last executing test programs: 14.459771513s ago: executing program 1 (id=233): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x100}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee3, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x14) readv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001940)=""/248, 0xf8}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000880)=""/4096, 0x1000}], 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 11.8136361s ago: executing program 3 (id=237): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r3, 0x0, 0x0, 0x0, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="d22b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000d000000000000002564000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f000000000000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x7ffffffe) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 11.087775233s ago: executing program 1 (id=240): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000850) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socketpair(0x1, 0x1, 0x20000000, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8, 0x0, {0x0, r6}}) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="cefed22ea79f7b96abb5e0757fca384d4b90bc5d0d5b47d1307c36cb9da3181e732cdce4471fcc9b59ae35404fb15851c28218c5548eaff6142e75e5b877a01bde4308fd8a2d3088dd75f510cd50bea2d527a8eeb2e4ee949c875da787ec2b74fc8ed54a8526e3fe407448bb31395b8dc0c49f442a11127c895bb1437f0f0ed19ec19bdfb145447b5419bc4c0b6569cc52ec383c"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000040), 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000180)={@private, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) connect(r4, &(0x7f0000000200)=@ll={0x11, 0xd, r11, 0x1, 0x0, 0x6, @broadcast}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) 11.015841261s ago: executing program 2 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000280)='#', 0x1}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0xde, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000180), 0x43) syz_emit_ethernet(0x3e, &(0x7f0000002a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}}}}}}, 0x0) 10.075431904s ago: executing program 2 (id=246): syz_open_procfs(0x0, &(0x7f0000000940)='net/rt_cache\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x280) 9.747149285s ago: executing program 3 (id=247): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x400000, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd64, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x1000, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x71, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x4}, {0x0, 0x2, 0x8000000000}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd160-generic\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r7, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x14}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000c4) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9800001200", @ANYRES16=r9, @ANYBLOB="01000000000000200000010000004c0008804800008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200009801c0000800600010002000000080002007f000001050003000300000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/146], 0x98}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 7.889263131s ago: executing program 1 (id=251): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x100}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee3, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x14) readv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001940)=""/248, 0xf8}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000880)=""/4096, 0x1000}], 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 7.874259s ago: executing program 4 (id=252): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$kcm(0x10, 0x2, 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close(0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x11, r6, 0x10000000000005, 0xfffffffffffffffa) 6.420019007s ago: executing program 0 (id=255): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00004f4000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000380)="f0470fb19e00480000c4a1fd64f464430f0dddc4c10df286b500000066baf80cb855d4af8cef66bafc0cec2e653667ad66b8c1008ee8c4012a51ac87d27293d242d24f0a66baf80cb88a2b1680ef66bafc0c66ed", 0x54}], 0x1, 0x60, &(0x7f00000004c0)=[@dstype3={0x7, 0x5}], 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x60, 0x0) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) setrlimit(0x7, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={0x0}, 0x18) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000046be37f2fd4e124000000040000000300", @ANYRES32, @ANYBLOB='\x00'/15], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004001000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800effffffffaffffff0000b13592d53919b6350000000018120000472c2fa12f4554d1ae32b39ce3a4784f519cf2c4e730b06062", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f00000008c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000640), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000feff", @ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, 0x0, &(0x7f0000000080)=r4}, 0x20) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) eventfd(0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1c00"], 0x50) 6.385235052s ago: executing program 4 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x40048820) 6.347462699s ago: executing program 1 (id=257): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40000020, 0x800000000004}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101140, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) syz_usb_control_io(r3, &(0x7f0000000540)={0x18, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003000000bc433cb700000000112dc11c0cbc94400002035c7aa258263540da03989c05e7"], 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000400)={0x80}) getdents64(0xffffffffffffffff, &(0x7f0000001480)=""/4096, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x6, 0x1, 0x3, 0x5, 0x2, 0x3}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6802000000050104000000000000fff508000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = mq_open(&(0x7f0000000540)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00j\x05\xf9\xa1k;L\xb3C\xeb\xf1\xa7\f\xfb\xa8U\t\xc4\x00t\xbb\x03\x01/\x8dQxk\f\xa7\xfd\xa2=\xb9\xfa\x8d\xa4>\x11\xed\a\xd8\xd4NEz[\xb5\xd4\xd05j\xf2}\xa1a\xd9\xdf0*K \xec\xbc\x86C,\x9dLJ\x13\x1a1\x8fI\x12\xc9\xc5\x11\xf9\xa0S\x95\x9dU\xadn\x89v\xe9\x82\xdd=\xf5e\xacq\x0e\x17\xd4\x19\x8dEp\xbd0\xe8\xb5U\x8fx\xa3\xd0\x92\xbb\xd8>\xda\xe1\x9d\x8c\x1b4\x9c\x17\xb2\xec;\xef\xcd\xa1){\x91\xd2\xc9#;9a,x\x93\xb1xN\x02\x91J\x9c\xed\xff\xea\x16^v\x17\xcc\xfe\xa2g\xa9LF_\x92\xeae\xbf\xa6\xca\'\x9dkFf?&\x98d\xef!\xfa\xe4', 0x2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x32, 0x6, 0xffffffffffdff7f4}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) 5.568131921s ago: executing program 2 (id=258): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0xb, 0x18, 0x79, 0x8, 0x403, 0xd578, 0x3200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xc2, 0x8, 0x0, 0xc, 0xcf, 0xc4, 0x5}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x2, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r5, 0x80) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) 5.396150103s ago: executing program 3 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0x9]}, 0x8) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x28) 5.368473645s ago: executing program 4 (id=260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000588f80180c2000001aaaaaaaaaaaa88a8a00081"], 0x72) 5.042188947s ago: executing program 4 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000980)=0x80000001, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r2, 0x400448e0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)={0x624, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "fe94c0517352e874480114ee38310e57f65cc84cd370ea1a6d04002d06"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "fd3847dcfb88efeb72a00b976dff43d015044c5a5e"}}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "3ea02ae1f162d9033534dd8b2d69080313c2f26c272561307f1ebe465c0123024e3128764e9b7522fcdada4d0cede7cedea25307f8853ee6ff89ed584b000f4afef0706e78352e952e1e30d1bcbce7eeb8a8a3275f90ffb3d5401a9da6fa5d4048f9f716cd4742065c53b9d72034f2e1be1a64e66604b264db328a864c6874cc02bd5d63e5bf44114688bd0e0a07ff9d7ced51f0586288a11198983f091f79e3d60648d2464aa7011cbfa8a9f15c369550f6572c76fe1b98fe0dc72a494ec6a2d29e752807129e138e26b558ab0331af11e1c3b2d1c8ad33c17afe7b668c97887438330e25ad8dad414e2b6786c0ead9aa50cf"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xda5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x211}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3884}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8d6c}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xda}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe7a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}]}, @TIPC_NLA_NODE={0x21c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "951265865de4033af1d22a52fac2ff1c0484723411c0e6c64eecd55d5d4cf38a38daeb91a9ca1621cceecd0a7d787375473787a7012e0c59a2cc97efe9a61bc9f4419bfcb1d4a71292a421e5fda25407e4c6b59acc353b9c780ee761f225c43e4d5116ce131ecde0bbfc856091d5e238dd21d6fdbc2ff99b3922"}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "670f9b7ee6a0c0d0e529ce7c28241658e939874b618b6e2bf35ab03173510bc2e81bb4a2d7ac408e0e44cbc3332c0116cc5ef64db7a6c6735fa80ad651a95f4e5888f010bb6876db6fd4704b213f76c17225c6bfaa57b77125f00cbf7f26d339747837e555931aab48bf81e2ffbd0f9511d1b0f943df201a1f48afe00a6e3dc04520e6cc751b3d6742c34d16c2962fb7762a55a589d626570918e70db8a379c0ebeb3dcfd9fa55ea2d89f26806e9fc06a6f4a1115fb633afe240dbcbdf9b29c2e2223911260146e35e0a5be5ff5ea9ee1368c54410b5635e881311e72e9c0bdb1c07ae31ef7e3295272ef3717b91"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1edb0314370ea37ec114209bb8b0f70179bcbc243f97b74486e1c7d4fbe06ee7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "3d274ffd7a9f8e0e9c6208c792872f42fdc1f12910c87a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x624}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = socket(0x14, 0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, 0x0) 4.963481019s ago: executing program 0 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x42a1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_MTU={0x8, 0x4, 0xb5}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x42a1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_MTU={0x8, 0x4, 0xb5}]}, 0x64}}, 0x0) (async) 4.596831913s ago: executing program 0 (id=263): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd70", @ANYRES32], 0x50}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f0000000080)=0xe2a8d1d21b84a7f3) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.651434122s ago: executing program 0 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000002a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}}}}}}, 0x0) 3.547855537s ago: executing program 4 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x100, 0x0, 0x10}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x1c, 0x200000000000000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000002a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}}}}}}, 0x0) 3.524568079s ago: executing program 3 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) msgsnd(0x0, 0x0, 0x4, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x5800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001d4c0)=""/102400, 0xfffffffffffffda6) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0x9]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) fcntl$setlease(r5, 0x400, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000300)="d0b4163e9645731ac22c000000006ca3ad329fb52f5311a4e079e3b7d7532852091ef2f7ffffffc5a00e9e3aaf8a486ac2b95c03d228ec9dbe98c541ca5d4649c47af2d8866a559d687ca8596ef57cdb99d41a309ad5f5103c095df42ec227e7439b252b619527b09c4dcd8a0f3e9e28c424397c44eca94178b55e10ecd6db6354fe9600cb2c8fa39d586485fa29d0ee329d3958a7002048f4ed505b1603533e98b6290a7ef481e2821539d130ace8df6fdddb18b898ca272b6dbe8110c14da8ed0de84c0a18ef82e0e397145d8fc146f220459eedf0c305353e4709d9017f17258ff77ecc482717ab", 0xe9, 0x40000, &(0x7f00000001c0)={0x11, 0x1c, r6, 0x1, 0x70, 0x6, @local}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="dad685fa41aadf675f0000000e000000000000", @ANYRES32=r6, @ANYRES64=r3], 0x20}}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80800) openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x204400, 0xb0) 3.375626497s ago: executing program 3 (id=267): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x100}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee3, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x14) readv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001940)=""/248, 0xf8}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000880)=""/4096, 0x1000}], 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 3.342331603s ago: executing program 0 (id=268): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fba85b08e90f71db3e530102030109021200010400200009049c"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0x5ce, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) fallocate(r0, 0x15, 0xfffffffffffffffe, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x7f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x2, 0x10, 0x59, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x6d, {{0x9, 0x24, 0x6, 0x0, 0x0, "c45f89a1"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0xd3c, 0x5, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x10, 0x4, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}, @acm={0x4, 0x24, 0x2, 0xb}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x28, 0x7fff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xe, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x4, 0x39, 0x20, 0xc}, 0x11, &(0x7f0000000100)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x5, 0x0, 0xce}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x43e}}, {0x99, &(0x7f0000000180)=@string={0x99, 0x3, "d53a179480ce2d25ca52fce3caeee184bdb8ed28c74cfd5b9bbfa21489739a95f6acf59d6de73317ecc858d9ca51f05905013b2f3866d199e5145af6b9fc4d560652adbf8d48a20985cb64b2edae32846ed721191bb2ac3204d623a801c61937bc21cda7ce561bdb12fd3f49373deb037abb1d0fffff2d5b783f22e0d5fdcf5bfda123edda7ef214b04634c9bf435ab4050b0b6722eef3"}}, {0x98, &(0x7f0000000240)=@string={0x98, 0x3, "1c8bc490a97019616f50f3fb2f3b82705ebf4ca9718ec9f9263bdfcecc10904cf235ac7c5b1b9d75f5d374dd78e706e681372874b856440d248cd37e602b378800ca83ebec69e604cbf6b89bcdca8710c03e75da10570ec2cb67edaf5673a5e9bb3751ebee0b4825d20bb920e851e13f62abd2acc1c250f171f31e7f2436dc9bf4fa111ada0c014f26df24a25245a1c9a883564efbf1"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x861}}, {0x92, &(0x7f0000000340)=@string={0x92, 0x3, "bc69eab85e80e54fbd8d094e54773c070deb59d7c25c933451a72cab6231dd12de0472dd8c4079786a28c2c5b6ae39ce73e9b5d5a6447f0188588e59a89287f85ee8dabe11b3bbb09db19ecda1a5afa957f34f27d84237c8e7608c939c44fb103d8cb7b1e7cc4c363421015ac6ec57f318830f10d220531e29712d0811c435025835f04f3f2ecdd5811991d680113a88"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4e, &(0x7f0000000440)=@string={0x4e, 0x3, "067dcf911fa8b86869879e664e42d8768552b262aa6c67ee773d066053ecefd0bc1af4237dcb31479956e34e966f9d3bd6b4ede658a60e3e04f527d80e146a37eb9fb37eacbaccdfd499e304"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x408}}]}) 3.207804254s ago: executing program 4 (id=269): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r3, 0x0, 0x0, 0x0, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="d22b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000d000000000000002564000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f000000000000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000480), 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 2.434452212s ago: executing program 1 (id=270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) gettid() ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040), &(0x7f0000000080)) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r6}) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286", 0x15) 1.82194968s ago: executing program 2 (id=271): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) accept$alg(r4, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000240)="a445") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r3, r3, 0x0, 0x20000000000006) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f00000002c0)) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x44}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x70b7}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x6}]}}]}, 0x50}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000000140)={'gretap0\x00', 0x6, 0x40000000}) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r10, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 1.668059286s ago: executing program 2 (id=272): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c00000000006113500000000000bfa00000000000001505000008004e002d350100000000009500410080ffffff6916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.608305364s ago: executing program 2 (id=273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x6c05}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256e0000000000000109022400010000000009042000010300220009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xf, "bf1f"}]}}, 0x0}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x400448e0, 0x0) r3 = socket(0x14, 0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) 1.378313954s ago: executing program 1 (id=274): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x800) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.358497063s ago: executing program 0 (id=275): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bcf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001306"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 3 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000040)={[0x9]}, 0x8) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 58.998801][ T30] audit: type=1400 audit(1757506217.309:62): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.001957][ T5834] cgroup: Unknown subsys name 'net' [ 59.021535][ T30] audit: type=1400 audit(1757506217.319:63): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.048839][ T30] audit: type=1400 audit(1757506217.339:64): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.153148][ T5834] cgroup: Unknown subsys name 'cpuset' [ 59.160712][ T5834] cgroup: Unknown subsys name 'rlimit' [ 59.325887][ T30] audit: type=1400 audit(1757506217.639:65): avc: denied { setattr } for pid=5834 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.357639][ T30] audit: type=1400 audit(1757506217.639:66): avc: denied { create } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.389475][ T30] audit: type=1400 audit(1757506217.639:67): avc: denied { write } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.404948][ T5836] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.418586][ T30] audit: type=1400 audit(1757506217.639:68): avc: denied { read } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.439049][ T30] audit: type=1400 audit(1757506217.649:69): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.463861][ T30] audit: type=1400 audit(1757506217.649:70): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.489816][ T30] audit: type=1400 audit(1757506217.689:71): avc: denied { read } for pid=5516 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.386140][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.755463][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.762999][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.770712][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.778709][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.784545][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.786357][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.792647][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.800971][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.807088][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.821891][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.829464][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.829505][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.836846][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.851734][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.854342][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.859781][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.866843][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.872726][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.880476][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.888631][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.894107][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.900613][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.907985][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.921467][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.933355][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.323358][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 63.338528][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 63.382194][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 63.498734][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 63.604349][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.612320][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.619462][ T5845] bridge_slave_0: entered allmulticast mode [ 63.626368][ T5845] bridge_slave_0: entered promiscuous mode [ 63.640376][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.647449][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.654568][ T5846] bridge_slave_0: entered allmulticast mode [ 63.661253][ T5846] bridge_slave_0: entered promiscuous mode [ 63.671363][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.678428][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.685584][ T5847] bridge_slave_0: entered allmulticast mode [ 63.693115][ T5847] bridge_slave_0: entered promiscuous mode [ 63.700429][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.707497][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.714818][ T5845] bridge_slave_1: entered allmulticast mode [ 63.722531][ T5845] bridge_slave_1: entered promiscuous mode [ 63.732201][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.739256][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.746488][ T5846] bridge_slave_1: entered allmulticast mode [ 63.753086][ T5846] bridge_slave_1: entered promiscuous mode [ 63.768179][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 63.785829][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.792993][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.800585][ T5847] bridge_slave_1: entered allmulticast mode [ 63.807167][ T5847] bridge_slave_1: entered promiscuous mode [ 63.838718][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.857491][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.895652][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.914405][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.934613][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.941867][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.949094][ T5853] bridge_slave_0: entered allmulticast mode [ 63.955928][ T5853] bridge_slave_0: entered promiscuous mode [ 63.962904][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.970314][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.977495][ T5853] bridge_slave_1: entered allmulticast mode [ 63.984328][ T5853] bridge_slave_1: entered promiscuous mode [ 63.998799][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.010910][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.063611][ T5845] team0: Port device team_slave_0 added [ 64.071338][ T5845] team0: Port device team_slave_1 added [ 64.093580][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.103819][ T5846] team0: Port device team_slave_0 added [ 64.133626][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.143922][ T5846] team0: Port device team_slave_1 added [ 64.159960][ T5847] team0: Port device team_slave_0 added [ 64.174095][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.181522][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.188580][ T5844] bridge_slave_0: entered allmulticast mode [ 64.196154][ T5844] bridge_slave_0: entered promiscuous mode [ 64.226181][ T5847] team0: Port device team_slave_1 added [ 64.241498][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.248421][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.274679][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.286253][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.293739][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.301393][ T5844] bridge_slave_1: entered allmulticast mode [ 64.307957][ T5844] bridge_slave_1: entered promiscuous mode [ 64.323746][ T5853] team0: Port device team_slave_0 added [ 64.330424][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.337349][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.363337][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.383019][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.390158][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.416112][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.441046][ T5853] team0: Port device team_slave_1 added [ 64.448321][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.457920][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.466175][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.494909][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.509025][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.516195][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.542154][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.557876][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.564880][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.591064][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.610867][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.661323][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.668263][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.694415][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.706764][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.713885][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.740359][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.776551][ T5845] hsr_slave_0: entered promiscuous mode [ 64.783674][ T5845] hsr_slave_1: entered promiscuous mode [ 64.795744][ T5844] team0: Port device team_slave_0 added [ 64.802887][ T5844] team0: Port device team_slave_1 added [ 64.819325][ T5846] hsr_slave_0: entered promiscuous mode [ 64.825920][ T5846] hsr_slave_1: entered promiscuous mode [ 64.832160][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 64.837906][ T5846] Cannot create hsr debugfs directory [ 64.905687][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.912840][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.938936][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.960557][ T49] Bluetooth: hci2: command tx timeout [ 64.966169][ T49] Bluetooth: hci0: command tx timeout [ 64.966744][ T5851] Bluetooth: hci1: command tx timeout [ 64.971993][ T5865] Bluetooth: hci4: command tx timeout [ 64.978682][ T5860] Bluetooth: hci3: command tx timeout [ 64.991931][ T5847] hsr_slave_0: entered promiscuous mode [ 64.998359][ T5847] hsr_slave_1: entered promiscuous mode [ 65.004351][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 65.010108][ T5847] Cannot create hsr debugfs directory [ 65.015952][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.023218][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.049186][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.078520][ T5853] hsr_slave_0: entered promiscuous mode [ 65.084526][ T5853] hsr_slave_1: entered promiscuous mode [ 65.090551][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 65.096272][ T5853] Cannot create hsr debugfs directory [ 65.210168][ T5844] hsr_slave_0: entered promiscuous mode [ 65.216141][ T5844] hsr_slave_1: entered promiscuous mode [ 65.222451][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 65.228164][ T5844] Cannot create hsr debugfs directory [ 65.458161][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.471885][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.482837][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.498045][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.539727][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.552630][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.569562][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.578741][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.622647][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.637996][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.656812][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.666706][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.745780][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.757836][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.766936][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.786211][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.875604][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.885019][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.896565][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.905976][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.921808][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.945389][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.966066][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.975886][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.983004][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.010490][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.019309][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.026451][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.067159][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.088158][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.106156][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.127831][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.134900][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.165539][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.172629][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.183057][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.190144][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.211216][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.219582][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.226655][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.255162][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.262279][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.284547][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 66.284559][ T30] audit: type=1400 audit(1757506224.599:88): avc: denied { sys_module } for pid=5845 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.355863][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.362974][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.398330][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.468519][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.513243][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.544933][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.552046][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.586433][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.593566][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.634249][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.799063][ T5845] veth0_vlan: entered promiscuous mode [ 66.866546][ T5845] veth1_vlan: entered promiscuous mode [ 66.877181][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.898036][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.943568][ T5845] veth0_macvtap: entered promiscuous mode [ 66.953077][ T5845] veth1_macvtap: entered promiscuous mode [ 66.970851][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.999094][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.035916][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.044353][ T5860] Bluetooth: hci4: command tx timeout [ 67.045397][ T5865] Bluetooth: hci0: command tx timeout [ 67.050400][ T5860] Bluetooth: hci3: command tx timeout [ 67.057518][ T49] Bluetooth: hci1: command tx timeout [ 67.061061][ T5860] Bluetooth: hci2: command tx timeout [ 67.084867][ T5846] veth0_vlan: entered promiscuous mode [ 67.110936][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.121975][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.136214][ T5847] veth0_vlan: entered promiscuous mode [ 67.145184][ T5846] veth1_vlan: entered promiscuous mode [ 67.153432][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.167797][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.185472][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.232382][ T5847] veth1_vlan: entered promiscuous mode [ 67.304945][ T5846] veth0_macvtap: entered promiscuous mode [ 67.328341][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.332706][ T5846] veth1_macvtap: entered promiscuous mode [ 67.349562][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.366643][ T5844] veth0_vlan: entered promiscuous mode [ 67.393563][ T5847] veth0_macvtap: entered promiscuous mode [ 67.406203][ T5847] veth1_macvtap: entered promiscuous mode [ 67.415846][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.424313][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.430260][ T5844] veth1_vlan: entered promiscuous mode [ 67.432735][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.459471][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.478300][ T5844] veth0_macvtap: entered promiscuous mode [ 67.479480][ T30] audit: type=1400 audit(1757506225.789:89): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.geRHJt/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.487898][ T5844] veth1_macvtap: entered promiscuous mode [ 67.536338][ T30] audit: type=1400 audit(1757506225.829:90): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.561665][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.572283][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.579650][ T30] audit: type=1400 audit(1757506225.829:91): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.geRHJt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.615241][ T30] audit: type=1400 audit(1757506225.829:92): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.620216][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.654243][ T30] audit: type=1400 audit(1757506225.839:93): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.geRHJt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.658509][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.689769][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.695042][ T30] audit: type=1400 audit(1757506225.839:94): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.geRHJt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.733757][ T30] audit: type=1400 audit(1757506225.849:95): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.741657][ T5853] veth0_vlan: entered promiscuous mode [ 67.758450][ T30] audit: type=1400 audit(1757506225.879:96): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.787780][ T30] audit: type=1400 audit(1757506225.879:97): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="gadgetfs" ino=7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.787870][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.819075][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.834493][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.845672][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.874880][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.883682][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.926840][ T5853] veth1_vlan: entered promiscuous mode [ 67.934433][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.964889][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.974265][ T1160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.994080][ T1160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.002899][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.012758][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.045132][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.067574][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.078232][ T5853] veth0_macvtap: entered promiscuous mode [ 68.102739][ T5853] veth1_macvtap: entered promiscuous mode [ 68.124261][ T5969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.144478][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.148123][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.160873][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.184242][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.229019][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.239231][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.268484][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.281066][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.301893][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.351928][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.381848][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.398977][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.415669][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.423713][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.486071][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.494948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.503620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.512369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.522940][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.770016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.800768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.809029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.914855][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.957547][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.269749][ T5860] Bluetooth: hci2: command tx timeout [ 69.275282][ T5860] Bluetooth: hci0: command tx timeout [ 69.286544][ T5860] Bluetooth: hci1: command tx timeout [ 69.494544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.503607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.558458][ T5860] Bluetooth: hci3: command tx timeout [ 69.562296][ T5851] Bluetooth: hci4: command tx timeout [ 69.569540][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.694573][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.918435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.959080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.884614][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.891169][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.450348][ T92] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.465522][ T6001] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 71.478298][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 71.478312][ T30] audit: type=1400 audit(1757506229.789:132): avc: denied { create } for pid=5992 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.610116][ T5851] Bluetooth: hci4: command tx timeout [ 71.610398][ T5865] Bluetooth: hci3: command tx timeout [ 71.615522][ T5851] Bluetooth: hci1: command tx timeout [ 71.620994][ T5860] Bluetooth: hci0: command tx timeout [ 71.626271][ T5851] Bluetooth: hci2: command tx timeout [ 71.663912][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 71.674022][ T92] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 71.684714][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.179956][ T92] usb 5-1: config 0 descriptor?? [ 72.194015][ T30] audit: type=1400 audit(1757506230.449:133): avc: denied { read write } for pid=5992 comm="syz.1.2" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.374504][ T30] audit: type=1400 audit(1757506230.449:134): avc: denied { open } for pid=5992 comm="syz.1.2" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.641548][ T30] audit: type=1400 audit(1757506230.459:135): avc: denied { mounton } for pid=5992 comm="syz.1.2" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.664152][ T30] audit: type=1400 audit(1757506230.489:136): avc: denied { read } for pid=5992 comm="syz.1.2" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.687974][ T30] audit: type=1400 audit(1757506230.489:137): avc: denied { open } for pid=5992 comm="syz.1.2" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.711638][ T30] audit: type=1400 audit(1757506230.679:138): avc: denied { getopt } for pid=6010 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.841032][ T30] audit: type=1400 audit(1757506230.749:139): avc: denied { read } for pid=6013 comm="syz.2.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.900533][ T30] audit: type=1400 audit(1757506230.749:140): avc: denied { open } for pid=6013 comm="syz.2.11" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.378899][ T6023] lo speed is unknown, defaulting to 1000 [ 73.384933][ T6023] lo speed is unknown, defaulting to 1000 [ 73.395881][ T6023] lo speed is unknown, defaulting to 1000 [ 73.414019][ T6023] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.447217][ T6023] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.420058][ T30] audit: type=1400 audit(1757506230.869:141): avc: denied { ioctl } for pid=6013 comm="syz.2.11" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.526968][ T6023] lo speed is unknown, defaulting to 1000 [ 74.590567][ T6023] lo speed is unknown, defaulting to 1000 [ 74.596969][ T6023] lo speed is unknown, defaulting to 1000 [ 74.619767][ T92] usb 5-1: USB disconnect, device number 2 [ 75.343482][ T6023] lo speed is unknown, defaulting to 1000 [ 75.371619][ T6023] lo speed is unknown, defaulting to 1000 [ 75.720347][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.005798][ T78] cfg80211: failed to load regulatory.db [ 76.106075][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.209704][ T92] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.230303][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.259169][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.284315][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.333656][ T24] usb 1-1: SerialNumber: syz [ 76.383063][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 76.530478][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 76.530491][ T30] audit: type=1400 audit(1757506234.849:161): avc: denied { getattr } for pid=6055 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.570389][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.587327][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.799962][ T24] usb 1-1: 0:2 : does not exist [ 76.805220][ T24] usb 1-1: unit 5: unexpected type 0x0d [ 76.992463][ T92] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 77.000555][ T78] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.041370][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.088128][ T92] usb 5-1: config 0 descriptor?? [ 77.089090][ T24] usb 1-1: USB disconnect, device number 2 [ 77.152928][ T30] audit: type=1400 audit(1757506235.459:162): avc: denied { read } for pid=6062 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.232142][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 77.235648][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.257852][ T78] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 77.277010][ T30] audit: type=1400 audit(1757506235.459:163): avc: denied { open } for pid=6062 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.307898][ T78] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.359264][ T78] usb 4-1: config 0 descriptor?? [ 77.417143][ T30] audit: type=1400 audit(1757506235.699:164): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 77.540359][ T30] audit: type=1400 audit(1757506235.849:165): avc: denied { setopt } for pid=6065 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.564661][ T30] audit: type=1400 audit(1757506235.879:166): avc: denied { setopt } for pid=6065 comm="syz.1.17" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.668824][ T30] audit: type=1400 audit(1757506235.949:167): avc: denied { setopt } for pid=6065 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.707370][ T30] audit: type=1400 audit(1757506235.949:168): avc: denied { write } for pid=6065 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.727656][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.753022][ T30] audit: type=1400 audit(1757506236.069:169): avc: denied { create } for pid=6054 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.775641][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.784280][ T30] audit: type=1400 audit(1757506236.069:170): avc: denied { write } for pid=6054 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.dhcp" dev="tmpfs" ino=2017 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.810544][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.825473][ T6072] Zero length message leads to an empty skb [ 77.834851][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 78.396662][ T10] usb 5-1: USB disconnect, device number 3 [ 78.969809][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.998292][ T6081] syz.0.18 (6081): drop_caches: 2 [ 79.149733][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 79.183338][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 79.216306][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.228765][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.434886][ T24] usb 4-1: USB disconnect, device number 2 [ 80.617695][ T979] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.791458][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 80.931032][ T979] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 80.948581][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.068472][ T979] usb 3-1: config 0 descriptor?? [ 81.235222][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.287070][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 82.304813][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 82.323438][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.673765][ T6099] Set syz1 is full, maxelem 65536 reached [ 82.711722][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 82.711735][ T30] audit: type=1400 audit(1757506241.029:187): avc: denied { write } for pid=6104 comm="syz.1.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.750518][ T24] usb 4-1: config 0 descriptor?? [ 82.766857][ T5917] usb 3-1: USB disconnect, device number 2 [ 83.063182][ T979] usb 4-1: USB disconnect, device number 3 [ 84.210511][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.233136][ T10] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 84.243046][ T10] usb 5-1: chopping to 0 config(s) [ 84.259804][ T10] usb 5-1: can't read configurations, error -32 [ 84.304250][ T30] audit: type=1400 audit(1757506242.579:188): avc: denied { connect } for pid=6104 comm="syz.1.25" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.396277][ T30] audit: type=1400 audit(1757506242.589:189): avc: denied { read } for pid=6104 comm="syz.1.25" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.821802][ T30] audit: type=1400 audit(1757506242.589:190): avc: denied { open } for pid=6104 comm="syz.1.25" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.916646][ T30] audit: type=1400 audit(1757506242.619:191): avc: denied { ioctl } for pid=6104 comm="syz.1.25" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.943114][ T30] audit: type=1400 audit(1757506242.659:192): avc: denied { write } for pid=6104 comm="syz.1.25" path="socket:[8824]" dev="sockfs" ino=8824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.982608][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.060179][ T979] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.321677][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 85.349658][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.526961][ T6130] netlink: 68 bytes leftover after parsing attributes in process `syz.2.31'. [ 85.559738][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 85.758216][ T979] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 85.773962][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.789735][ T979] usb 4-1: config 0 descriptor?? [ 85.799633][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.813927][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.823979][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.837210][ T24] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 85.848023][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.882745][ T24] usb 1-1: config 0 descriptor?? [ 86.525150][ T24] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 86.534730][ T24] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 86.543900][ T24] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 86.550894][ T24] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 86.573299][ T24] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 86.581395][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.616357][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 86.640238][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.658211][ T30] audit: type=1400 audit(1757506244.969:193): avc: denied { read } for pid=5206 comm="acpid" name="event4" dev="devtmpfs" ino=2807 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.692913][ T24] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 86.714029][ T24] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 86.801704][ T6135] mmap: syz.2.32 (6135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.818594][ T5967] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 86.831745][ T24] usb 1-1: USB disconnect, device number 3 [ 86.853902][ T5967] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 86.877755][ T5967] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 86.903674][ T5967] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 87.009737][ T30] audit: type=1400 audit(1757506244.969:194): avc: denied { open } for pid=5206 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2807 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.042623][ T30] audit: type=1400 audit(1757506244.969:195): avc: denied { ioctl } for pid=5206 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2807 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.087537][ T10] usb 4-1: USB disconnect, device number 4 [ 87.112394][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.179671][ T30] audit: type=1400 audit(1757506245.049:196): avc: denied { create } for pid=6131 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.727518][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.215680][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 88.215700][ T30] audit: type=1400 audit(1757506246.139:211): avc: denied { create } for pid=6142 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.390017][ T6144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.412388][ T30] audit: type=1400 audit(1757506246.149:212): avc: denied { connect } for pid=6142 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.038352][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 89.057604][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.152233][ T30] audit: type=1400 audit(1757506247.469:213): avc: denied { create } for pid=6153 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.211078][ T24] usb 3-1: Product: syz [ 91.089672][ T30] audit: type=1400 audit(1757506247.509:214): avc: denied { ioctl } for pid=6139 comm="syz.0.34" path="socket:[9348]" dev="sockfs" ino=9348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.114301][ T24] usb 3-1: Manufacturer: syz [ 91.118878][ T24] usb 3-1: SerialNumber: syz [ 91.130136][ T30] audit: type=1400 audit(1757506247.519:215): avc: denied { ioctl } for pid=6139 comm="syz.0.34" path="socket:[8855]" dev="sockfs" ino=8855 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.154835][ T30] audit: type=1400 audit(1757506247.529:216): avc: denied { ioctl } for pid=6139 comm="syz.0.34" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8867 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.257963][ T24] usb 3-1: config 0 descriptor?? [ 91.279708][ T24] usb 3-1: can't set config #0, error -71 [ 91.296742][ T30] audit: type=1400 audit(1757506249.609:217): avc: denied { create } for pid=6158 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.654474][ T24] usb 3-1: USB disconnect, device number 3 [ 91.731590][ T30] audit: type=1400 audit(1757506249.609:218): avc: denied { setopt } for pid=6158 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.759658][ T30] audit: type=1400 audit(1757506249.779:219): avc: denied { connect } for pid=6158 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.840273][ T6174] lo speed is unknown, defaulting to 1000 [ 92.929689][ T979] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 93.648146][ T979] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 93.657367][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.666685][ T979] usb 5-1: Product: syz [ 93.670872][ T979] usb 5-1: Manufacturer: syz [ 93.675464][ T979] usb 5-1: SerialNumber: syz [ 93.681568][ T30] audit: type=1400 audit(1757506251.579:220): avc: denied { create } for pid=6177 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.701393][ T30] audit: type=1400 audit(1757506251.599:221): avc: denied { getopt } for pid=6177 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.769561][ T979] usb 5-1: config 0 descriptor?? [ 93.813029][ T979] gspca_main: sq930x-2.14.0 probing 2770:930c [ 94.112676][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.151371][ T5851] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 94.460105][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 94.474694][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.524478][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.690593][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 95.218408][ T979] gspca_sq930x: ucbus_write failed -110 [ 95.232918][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.240155][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 95.281674][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.359389][ T10] usb 1-1: config 0 descriptor?? [ 95.431159][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 95.439653][ T979] gspca_sq930x: Sensor ov9630 not yet treated [ 95.446956][ T979] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 95.498131][ T5852] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 95.553785][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.724014][ T5852] usb 3-1: config 0 descriptor?? [ 96.038307][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 96.058521][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 96.363188][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.979393][ T6193] Set syz1 is full, maxelem 65536 reached [ 97.011821][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 97.053006][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.084125][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 97.150392][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 97.152912][ T30] audit: type=1400 audit(1757506255.469:222): avc: denied { setopt } for pid=6197 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.179655][ T6198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.190889][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 97.240451][ T30] audit: type=1400 audit(1757506255.469:223): avc: denied { create } for pid=6197 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.276238][ T30] audit: type=1400 audit(1757506255.489:224): avc: denied { write } for pid=6197 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.276278][ T30] audit: type=1400 audit(1757506255.549:225): avc: denied { bind } for pid=6197 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.276311][ T30] audit: type=1400 audit(1757506255.549:226): avc: denied { connect } for pid=6197 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.276345][ T30] audit: type=1400 audit(1757506255.559:227): avc: denied { ioctl } for pid=6197 comm="syz.1.47" path="socket:[9397]" dev="sockfs" ino=9397 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.276382][ T30] audit: type=1400 audit(1757506255.579:228): avc: denied { write } for pid=6197 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.301498][ T30] audit: type=1400 audit(1757506255.609:229): avc: denied { name_connect } for pid=6199 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 97.311888][ T10] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 97.503624][ T10] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 97.554823][ T24] usb 5-1: USB disconnect, device number 6 [ 97.573559][ T5917] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 97.586861][ T10] usb 1-1: USB disconnect, device number 4 [ 97.598919][ T5917] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 97.628025][ T5917] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 97.682320][ T5917] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 98.249632][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 98.326560][ T78] usb 3-1: USB disconnect, device number 4 [ 98.501806][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.939711][ T78] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.952239][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.051078][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.135836][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.152796][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 99.184188][ T78] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 99.223516][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.345300][ T78] usb 3-1: config 0 descriptor?? [ 99.364409][ T10] usb 1-1: usb_control_msg returned -32 [ 99.392125][ T10] usbtmc 1-1:16.0: can't read capabilities [ 99.517461][ T6204] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 99.724743][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 99.724758][ T30] audit: type=1400 audit(1757506258.039:233): avc: denied { write } for pid=6210 comm="syz.0.51" name="usbtmc0" dev="devtmpfs" ino=2829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.872884][ T30] audit: type=1400 audit(1757506258.189:234): avc: denied { write } for pid=6228 comm="syz.3.53" name="igmp" dev="proc" ino=4026532870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 100.275989][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.303403][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.348101][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.359378][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.546641][ T6244] netlink: 56 bytes leftover after parsing attributes in process `syz.4.55'. [ 100.591169][ T30] audit: type=1400 audit(1757506258.569:235): avc: denied { shutdown } for pid=6228 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.701443][ T30] audit: type=1400 audit(1757506258.739:236): avc: denied { prog_run } for pid=6210 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.079780][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 103.279688][ T24] usb 3-1: USB disconnect, device number 5 [ 104.029977][ T30] audit: type=1400 audit(1757506262.329:237): avc: denied { append } for pid=6254 comm="syz.2.58" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.091085][ T30] audit: type=1400 audit(1757506262.339:238): avc: denied { open } for pid=6254 comm="syz.2.58" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.126449][ T5852] usb 1-1: USB disconnect, device number 5 [ 104.160168][ T30] audit: type=1400 audit(1757506262.379:239): avc: denied { ioctl } for pid=6254 comm="syz.2.58" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.353628][ T6267] netlink: 56 bytes leftover after parsing attributes in process `syz.3.60'. [ 105.059638][ T5852] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.150732][ T5865] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 105.793977][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 106.169897][ T5852] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 106.282809][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.370479][ T5852] usb 1-1: config 0 descriptor?? [ 108.589200][ T5967] usb 1-1: USB disconnect, device number 6 [ 108.634217][ T6316] Set syz1 is full, maxelem 65536 reached [ 108.899931][ T5852] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.563053][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 109.708359][ T5852] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 109.835866][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.406011][ T5852] usb 4-1: config 0 descriptor?? [ 111.953151][ T979] usb 4-1: USB disconnect, device number 5 [ 111.999738][ T30] audit: type=1400 audit(1757506270.299:240): avc: denied { create } for pid=6339 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.371472][ T30] audit: type=1400 audit(1757506270.679:241): avc: denied { getopt } for pid=6342 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.077392][ T30] audit: type=1400 audit(1757506271.359:242): avc: denied { read write } for pid=6342 comm="syz.3.71" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 113.132621][ T5967] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.359854][ T30] audit: type=1400 audit(1757506271.359:243): avc: denied { open } for pid=6342 comm="syz.3.71" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 113.392751][ T5967] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 113.401096][ T5967] usb 5-1: config 0 has no interface number 1 [ 113.407192][ T5967] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 113.507020][ T5967] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.520121][ T5967] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 113.532314][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.547741][ T5967] usb 5-1: SerialNumber: syz [ 113.592802][ T5967] usb 5-1: config 0 descriptor?? [ 113.869307][ T6349] Invalid ELF header len 14 [ 113.879787][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.888262][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.902832][ T30] audit: type=1400 audit(1757506272.179:244): avc: denied { sys_module } for pid=6347 comm="syz.4.72" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.056312][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.080280][ T30] audit: type=1400 audit(1757506272.179:245): avc: denied { module_load } for pid=6347 comm="syz.4.72" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 114.140017][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.931529][ T5967] usb 5-1: Found UVC 0.00 device (0002:0000) [ 114.968374][ T78] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.981048][ T5967] usb 5-1: No valid video chain found. [ 115.008732][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'. [ 115.219927][ T5967] usb 5-1: USB disconnect, device number 7 [ 115.229669][ T78] usb 2-1: Using ep0 maxpacket: 16 [ 115.240008][ T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.269683][ T78] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.337791][ T78] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.413612][ T78] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 115.488951][ T78] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.584443][ T78] usb 2-1: config 0 descriptor?? [ 115.824424][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.847487][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.937944][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.967399][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.115002][ T78] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 116.171790][ T78] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 116.668810][ T78] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 116.675991][ T78] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 116.683126][ T78] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 116.755115][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.787996][ T78] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 116.796891][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.539627][ T78] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 117.581801][ T78] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 117.671081][ T5852] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 117.685514][ T78] usb 2-1: USB disconnect, device number 2 [ 117.709698][ T5852] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 117.770197][ T5852] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.408457][ T5852] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.999724][ T78] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.279754][ T78] usb 1-1: Using ep0 maxpacket: 16 [ 119.343460][ T78] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.380735][ T78] usb 1-1: config 2 has an invalid interface number: 215 but max is 0 [ 119.508190][ T78] usb 1-1: config 2 has no interface number 0 [ 119.558678][ T78] usb 1-1: config 2 interface 215 has no altsetting 0 [ 119.694129][ T78] usb 1-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=31.66 [ 120.555695][ T78] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.817098][ T78] usb 1-1: Product: syz [ 121.472940][ T78] usb 1-1: Manufacturer: syz [ 121.561849][ T78] usb 1-1: SerialNumber: syz [ 121.909802][ T78] usb 1-1: USB disconnect, device number 7 [ 122.365297][ T30] audit: type=1400 audit(1757506280.679:246): avc: denied { bind } for pid=6485 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.365532][ T6486] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 122.391053][ T6486] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.604024][ T6502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.94'. [ 123.611922][ T30] audit: type=1400 audit(1757506281.919:247): avc: denied { nlmsg_write } for pid=6500 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.615819][ T6502] unsupported nlmsg_type 40 [ 124.035027][ T5917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.261092][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 124.279462][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 124.316732][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.352721][ T5917] usb 3-1: config 0 descriptor?? [ 124.549881][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.794950][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 124.822864][ T24] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 124.838580][ T24] usb 1-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 124.849682][ T24] usb 1-1: config 0 has no interface number 0 [ 124.856666][ T24] usb 1-1: too many endpoints for config 0 interface 39 altsetting 221: 155, using maximum allowed: 30 [ 124.859992][ T5917] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.869352][ T24] usb 1-1: config 0 interface 39 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 155 [ 124.933809][ T24] usb 1-1: config 0 interface 39 has no altsetting 0 [ 124.966736][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 124.980231][ T24] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 124.988222][ T24] usb 1-1: Product: syz [ 124.995435][ T24] usb 1-1: Manufacturer: syz [ 125.010247][ T24] usb 1-1: config 0 descriptor?? [ 125.041980][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 125.057924][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.128532][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.146254][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 125.164650][ T5917] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 125.184383][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.219267][ T5917] usb 4-1: config 0 descriptor?? [ 125.252403][ T5865] Bluetooth: Unexpected start frame (len 12) [ 125.326476][ T30] audit: type=1400 audit(1757506283.639:248): avc: denied { mounton } for pid=6500 comm="syz.0.94" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 125.326487][ T6534] tmpfs: Bad value for 'huge' [ 125.416179][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.437143][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.696209][ T5917] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.709539][ T5917] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.722241][ T5917] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.758281][ T5917] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.789703][ T5917] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 125.844651][ T5917] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 125.877693][ T24] usb 1-1: USB disconnect, device number 8 [ 125.895473][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.986721][ T979] usb 3-1: USB disconnect, device number 6 [ 126.077779][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.220523][ T5917] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 126.251055][ T6511] netlink: 244 bytes leftover after parsing attributes in process `syz.3.96'. [ 126.359533][ T5917] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 126.473940][ T92] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 126.492978][ T5917] usb 4-1: USB disconnect, device number 6 [ 126.549808][ T92] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 126.618449][ T92] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 126.660134][ T92] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 126.945487][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 126.961993][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.104'. [ 127.008851][ T6561] geneve2: entered promiscuous mode [ 127.097871][ T6561] geneve2: entered allmulticast mode [ 127.195949][ T30] audit: type=1400 audit(1757506285.509:249): avc: denied { name_bind } for pid=6565 comm="syz.0.106" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 127.276566][ T30] audit: type=1400 audit(1757506285.509:250): avc: denied { node_bind } for pid=6565 comm="syz.0.106" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 128.052208][ T6577] lo speed is unknown, defaulting to 1000 [ 128.062037][ T30] audit: type=1400 audit(1757506285.879:251): avc: denied { watch watch_reads } for pid=6565 comm="syz.0.106" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.360700][ T5852] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.686650][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 128.704297][ T5852] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 128.733475][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.752950][ T5852] usb 4-1: config 0 descriptor?? [ 129.225743][ T30] audit: type=1400 audit(1757506287.539:252): avc: denied { create } for pid=6593 comm="syz.1.109" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.547862][ T30] audit: type=1400 audit(1757506287.539:253): avc: denied { read } for pid=6593 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.583262][ T30] audit: type=1400 audit(1757506287.839:254): avc: denied { unlink } for pid=5847 comm="syz-executor" name="file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.494564][ T5852] usb 4-1: USB disconnect, device number 7 [ 130.990064][ T6621] kAFS: No cell specified [ 132.153680][ T30] audit: type=1400 audit(1757506290.459:255): avc: denied { ioctl } for pid=6631 comm="syz.0.117" path="socket:[10565]" dev="sockfs" ino=10565 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.840876][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847173][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.947384][ T6642] netlink: 56 bytes leftover after parsing attributes in process `syz.3.119'. [ 133.456453][ T30] audit: type=1400 audit(1757506291.759:256): avc: denied { name_bind } for pid=6654 comm="syz.1.123" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 134.186888][ T30] audit: type=1400 audit(1757506292.499:257): avc: denied { mount } for pid=6660 comm="syz.0.125" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 136.930742][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.179737][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 137.190285][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.219662][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.270314][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.333704][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 137.705508][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.726423][ T10] usb 5-1: config 0 descriptor?? [ 137.999742][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.571496][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.712891][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 138.995567][ T6671] Set syz1 is full, maxelem 65536 reached [ 139.068259][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 139.069624][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 139.089985][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.114502][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 139.131554][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.140441][ T6694] netlink: 244 bytes leftover after parsing attributes in process `syz.4.131'. [ 139.151891][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 139.158845][ T10] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 139.176760][ T24] usb 4-1: config 179 has no interface number 0 [ 139.224895][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 139.226821][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 139.349681][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 139.379474][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 139.399781][ T24] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 139.414978][ T24] usb 4-1: config 179 interface 65 has no altsetting 0 [ 139.422312][ T10] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 139.467356][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 139.481309][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.529040][ T10] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 139.666789][ T5904] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 139.693836][ T10] usb 5-1: USB disconnect, device number 8 [ 139.703673][ T5904] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 139.721297][ T5904] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 139.857546][ T5904] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 139.911475][ T24] usb 4-1: USB disconnect, device number 8 [ 140.465868][ T30] audit: type=1400 audit(1757506298.779:258): avc: denied { read write } for pid=6729 comm="syz.0.138" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.570830][ T30] audit: type=1400 audit(1757506298.779:259): avc: denied { open } for pid=6729 comm="syz.0.138" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.697577][ T30] audit: type=1400 audit(1757506298.809:260): avc: denied { ioctl } for pid=6729 comm="syz.0.138" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.785320][ T30] audit: type=1400 audit(1757506298.809:261): avc: denied { write } for pid=6729 comm="syz.0.138" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.862205][ T30] audit: type=1400 audit(1757506298.809:262): avc: denied { open } for pid=6729 comm="syz.0.138" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.417785][ T30] audit: type=1400 audit(1757506298.809:263): avc: denied { ioctl } for pid=6729 comm="syz.0.138" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.452420][ T30] audit: type=1400 audit(1757506298.819:264): avc: denied { create } for pid=6729 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.594403][ T5865] Bluetooth: Unexpected start frame (len 12) [ 142.329742][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 142.696074][ T6749] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 142.715938][ T24] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 142.739927][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.763884][ T30] audit: type=1400 audit(1757506301.069:265): avc: denied { connect } for pid=6748 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 142.801723][ T24] usb 3-1: Product: syz [ 142.805886][ T24] usb 3-1: Manufacturer: syz [ 142.829936][ T24] usb 3-1: SerialNumber: syz [ 142.909975][ T24] usb 3-1: config 0 descriptor?? [ 142.996132][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 144.829605][ T24] gspca_sq930x: reg_w 0105 0c00 failed -110 [ 145.919611][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 146.524379][ T24] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 146.670602][ T30] audit: type=1400 audit(1757506304.959:266): avc: denied { mount } for pid=6782 comm="syz.0.149" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.778193][ T30] audit: type=1400 audit(1757506304.969:267): avc: denied { ioctl } for pid=6782 comm="syz.0.149" path="socket:[10825]" dev="sockfs" ino=10825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.813881][ T24] usb 3-1: USB disconnect, device number 7 [ 150.901640][ T5967] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.021502][ T30] audit: type=1400 audit(1757506309.329:268): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.070137][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 151.092697][ T5967] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 151.116559][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.183552][ T5967] usb 3-1: config 0 descriptor?? [ 151.944610][ T6842] 9pnet_fd: Insufficient options for proto=fd [ 151.966590][ T30] audit: type=1400 audit(1757506310.269:269): avc: denied { ioctl } for pid=6822 comm="syz.1.156" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.782639][ T6853] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 152.823818][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.901751][ T6853] bond0: (slave team0): Enslaving as an active interface with an up link [ 153.002346][ T30] audit: type=1400 audit(1757506311.319:270): avc: denied { create } for pid=6861 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.092120][ T30] audit: type=1400 audit(1757506311.339:271): avc: denied { listen } for pid=6861 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.196647][ T30] audit: type=1400 audit(1757506311.439:272): avc: denied { mounton } for pid=6865 comm="syz.4.161" path="/25/file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.240711][ T6873] syz_tun: entered allmulticast mode [ 153.340714][ T10] usb 3-1: USB disconnect, device number 8 [ 153.356363][ T30] audit: type=1400 audit(1757506311.549:273): avc: denied { mounton } for pid=6865 comm="syz.4.161" path="/25/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 153.449204][ T6873] netlink: 'syz.0.162': attribute type 2 has an invalid length. [ 153.469291][ T30] audit: type=1400 audit(1757506311.719:274): avc: denied { create } for pid=6865 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 154.041346][ T30] audit: type=1400 audit(1757506311.719:275): avc: denied { getopt } for pid=6865 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 154.063400][ T6862] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 155.480919][ T6862] team0: Port device dummy0 added [ 155.491392][ T6861] syz_tun: left allmulticast mode [ 155.600302][ T5865] Bluetooth: Unexpected start frame (len 12) [ 156.410259][ T30] audit: type=1400 audit(1757506314.729:276): avc: denied { create } for pid=6895 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 156.484286][ T30] audit: type=1400 audit(1757506314.799:277): avc: denied { getopt } for pid=6895 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 156.584033][ T30] audit: type=1400 audit(1757506314.889:278): avc: denied { read write } for pid=6895 comm="syz.4.167" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.829721][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.054920][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 157.067272][ T24] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 157.075805][ T24] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 157.091804][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.610684][ T24] usb 5-1: config 0 has no interface number 0 [ 157.629233][ T24] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 157.649214][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.674507][ T24] usb 5-1: Product: syz [ 157.678683][ T24] usb 5-1: Manufacturer: syz [ 157.685331][ T24] usb 5-1: SerialNumber: syz [ 157.704254][ T24] usb 5-1: config 0 descriptor?? [ 157.725438][ T24] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 158.097341][ T979] usb 5-1: USB disconnect, device number 9 [ 160.919639][ T5904] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.030679][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 161.030689][ T30] audit: type=1400 audit(1757506319.329:281): avc: denied { create } for pid=6946 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.429768][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 161.444012][ T5904] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 161.456374][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.468468][ T5904] usb 5-1: config 0 has no interface number 0 [ 161.477086][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 161.486273][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.497453][ T5904] usb 5-1: Product: syz [ 161.501697][ T5904] usb 5-1: Manufacturer: syz [ 161.506371][ T5904] usb 5-1: SerialNumber: syz [ 161.527045][ T5904] usb 5-1: config 0 descriptor?? [ 162.071039][ T30] audit: type=1400 audit(1757506320.369:282): avc: denied { ioctl } for pid=6936 comm="syz.4.176" path="socket:[11542]" dev="sockfs" ino=11542 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.315157][ T5904] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 162.491403][ T5904] usb 5-1: No valid video chain found. [ 162.517948][ T5904] usb 5-1: USB disconnect, device number 10 [ 163.246947][ T30] audit: type=1400 audit(1757506321.429:283): avc: denied { setopt } for pid=6979 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.257102][ T979] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.559660][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 163.566937][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.582145][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.792187][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 163.847143][ T979] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 163.877194][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.888033][ T6986] ALSA: mixer_oss: invalid OSS volume '' [ 163.915382][ T6986] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 163.949268][ T979] usb 3-1: config 0 descriptor?? [ 163.975789][ T6986] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 165.189750][ T5917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.363242][ T6986] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 165.371815][ T6970] netlink: 244 bytes leftover after parsing attributes in process `syz.2.180'. [ 165.390333][ T6986] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 165.415698][ T979] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 165.450817][ T979] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 165.532359][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 165.547942][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.570063][ T7022] kAFS: No cell specified [ 165.575192][ T10] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 165.588493][ T979] usb 3-1: USB disconnect, device number 9 [ 165.654254][ T10] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 165.958361][ T5917] usb 1-1: config 0 has no interfaces? [ 165.967394][ T5917] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.977037][ T10] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 166.009894][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.028093][ T10] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 166.070714][ T5917] usb 1-1: config 0 descriptor?? [ 166.251120][ T5904] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.591590][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 166.660128][ T5904] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 166.801514][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.958460][ T5904] usb 4-1: config 0 descriptor?? [ 167.211975][ T5904] input: USB Touchscreen 0eef:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 167.431736][ T7020] debugfs: 'ttyS3' already exists in 'caif_serial' [ 167.520109][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.641671][ T5904] usb 1-1: USB disconnect, device number 9 [ 167.686748][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 167.805532][ T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 167.830031][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.009119][ T24] usb 3-1: config 0 has no interface number 0 [ 168.067996][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 168.093935][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.126316][ T24] usb 3-1: Product: syz [ 168.220039][ T24] usb 3-1: Manufacturer: syz [ 168.260340][ T24] usb 3-1: SerialNumber: syz [ 168.581594][ T24] usb 3-1: config 0 descriptor?? [ 169.935989][ T24] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 169.947276][ T24] usb 3-1: No valid video chain found. [ 169.957011][ T24] usb 3-1: USB disconnect, device number 10 [ 170.332261][ T5917] usb 4-1: USB disconnect, device number 9 [ 171.703236][ T7088] kAFS: No cell specified [ 172.944326][ T30] audit: type=1326 audit(1757506331.259:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.2.204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb245f8eba9 code=0x0 [ 173.019439][ T30] audit: type=1400 audit(1757506331.299:285): avc: denied { append } for pid=7110 comm="syz.4.207" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.089715][ T5917] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 174.361192][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 174.389772][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 174.412897][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.431889][ T5917] usb 2-1: config 0 descriptor?? [ 174.531151][ T30] audit: type=1400 audit(1757506332.849:286): avc: denied { bind } for pid=7138 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.574699][ T5852] IPVS: starting estimator thread 0... [ 174.608817][ T30] audit: type=1400 audit(1757506332.849:287): avc: denied { node_bind } for pid=7138 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 174.629030][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.699801][ T7142] IPVS: using max 45 ests per chain, 108000 per kthread [ 174.776906][ T30] audit: type=1400 audit(1757506332.869:288): avc: denied { setattr } for pid=7138 comm="syz.2.213" name="L2TP/IPv6" dev="sockfs" ino=11763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.829634][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 174.841160][ T24] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 174.856381][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.869731][ T24] usb 5-1: config 0 has no interface number 0 [ 174.878715][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 174.887880][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.895985][ T24] usb 5-1: Product: syz [ 174.900279][ T24] usb 5-1: Manufacturer: syz [ 174.905442][ T24] usb 5-1: SerialNumber: syz [ 174.913106][ T24] usb 5-1: config 0 descriptor?? [ 174.938815][ T7151] bond1: entered allmulticast mode [ 175.107326][ T7151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.146253][ T7151] bridge0: port 3(bond1) entered blocking state [ 175.176364][ T7151] bridge0: port 3(bond1) entered disabled state [ 175.208077][ T7151] bond1: entered promiscuous mode [ 175.232699][ T7151] bridge0: port 3(bond1) entered blocking state [ 175.239219][ T7151] bridge0: port 3(bond1) entered forwarding state [ 175.423374][ T7173] kAFS: No cell specified [ 175.474505][ T1144] bridge0: port 3(bond1) entered disabled state [ 175.491845][ T24] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 175.874265][ T24] usb 5-1: No valid video chain found. [ 175.903725][ T24] usb 5-1: USB disconnect, device number 11 [ 175.936712][ T7180] capability: warning: `syz.3.218' uses 32-bit capabilities (legacy support in use) [ 176.663465][ T5917] usb 2-1: USB disconnect, device number 3 [ 176.781323][ T30] audit: type=1400 audit(1757506335.089:289): avc: denied { create } for pid=7194 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.812751][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.090160][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 177.122062][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.187391][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.250475][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.469084][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 177.579727][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.725310][ T24] usb 5-1: config 0 descriptor?? [ 177.927312][ T30] audit: type=1400 audit(1757506336.239:290): avc: denied { setopt } for pid=7227 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.183981][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 178.233577][ T7241] kAFS: No cell specified [ 178.251739][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 178.365540][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 178.405574][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.638512][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.664252][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 178.678210][ T24] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 178.720740][ T7189] netlink: 'syz.4.220': attribute type 2 has an invalid length. [ 178.721212][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 178.833967][ T24] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 178.846953][ T24] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 178.893545][ T7189] netlink: 244 bytes leftover after parsing attributes in process `syz.4.220'. [ 178.969881][ T5852] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 178.983666][ T78] usb 5-1: USB disconnect, device number 12 [ 179.018101][ T5852] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 179.073647][ T5852] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 179.108348][ T5852] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 182.991270][ T7305] bridge_slave_0: left allmulticast mode [ 182.999005][ T7305] bridge_slave_0: left promiscuous mode [ 183.040622][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.252445][ T7305] bridge_slave_1: left allmulticast mode [ 183.274087][ T7305] bridge_slave_1: left promiscuous mode [ 183.304534][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.381563][ T7305] bond0: (slave bond_slave_0): Releasing backup interface [ 183.447230][ T7305] bond0: (slave bond_slave_1): Releasing backup interface [ 183.688437][ T7305] team0: Port device team_slave_0 removed [ 183.756142][ T7333] kAFS: No cell specified [ 183.803380][ T7305] team0: Port device team_slave_1 removed [ 185.605950][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 185.605956][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 185.605992][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 185.627415][ T5172] Bluetooth: hci4: command 0x0406 tx timeout [ 188.253960][ T979] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.419673][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 188.503108][ T979] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 188.540184][ T7406] kAFS: No cell specified [ 188.589718][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.626009][ T979] usb 2-1: config 0 has no interface number 0 [ 188.637809][ T979] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 188.678212][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.686701][ T979] usb 2-1: Product: syz [ 188.691922][ T979] usb 2-1: Manufacturer: syz [ 188.696654][ T979] usb 2-1: SerialNumber: syz [ 188.714919][ T979] usb 2-1: config 0 descriptor?? [ 188.716752][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 188.911492][ T30] audit: type=1400 audit(1757506347.219:291): avc: denied { create } for pid=7410 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.034583][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 189.063212][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.071572][ T30] audit: type=1400 audit(1757506347.229:292): avc: denied { setopt } for pid=7410 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.096231][ T24] usb 3-1: config 6 has an invalid interface number: 194 but max is 0 [ 189.107832][ T24] usb 3-1: config 6 has no interface number 0 [ 189.114338][ T24] usb 3-1: config 6 interface 194 has no altsetting 0 [ 189.127302][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00 [ 189.136460][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.144497][ T24] usb 3-1: Product: syz [ 189.155634][ T24] usb 3-1: Manufacturer: syz [ 189.165753][ T24] usb 3-1: SerialNumber: syz [ 189.199008][ T7414] ip6gre1: entered allmulticast mode [ 189.502022][ T30] audit: type=1400 audit(1757506347.769:293): avc: denied { unlink } for pid=7401 comm="syz.2.258" name="#1" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.548303][ T30] audit: type=1400 audit(1757506347.809:294): avc: denied { mount } for pid=7401 comm="syz.2.258" name="/" dev="overlay" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 190.456666][ T7434] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.463412][ T7434] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 191.100521][ T5904] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 191.292588][ T5904] usb 1-1: config 4 has an invalid interface number: 156 but max is 0 [ 191.305812][ T5904] usb 1-1: config 4 has no interface number 0 [ 191.327692][ T5904] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 191.338818][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.374128][ T5904] usb 1-1: Product: syz [ 191.387126][ T5904] usb 1-1: Manufacturer: syz [ 191.413100][ T5904] usb 1-1: SerialNumber: syz [ 191.509837][ T979] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 191.557958][ T5904] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 191.571544][ T979] usb 2-1: No valid video chain found. [ 191.630100][ T5904] usb 1-1: setting power ON [ 191.634923][ T5904] dvb-usb: bulk message failed: -22 (2/0) [ 191.648692][ T979] usb 2-1: USB disconnect, device number 4 [ 191.757579][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.772636][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.811695][ T5904] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 191.885159][ T5904] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 191.905688][ T5904] dvb_usb_cxusb 1-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 191.919194][ T5904] usb 1-1: USB disconnect, device number 10 [ 192.044451][ T24] ftdi_sio 3-1:6.194: FTDI USB Serial Device converter detected [ 192.155971][ T30] audit: type=1400 audit(1757506350.439:295): avc: denied { read } for pid=7462 comm="syz.2.271" path="socket:[13218]" dev="sockfs" ino=13218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.206728][ T24] usb 3-1: Detected FT233HP [ 192.272710][ T30] audit: type=1400 audit(1757506350.449:296): avc: denied { ioctl } for pid=7462 comm="syz.2.271" path="socket:[13221]" dev="sockfs" ino=13221 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 192.279111][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 192.438084][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 192.540120][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 192.611129][ T24] usb 3-1: USB disconnect, device number 11 [ 193.230478][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 193.268860][ T24] ftdi_sio 3-1:6.194: device disconnected [ 193.772364][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.778709][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.871829][ T78] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 195.149638][ T5904] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 195.302052][ T5904] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 195.317223][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.361602][ T5904] usb 5-1: config 0 descriptor?? [ 299.659517][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 299.666135][ C1] rcu: 1-...!: (1 GPs behind) idle=4efc/1/0x4000000000000000 softirq=29493/29494 fqs=200 [ 299.676554][ C1] rcu: (t=10502 jiffies g=16973 q=3854 ncpus=2) [ 299.682857][ C1] rcu: rcu_preempt kthread starved for 10098 jiffies! g16973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 299.694019][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 299.703967][ C1] rcu: RCU grace-period kthread stack dump: [ 299.709830][ C1] task:rcu_preempt state:R running task stack:27512 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 299.723298][ C1] Call Trace: [ 299.726548][ C1] [ 299.729459][ C1] __schedule+0x1190/0x5de0 [ 299.733958][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 299.738892][ C1] ? __pfx___schedule+0x10/0x10 [ 299.743734][ C1] ? find_held_lock+0x2b/0x80 [ 299.748387][ C1] ? schedule+0x2d7/0x3a0 [ 299.752691][ C1] schedule+0xe7/0x3a0 [ 299.756738][ C1] schedule_timeout+0x123/0x290 [ 299.761650][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 299.767003][ C1] ? __pfx_process_timeout+0x10/0x10 [ 299.772281][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 299.778068][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 299.783520][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 299.788435][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 299.793699][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.798886][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 299.803794][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 299.808634][ C1] rcu_gp_kthread+0x270/0x380 [ 299.813294][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.818468][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.823242][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.828417][ C1] ? __kthread_parkme+0x19e/0x250 [ 299.833426][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.838601][ C1] kthread+0x3c2/0x780 [ 299.842637][ C1] ? __pfx_kthread+0x10/0x10 [ 299.847209][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.851954][ C1] ? __pfx_kthread+0x10/0x10 [ 299.856512][ C1] ret_from_fork+0x5d4/0x6f0 [ 299.861086][ C1] ? __pfx_kthread+0x10/0x10 [ 299.865659][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.870403][ C1] [ 299.873404][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 299.879705][ C1] Sending NMI from CPU 1 to CPUs 0: [ 299.884878][ C0] NMI backtrace for cpu 0 [ 299.884890][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 299.884904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 299.884911][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 299.884927][ C0] Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 299.884939][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000046 [ 299.884949][ C0] RAX: 0000000080010001 RBX: ffff8880b8423a00 RCX: ffffffff81684738 [ 299.884957][ C0] RDX: ffffffff8e2977c0 RSI: ffffffff81a87761 RDI: ffff8880b8423a00 [ 299.884965][ C0] RBP: ffff8880b8423a00 R08: 0000000000000000 R09: fffffbfff2156d72 [ 299.884972][ C0] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000000 [ 299.884979][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff93d72c80 [ 299.884987][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 299.884999][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.885007][ C0] CR2: 000055ce02c2dbe0 CR3: 000000002a05a000 CR4: 00000000003526f0 [ 299.885015][ C0] Call Trace: [ 299.885020][ C0] [ 299.885024][ C0] hrtimer_interrupt+0x21/0x8e0 [ 299.885039][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 299.885058][ C0] ? tick_nohz_stop_idle+0x2d1/0x3c0 [ 299.885076][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 299.885091][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 299.885105][ C0] [ 299.885109][ C0] [ 299.885113][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.885126][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 299.885140][ C0] Code: cc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 299.885151][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 299.885160][ C0] RAX: 00000000014dd2c3 RBX: 0000000000000000 RCX: ffffffff8b945c29 [ 299.885167][ C0] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 299.885175][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 299.885183][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 299.885190][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 299.885200][ C0] ? ct_kernel_exit+0x139/0x190 [ 299.885216][ C0] default_idle+0x13/0x20 [ 299.885232][ C0] default_idle_call+0x6d/0xb0 [ 299.885248][ C0] do_idle+0x391/0x510 [ 299.885263][ C0] ? __pfx_do_idle+0x10/0x10 [ 299.885277][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 299.885293][ C0] cpu_startup_entry+0x4f/0x60 [ 299.885307][ C0] rest_init+0x16b/0x2b0 [ 299.885323][ C0] ? acpi_subsystem_init+0x133/0x180 [ 299.885337][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 299.885353][ C0] start_kernel+0x3ee/0x4d0 [ 299.885368][ C0] x86_64_start_reservations+0x18/0x30 [ 299.885382][ C0] x86_64_start_kernel+0x130/0x190 [ 299.885395][ C0] common_startup_64+0x13e/0x148 [ 299.885413][ C0] [ 299.885877][ C1] CPU: 1 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 299.885894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 299.885902][ C1] RIP: 0010:uart_write+0x2f6/0xb30 [ 299.885919][ C1] Code: 8d 98 9c 03 00 00 48 89 df e8 46 67 bf fc f0 ff 0b 0f 94 c3 31 ff 89 de e8 d7 f9 58 fc 84 db 0f 85 a2 00 00 00 e8 ea fe 58 fc <4c> 89 e0 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc [ 299.885927][ C1] RSP: 0000:ffffc9000458f990 EFLAGS: 00000293 [ 299.885933][ C1] RAX: 0000000000000000 RBX: ffff888025a40f00 RCX: ffffffff856291f6 [ 299.885939][ C1] RDX: ffff8880289bc880 RSI: ffffffff85628fe6 RDI: 0000000000000001 [ 299.885944][ C1] RBP: ffffffff9b115ba0 R08: 0000000000000001 R09: 0000000000000000 [ 299.885949][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 299.885954][ C1] R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003 [ 299.885959][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 299.885968][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.885974][ C1] CR2: 000055cd745d3300 CR3: 000000000e380000 CR4: 00000000003526f0 [ 299.885981][ C1] Call Trace: [ 299.885985][ C1] [ 299.885996][ C1] handle_tx+0x204/0x630 [ 299.886017][ C1] dev_hard_start_xmit+0x94/0x740 [ 299.886037][ C1] __dev_queue_xmit+0xa46/0x4490 [ 299.886055][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.886067][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 299.886079][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.886090][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 299.886099][ C1] ? __schedule+0x11a3/0x5de0 [ 299.886110][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 299.886134][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 299.886152][ C1] ? find_held_lock+0x2b/0x80 [ 299.886174][ C1] ? skb_dequeue+0x126/0x180 [ 299.886195][ C1] ? find_held_lock+0x2b/0x80 [ 299.886209][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.886222][ C1] tx+0xcc/0x190 [ 299.886233][ C1] ? __pfx_tx+0x10/0x10 [ 299.886242][ C1] kthread+0x1e4/0x3e0 [ 299.886252][ C1] ? find_held_lock+0x2b/0x80 [ 299.886262][ C1] ? __pfx_kthread+0x10/0x10 [ 299.886276][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 299.886294][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.886312][ C1] ? __kthread_parkme+0x19e/0x250 [ 299.886333][ C1] ? __pfx_kthread+0x10/0x10 [ 299.886346][ C1] kthread+0x3c2/0x780 [ 299.886356][ C1] ? __pfx_kthread+0x10/0x10 [ 299.886365][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.886376][ C1] ? __pfx_kthread+0x10/0x10 [ 299.886385][ C1] ret_from_fork+0x5d4/0x6f0 [ 299.886394][ C1] ? __pfx_kthread+0x10/0x10 [ 299.886402][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.886427][ C1] [ 300.453239][ C1] vkms_vblank_simulate: vblank timer overrun