invalid interface number: 4 but max is 2 [ 180.312245][ T969] usb 3-1: config 150 has an invalid interface number: 128 but max is 2 [ 180.320636][ T969] usb 3-1: config 150 contains an unexpected descriptor of type 0x1, skipping [ 180.330184][ T969] usb 3-1: config 150 has 4 interfaces, different from the descriptor's value: 3 [ 180.339354][ T969] usb 3-1: config 150 has no interface number 0 [ 180.345656][ T969] usb 3-1: config 150 has no interface number 1 [ 180.351962][ T969] usb 3-1: config 150 has no interface number 2 [ 180.358222][ T969] usb 3-1: config 150 has no interface number 3 [ 180.364601][ T969] usb 3-1: config 150 interface 244 altsetting 146 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 180.375960][ T969] usb 3-1: config 150 interface 244 altsetting 146 endpoint 0xE has invalid maxpacket 1056, setting to 64 [ 180.387343][ T969] usb 3-1: config 150 interface 244 altsetting 146 bulk endpoint 0x9 has invalid maxpacket 1024 [ 180.397834][ T969] usb 3-1: config 150 interface 244 altsetting 146 bulk endpoint 0xD has invalid maxpacket 8 [ 180.408025][ T969] usb 3-1: config 150 interface 244 altsetting 146 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 180.428050][ T969] usb 3-1: config 150 interface 244 altsetting 146 has a duplicate endpoint with address 0x6, skipping [ 180.439151][ T969] usb 3-1: config 150 interface 244 altsetting 146 has a duplicate endpoint with address 0x4, skipping [ 180.450223][ T969] usb 3-1: config 150 interface 244 altsetting 146 has a duplicate endpoint with address 0xB, skipping [ 180.461288][ T969] usb 3-1: config 150 interface 244 altsetting 146 has a duplicate endpoint with address 0xE, skipping [ 180.472453][ T969] usb 3-1: config 150 interface 244 altsetting 146 has a duplicate endpoint with address 0x4, skipping [ 180.483516][ T969] usb 3-1: config 150 interface 244 altsetting 146 has 14 endpoint descriptors, different from the interface descriptor's value: 16 [ 180.497357][ T969] usb 3-1: too many endpoints for config 150 interface 152 altsetting 67: 207, using maximum allowed: 30 [ 180.508687][ T969] usb 3-1: config 150 interface 152 altsetting 67 has a duplicate endpoint with address 0xB, skipping [ 180.519774][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 180.525328][ T969] usb 3-1: config 150 interface 152 altsetting 67 has a duplicate endpoint with address 0x9, skipping [ 180.536957][ T25] usbtmc 2-1:16.0: can't read capabilities [ 180.543941][ T969] usb 3-1: config 150 interface 152 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 207 [ 180.559664][ T969] usb 3-1: config 150 interface 4 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 180.572747][ T969] usb 3-1: config 150 interface 128 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.583867][ T969] usb 3-1: config 150 interface 128 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 180.594752][ T969] usb 3-1: config 150 interface 128 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 180.605648][ T969] usb 3-1: config 150 interface 244 has no altsetting 0 [ 180.612619][ T969] usb 3-1: config 150 interface 152 has no altsetting 0 [ 180.619557][ T969] usb 3-1: config 150 interface 4 has no altsetting 0 [ 180.629570][ T969] usb 3-1: New USB device found, idVendor=11d9, idProduct=1003, bcdDevice=2a.72 [ 180.638677][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.646774][ T969] usb 3-1: Product: syz [ 180.651029][ T969] usb 3-1: Manufacturer: syz [ 180.655614][ T969] usb 3-1: SerialNumber: syz [ 180.665239][ T7385] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 180.674748][ T7385] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 180.682477][ T7385] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 180.733529][ T29] audit: type=1400 audit(1737304076.487:433): avc: denied { append } for pid=7382 comm="syz.1.371" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 180.826567][ T25] usb 2-1: USB disconnect, device number 15 [ 180.896605][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.911368][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.934345][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.951290][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.975067][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 180.981403][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 180.983034][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 180.987655][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 180.999823][ T7370] Bluetooth: hci4: command 0x0406 tx timeout [ 181.001720][ T5866] input: PS/2 Generic Mouse as /devices/serio8/input/input26 [ 181.041362][ T969] usb 3-1: USB disconnect, device number 7 [ 181.247484][ T5866] psmouse serio8: Failed to enable mouse on [ 181.835998][ T29] audit: type=1400 audit(1737304077.577:434): avc: denied { write } for pid=7396 comm="syz.1.375" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 183.749599][ T29] audit: type=1400 audit(1737304079.497:435): avc: denied { setopt } for pid=7396 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 183.881443][ T5866] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.188417][ T7437] input: syz1 as /devices/virtual/input/input28 [ 184.801604][ T5866] usb 1-1: too many configurations: 205, using maximum allowed: 8 [ 184.821318][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 184.829706][ T5866] usb 1-1: can't read configurations, error -61 [ 184.985248][ T5866] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.318171][ T5866] usb 1-1: too many configurations: 205, using maximum allowed: 8 [ 185.360508][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 185.391158][ T5866] usb 1-1: can't read configurations, error -61 [ 185.414630][ T5866] usb usb1-port1: attempt power cycle [ 185.794032][ T5866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 185.881221][ T5866] usb 1-1: too many configurations: 205, using maximum allowed: 8 [ 185.899619][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 185.911045][ T5866] usb 1-1: can't read configurations, error -61 [ 186.221849][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 186.252168][ T5866] usb 1-1: too many configurations: 205, using maximum allowed: 8 [ 186.271175][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 186.301041][ T5866] usb 1-1: can't read configurations, error -61 [ 186.321867][ T5866] usb usb1-port1: unable to enumerate USB device [ 187.078693][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 187.374833][ T969] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 187.990331][ T969] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.068518][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.463652][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.738731][ T969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.778807][ T969] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.788036][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.801709][ T969] usb 2-1: config 0 descriptor?? [ 189.816798][ T969] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 189.829608][ T969] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 190.751968][ T7500] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.404'. [ 190.761556][ T7500] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 191.021197][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.218837][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.243801][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.258587][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.960176][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.969429][ T7452] usb 2-1: string descriptor 0 read error: -2 [ 191.987275][ T9] usb 4-1: config 0 descriptor?? [ 192.130957][ T972] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 192.170055][ T29] audit: type=1400 audit(1737304087.917:436): avc: denied { write } for pid=7518 comm="syz.1.410" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 192.246565][ T29] audit: type=1400 audit(1737304087.927:437): avc: denied { write } for pid=7516 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 192.306287][ T29] audit: type=1400 audit(1737304087.957:438): avc: denied { write } for pid=7516 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 192.407593][ T9] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 192.417641][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input29 [ 192.538910][ T9] keytouch 0003:0926:3333.000B: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 192.631051][ T5863] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 192.677515][ T9] usb 4-1: USB disconnect, device number 8 [ 192.783050][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.801188][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.872553][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 192.904916][ T5867] usb 2-1: USB disconnect, device number 16 [ 192.923946][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.992294][ T5863] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.030678][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.038994][ T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 193.089211][ T5863] usb 1-1: config 0 descriptor?? [ 193.212706][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.227220][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.238772][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.280165][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 193.308262][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.332716][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 193.342461][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 193.352744][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 193.367129][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 193.372922][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 193.525308][ T5863] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 193.548691][ T5863] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 193.558718][ T5863] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 193.948072][ T5866] usb 4-1: USB disconnect, device number 9 [ 194.263410][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270326][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.103869][ T9] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 195.309248][ T29] audit: type=1400 audit(1737304091.007:439): avc: denied { map } for pid=7537 comm="syz.3.415" path="socket:[14120]" dev="sockfs" ino=14120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 195.431006][ T29] audit: type=1400 audit(1737304091.007:440): avc: denied { accept } for pid=7537 comm="syz.3.415" path="socket:[14120]" dev="sockfs" ino=14120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 195.454747][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.978665][ T7560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.418'. [ 196.048807][ T969] psmouse serio10: Failed to reset mouse on : -5 [ 196.075928][ T5863] usb 1-1: USB disconnect, device number 13 [ 197.842011][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.425'. [ 201.048696][ T29] audit: type=1400 audit(1737304096.797:441): avc: denied { ioctl } for pid=7598 comm="syz.0.432" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 201.125223][ T29] audit: type=1400 audit(1737304096.827:442): avc: denied { set_context_mgr } for pid=7598 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 201.807262][ T29] audit: type=1400 audit(1737304097.457:443): avc: denied { getopt } for pid=7598 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 201.916578][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 201.923101][ T7602] binder: 7598:7602 ioctl 4018620d 20000040 returned -16 [ 201.965377][ T29] audit: type=1400 audit(1737304097.667:444): avc: denied { map } for pid=7598 comm="syz.0.432" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 201.991969][ T7603] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.433'. [ 205.423761][ T7620] input: syz1 as /devices/virtual/input/input31 [ 206.793472][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.440'. [ 207.371132][ T7631] netlink: 80 bytes leftover after parsing attributes in process `syz.4.441'. [ 210.921100][ T29] audit: type=1326 audit(1737304105.807:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 211.074953][ T29] audit: type=1326 audit(1737304105.807:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 211.391082][ T29] audit: type=1326 audit(1737304105.807:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 211.513729][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 211.553523][ T29] audit: type=1326 audit(1737304105.807:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 211.702673][ T7648] vlan3: entered allmulticast mode [ 211.761003][ T29] audit: type=1326 audit(1737304105.807:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 211.904526][ T29] audit: type=1326 audit(1737304105.807:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e10b84690 code=0x7ffc0000 [ 212.051049][ T29] audit: type=1326 audit(1737304105.807:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 212.074265][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.370986][ T29] audit: type=1326 audit(1737304105.807:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 212.443961][ T29] audit: type=1326 audit(1737304105.807:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 212.584570][ T29] audit: type=1326 audit(1737304105.807:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e10b85d29 code=0x7ffc0000 [ 212.607817][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.665693][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.693956][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.704878][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.717398][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.725106][ T5817] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.732466][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.830015][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.843177][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.853260][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.861378][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.871425][ T5814] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.878682][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.023607][ T5817] Bluetooth: hci6: command tx timeout [ 215.031408][ T5814] Bluetooth: hci5: command tx timeout [ 216.633851][ T5866] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 217.051132][ T5814] Bluetooth: hci5: command tx timeout [ 217.056699][ T5817] Bluetooth: hci6: command tx timeout [ 217.248082][ T7659] chnl_net:caif_netlink_parms(): no params data found [ 217.450084][ T7662] chnl_net:caif_netlink_parms(): no params data found [ 217.532070][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.543677][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.551707][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.560056][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.567775][ T5814] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.576812][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.673871][ T7659] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.697609][ T7659] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.724680][ T7659] bridge_slave_0: entered allmulticast mode [ 217.743782][ T7659] bridge_slave_0: entered promiscuous mode [ 217.795591][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.821255][ T7659] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.838739][ T7659] bridge_slave_1: entered allmulticast mode [ 217.869211][ T7659] bridge_slave_1: entered promiscuous mode [ 218.005490][ T7659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.056004][ T7659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.163514][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.175099][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.186533][ T7662] bridge_slave_0: entered allmulticast mode [ 218.198274][ T7662] bridge_slave_0: entered promiscuous mode [ 218.255174][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.271094][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.279614][ T7662] bridge_slave_1: entered allmulticast mode [ 218.294550][ T7662] bridge_slave_1: entered promiscuous mode [ 218.342261][ T7659] team0: Port device team_slave_0 added [ 218.410390][ T7659] team0: Port device team_slave_1 added [ 218.424516][ T7662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.486633][ T7662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.522862][ T7659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.538682][ T7659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.573871][ T7659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.658684][ T7659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.676127][ T7659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.108288][ T7659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.140034][ T5814] Bluetooth: hci6: command tx timeout [ 219.151116][ T5814] Bluetooth: hci5: command tx timeout [ 219.194612][ T7662] team0: Port device team_slave_0 added [ 219.259175][ T7662] team0: Port device team_slave_1 added [ 219.278163][ T7659] hsr_slave_0: entered promiscuous mode [ 219.299582][ T7659] hsr_slave_1: entered promiscuous mode [ 219.318328][ T7659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.336039][ T7659] Cannot create hsr debugfs directory [ 219.470586][ T7678] chnl_net:caif_netlink_parms(): no params data found [ 219.485226][ T7662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.500427][ T7662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.530995][ T7662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.579972][ T7662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.588137][ T7662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.622278][ T5817] Bluetooth: hci7: command tx timeout [ 219.685332][ T7662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.858765][ T7662] hsr_slave_0: entered promiscuous mode [ 219.890768][ T7662] hsr_slave_1: entered promiscuous mode [ 219.907500][ T7662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.919225][ T7662] Cannot create hsr debugfs directory [ 220.079497][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.090275][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.114765][ T7678] bridge_slave_0: entered allmulticast mode [ 220.126677][ T7678] bridge_slave_0: entered promiscuous mode [ 220.148392][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.166138][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.184296][ T7678] bridge_slave_1: entered allmulticast mode [ 220.198703][ T7678] bridge_slave_1: entered promiscuous mode [ 220.316267][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.380339][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.849481][ T7678] team0: Port device team_slave_0 added [ 220.902532][ T7678] team0: Port device team_slave_1 added [ 221.025773][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.038105][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.074034][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.139467][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.180948][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.218446][ T5817] Bluetooth: hci5: command tx timeout [ 221.224033][ T5814] Bluetooth: hci6: command tx timeout [ 221.254338][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.352361][ T7659] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 221.368986][ T7659] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 221.408917][ T7678] hsr_slave_0: entered promiscuous mode [ 221.426131][ T7678] hsr_slave_1: entered promiscuous mode [ 221.443739][ T7678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.459969][ T7678] Cannot create hsr debugfs directory [ 221.497369][ T7659] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 221.519847][ T7659] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 221.673014][ T7662] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.701498][ T5814] Bluetooth: hci7: command tx timeout [ 221.724366][ T7662] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.756781][ T7662] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.839857][ T7662] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.428222][ T7659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.529692][ T7659] percpu: allocation failed, size=8 align=8 atomic=1, atomic alloc failed, no space left [ 222.551965][ T7659] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.612694][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.619796][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.653548][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.660678][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.741962][ T7678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.809865][ T7678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.862902][ T7659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.913493][ T7678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.966836][ T7662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.003782][ T7678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 223.130071][ T7662] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.203613][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.210748][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.261826][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.268956][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.507254][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.610048][ T7678] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.663544][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.670699][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.744468][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.751659][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.772656][ T5814] Bluetooth: hci7: command tx timeout [ 223.835782][ T7659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.240023][ T7662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.523595][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 224.523613][ T29] audit: type=1400 audit(1737304120.267:487): avc: denied { map } for pid=7708 comm="syz.0.456" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 224.753772][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.960544][ T7659] veth0_vlan: entered promiscuous mode [ 225.046233][ T7659] veth1_vlan: entered promiscuous mode [ 225.201884][ T7659] veth0_macvtap: entered promiscuous mode [ 225.260302][ T7659] veth1_macvtap: entered promiscuous mode [ 225.363936][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.418880][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.452371][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.478777][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.648862][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.671069][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.690458][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.714319][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.732278][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.071598][ T5814] Bluetooth: hci7: command tx timeout [ 226.085381][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.100063][ T7659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.138604][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.170604][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.209622][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.236955][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.266983][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.307517][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.333895][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.350961][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.370056][ T7659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.390786][ T7659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.419408][ T7659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.438352][ T7662] veth0_vlan: entered promiscuous mode [ 226.463213][ T7659] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.482827][ T7659] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.503947][ T7659] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.528153][ T7659] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.601988][ T7662] veth1_vlan: entered promiscuous mode [ 226.778670][ T7678] veth0_vlan: entered promiscuous mode [ 226.805003][ T7662] veth0_macvtap: entered promiscuous mode [ 226.871897][ T7662] veth1_macvtap: entered promiscuous mode [ 226.916241][ T7678] veth1_vlan: entered promiscuous mode [ 226.964032][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.012387][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.049431][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.088950][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.121344][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.151077][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.189273][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.236242][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.263947][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.303173][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.835164][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.880592][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.911389][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.132402][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.173669][ T7662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.246652][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.281173][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.660964][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.673793][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.683799][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.709041][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.781051][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.812053][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.837163][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.871331][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.910589][ T7662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.942239][ T7662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.981884][ T7662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.015024][ T7678] veth0_macvtap: entered promiscuous mode [ 229.075395][ T7662] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.128789][ T7662] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.166058][ T7662] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.382435][ T7662] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.424436][ T7678] veth1_macvtap: entered promiscuous mode [ 229.440555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.484616][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.566860][ T29] audit: type=1400 audit(1737304125.317:488): avc: denied { mounton } for pid=7659 comm="syz-executor" path="/root/syzkaller.CtDL6b/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 229.794229][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.839535][ T29] audit: type=1400 audit(1737304125.387:489): avc: denied { mount } for pid=7659 comm="syz-executor" name="/" dev="gadgetfs" ino=6813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 229.885658][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.932165][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.977408][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.094710][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.131067][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.156504][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.200613][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.225813][ T7762] kvm: kvm [7761]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x18a8 [ 230.241204][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.262353][ T7762] kvm: kvm [7761]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x71f9 [ 230.280231][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.310664][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.334228][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.353125][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.370320][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.392370][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.519047][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.555921][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.585845][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.601258][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.446'. [ 230.619562][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.666267][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.701443][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.742255][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.777665][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.810754][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.838530][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.858195][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.884695][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.291179][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.302090][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.331573][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.365804][ T7766] vlan2: entered allmulticast mode [ 231.378350][ T7766] erspan0: entered allmulticast mode [ 231.411309][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.430523][ T7678] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.456373][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.473464][ T7678] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.510551][ T7678] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.539934][ T7678] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.722177][ T7771] input: syz0 as /devices/virtual/input/input32 [ 231.732913][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.779152][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.909915][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.959255][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.072625][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.102733][ T29] audit: type=1400 audit(1737304127.847:490): avc: denied { connect } for pid=7774 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.132669][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.216741][ T29] audit: type=1400 audit(1737304127.887:491): avc: denied { read } for pid=7774 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.566828][ T29] audit: type=1400 audit(1737304128.307:492): avc: denied { connect } for pid=7779 comm="syz.7.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.706784][ T29] audit: type=1400 audit(1737304128.317:493): avc: denied { write } for pid=7779 comm="syz.7.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.872254][ T29] audit: type=1400 audit(1737304129.577:494): avc: denied { ioctl } for pid=7789 comm="syz.7.472" path="socket:[16807]" dev="sockfs" ino=16807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.192226][ T29] audit: type=1400 audit(1737304129.607:495): avc: denied { connect } for pid=7789 comm="syz.7.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.749842][ T29] audit: type=1400 audit(1737304131.497:496): avc: denied { nlmsg_read } for pid=7799 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 239.156030][ T29] audit: type=1400 audit(1737304134.907:497): avc: denied { create } for pid=7819 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 240.441001][ T5853] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 240.615641][ T5853] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 240.653994][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.739864][ T5853] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 240.778959][ T5853] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 240.831715][ T5853] usb 7-1: Manufacturer: syz [ 240.878429][ T5853] usb 7-1: config 0 descriptor?? [ 241.111000][ T5853] rc_core: IR keymap rc-hauppauge not found [ 241.142067][ T5853] Registered IR keymap rc-empty [ 241.180808][ T5853] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 241.251143][ T5853] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input33 [ 241.837423][ T9] usb 7-1: USB disconnect, device number 2 [ 252.667126][ T969] misc userio: Buffer overflowed, userio client isn't keeping up [ 275.770858][ C1] sched: DL replenish lagged too much [ 279.457906][ T969] input: PS/2 Generic Mouse as /devices/serio10/input/input30 [ 284.251404][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.265282][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 360.105098][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.124197][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.921135][ T29] audit: type=1400 audit(1737304248.987:498): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=45850 daddr=10.128.0.221 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 363.881684][ T30] INFO: task syz.3.420:7547 blocked for more than 167 seconds. [ 363.889286][ T30] Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 364.520927][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.529648][ T30] task:syz.3.420 state:D stack:27712 pid:7547 tgid:7547 ppid:5823 flags:0x00000004 [ 364.590966][ T30] Call Trace: [ 364.594295][ T30] [ 364.597236][ T30] __schedule+0xe58/0x5ad0 [ 364.630922][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 364.636180][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 364.670917][ T30] ? __pfx___schedule+0x10/0x10 [ 364.675829][ T30] ? schedule+0x298/0x350 [ 364.680171][ T30] ? __pfx_lock_release+0x10/0x10 [ 364.700936][ T30] ? __mutex_trylock_common+0x78/0x250 [ 364.706443][ T30] ? lock_acquire+0x2f/0xb0 [ 364.730992][ T30] ? schedule+0x1fd/0x350 [ 364.735375][ T30] schedule+0xe7/0x350 [ 364.739458][ T30] schedule_preempt_disabled+0x13/0x30 [ 364.780906][ T30] __mutex_lock+0x62b/0xa60 [ 364.785474][ T30] ? serio_unregister_port+0x1b/0x40 [ 364.790779][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 364.820980][ T30] ? locks_remove_file+0x393/0x5a0 [ 364.826145][ T30] ? __pfx_userio_char_release+0x10/0x10 [ 364.850920][ T30] ? serio_unregister_port+0x1b/0x40 [ 364.856265][ T30] ? evm_file_release+0xd0/0x200 [ 364.881389][ T30] serio_unregister_port+0x1b/0x40 [ 364.886565][ T30] userio_char_release+0x91/0xe0 [ 364.920921][ T30] __fput+0x3f8/0xb60 [ 364.924966][ T30] task_work_run+0x14e/0x250 [ 364.929574][ T30] ? __pfx_task_work_run+0x10/0x10 [ 364.960929][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 364.966715][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 365.000901][ T30] do_syscall_64+0xda/0x250 [ 365.005463][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.030928][ T30] RIP: 0033:0x7fd919785d29 [ 365.035389][ T30] RSP: 002b:00007ffd23233e68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 365.070889][ T30] RAX: 0000000000000000 RBX: 000000000002fc81 RCX: 00007fd919785d29 [ 365.078904][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 365.087443][ T30] RBP: 00007fd919977ba0 R08: 0000000000000001 R09: 00007ffd2323415f [ 365.095485][ T30] R10: 00007fd919600000 R11: 0000000000000246 R12: 000000000002fcef [ 365.103574][ T30] R13: 00007fd919975fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 365.111593][ T30] [ 365.114615][ T30] INFO: task syz.2.419:7550 blocked for more than 148 seconds. [ 365.122234][ T30] Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 365.129863][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.138567][ T30] task:syz.2.419 state:D stack:26944 pid:7550 tgid:7549 ppid:5828 flags:0x00004006 [ 365.148830][ T30] Call Trace: [ 365.152176][ T30] [ 365.155798][ T30] __schedule+0xe58/0x5ad0 [ 365.160232][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 365.165471][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 365.170686][ T30] ? __pfx___schedule+0x10/0x10 [ 365.175593][ T30] ? schedule+0x298/0x350 [ 365.179925][ T30] ? __pfx_lock_release+0x10/0x10 [ 365.185182][ T30] ? __mutex_trylock_common+0x78/0x250 [ 365.190659][ T30] ? lock_acquire+0x2f/0xb0 [ 365.195230][ T30] ? schedule+0x1fd/0x350 [ 365.199570][ T30] schedule+0xe7/0x350 [ 365.203718][ T30] schedule_preempt_disabled+0x13/0x30 [ 365.209186][ T30] __mutex_lock+0x62b/0xa60 [ 365.213808][ T30] ? serio_unregister_port+0x1b/0x40 [ 365.219109][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 365.224220][ T30] ? locks_remove_file+0x393/0x5a0 [ 365.229348][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 365.234873][ T30] ? __pfx_userio_char_release+0x10/0x10 [ 365.240515][ T30] ? serio_unregister_port+0x1b/0x40 [ 365.245914][ T30] serio_unregister_port+0x1b/0x40 [ 365.245949][ T30] userio_char_release+0x91/0xe0 [ 365.256865][ T30] __fput+0x3f8/0xb60 [ 365.260903][ T30] task_work_run+0x14e/0x250 [ 365.265892][ T30] ? __pfx_task_work_run+0x10/0x10 [ 365.271134][ T30] get_signal+0x1d3/0x26c0 [ 365.275575][ T30] ? __pfx_get_signal+0x10/0x10 [ 365.280438][ T30] ? kick_process+0xf6/0x1b0 [ 365.372118][ T30] ? task_work_add+0x1ca/0x3b0 [ 365.376900][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 365.410945][ T30] ? __fget_files+0x206/0x3a0 [ 365.415635][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 365.451021][ T30] ? ksys_read+0x1ba/0x250 [ 365.461295][ T30] ? __pfx_ksys_read+0x10/0x10 [ 365.466103][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 365.521003][ T30] do_syscall_64+0xda/0x250 [ 365.525568][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.560908][ T30] RIP: 0033:0x7fbb45b85d29 [ 365.566617][ T30] RSP: 002b:00007fbb46967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.600997][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 365.607045][ T5822] Bluetooth: hci6: command 0x0406 tx timeout [ 365.610965][ T30] RAX: fffffffffffffe00 RBX: 00007fbb45d75fa0 RCX: 00007fbb45b85d29 [ 365.619070][ T5822] Bluetooth: hci7: command tx timeout [ 365.661053][ T30] RDX: 000000000000005d RSI: 00000000200001c0 RDI: 0000000000000007 [ 365.669755][ T30] RBP: 00007fbb45c01b08 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=216 sent=0 n=-1 (errno 32: Broken pipe) [ 365.730906][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.750931][ T30] R13: 0000000000000000 R14: 00007fbb45d75fa0 R15: 00007ffe811450e8 [ 365.758955][ T30] [ 365.820937][ T30] [ 365.820937][ T30] Showing all locks held in the system: [ 365.860933][ T30] 3 locks held by kworker/0:1/9: [ 365.865907][ T30] #0: ffff88802169cd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 365.920404][ T30] #1: ffffc900000e7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 365.965779][ T30] #2: ffff888144f6e190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 366.010924][ T30] 4 locks held by kdevtmpfs/27: [ 366.015854][ T30] 1 lock held by khungtaskd/30: [ 366.040889][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 366.050774][ T30] 2 locks held by kswapd0/89: [ 366.096179][ T30] 9 locks held by kworker/1:2/969: [ 366.125418][ T30] 4 locks held by kworker/u9:1/5127: [ 366.130724][ T30] #0: ffff888061aed948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 366.190923][ T30] #1: ffffc900105f7d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 366.620935][ T30] #2: ffff888030e94d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x170/0x410 [ 366.691064][ T30] #3: ffff888030e94078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x14e/0xfe0 [ 366.739824][ T30] 1 lock held by acpid/5174: [ 366.759158][ T30] 1 lock held by dhcpcd/5482: [ 366.790983][ T30] 2 locks held by getty/5569: [ 366.841034][ T30] #0: ffff8880349d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 366.900900][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 366.980967][ T30] 1 lock held by syz-executor/5811: [ 366.986250][ T30] 4 locks held by kworker/u9:3/5817: [ 367.054692][ T30] #0: ffff8880615a4948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 367.110976][ T30] #1: ffffc9000417fd80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 367.160931][ T30] #2: ffff888031340d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x170/0x410 [ 367.205363][ T30] #3: ffff888031340078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x14e/0xfe0 [ 367.270926][ T30] 1 lock held by syz.3.420/7547: [ 367.281331][ T30] #0: ffffffff8f720c68 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 367.339166][ T30] 1 lock held by syz.2.419/7550: [ 367.384092][ T30] #0: ffffffff8f720c68 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 367.430911][ T30] 2 locks held by syz.0.432/7600: [ 367.460906][ T30] #0: ffff88802a9b4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 367.470598][ T30] #1: ffff88802a9b4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 367.550929][ T30] 1 lock held by syz-executor/7659: [ 367.580934][ T30] #0: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 367.630913][ T30] 2 locks held by syz-executor/7678: [ 367.636312][ T30] 2 locks held by syz-executor/7846: [ 367.697853][ T30] [ 367.700213][ T30] ============================================= [ 367.700213][ T30] [ 367.791786][ T30] NMI backtrace for cpu 1 [ 367.796167][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 367.806679][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 367.816746][ T30] Call Trace: [ 367.820024][ T30] [ 367.822959][ T30] dump_stack_lvl+0x116/0x1f0 [ 367.827651][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 367.832605][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 367.838603][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 367.844604][ T30] watchdog+0xf14/0x1240 [ 367.845139][ T5127] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 367.848949][ T30] ? __pfx_watchdog+0x10/0x10 [ 367.860697][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.865918][ T30] ? __kthread_parkme+0x148/0x220 [ 367.870949][ T5127] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 367.870958][ T30] ? __pfx_watchdog+0x10/0x10 [ 367.882556][ T30] kthread+0x2c1/0x3a0 [ 367.886643][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.890955][ T5127] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 367.891835][ T30] ? __pfx_kthread+0x10/0x10 [ 367.901329][ T5127] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 367.903303][ T30] ret_from_fork+0x45/0x80 [ 367.912008][ T5127] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 367.914591][ T30] ? __pfx_kthread+0x10/0x10 [ 367.923207][ T5127] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 367.926059][ T30] ret_from_fork_asm+0x1a/0x30 [ 367.937805][ T30] [ 367.941726][ T30] Sending NMI from CPU 1 to CPUs 0: [ 367.946953][ C0] NMI backtrace for cpu 0 [ 367.946964][ C0] CPU: 0 UID: 101 PID: 5482 Comm: dhcpcd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 367.946988][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 367.947000][ C0] RIP: 0010:filter_irq_stacks+0x24/0x90 [ 367.947034][ C0] Code: 90 90 90 90 90 90 f3 0f 1e fa 85 f6 74 61 53 31 c0 48 bb 00 00 00 00 00 fc ff df 48 83 ec 10 48 89 fa 48 c1 ea 03 80 3c 1a 00 <75> 4a 48 8b 17 48 81 fa 30 02 40 8b 72 16 48 81 fa 70 16 40 8b 73 [ 367.947053][ C0] RSP: 0018:ffffc900046ef440 EFLAGS: 00000246 [ 367.947069][ C0] RAX: 000000000000000d RBX: dffffc0000000000 RCX: 0000000000000001 [ 367.947082][ C0] RDX: 1ffff920008ddea9 RSI: 0000000000000010 RDI: ffffc900046ef548 [ 367.947095][ C0] RBP: 0000000000000001 R08: ffffc900046ef3c4 R09: ffffffff91a41ce0 [ 367.947109][ C0] R10: ffffc900046ef390 R11: 00000000000a29c4 R12: 0000000000002800 [ 367.947121][ C0] R13: ffffc900046ef4e0 R14: dffffc0000000000 R15: 0000000000000000 [ 367.947135][ C0] FS: 00007f77e14ab740(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 367.947154][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.947168][ C0] CR2: 00007f2ea01f6d00 CR3: 00000000348ee000 CR4: 00000000003526f0 [ 367.947181][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.947193][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.947205][ C0] Call Trace: [ 367.947210][ C0] [ 367.947217][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 367.947240][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 367.947259][ C0] ? nmi_handle+0x1ac/0x5d0 [ 367.947281][ C0] ? filter_irq_stacks+0x24/0x90 [ 367.947309][ C0] ? default_do_nmi+0x6a/0x160 [ 367.947330][ C0] ? exc_nmi+0x170/0x1e0 [ 367.947348][ C0] ? end_repeat_nmi+0xf/0x53 [ 367.947381][ C0] ? filter_irq_stacks+0x24/0x90 [ 367.947409][ C0] ? filter_irq_stacks+0x24/0x90 [ 367.947438][ C0] ? filter_irq_stacks+0x24/0x90 [ 367.947465][ C0] [ 367.947471][ C0] [ 367.947477][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 367.947504][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 367.947526][ C0] stack_depot_save_flags+0x28/0x9c0 [ 367.947558][ C0] save_stack+0x16f/0x1f0 [ 367.947577][ C0] ? __pfx_save_stack+0x10/0x10 [ 367.947596][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 367.947618][ C0] ? free_unref_page+0x661/0x1080 [ 367.947639][ C0] ? __put_partials+0x14c/0x170 [ 367.947663][ C0] ? qlist_free_all+0x4e/0x120 [ 367.947683][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 367.947704][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 367.947726][ C0] ? __kmalloc_node_track_caller_noprof+0x1d3/0x510 [ 367.947750][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 367.947774][ C0] ? __alloc_skb+0x164/0x380 [ 367.947800][ C0] ? alloc_skb_with_frags+0xe4/0x850 [ 367.947822][ C0] ? sock_alloc_send_pskb+0x7f1/0x980 [ 367.947849][ C0] ? unix_dgram_sendmsg+0x4b8/0x19e0 [ 367.947876][ C0] ? sock_write_iter+0x4fe/0x5b0 [ 367.947900][ C0] ? vfs_write+0x5ae/0x1150 [ 367.947917][ C0] ? ksys_write+0x207/0x250 [ 367.947935][ C0] ? do_syscall_64+0xcd/0x250 [ 367.947961][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.947991][ C0] __reset_page_owner+0x8d/0x400 [ 367.948014][ C0] free_unref_page+0x661/0x1080 [ 367.948037][ C0] __put_partials+0x14c/0x170 [ 367.948059][ C0] qlist_free_all+0x4e/0x120 [ 367.948079][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 367.948102][ C0] __kasan_slab_alloc+0x69/0x90 [ 367.948125][ C0] __kmalloc_node_track_caller_noprof+0x1d3/0x510 [ 367.948149][ C0] ? rcu_watching_snap_stopped_since+0xc1/0x110 [ 367.948178][ C0] ? __alloc_skb+0x164/0x380 [ 367.948207][ C0] kmalloc_reserve+0xef/0x2c0 [ 367.948231][ C0] __alloc_skb+0x164/0x380 [ 367.948258][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 367.948285][ C0] ? hlock_class+0x4e/0x130 [ 367.948312][ C0] ? __lock_acquire+0x1550/0x3c40 [ 367.948336][ C0] alloc_skb_with_frags+0xe4/0x850 [ 367.948361][ C0] sock_alloc_send_pskb+0x7f1/0x980 [ 367.948393][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 367.948421][ C0] ? __pfx_lock_release+0x10/0x10 [ 367.948441][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 367.948466][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.948491][ C0] ? lock_acquire+0x2f/0xb0 [ 367.948510][ C0] ? unix_dgram_sendmsg+0x928/0x19e0 [ 367.948539][ C0] unix_dgram_sendmsg+0x4b8/0x19e0 [ 367.948568][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 367.948596][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 367.948629][ C0] sock_write_iter+0x4fe/0x5b0 [ 367.948656][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 367.948685][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 367.948711][ C0] ? security_file_permission+0x71/0x210 [ 367.948739][ C0] vfs_write+0x5ae/0x1150 [ 367.948758][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 367.948783][ C0] ? __pfx_vfs_write+0x10/0x10 [ 367.948803][ C0] ? __seccomp_filter+0x6a2/0xf40 [ 367.948826][ C0] ksys_write+0x207/0x250 [ 367.948845][ C0] ? __pfx_ksys_write+0x10/0x10 [ 367.948865][ C0] ? __secure_computing+0x273/0x3f0 [ 367.948884][ C0] do_syscall_64+0xcd/0x250 [ 367.948911][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.948937][ C0] RIP: 0033:0x7f77e1575bf2 [ 367.948952][ C0] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 367.948970][ C0] RSP: 002b:00007ffc9e88f6d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.948988][ C0] RAX: ffffffffffffffda RBX: 00007f77e14ab6c0 RCX: 00007f77e1575bf2 [ 367.949001][ C0] RDX: 000000000000003b RSI: 00007ffc9e88f6f0 RDI: 0000000000000005 [ 367.949013][ C0] RBP: 00007ffc9e88f6f0 R08: 0000000000000000 R09: 0000000000000000 [ 367.949025][ C0] R10: 000055ccd148b110 R11: 0000000000000246 R12: 000055ccd14856ea [ 367.949038][ C0] R13: 00007ffc9e88fb20 R14: 00007ffc9e890050 R15: 00007ffc9e88fc08 [ 367.949057][ C0] [ 368.021516][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 368.021533][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 368.021555][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 368.021567][ T30] Call Trace: [ 368.021574][ T30] [ 368.021581][ T30] dump_stack_lvl+0x3d/0x1f0 [ 368.021612][ T30] panic+0x71d/0x800 [ 368.021629][ T30] ? __pfx_panic+0x10/0x10 [ 368.021661][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 368.021684][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 368.021704][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 368.021724][ T30] ? watchdog+0xd7e/0x1240 [ 368.021747][ T30] ? watchdog+0xd71/0x1240 [ 368.021772][ T30] watchdog+0xd8f/0x1240 [ 368.021798][ T30] ? __pfx_watchdog+0x10/0x10 [ 368.021819][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 368.021845][ T30] ? __kthread_parkme+0x148/0x220 [ 368.021870][ T30] ? __pfx_watchdog+0x10/0x10 [ 368.021893][ T30] kthread+0x2c1/0x3a0 [ 368.021915][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.021936][ T30] ? __pfx_kthread+0x10/0x10 [ 368.021960][ T30] ret_from_fork+0x45/0x80 [ 368.021979][ T30] ? __pfx_kthread+0x10/0x10 [ 368.022003][ T30] ret_from_fork_asm+0x1a/0x30 [ 368.022038][ T30] [ 368.650561][ T30] Kernel Offset: disabled [ 368.654862][ T30] Rebooting in 86400 seconds..