last executing test programs: 2.324739201s ago: executing program 1 (id=2455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x80002014}) 2.246122523s ago: executing program 1 (id=2459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xf}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 2.08790751s ago: executing program 1 (id=2462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000031900850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 2.024252053s ago: executing program 1 (id=2463): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x40f}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu~=0||!') 1.986159755s ago: executing program 1 (id=2464): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1e00050000000000140012800b00010067656e6576650000040002801400030067656e65766531000000000000000000c0dad389a981e099fa991c2fcd881ca2b321130a2e8ff9e74658b2615aeb027dc4ca4a5d98929d3518970dbd5fb4d5ddb0d27130750cd3f65bcdfd3c58825478e8ca57ee780bc9c27fede0581417debde0202bb30af1d824254018161b14427c50c8e09cd28ac5096451136718648c8601a6db78362ac874706ad00add53f6"], 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000000007020000f8ffff000000b704000003000000850000004300000095020000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kmem_cache_free\x00'}, 0x18) r6 = msgget$private(0x0, 0x480) msgsnd(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x401, 0x0) msgsnd(r6, &(0x7f0000000a00)={0x1, "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"}, 0x3c2, 0x0) msgctl$IPC_RMID(r6, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r8, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 1.886264339s ago: executing program 2 (id=2467): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000900), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x56c}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001480)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaabaf1d19b54301e613738b5000000e000030000009078006400d2000000000000000000000000005d75fbbf45ff197b6f94b9bf975d44ee50d1b4a1d625d8cb3a48ee498bd69a5b"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.86971125s ago: executing program 3 (id=2468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x40f}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) 1.85469849s ago: executing program 1 (id=2469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0xffffffffffffffb2}], 0x1, 0x0, 0x0, 0x10}, 0x4004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syslog(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESDEC], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0xd, 0x7, 0x0, 0x0, 0xfd, 0x8, 0x0, 0xfd, 0x5}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x7}, &(0x7f0000000240)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@allocspi={0x108, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860a, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x3502, 0x2, 0x0, 0x1}, 0x3, 0x8}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd2d, 0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) 1.824331592s ago: executing program 3 (id=2470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000006c0)='./file1\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x37c, &(0x7f0000000ec0)="$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") 1.4088206s ago: executing program 3 (id=2476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x1, 0xce5, 0xbc7}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.372464141s ago: executing program 3 (id=2479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201010207017b8b2d7c196a40000102030109021b00010103a025090400600200000305090501022000016a5c782935a39940a68cbafb2a90be78eb1430951a65e2ee3dd64309d6e1e3e5e98234952cbdb8c859775ed52f60145386035fca6ec0"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 953.560619ms ago: executing program 2 (id=2497): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 813.540355ms ago: executing program 3 (id=2503): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x40f}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu~=0||!') 777.238337ms ago: executing program 0 (id=2504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000031900850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 757.945117ms ago: executing program 2 (id=2505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdb"], 0x138) write$UHID_DESTROY(r1, 0x0, 0x0) 717.817439ms ago: executing program 0 (id=2506): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200001b, 0x4008032, 0xffffffffffffffff, 0xd069000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x23, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa2f5, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x10, 0x0, 0x4, 0x8, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}, {0x6, 0x40, 0xff, 0xfff}]}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0xffffffffffff8fff) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x81, 0x4200) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000040)=""/63) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 717.417999ms ago: executing program 3 (id=2507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000900), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x56c}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001480)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaabaf1d19b54301e613738b5000000e000030000009078006400d2000000000000000000000000005d75fbbf45ff197b6f94b9bf975d44ee50d1b4a1d625d8cb3a48ee498bd69a5b"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 615.790013ms ago: executing program 2 (id=2508): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f00000000c0)=0x39) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c) unshare(0x6a040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x2a, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000080)=0xd4, 0x8) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a0108000000000600000000000000140000001100"], 0xa4}}, 0x0) 615.481854ms ago: executing program 0 (id=2509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xf}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 573.678026ms ago: executing program 0 (id=2511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 441.863091ms ago: executing program 2 (id=2512): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x32) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r3, 0x4b32, 0x91) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf2508000300012000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1001, @private1, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000006c0)="01cca9", 0x3}], 0x1, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}, {&(0x7f0000000100)="8a3e52dba0d79e597058d5f4f521eaad7d6d26cc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f4267dd3559d474518955f97331eddc1aec63e07184afdff8a90728d2f4772d1593f1fdbe7b31035412eaa85c9109b6", 0x68}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x3}, 0x20000880) 348.621485ms ago: executing program 2 (id=2513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201010207017b8b2d7c196a40000102030109021b00010103a025090400600200000305090501022000016a5c782935a39940a68cbafb2a90be78eb1430951a65e2ee3dd64309d6e1e3e5e98234952cbdb8c859775ed52f60145386035fca6ec0"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 235.678629ms ago: executing program 4 (id=2514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000ffffffff00000000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="050000"], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x18) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44051}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) close_range(r9, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x4}}, 0x10) 235.173349ms ago: executing program 4 (id=2515): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xa7c, 0x7fffffff, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 209.084441ms ago: executing program 4 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x4, 0xd, 0x6}, {0x4, 0x4, 0x3, 0x2}], 0x10, 0x26}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040015}, 0x48d4) 191.659212ms ago: executing program 4 (id=2517): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x40f}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu~=0||!') 92.424576ms ago: executing program 4 (id=2518): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 72.495607ms ago: executing program 4 (id=2519): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3c, &(0x7f0000000240)=ANY=[@ANYBLOB="180000e9000000000000000000f3150018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x24040840) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x4000, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0xf749, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffffffa2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040000) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4840}, 0x4040000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.160158ms ago: executing program 0 (id=2520): mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x23, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa2f5, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x10, 0x0, 0x4, 0x8, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}, {0x6, 0x40, 0xff, 0xfff}]}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0xffffffffffff8fff) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x81, 0x4200) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000040)=""/63) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 0s ago: executing program 0 (id=2521): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x26c, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xf}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd4fd}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9bb9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x808}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1b0, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3fd}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd1d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xccb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe52}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe5d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x20000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xede}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd12}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x23540000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) munlockall() r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000003c0)='mountstats\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r6, 0x0, r3, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001041300000000641f4171833a66", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x40800) kernel console output (not intermixed with test programs): .103991][ T3549] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 137.176428][ T6985] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1272'. [ 137.388119][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.407144][ T6994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.466997][ T6994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.492951][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 137.699331][ T6994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.803202][ T6994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.921270][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.952429][ T3480] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 137.960302][ T3480] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 137.997618][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.032153][ T3480] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 138.065806][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.126587][ T3480] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 138.221645][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.272747][ T7021] loop0: detected capacity change from 0 to 256 [ 138.312450][ T7027] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1287'. [ 138.349197][ T7021] FAT-fs (loop0): Directory bread(block 64) failed [ 138.370345][ T7021] FAT-fs (loop0): Directory bread(block 65) failed [ 138.397433][ T7021] FAT-fs (loop0): Directory bread(block 66) failed [ 138.426794][ T7021] FAT-fs (loop0): Directory bread(block 67) failed [ 138.446705][ T7021] FAT-fs (loop0): Directory bread(block 68) failed [ 138.456138][ T3480] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 138.463991][ T3480] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 138.494097][ T7021] FAT-fs (loop0): Directory bread(block 69) failed [ 138.504177][ T7021] FAT-fs (loop0): Directory bread(block 70) failed [ 138.524442][ T3480] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 138.537935][ T7021] FAT-fs (loop0): Directory bread(block 71) failed [ 138.553817][ T3480] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 138.566891][ T7021] FAT-fs (loop0): Directory bread(block 72) failed [ 138.593072][ T7021] FAT-fs (loop0): Directory bread(block 73) failed [ 138.712839][ T7042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.841801][ T7042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.901677][ T7058] netlink: 'syz.3.1299': attribute type 13 has an invalid length. [ 139.002579][ T7042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.062468][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.069850][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.077833][ T7062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1302'. [ 139.174438][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.185388][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 139.197829][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.244122][ T7065] netlink: 'syz.4.1302': attribute type 10 has an invalid length. [ 139.276577][ T7042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.302579][ T52] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.330133][ T52] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.365649][ T52] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.405229][ T52] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.439024][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.467148][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.476044][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.484624][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.517850][ T5386] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 139.525617][ T5386] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 139.537159][ T5386] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 139.546952][ T5386] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 139.658974][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 139.694805][ T7080] loop3: detected capacity change from 0 to 256 [ 139.738108][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 139.746064][ T7086] netlink: 272 bytes leftover after parsing attributes in process `+}[@'. [ 139.761828][ T7080] FAT-fs (loop3): Directory bread(block 64) failed [ 139.779780][ T7080] FAT-fs (loop3): Directory bread(block 65) failed [ 139.890977][ T7080] FAT-fs (loop3): Directory bread(block 66) failed [ 139.897626][ T7080] FAT-fs (loop3): Directory bread(block 67) failed [ 139.907606][ T7083] netlink: 'syz.2.1307': attribute type 10 has an invalid length. [ 139.992353][ T7080] FAT-fs (loop3): Directory bread(block 68) failed [ 140.018668][ T7080] FAT-fs (loop3): Directory bread(block 69) failed [ 140.025247][ T7080] FAT-fs (loop3): Directory bread(block 70) failed [ 140.035063][ T7098] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 140.113795][ T7080] FAT-fs (loop3): Directory bread(block 71) failed [ 140.129190][ T7080] FAT-fs (loop3): Directory bread(block 72) failed [ 140.135750][ T7080] FAT-fs (loop3): Directory bread(block 73) failed [ 140.728052][ T29] kauditd_printk_skb: 958 callbacks suppressed [ 140.728071][ T29] audit: type=1400 audit(1765121528.729:19857): avc: denied { prog_load } for pid=7104 comm="syz.0.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 140.753432][ T29] audit: type=1400 audit(1765121528.729:19858): avc: denied { bpf } for pid=7104 comm="syz.0.1318" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.774172][ T29] audit: type=1400 audit(1765121528.729:19859): avc: denied { perfmon } for pid=7104 comm="syz.0.1318" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.795159][ T29] audit: type=1326 audit(1765121528.749:19860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 140.818641][ T29] audit: type=1326 audit(1765121528.749:19861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 140.842189][ T29] audit: type=1326 audit(1765121528.749:19862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 140.865663][ T29] audit: type=1326 audit(1765121528.749:19863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 140.889189][ T29] audit: type=1326 audit(1765121528.749:19864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 140.912834][ T29] audit: type=1326 audit(1765121528.749:19865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 140.936393][ T29] audit: type=1326 audit(1765121528.749:19866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 141.372252][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.381135][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.946442][ T7143] __nla_validate_parse: 5 callbacks suppressed [ 141.946458][ T7143] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1330'. [ 142.265726][ T7154] netlink: 272 bytes leftover after parsing attributes in process `+}[@'. [ 142.281636][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 142.512670][ T7168] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1340'. [ 142.584892][ T7180] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1346'. [ 142.603845][ T7182] sch_fq: defrate 4294967295 ignored. [ 143.391713][ T7194] loop3: detected capacity change from 0 to 2048 [ 143.498463][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 143.507806][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 143.518058][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 143.527040][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 143.536095][ T3868] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.639660][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 143.687267][ T7225] sch_fq: defrate 4294967295 ignored. [ 144.361043][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.348295][ T7279] syzkaller0: entered promiscuous mode [ 145.353871][ T7279] syzkaller0: entered allmulticast mode [ 145.380608][ T7281] sch_fq: defrate 4294967295 ignored. [ 145.462719][ T969] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 145.470626][ T969] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 145.501540][ T969] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 145.519178][ T969] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 145.846967][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 145.846984][ T29] audit: type=1326 audit(1765121533.879:20574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 145.906232][ T29] audit: type=1326 audit(1765121533.909:20575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 145.929921][ T29] audit: type=1326 audit(1765121533.909:20576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 145.948688][ T7307] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 145.954357][ T29] audit: type=1326 audit(1765121533.909:20577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 145.984637][ T29] audit: type=1326 audit(1765121533.919:20578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 146.008166][ T29] audit: type=1326 audit(1765121533.919:20579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 146.031827][ T29] audit: type=1326 audit(1765121533.919:20580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 146.055336][ T29] audit: type=1326 audit(1765121533.919:20581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 146.078928][ T29] audit: type=1326 audit(1765121533.919:20582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 146.102502][ T29] audit: type=1326 audit(1765121533.919:20583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7302 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 146.223977][ T3401] IPVS: starting estimator thread 0... [ 146.318072][ T7320] IPVS: using max 2256 ests per chain, 112800 per kthread [ 146.327924][ T7327] loop1: detected capacity change from 0 to 256 [ 146.378694][ T7327] FAT-fs (loop1): Directory bread(block 64) failed [ 146.398283][ T7327] FAT-fs (loop1): Directory bread(block 65) failed [ 146.404973][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 146.411276][ T7327] FAT-fs (loop1): Directory bread(block 66) failed [ 146.411579][ T3868] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.417809][ T7327] FAT-fs (loop1): Directory bread(block 67) failed [ 146.417845][ T7327] FAT-fs (loop1): Directory bread(block 68) failed [ 146.443878][ T7327] FAT-fs (loop1): Directory bread(block 69) failed [ 146.580967][ T7327] FAT-fs (loop1): Directory bread(block 70) failed [ 146.588624][ T7327] FAT-fs (loop1): Directory bread(block 71) failed [ 146.595262][ T7327] FAT-fs (loop1): Directory bread(block 72) failed [ 146.602226][ T7327] FAT-fs (loop1): Directory bread(block 73) failed [ 146.752717][ T7352] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 146.846580][ T7367] loop1: detected capacity change from 0 to 256 [ 146.893436][ T7367] FAT-fs (loop1): Directory bread(block 64) failed [ 146.903380][ T7367] FAT-fs (loop1): Directory bread(block 65) failed [ 146.920484][ T7367] FAT-fs (loop1): Directory bread(block 66) failed [ 146.934903][ T7367] FAT-fs (loop1): Directory bread(block 67) failed [ 146.959999][ T969] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 146.967722][ T969] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 146.977123][ T7367] FAT-fs (loop1): Directory bread(block 68) failed [ 146.984619][ T7367] FAT-fs (loop1): Directory bread(block 69) failed [ 146.991603][ T969] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 146.999964][ T7367] FAT-fs (loop1): Directory bread(block 70) failed [ 147.007255][ T969] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 147.017409][ T7367] FAT-fs (loop1): Directory bread(block 71) failed [ 147.045185][ T7367] FAT-fs (loop1): Directory bread(block 72) failed [ 147.055285][ T7367] FAT-fs (loop1): Directory bread(block 73) failed [ 147.141451][ T7382] loop3: detected capacity change from 0 to 256 [ 147.156300][ T7382] FAT-fs (loop3): Directory bread(block 64) failed [ 147.163216][ T7382] FAT-fs (loop3): Directory bread(block 65) failed [ 147.182190][ T7382] FAT-fs (loop3): Directory bread(block 66) failed [ 147.197445][ T7382] FAT-fs (loop3): Directory bread(block 67) failed [ 147.218387][ T7382] FAT-fs (loop3): Directory bread(block 68) failed [ 147.225338][ T7382] FAT-fs (loop3): Directory bread(block 69) failed [ 147.232431][ T7382] FAT-fs (loop3): Directory bread(block 70) failed [ 147.239678][ T7382] FAT-fs (loop3): Directory bread(block 71) failed [ 147.246477][ T7382] FAT-fs (loop3): Directory bread(block 72) failed [ 147.253497][ T7382] FAT-fs (loop3): Directory bread(block 73) failed [ 147.370639][ T7401] __nla_validate_parse: 21 callbacks suppressed [ 147.370653][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'. [ 147.417659][ T7407] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1434'. [ 147.560405][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 147.570286][ T7417] netlink: 'syz.4.1437': attribute type 10 has an invalid length. [ 147.768276][ T7423] loop4: detected capacity change from 0 to 256 [ 147.781664][ T7423] FAT-fs (loop4): Directory bread(block 64) failed [ 147.788339][ T7423] FAT-fs (loop4): Directory bread(block 65) failed [ 147.794928][ T7423] FAT-fs (loop4): Directory bread(block 66) failed [ 147.801652][ T7423] FAT-fs (loop4): Directory bread(block 67) failed [ 147.808229][ T7423] FAT-fs (loop4): Directory bread(block 68) failed [ 147.814751][ T7423] FAT-fs (loop4): Directory bread(block 69) failed [ 147.821319][ T7423] FAT-fs (loop4): Directory bread(block 70) failed [ 147.825127][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1443'. [ 147.827842][ T7423] FAT-fs (loop4): Directory bread(block 71) failed [ 147.827877][ T7423] FAT-fs (loop4): Directory bread(block 72) failed [ 147.851974][ T7423] FAT-fs (loop4): Directory bread(block 73) failed [ 147.857847][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.867774][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.895338][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1444'. [ 148.061657][ T7443] loop4: detected capacity change from 0 to 256 [ 148.075717][ T7443] FAT-fs (loop4): Directory bread(block 64) failed [ 148.082677][ T7443] FAT-fs (loop4): Directory bread(block 65) failed [ 148.090249][ T7443] FAT-fs (loop4): Directory bread(block 66) failed [ 148.097020][ T7443] FAT-fs (loop4): Directory bread(block 67) failed [ 148.103730][ T7443] FAT-fs (loop4): Directory bread(block 68) failed [ 148.110645][ T7443] FAT-fs (loop4): Directory bread(block 69) failed [ 148.117233][ T7443] FAT-fs (loop4): Directory bread(block 70) failed [ 148.123928][ T7443] FAT-fs (loop4): Directory bread(block 71) failed [ 148.130528][ T7443] FAT-fs (loop4): Directory bread(block 72) failed [ 148.137211][ T7443] FAT-fs (loop4): Directory bread(block 73) failed [ 148.156179][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 148.165939][ T7448] netlink: 'syz.2.1450': attribute type 10 has an invalid length. [ 148.369471][ T7456] loop4: detected capacity change from 0 to 8192 [ 148.467141][ T7456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=7456 comm=syz.4.1454 [ 148.560707][ T7468] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1458'. [ 148.878149][ T3798] Bluetooth: hci0: command 0x1003 tx timeout [ 148.878444][ T3868] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.911483][ T7478] loop2: detected capacity change from 0 to 256 [ 148.941377][ T7478] FAT-fs (loop2): Directory bread(block 64) failed [ 148.974874][ T7478] FAT-fs (loop2): Directory bread(block 65) failed [ 148.989325][ T7478] FAT-fs (loop2): Directory bread(block 66) failed [ 149.018444][ T7478] FAT-fs (loop2): Directory bread(block 67) failed [ 149.039619][ T7478] FAT-fs (loop2): Directory bread(block 68) failed [ 149.058575][ T7478] FAT-fs (loop2): Directory bread(block 69) failed [ 149.078531][ T7491] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1466'. [ 149.087768][ T7478] FAT-fs (loop2): Directory bread(block 70) failed [ 149.099429][ T7478] FAT-fs (loop2): Directory bread(block 71) failed [ 149.109254][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 149.122574][ T7494] netlink: 'syz.3.1465': attribute type 10 has an invalid length. [ 149.130912][ T7478] FAT-fs (loop2): Directory bread(block 72) failed [ 149.137637][ T7478] FAT-fs (loop2): Directory bread(block 73) failed [ 149.224368][ T7498] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1468'. [ 149.275082][ T3401] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 149.283033][ T3401] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 149.326188][ T3401] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 149.337387][ T3401] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 149.354736][ T7503] sch_fq: defrate 4294967295 ignored. [ 149.404176][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.413169][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.438026][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 149.444193][ T3868] Bluetooth: hci1: command 0x1003 tx timeout [ 150.448774][ T7541] netlink: 'syz.4.1480': attribute type 10 has an invalid length. [ 150.699630][ T7548] netlink: 'syz.0.1484': attribute type 6 has an invalid length. [ 150.767455][ T7548] IPVS: persistence engine module ip_vs_pe_ not found [ 150.852833][ T7552] geneve2: entered promiscuous mode [ 150.858315][ T7552] geneve2: entered allmulticast mode [ 150.866318][ T7535] loop1: detected capacity change from 0 to 32768 [ 150.929448][ T7535] loop1: p1 p3 < > [ 150.966810][ T29] kauditd_printk_skb: 1567 callbacks suppressed [ 150.966880][ T29] audit: type=1400 audit(1765121538.999:22151): avc: denied { lock } for pid=7553 comm="syz.3.1486" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.032434][ T29] audit: type=1400 audit(1765121539.039:22152): avc: denied { ioctl } for pid=7553 comm="syz.3.1486" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.120035][ T7560] syzkaller0: entered promiscuous mode [ 151.125671][ T7560] syzkaller0: entered allmulticast mode [ 151.238866][ T1030] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.296982][ T29] audit: type=1400 audit(1765121539.329:22153): avc: denied { read } for pid=7563 comm="syz.1.1490" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.318346][ T29] audit: type=1400 audit(1765121539.329:22154): avc: denied { open } for pid=7563 comm="syz.1.1490" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.346239][ T29] audit: type=1400 audit(1765121539.379:22155): avc: denied { create } for pid=7563 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.366323][ T29] audit: type=1400 audit(1765121539.379:22156): avc: denied { mac_admin } for pid=7563 comm="syz.1.1490" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.387485][ T29] audit: type=1400 audit(1765121539.379:22157): avc: denied { relabelto } for pid=7563 comm="syz.1.1490" name="277" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 151.412812][ T29] audit: type=1400 audit(1765121539.379:22158): avc: denied { associate } for pid=7563 comm="syz.1.1490" name="277" dev="tmpfs" ino=1453 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 151.439134][ T29] audit: type=1400 audit(1765121539.379:22159): avc: denied { shutdown } for pid=7563 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.458981][ T29] audit: type=1400 audit(1765121539.379:22160): avc: denied { getopt } for pid=7563 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.638826][ T7580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.722143][ T7580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.792127][ T7580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.842889][ T7580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.918408][ T1012] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.939884][ T1012] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.959147][ T1012] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.983225][ T1012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.006441][ T7596] loop2: detected capacity change from 0 to 256 [ 152.037561][ T7596] FAT-fs (loop2): Directory bread(block 64) failed [ 152.079866][ T7596] FAT-fs (loop2): Directory bread(block 65) failed [ 152.086520][ T7596] FAT-fs (loop2): Directory bread(block 66) failed [ 152.098061][ T7596] FAT-fs (loop2): Directory bread(block 67) failed [ 152.114943][ T7596] FAT-fs (loop2): Directory bread(block 68) failed [ 152.133009][ T7596] FAT-fs (loop2): Directory bread(block 69) failed [ 152.148512][ T7596] FAT-fs (loop2): Directory bread(block 70) failed [ 152.162724][ T7596] FAT-fs (loop2): Directory bread(block 71) failed [ 152.179347][ T7596] FAT-fs (loop2): Directory bread(block 72) failed [ 152.193657][ T7596] FAT-fs (loop2): Directory bread(block 73) failed [ 152.317100][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.325717][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.866506][ T7634] __nla_validate_parse: 13 callbacks suppressed [ 152.866522][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 152.916468][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 152.973718][ T7640] netlink: 'syz.3.1517': attribute type 10 has an invalid length. [ 153.127708][ T7636] loop0: detected capacity change from 0 to 32768 [ 153.158309][ T7636] loop0: p1 p3 < > [ 153.176499][ T5386] IPVS: starting estimator thread 0... [ 153.256492][ T7657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'. [ 153.277043][ T7646] IPVS: using max 1824 ests per chain, 91200 per kthread [ 153.288028][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 153.294119][ T3868] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.335158][ T7666] netlink: 272 bytes leftover after parsing attributes in process `+}[@'. [ 153.340144][ T7662] syzkaller0: entered promiscuous mode [ 153.349244][ T7662] syzkaller0: entered allmulticast mode [ 153.355146][ T7668] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1531'. [ 153.391079][ T7670] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1532'. [ 153.407020][ T5386] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 153.414809][ T5386] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 153.423101][ T5386] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 153.457794][ T5386] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 153.646138][ T7685] netlink: 'syz.3.1538': attribute type 6 has an invalid length. [ 153.663914][ T7682] loop2: detected capacity change from 0 to 32768 [ 153.670484][ T7685] IPVS: persistence engine module ip_vs_pe_ not found [ 153.718462][ T7682] loop2: p1 p3 < > [ 153.732160][ T7687] geneve2: entered promiscuous mode [ 153.737421][ T7687] geneve2: entered allmulticast mode [ 153.995548][ T7704] syzkaller0: entered promiscuous mode [ 154.001255][ T7704] syzkaller0: entered allmulticast mode [ 154.038977][ T3549] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 154.046734][ T3549] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 154.054478][ T3549] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 154.062247][ T3549] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 154.070088][ T3549] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 154.077875][ T3549] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 154.085606][ T3549] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 154.110915][ T3549] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 154.130442][ T7713] loop1: detected capacity change from 0 to 256 [ 154.151771][ T7715] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1549'. [ 154.163567][ T7713] FAT-fs (loop1): Directory bread(block 64) failed [ 154.164731][ T3480] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 154.170743][ T7713] FAT-fs (loop1): Directory bread(block 65) failed [ 154.186824][ T7713] FAT-fs (loop1): Directory bread(block 66) failed [ 154.193613][ T7713] FAT-fs (loop1): Directory bread(block 67) failed [ 154.200911][ T7713] FAT-fs (loop1): Directory bread(block 68) failed [ 154.207467][ T7713] FAT-fs (loop1): Directory bread(block 69) failed [ 154.214402][ T7713] FAT-fs (loop1): Directory bread(block 70) failed [ 154.221209][ T7713] FAT-fs (loop1): Directory bread(block 71) failed [ 154.230557][ T7713] FAT-fs (loop1): Directory bread(block 72) failed [ 154.238829][ T7713] FAT-fs (loop1): Directory bread(block 73) failed [ 154.240623][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1551'. [ 154.254365][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1551'. [ 154.285489][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1551'. [ 154.438053][ T5386] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 154.490965][ T7747] loop4: detected capacity change from 0 to 256 [ 154.507163][ T7747] FAT-fs (loop4): Directory bread(block 64) failed [ 154.514498][ T7747] FAT-fs (loop4): Directory bread(block 65) failed [ 154.521150][ T7747] FAT-fs (loop4): Directory bread(block 66) failed [ 154.527847][ T7747] FAT-fs (loop4): Directory bread(block 67) failed [ 154.534461][ T7747] FAT-fs (loop4): Directory bread(block 68) failed [ 154.541209][ T7747] FAT-fs (loop4): Directory bread(block 69) failed [ 154.547824][ T7747] FAT-fs (loop4): Directory bread(block 70) failed [ 154.554494][ T7747] FAT-fs (loop4): Directory bread(block 71) failed [ 154.567198][ T7747] FAT-fs (loop4): Directory bread(block 72) failed [ 154.576482][ T7747] FAT-fs (loop4): Directory bread(block 73) failed [ 154.583154][ T7754] netlink: 'syz.0.1566': attribute type 6 has an invalid length. [ 154.613697][ T7754] IPVS: persistence engine module ip_vs_pe_ not found [ 154.641288][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.649992][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.675021][ T7762] geneve2: entered promiscuous mode [ 154.680392][ T7762] geneve2: entered allmulticast mode [ 154.740656][ T7766] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.802134][ T7766] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.849821][ T7766] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.909867][ T7766] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.958727][ T1030] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.979426][ T1030] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.991040][ T1030] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.008085][ T1030] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.099785][ T7785] loop4: detected capacity change from 0 to 8192 [ 155.188269][ T3480] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 155.215415][ T3401] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 155.458301][ T7821] loop1: detected capacity change from 0 to 8192 [ 155.829448][ T7864] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.890922][ T7864] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.941881][ T7864] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.965349][ T7840] loop2: detected capacity change from 0 to 32768 [ 155.998319][ T7840] loop2: p1 p3 < > [ 156.005928][ T29] kauditd_printk_skb: 650 callbacks suppressed [ 156.005939][ T29] audit: type=1400 audit(1765121544.039:22811): avc: denied { read } for pid=7880 comm="syz.0.1618" dev="nsfs" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.033491][ T29] audit: type=1400 audit(1765121544.039:22812): avc: denied { open } for pid=7880 comm="syz.0.1618" path="net:[4026532448]" dev="nsfs" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.059690][ T7864] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.075431][ T29] audit: type=1326 audit(1765121544.109:22813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 156.099055][ T29] audit: type=1326 audit(1765121544.109:22814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 156.122770][ T29] audit: type=1326 audit(1765121544.109:22815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 156.146405][ T29] audit: type=1326 audit(1765121544.109:22816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 156.169932][ T29] audit: type=1326 audit(1765121544.109:22817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 156.193384][ T29] audit: type=1326 audit(1765121544.139:22818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 156.216928][ T29] audit: type=1326 audit(1765121544.139:22819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01949b2005 code=0x7ffc0000 [ 156.240482][ T29] audit: type=1326 audit(1765121544.139:22820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 156.307703][ T7894] loop0: detected capacity change from 0 to 256 [ 156.322249][ T7894] FAT-fs (loop0): Directory bread(block 64) failed [ 156.328965][ T7894] FAT-fs (loop0): Directory bread(block 65) failed [ 156.335555][ T7894] FAT-fs (loop0): Directory bread(block 66) failed [ 156.342090][ T7894] FAT-fs (loop0): Directory bread(block 67) failed [ 156.348672][ T7894] FAT-fs (loop0): Directory bread(block 68) failed [ 156.355286][ T7894] FAT-fs (loop0): Directory bread(block 69) failed [ 156.361968][ T7894] FAT-fs (loop0): Directory bread(block 70) failed [ 156.368705][ T7894] FAT-fs (loop0): Directory bread(block 71) failed [ 156.375355][ T7894] FAT-fs (loop0): Directory bread(block 72) failed [ 156.382311][ T7894] FAT-fs (loop0): Directory bread(block 73) failed [ 156.397401][ T7896] capability: warning: `syz.3.1624' uses 32-bit capabilities (legacy support in use) [ 156.946496][ T3480] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 156.988677][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.997357][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.185712][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.194449][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.374800][ T7921] loop2: detected capacity change from 0 to 256 [ 157.388725][ T7921] FAT-fs (loop2): Directory bread(block 64) failed [ 157.395282][ T7921] FAT-fs (loop2): Directory bread(block 65) failed [ 157.401916][ T7921] FAT-fs (loop2): Directory bread(block 66) failed [ 157.408686][ T7921] FAT-fs (loop2): Directory bread(block 67) failed [ 157.415226][ T7921] FAT-fs (loop2): Directory bread(block 68) failed [ 157.421843][ T7921] FAT-fs (loop2): Directory bread(block 69) failed [ 157.428424][ T7921] FAT-fs (loop2): Directory bread(block 70) failed [ 157.434947][ T7921] FAT-fs (loop2): Directory bread(block 71) failed [ 157.441496][ T7921] FAT-fs (loop2): Directory bread(block 72) failed [ 157.448118][ T7921] FAT-fs (loop2): Directory bread(block 73) failed [ 157.477259][ T7923] loop2: detected capacity change from 0 to 256 [ 157.491430][ T7923] FAT-fs (loop2): Directory bread(block 64) failed [ 157.498179][ T7923] FAT-fs (loop2): Directory bread(block 65) failed [ 157.504868][ T7923] FAT-fs (loop2): Directory bread(block 66) failed [ 157.511461][ T7923] FAT-fs (loop2): Directory bread(block 67) failed [ 157.518335][ T7923] FAT-fs (loop2): Directory bread(block 68) failed [ 157.524872][ T7923] FAT-fs (loop2): Directory bread(block 69) failed [ 157.531814][ T7923] FAT-fs (loop2): Directory bread(block 70) failed [ 157.538613][ T7923] FAT-fs (loop2): Directory bread(block 71) failed [ 157.544252][ T3480] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 157.545450][ T7923] FAT-fs (loop2): Directory bread(block 72) failed [ 157.561697][ T7923] FAT-fs (loop2): Directory bread(block 73) failed [ 157.883083][ T3480] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 157.884783][ T7958] __nla_validate_parse: 43 callbacks suppressed [ 157.884854][ T7958] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1648'. [ 157.915100][ T7960] loop2: detected capacity change from 0 to 256 [ 157.928523][ T7960] FAT-fs (loop2): Directory bread(block 64) failed [ 157.935195][ T7960] FAT-fs (loop2): Directory bread(block 65) failed [ 157.941953][ T7960] FAT-fs (loop2): Directory bread(block 66) failed [ 157.948652][ T7960] FAT-fs (loop2): Directory bread(block 67) failed [ 157.955186][ T7960] FAT-fs (loop2): Directory bread(block 68) failed [ 157.962242][ T7960] FAT-fs (loop2): Directory bread(block 69) failed [ 157.968857][ T7960] FAT-fs (loop2): Directory bread(block 70) failed [ 157.975496][ T7960] FAT-fs (loop2): Directory bread(block 71) failed [ 157.979075][ T7964] loop0: detected capacity change from 0 to 256 [ 157.982107][ T7960] FAT-fs (loop2): Directory bread(block 72) failed [ 157.995052][ T7960] FAT-fs (loop2): Directory bread(block 73) failed [ 158.003856][ T7964] FAT-fs (loop0): Directory bread(block 64) failed [ 158.010504][ T7964] FAT-fs (loop0): Directory bread(block 65) failed [ 158.017195][ T7964] FAT-fs (loop0): Directory bread(block 66) failed [ 158.023843][ T7964] FAT-fs (loop0): Directory bread(block 67) failed [ 158.030520][ T7964] FAT-fs (loop0): Directory bread(block 68) failed [ 158.037053][ T7964] FAT-fs (loop0): Directory bread(block 69) failed [ 158.043673][ T7964] FAT-fs (loop0): Directory bread(block 70) failed [ 158.050264][ T7964] FAT-fs (loop0): Directory bread(block 71) failed [ 158.056803][ T7964] FAT-fs (loop0): Directory bread(block 72) failed [ 158.063533][ T7964] FAT-fs (loop0): Directory bread(block 73) failed [ 158.159097][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 158.168136][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 158.180169][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 158.189158][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 158.189402][ T7966] loop2: detected capacity change from 0 to 32768 [ 158.226495][ T7974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1655'. [ 158.232207][ T7975] loop3: detected capacity change from 0 to 256 [ 158.241473][ T7966] loop2: p1 p3 < > [ 158.265097][ T7975] FAT-fs (loop3): Directory bread(block 64) failed [ 158.271849][ T7975] FAT-fs (loop3): Directory bread(block 65) failed [ 158.278678][ T7975] FAT-fs (loop3): Directory bread(block 66) failed [ 158.285601][ T7975] FAT-fs (loop3): Directory bread(block 67) failed [ 158.292598][ T7975] FAT-fs (loop3): Directory bread(block 68) failed [ 158.299557][ T7975] FAT-fs (loop3): Directory bread(block 69) failed [ 158.306237][ T7975] FAT-fs (loop3): Directory bread(block 70) failed [ 158.312930][ T7975] FAT-fs (loop3): Directory bread(block 71) failed [ 158.319896][ T7975] FAT-fs (loop3): Directory bread(block 72) failed [ 158.326740][ T7975] FAT-fs (loop3): Directory bread(block 73) failed [ 158.407301][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 158.619617][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1666'. [ 158.628668][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1666'. [ 158.639329][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1666'. [ 158.666312][ T3480] hid_parser_main: 111 callbacks suppressed [ 158.666362][ T3480] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 158.678130][ T3482] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 158.680188][ T3480] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 158.687777][ T3482] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 158.695907][ T3480] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x3 [ 158.703451][ T3482] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x3 [ 158.710740][ T3480] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 158.710851][ T3480] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 158.727766][ T3482] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.733902][ T3480] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 158.751368][ T3480] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 158.763329][ T3480] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.021362][ T8023] sch_fq: defrate 4294967295 ignored. [ 159.122601][ T8033] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 159.175610][ T8035] loop2: detected capacity change from 0 to 8192 [ 159.242473][ T8035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8035 comm=syz.2.1678 [ 159.245606][ T3480] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.285395][ T1030] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.296861][ T3482] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.309513][ T1030] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.345013][ T1030] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.368476][ T3482] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.384066][ T1030] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.621447][ T8048] loop4: detected capacity change from 0 to 32768 [ 159.665155][ T3401] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.679424][ T8048] loop4: p1 p3 < > [ 159.713403][ T3482] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.723343][ T8067] netlink: 'syz.3.1689': attribute type 10 has an invalid length. [ 159.940521][ T3482] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.134387][ T23] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.179560][ T8103] netlink: 'syz.3.1699': attribute type 10 has an invalid length. [ 160.249956][ T23] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.281069][ T8106] sch_fq: defrate 4294967295 ignored. [ 160.287757][ T8115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.350626][ T8115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.415777][ T8115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.443132][ T23] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.502607][ T8127] netlink: 'syz.1.1710': attribute type 10 has an invalid length. [ 160.522226][ T8115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.601384][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.610771][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.626215][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.649232][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.735213][ T8140] netlink: 'syz.3.1719': attribute type 6 has an invalid length. [ 160.771546][ T8140] IPVS: persistence engine module ip_vs_pe_ not found [ 160.785968][ T8144] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.861809][ T8148] netlink: 'syz.2.1720': attribute type 10 has an invalid length. [ 160.882706][ T8146] geneve2: entered promiscuous mode [ 160.888001][ T8146] geneve2: entered allmulticast mode [ 160.897262][ T8144] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.943514][ T3387] hid-generic 0000:3000000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.963469][ T8144] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.020386][ T8144] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.085224][ T1012] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.097369][ T1012] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.121064][ T8160] loop4: detected capacity change from 0 to 8192 [ 161.127519][ T1012] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.136374][ T1012] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.210128][ T29] kauditd_printk_skb: 762 callbacks suppressed [ 161.210143][ T29] audit: type=1326 audit(1765121549.249:23583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.244360][ T29] audit: type=1326 audit(1765121549.279:23584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.267995][ T29] audit: type=1326 audit(1765121549.279:23585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.291619][ T29] audit: type=1326 audit(1765121549.279:23586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.310123][ T8166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8166 comm=syz.4.1727 [ 161.315195][ T29] audit: type=1326 audit(1765121549.279:23587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.351229][ T29] audit: type=1326 audit(1765121549.279:23588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.374748][ T29] audit: type=1326 audit(1765121549.279:23589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.398325][ T29] audit: type=1326 audit(1765121549.279:23590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.421974][ T29] audit: type=1326 audit(1765121549.279:23591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.445454][ T29] audit: type=1326 audit(1765121549.279:23592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 161.859488][ T8174] netlink: 'syz.0.1731': attribute type 10 has an invalid length. [ 162.642137][ T8191] sch_fq: defrate 4294967295 ignored. [ 162.866673][ T8186] loop3: detected capacity change from 0 to 32768 [ 162.938300][ T8186] loop3: p1 p3 < > [ 163.031302][ T8199] loop4: detected capacity change from 0 to 256 [ 163.065227][ T8199] FAT-fs (loop4): Directory bread(block 64) failed [ 163.079284][ T8199] FAT-fs (loop4): Directory bread(block 65) failed [ 163.093753][ T8199] FAT-fs (loop4): Directory bread(block 66) failed [ 163.107804][ T8199] FAT-fs (loop4): Directory bread(block 67) failed [ 163.122927][ T8199] FAT-fs (loop4): Directory bread(block 68) failed [ 163.136296][ T8199] FAT-fs (loop4): Directory bread(block 69) failed [ 163.149631][ T8199] FAT-fs (loop4): Directory bread(block 70) failed [ 163.162915][ T8199] FAT-fs (loop4): Directory bread(block 71) failed [ 163.177442][ T8199] FAT-fs (loop4): Directory bread(block 72) failed [ 163.190765][ T8199] FAT-fs (loop4): Directory bread(block 73) failed [ 163.665930][ T23] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 163.675979][ T8211] loop1: detected capacity change from 0 to 8192 [ 163.714474][ T8218] __nla_validate_parse: 25 callbacks suppressed [ 163.714563][ T8218] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1748'. [ 163.733349][ T8211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8211 comm=syz.1.1745 [ 163.737127][ T23] hid_parser_main: 126 callbacks suppressed [ 163.737149][ T23] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 163.759685][ T23] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 163.767596][ T23] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x3 [ 163.776537][ T23] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 163.841006][ T8220] loop1: detected capacity change from 0 to 8192 [ 164.002693][ T8228] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1753'. [ 164.093254][ T23] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x4 [ 164.100994][ T23] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x2 [ 164.117276][ T23] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x3 [ 164.197495][ T23] hid-generic 0000:3000000:0000.0020: hidraw0: HID v0.00 Device [sy] on syz0 [ 164.409737][ T8243] netlink: 'syz.1.1758': attribute type 6 has an invalid length. [ 164.504288][ T8244] geneve2: entered promiscuous mode [ 164.509574][ T8244] geneve2: entered allmulticast mode [ 164.566566][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1759'. [ 164.598423][ T8248] loop0: detected capacity change from 0 to 8192 [ 164.661008][ T8248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8248 comm=syz.0.1760 [ 164.745883][ T8252] syzkaller0: entered promiscuous mode [ 164.751459][ T8252] syzkaller0: entered allmulticast mode [ 165.199658][ T8277] loop2: detected capacity change from 0 to 256 [ 165.220948][ T8277] FAT-fs (loop2): Directory bread(block 64) failed [ 165.279891][ T3868] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.315699][ T8277] FAT-fs (loop2): Directory bread(block 65) failed [ 165.322670][ T8277] FAT-fs (loop2): Directory bread(block 66) failed [ 165.329393][ T8277] FAT-fs (loop2): Directory bread(block 67) failed [ 165.336089][ T8277] FAT-fs (loop2): Directory bread(block 68) failed [ 165.342948][ T8277] FAT-fs (loop2): Directory bread(block 69) failed [ 165.349698][ T8277] FAT-fs (loop2): Directory bread(block 70) failed [ 165.356276][ T8277] FAT-fs (loop2): Directory bread(block 71) failed [ 165.363954][ T8277] FAT-fs (loop2): Directory bread(block 72) failed [ 165.370767][ T8277] FAT-fs (loop2): Directory bread(block 73) failed [ 165.599769][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1779'. [ 165.608807][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1779'. [ 165.640496][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1779'. [ 165.649681][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1779'. [ 165.670426][ T8299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1781'. [ 165.719403][ T3480] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 165.727147][ T3480] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 165.738127][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.739461][ T8309] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1785'. [ 165.747076][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.763754][ T3480] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x3 [ 165.789257][ T3480] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 165.915585][ T8317] loop2: detected capacity change from 0 to 8192 [ 165.991069][ T8317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8317 comm=syz.2.1788 [ 166.143272][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 166.231877][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 166.231893][ T29] audit: type=1400 audit(1765121554.269:24490): avc: denied { append } for pid=8338 comm="syz.3.1797" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.261460][ T29] audit: type=1400 audit(1765121554.269:24491): avc: denied { open } for pid=8338 comm="syz.3.1797" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.285255][ T29] audit: type=1400 audit(1765121554.269:24492): avc: denied { ioctl } for pid=8338 comm="syz.3.1797" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.310302][ T29] audit: type=1400 audit(1765121554.269:24493): avc: denied { read } for pid=8338 comm="syz.3.1797" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 166.333577][ T29] audit: type=1400 audit(1765121554.269:24494): avc: denied { open } for pid=8338 comm="syz.3.1797" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 166.357121][ T29] audit: type=1400 audit(1765121554.269:24495): avc: denied { ioctl } for pid=8338 comm="syz.3.1797" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 166.382832][ T29] audit: type=1400 audit(1765121554.269:24496): avc: denied { create } for pid=8338 comm="syz.3.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 166.403238][ T29] audit: type=1400 audit(1765121554.269:24497): avc: denied { write } for pid=8338 comm="syz.3.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 166.423575][ T29] audit: type=1400 audit(1765121554.299:24498): avc: denied { lock } for pid=8336 comm="syz.1.1796" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=23239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 166.449178][ T29] audit: type=1400 audit(1765121554.299:24499): avc: denied { ioctl } for pid=8336 comm="syz.1.1796" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.612917][ T8351] loop2: detected capacity change from 0 to 8192 [ 166.769065][ T8372] loop2: detected capacity change from 0 to 256 [ 166.782134][ T8372] FAT-fs (loop2): Directory bread(block 64) failed [ 166.789101][ T8372] FAT-fs (loop2): Directory bread(block 65) failed [ 166.795666][ T8372] FAT-fs (loop2): Directory bread(block 66) failed [ 166.802442][ T8372] FAT-fs (loop2): Directory bread(block 67) failed [ 166.809469][ T8372] FAT-fs (loop2): Directory bread(block 68) failed [ 166.816198][ T8372] FAT-fs (loop2): Directory bread(block 69) failed [ 166.822829][ T8372] FAT-fs (loop2): Directory bread(block 70) failed [ 166.829576][ T8372] FAT-fs (loop2): Directory bread(block 71) failed [ 166.836169][ T8372] FAT-fs (loop2): Directory bread(block 72) failed [ 166.843452][ T8372] FAT-fs (loop2): Directory bread(block 73) failed [ 167.008415][ T8393] loop0: detected capacity change from 0 to 8192 [ 167.060069][ T8398] FAT-fs (loop1): Directory bread(block 64) failed [ 167.067154][ T8398] FAT-fs (loop1): Directory bread(block 65) failed [ 167.074579][ T8398] FAT-fs (loop1): Directory bread(block 66) failed [ 167.081388][ T8398] FAT-fs (loop1): Directory bread(block 67) failed [ 167.081772][ T8393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8393 comm=syz.0.1820 [ 167.088306][ T8398] FAT-fs (loop1): Directory bread(block 68) failed [ 167.107254][ T8398] FAT-fs (loop1): Directory bread(block 69) failed [ 167.113921][ T8398] FAT-fs (loop1): Directory bread(block 70) failed [ 167.120827][ T8398] FAT-fs (loop1): Directory bread(block 71) failed [ 167.127493][ T8398] FAT-fs (loop1): Directory bread(block 72) failed [ 167.134237][ T8398] FAT-fs (loop1): Directory bread(block 73) failed [ 167.302758][ T8406] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 167.317398][ T8404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8404 comm=syz.1.1825 [ 167.719749][ T8420] sch_fq: defrate 4294967295 ignored. [ 167.831407][ T3401] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x4 [ 167.848597][ T3401] hid-generic 0000:3000000:0000.0022: hidraw0: HID v0.00 Device [sy] on syz0 [ 168.020020][ T8430] set_capacity_and_notify: 2 callbacks suppressed [ 168.020040][ T8430] loop2: detected capacity change from 0 to 8192 [ 168.159940][ T8435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8435 comm=syz.2.1834 [ 168.184880][ T8434] loop3: detected capacity change from 0 to 8192 [ 168.645121][ T8455] netlink: 'syz.2.1839': attribute type 10 has an invalid length. [ 168.978512][ T8470] __nla_validate_parse: 18 callbacks suppressed [ 168.978527][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1850'. [ 168.994004][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1850'. [ 169.114567][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1850'. [ 169.123595][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1850'. [ 169.153907][ T8475] loop0: detected capacity change from 0 to 256 [ 169.207299][ T8464] loop3: detected capacity change from 0 to 32768 [ 169.250789][ T8475] FAT-fs (loop0): Directory bread(block 64) failed [ 169.259028][ T8464] loop3: p1 p3 < > [ 169.270773][ T8478] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.284501][ T8475] FAT-fs (loop0): Directory bread(block 65) failed [ 169.304123][ T8475] FAT-fs (loop0): Directory bread(block 66) failed [ 169.320996][ T8475] FAT-fs (loop0): Directory bread(block 67) failed [ 169.334332][ T8475] FAT-fs (loop0): Directory bread(block 68) failed [ 169.344964][ T8475] FAT-fs (loop0): Directory bread(block 69) failed [ 169.372213][ T8475] FAT-fs (loop0): Directory bread(block 70) failed [ 169.388075][ T8475] FAT-fs (loop0): Directory bread(block 71) failed [ 169.402288][ T8475] FAT-fs (loop0): Directory bread(block 72) failed [ 169.412528][ T8478] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.432637][ T8475] FAT-fs (loop0): Directory bread(block 73) failed [ 169.568284][ T8478] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.660273][ T8478] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.694097][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1861'. [ 169.703172][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1861'. [ 169.714448][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1861'. [ 169.723527][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1861'. [ 169.759027][ T1012] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.777461][ T1012] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.811849][ T1012] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.833290][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 169.849889][ T1012] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.916207][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.058930][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.138814][ T5386] hid_parser_main: 2 callbacks suppressed [ 170.138848][ T5386] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x4 [ 170.152325][ T5386] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x2 [ 170.152790][ T8511] loop4: detected capacity change from 0 to 8192 [ 170.261919][ T5386] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x3 [ 170.271209][ T5386] hid-generic 0000:3000000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.383316][ T8519] netlink: 'syz.1.1868': attribute type 6 has an invalid length. [ 170.528370][ T8523] geneve2: entered promiscuous mode [ 170.533628][ T8523] geneve2: entered allmulticast mode [ 170.791090][ T8529] loop4: detected capacity change from 0 to 8192 [ 170.815826][ T8531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1873'. [ 171.266517][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 171.266534][ T29] audit: type=1400 audit(1765121559.189:24848): avc: denied { execmem } for pid=8540 comm="syz.3.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 171.303765][ T29] audit: type=1400 audit(1765121559.339:24849): avc: denied { read write } for pid=8543 comm="syz.1.1878" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.327317][ T29] audit: type=1400 audit(1765121559.339:24850): avc: denied { open } for pid=8543 comm="syz.1.1878" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.651819][ T29] audit: type=1400 audit(1765121559.679:24851): avc: denied { create } for pid=8536 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.671492][ T29] audit: type=1400 audit(1765121559.679:24852): avc: denied { setopt } for pid=8536 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.691092][ T29] audit: type=1400 audit(1765121559.679:24853): avc: denied { bind } for pid=8536 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.710569][ T29] audit: type=1400 audit(1765121559.679:24854): avc: denied { name_bind } for pid=8536 comm="syz.4.1875" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 171.732446][ T29] audit: type=1400 audit(1765121559.679:24855): avc: denied { node_bind } for pid=8536 comm="syz.4.1875" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 171.755737][ T29] audit: type=1400 audit(1765121559.679:24856): avc: denied { listen } for pid=8536 comm="syz.4.1875" laddr=172.20.20.38 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.326312][ T29] audit: type=1326 audit(1765121560.339:24857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8536 comm="syz.4.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 173.244738][ T8559] loop0: detected capacity change from 0 to 8192 [ 173.432247][ T8569] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.591623][ T3480] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x4 [ 173.599403][ T3480] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x2 [ 173.608245][ T8576] netlink: 'syz.2.1888': attribute type 10 has an invalid length. [ 173.636310][ T8569] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.658084][ T3480] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x3 [ 173.676289][ T3480] hid-generic 0000:3000000:0000.0024: hidraw0: HID v0.00 Device [sy] on syz0 [ 173.751434][ T8569] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.783118][ T8582] loop4: detected capacity change from 0 to 256 [ 173.835128][ T8582] FAT-fs (loop4): Directory bread(block 64) failed [ 173.850263][ T8569] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.863744][ T8582] FAT-fs (loop4): Directory bread(block 65) failed [ 173.885322][ T8582] FAT-fs (loop4): Directory bread(block 66) failed [ 173.900097][ T8582] FAT-fs (loop4): Directory bread(block 67) failed [ 173.914054][ T8582] FAT-fs (loop4): Directory bread(block 68) failed [ 173.941283][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.954172][ T8582] FAT-fs (loop4): Directory bread(block 69) failed [ 173.981412][ T8582] FAT-fs (loop4): Directory bread(block 70) failed [ 173.999995][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.017431][ T8582] FAT-fs (loop4): Directory bread(block 71) failed [ 174.039301][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.054374][ T8582] FAT-fs (loop4): Directory bread(block 72) failed [ 174.075324][ T8582] FAT-fs (loop4): Directory bread(block 73) failed [ 174.084482][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.114281][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 174.277485][ T3549] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x4 [ 174.285245][ T3549] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x2 [ 174.307541][ T3549] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x3 [ 174.322563][ T3549] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.354262][ T3549] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4 [ 174.362706][ T3549] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.421822][ T3549] hid-generic 0000:3000000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.509486][ T8606] loop0: detected capacity change from 0 to 8192 [ 174.562135][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.570812][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.600326][ T8606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8606 comm=syz.0.1902 [ 174.740842][ T3549] hid-generic 0000:3000000:0000.0028: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.874487][ T8620] __nla_validate_parse: 5 callbacks suppressed [ 174.874499][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1908'. [ 174.889738][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1908'. [ 174.908107][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1908'. [ 174.917106][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1908'. [ 175.046323][ T8628] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1912'. [ 175.094850][ T3549] hid-generic 0000:3000000:0000.0029: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.122247][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1914'. [ 175.131377][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1914'. [ 175.143012][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1914'. [ 175.152042][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1914'. [ 175.195964][ T8637] loop3: detected capacity change from 0 to 256 [ 175.210104][ T8637] FAT-fs (loop3): Directory bread(block 64) failed [ 175.216726][ T8637] FAT-fs (loop3): Directory bread(block 65) failed [ 175.223451][ T8637] FAT-fs (loop3): Directory bread(block 66) failed [ 175.230076][ T8637] FAT-fs (loop3): Directory bread(block 67) failed [ 175.236763][ T8637] FAT-fs (loop3): Directory bread(block 68) failed [ 175.243438][ T8637] FAT-fs (loop3): Directory bread(block 69) failed [ 175.250120][ T8637] FAT-fs (loop3): Directory bread(block 70) failed [ 175.265043][ T8637] FAT-fs (loop3): Directory bread(block 71) failed [ 175.276900][ T8637] FAT-fs (loop3): Directory bread(block 72) failed [ 175.283675][ T8637] FAT-fs (loop3): Directory bread(block 73) failed [ 175.329725][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 175.358675][ T8639] loop0: detected capacity change from 0 to 8192 [ 175.365218][ T8643] loop3: detected capacity change from 0 to 8192 [ 175.462103][ T8643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8643 comm=syz.3.1919 [ 175.489729][ T3549] hid_parser_main: 16 callbacks suppressed [ 175.489747][ T3549] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4 [ 175.503317][ T3549] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2 [ 175.511032][ T3549] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x3 [ 175.519191][ T3549] hid-generic 0000:3000000:0000.002A: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.576920][ T3549] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x4 [ 175.584717][ T3549] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x2 [ 175.592620][ T3549] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x3 [ 175.600823][ T3549] hid-generic 0000:3000000:0000.002B: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.642373][ T8667] loop0: detected capacity change from 0 to 256 [ 175.655946][ T8667] FAT-fs (loop0): Directory bread(block 64) failed [ 175.662741][ T8667] FAT-fs (loop0): Directory bread(block 65) failed [ 175.669308][ T8667] FAT-fs (loop0): Directory bread(block 66) failed [ 175.675868][ T8667] FAT-fs (loop0): Directory bread(block 67) failed [ 175.682465][ T8667] FAT-fs (loop0): Directory bread(block 68) failed [ 175.689618][ T8667] FAT-fs (loop0): Directory bread(block 69) failed [ 175.696143][ T8667] FAT-fs (loop0): Directory bread(block 70) failed [ 175.702952][ T8667] FAT-fs (loop0): Directory bread(block 71) failed [ 175.710003][ T8667] FAT-fs (loop0): Directory bread(block 72) failed [ 175.716525][ T8667] FAT-fs (loop0): Directory bread(block 73) failed [ 175.835611][ T3401] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x4 [ 175.843373][ T3401] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x2 [ 175.851691][ T3401] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x3 [ 175.862086][ T3401] hid-generic 0000:3000000:0000.002C: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.947638][ T3401] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x4 [ 175.956695][ T3401] hid-generic 0000:3000000:0000.002D: hidraw0: HID v0.00 Device [sy] on syz0 [ 176.133766][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 176.158020][ T3798] Bluetooth: hci0: command 0x1003 tx timeout [ 176.164301][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.233983][ T3401] hid-generic 0000:3000000:0000.002E: hidraw0: HID v0.00 Device [sy] on syz0 [ 176.275253][ T29] kauditd_printk_skb: 818 callbacks suppressed [ 176.275280][ T29] audit: type=1400 audit(1765121564.309:25676): avc: denied { execmem } for pid=8725 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 176.320321][ T29] audit: type=1400 audit(1765121564.339:25677): avc: denied { setopt } for pid=8729 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.340131][ T29] audit: type=1400 audit(1765121564.339:25678): avc: denied { ioctl } for pid=8729 comm="syz.3.1956" path="socket:[25564]" dev="sockfs" ino=25564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.375259][ T29] audit: type=1400 audit(1765121564.399:25679): avc: denied { create } for pid=8729 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.394943][ T29] audit: type=1400 audit(1765121564.399:25680): avc: denied { connect } for pid=8729 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.414802][ T29] audit: type=1400 audit(1765121564.399:25681): avc: denied { write } for pid=8729 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.438292][ T29] audit: type=1326 audit(1765121564.459:25682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 176.461881][ T29] audit: type=1326 audit(1765121564.459:25683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 176.485366][ T29] audit: type=1326 audit(1765121564.459:25684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 176.509347][ T29] audit: type=1326 audit(1765121564.459:25685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019497f749 code=0x7ffc0000 [ 176.541836][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.611544][ T3401] hid-generic 0000:3000000:0000.002F: hidraw0: HID v0.00 Device [sy] on syz0 [ 176.638242][ T8754] loop1: detected capacity change from 0 to 256 [ 176.654404][ T8754] FAT-fs (loop1): Directory bread(block 64) failed [ 176.661148][ T8754] FAT-fs (loop1): Directory bread(block 65) failed [ 176.667755][ T8754] FAT-fs (loop1): Directory bread(block 66) failed [ 176.674417][ T8754] FAT-fs (loop1): Directory bread(block 67) failed [ 176.680993][ T8754] FAT-fs (loop1): Directory bread(block 68) failed [ 176.687626][ T8754] FAT-fs (loop1): Directory bread(block 69) failed [ 176.694221][ T8754] FAT-fs (loop1): Directory bread(block 70) failed [ 176.700920][ T8754] FAT-fs (loop1): Directory bread(block 71) failed [ 176.707523][ T8754] FAT-fs (loop1): Directory bread(block 72) failed [ 176.714183][ T8754] FAT-fs (loop1): Directory bread(block 73) failed [ 176.754138][ T8757] loop3: detected capacity change from 0 to 256 [ 176.771903][ T8757] FAT-fs (loop3): Directory bread(block 64) failed [ 176.781135][ T8757] FAT-fs (loop3): Directory bread(block 65) failed [ 176.787902][ T8757] FAT-fs (loop3): Directory bread(block 66) failed [ 176.794715][ T8757] FAT-fs (loop3): Directory bread(block 67) failed [ 176.801775][ T8757] FAT-fs (loop3): Directory bread(block 68) failed [ 176.808465][ T8757] FAT-fs (loop3): Directory bread(block 69) failed [ 176.815037][ T8757] FAT-fs (loop3): Directory bread(block 70) failed [ 176.821642][ T8757] FAT-fs (loop3): Directory bread(block 71) failed [ 176.828570][ T8757] FAT-fs (loop3): Directory bread(block 72) failed [ 176.835110][ T8757] FAT-fs (loop3): Directory bread(block 73) failed [ 176.873394][ T8765] sch_fq: defrate 4294967295 ignored. [ 177.090609][ T8784] loop0: detected capacity change from 0 to 8192 [ 177.198036][ T3387] hid-generic 0000:3000000:0000.0030: hidraw0: HID v0.00 Device [sy] on syz0 [ 177.402826][ T3387] hid-generic 0000:3000000:0000.0031: hidraw0: HID v0.00 Device [sy] on syz0 [ 177.514358][ T8795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8795 comm=syz.0.1983 [ 177.670447][ T3387] hid-generic 0000:3000000:0000.0032: hidraw0: HID v0.00 Device [sy] on syz0 [ 177.897180][ T5386] hid-generic 0000:3000000:0000.0033: hidraw0: HID v0.00 Device [sy] on syz0 [ 178.049458][ T8839] sch_fq: defrate 4294967295 ignored. [ 178.167986][ T3868] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 178.168006][ T3798] Bluetooth: hci1: command 0x1003 tx timeout [ 178.224702][ T8847] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8847 comm=syz.0.2004 [ 178.413181][ T8865] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.439877][ T8865] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.499480][ T8865] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.551588][ T8865] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.558062][ T3868] Bluetooth: hci0: command 0x1003 tx timeout [ 178.561707][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.626937][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.653874][ T68] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.662325][ T68] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.670860][ T68] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.853678][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 178.962446][ T8908] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.981181][ T68] Bluetooth: hci1: Frame reassembly failed (-84) [ 179.010422][ T8908] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.060279][ T8908] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.110140][ T8908] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.182343][ T8929] sch_fq: defrate 4294967295 ignored. [ 179.446576][ T3480] hid-generic 0000:3000000:0000.0034: hidraw0: HID v0.00 Device [sy] on syz0 [ 179.651360][ T5386] hid-generic 0000:3000000:0000.0035: hidraw0: HID v0.00 Device [sy] on syz0 [ 179.892112][ T8967] set_capacity_and_notify: 2 callbacks suppressed [ 179.892126][ T8967] loop3: detected capacity change from 0 to 256 [ 179.912744][ T8967] FAT-fs (loop3): Directory bread(block 64) failed [ 179.919335][ T8967] FAT-fs (loop3): Directory bread(block 65) failed [ 179.925922][ T8967] FAT-fs (loop3): Directory bread(block 66) failed [ 179.932520][ T8967] FAT-fs (loop3): Directory bread(block 67) failed [ 179.939100][ T8967] FAT-fs (loop3): Directory bread(block 68) failed [ 179.945634][ T8967] FAT-fs (loop3): Directory bread(block 69) failed [ 179.952186][ T8967] FAT-fs (loop3): Directory bread(block 70) failed [ 179.958752][ T8967] FAT-fs (loop3): Directory bread(block 71) failed [ 179.965256][ T8967] FAT-fs (loop3): Directory bread(block 72) failed [ 179.971850][ T8967] FAT-fs (loop3): Directory bread(block 73) failed [ 180.033942][ T3480] hid-generic 0000:3000000:0000.0036: hidraw0: HID v0.00 Device [sy] on syz0 [ 180.407158][ T8991] __nla_validate_parse: 32 callbacks suppressed [ 180.407174][ T8991] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2058'. [ 180.878005][ T3798] Bluetooth: hci0: command 0x1003 tx timeout [ 180.898038][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.913230][ T9003] sch_fq: defrate 4294967295 ignored. [ 181.038996][ T3868] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 181.045380][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 181.123101][ T3480] hid_parser_main: 58 callbacks suppressed [ 181.123162][ T3480] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x4 [ 181.136793][ T3480] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x2 [ 181.144982][ T3480] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x3 [ 181.160417][ T3480] hid-generic 0000:3000000:0000.0037: hidraw0: HID v0.00 Device [sy] on syz0 [ 183.686623][ T9025] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2070'. [ 184.046805][ T3401] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x4 [ 184.054629][ T3401] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x2 [ 184.095654][ T3401] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x3 [ 184.202515][ T29] kauditd_printk_skb: 1276 callbacks suppressed [ 184.202586][ T29] audit: type=1400 audit(1765121572.239:26962): avc: denied { write } for pid=9036 comm="syz.4.2074" path="socket:[27572]" dev="sockfs" ino=27572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.232695][ T3401] hid-generic 0000:3000000:0000.0038: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.360445][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 184.388930][ T3401] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 184.396349][ T3401] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 184.403771][ T3401] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 184.411179][ T3401] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 184.420171][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 184.429279][ T29] audit: type=1400 audit(1765121572.459:26963): avc: denied { ioctl } for pid=9036 comm="syz.4.2074" path="socket:[27572]" dev="sockfs" ino=27572 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.498145][ T9050] netlink: 'syz.4.2074': attribute type 10 has an invalid length. [ 184.518363][ T3401] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.611944][ T23] hid-generic 0000:3000000:0000.003A: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.652723][ T29] audit: type=1400 audit(1765121572.689:26964): avc: denied { write } for pid=9058 comm="syz.3.2083" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 184.919926][ T3401] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.946594][ T29] audit: type=1326 audit(1765121572.979:26965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 184.987472][ T29] audit: type=1326 audit(1765121573.009:26966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 185.011098][ T29] audit: type=1326 audit(1765121573.009:26967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 185.034693][ T29] audit: type=1326 audit(1765121573.009:26968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 185.058363][ T29] audit: type=1326 audit(1765121573.009:26969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 185.082011][ T29] audit: type=1326 audit(1765121573.009:26970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 185.105675][ T29] audit: type=1326 audit(1765121573.009:26971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1e94f749 code=0x7ffc0000 [ 185.133507][ T9082] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2092'. [ 185.174681][ T23] hid-generic 0000:3000000:0000.003C: hidraw0: HID v0.00 Device [sy] on syz0 [ 185.316569][ T9094] netlink: 280 bytes leftover after parsing attributes in process `+}[@'. [ 185.490111][ T9106] loop4: detected capacity change from 0 to 8192 [ 185.502371][ T9110] loop3: detected capacity change from 0 to 8192 [ 185.602902][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 185.660242][ T9122] netlink: 'syz.1.2109': attribute type 6 has an invalid length. [ 185.722124][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.754093][ T9136] geneve2: entered promiscuous mode [ 185.759455][ T9136] geneve2: entered allmulticast mode [ 185.894006][ T1030] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.905449][ T1030] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.917378][ T1030] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.928752][ T1030] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.010578][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2118'. [ 186.029230][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2118'. [ 186.029354][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 186.085902][ T3387] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [sy] on syz0 [ 186.108787][ T9164] netlink: 'syz.3.2118': attribute type 10 has an invalid length. [ 186.113520][ T9163] loop0: detected capacity change from 0 to 256 [ 186.133347][ T9166] loop4: detected capacity change from 0 to 256 [ 186.141665][ T9163] FAT-fs (loop0): Directory bread(block 64) failed [ 186.148467][ T9163] FAT-fs (loop0): Directory bread(block 65) failed [ 186.155672][ T9163] FAT-fs (loop0): Directory bread(block 66) failed [ 186.165547][ T9163] FAT-fs (loop0): Directory bread(block 67) failed [ 186.172268][ T9163] FAT-fs (loop0): Directory bread(block 68) failed [ 186.178954][ T9163] FAT-fs (loop0): Directory bread(block 69) failed [ 186.185674][ T9163] FAT-fs (loop0): Directory bread(block 70) failed [ 186.192433][ T9163] FAT-fs (loop0): Directory bread(block 71) failed [ 186.199194][ T9163] FAT-fs (loop0): Directory bread(block 72) failed [ 186.205975][ T9163] FAT-fs (loop0): Directory bread(block 73) failed [ 186.225170][ T9166] FAT-fs (loop4): Directory bread(block 64) failed [ 186.240760][ T9166] FAT-fs (loop4): Directory bread(block 65) failed [ 186.247666][ T9166] FAT-fs (loop4): Directory bread(block 66) failed [ 186.254512][ T9166] FAT-fs (loop4): Directory bread(block 67) failed [ 186.261277][ T9166] FAT-fs (loop4): Directory bread(block 68) failed [ 186.268008][ T9166] FAT-fs (loop4): Directory bread(block 69) failed [ 186.274746][ T9166] FAT-fs (loop4): Directory bread(block 70) failed [ 186.282508][ T9166] FAT-fs (loop4): Directory bread(block 71) failed [ 186.294045][ T9166] FAT-fs (loop4): Directory bread(block 72) failed [ 186.301110][ T9166] FAT-fs (loop4): Directory bread(block 73) failed [ 186.343744][ T9172] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.401155][ T9172] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.470576][ T9172] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.826859][ T9172] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.908548][ T338] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.050919][ T338] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.119623][ T338] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.317614][ T338] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.491600][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 187.515800][ T9196] loop3: detected capacity change from 0 to 256 [ 187.549495][ T9196] FAT-fs (loop3): Directory bread(block 64) failed [ 187.559345][ T9196] FAT-fs (loop3): Directory bread(block 65) failed [ 187.572405][ T9196] FAT-fs (loop3): Directory bread(block 66) failed [ 187.605791][ T9196] FAT-fs (loop3): Directory bread(block 67) failed [ 187.625884][ T9196] FAT-fs (loop3): Directory bread(block 68) failed [ 187.646626][ T9196] FAT-fs (loop3): Directory bread(block 69) failed [ 187.678034][ T9196] FAT-fs (loop3): Directory bread(block 70) failed [ 187.693628][ T3480] hid_parser_main: 98 callbacks suppressed [ 187.693743][ T3480] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x4 [ 187.707298][ T3480] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x2 [ 187.725885][ T9196] FAT-fs (loop3): Directory bread(block 71) failed [ 187.741346][ T9196] FAT-fs (loop3): Directory bread(block 72) failed [ 187.754449][ T3480] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x3 [ 187.762277][ T3868] Bluetooth: hci0: command 0x1003 tx timeout [ 187.768433][ T9196] FAT-fs (loop3): Directory bread(block 73) failed [ 187.849401][ T3480] hid-generic 0000:3000000:0000.003E: hidraw0: HID v0.00 Device [sy] on syz0 [ 187.859416][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.072481][ T9212] loop4: detected capacity change from 0 to 8192 [ 188.503360][ T9217] loop2: detected capacity change from 0 to 256 [ 188.553861][ T9217] FAT-fs (loop2): Directory bread(block 64) failed [ 188.573566][ T9217] FAT-fs (loop2): Directory bread(block 65) failed [ 188.589261][ T9217] FAT-fs (loop2): Directory bread(block 66) failed [ 188.604725][ T9217] FAT-fs (loop2): Directory bread(block 67) failed [ 188.631833][ T9217] FAT-fs (loop2): Directory bread(block 68) failed [ 188.642797][ T9217] FAT-fs (loop2): Directory bread(block 69) failed [ 188.650582][ T9217] FAT-fs (loop2): Directory bread(block 70) failed [ 188.657365][ T9217] FAT-fs (loop2): Directory bread(block 71) failed [ 188.664269][ T9217] FAT-fs (loop2): Directory bread(block 72) failed [ 188.670934][ T9217] FAT-fs (loop2): Directory bread(block 73) failed [ 188.735727][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 188.815725][ T9232] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2150'. [ 188.871681][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 188.912545][ T9243] loop0: detected capacity change from 0 to 256 [ 189.018566][ T9243] FAT-fs (loop0): Directory bread(block 64) failed [ 189.039011][ T9243] FAT-fs (loop0): Directory bread(block 65) failed [ 189.065839][ T9243] FAT-fs (loop0): Directory bread(block 66) failed [ 189.078152][ T9243] FAT-fs (loop0): Directory bread(block 67) failed [ 189.086409][ T9243] FAT-fs (loop0): Directory bread(block 68) failed [ 189.118110][ T9243] FAT-fs (loop0): Directory bread(block 69) failed [ 189.124719][ T9243] FAT-fs (loop0): Directory bread(block 70) failed [ 189.137983][ T9243] FAT-fs (loop0): Directory bread(block 71) failed [ 189.154656][ T9243] FAT-fs (loop0): Directory bread(block 72) failed [ 189.164746][ T9243] FAT-fs (loop0): Directory bread(block 73) failed [ 189.209374][ T29] kauditd_printk_skb: 837 callbacks suppressed [ 189.209390][ T29] audit: type=1326 audit(1765121577.249:27809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f073407f749 code=0x7ffc0000 [ 189.243879][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'. [ 189.254177][ T29] audit: type=1400 audit(1765121577.279:27810): avc: denied { mac_admin } for pid=9252 comm="syz.4.2162" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.275377][ T29] audit: type=1400 audit(1765121577.279:27811): avc: denied { relabelto } for pid=9252 comm="syz.4.2162" name="447" dev="tmpfs" ino=2355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 189.300707][ T29] audit: type=1400 audit(1765121577.279:27812): avc: denied { associate } for pid=9252 comm="syz.4.2162" name="447" dev="tmpfs" ino=2355 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 189.327022][ T29] audit: type=1400 audit(1765121577.279:27813): avc: denied { getopt } for pid=9252 comm="syz.4.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.346702][ T29] audit: type=1326 audit(1765121577.279:27814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073407f749 code=0x7ffc0000 [ 189.370184][ T29] audit: type=1326 audit(1765121577.279:27815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073407f749 code=0x7ffc0000 [ 189.393790][ T29] audit: type=1326 audit(1765121577.279:27816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f073401b829 code=0x7ffc0000 [ 189.417205][ T29] audit: type=1326 audit(1765121577.279:27817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073407f749 code=0x7ffc0000 [ 189.440764][ T29] audit: type=1326 audit(1765121577.279:27818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073407f749 code=0x7ffc0000 [ 189.466374][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 189.644275][ T9257] cgroup: fork rejected by pids controller in /syz0 [ 189.994943][ T3387] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x4 [ 190.002688][ T3387] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x2 [ 190.018029][ T3387] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x3 [ 190.028480][ T3387] hid-generic 0000:3000000:0000.003F: hidraw0: HID v0.00 Device [sy] on syz0 [ 190.435686][ T9405] loop3: detected capacity change from 0 to 8192 [ 190.459360][ T9408] loop1: detected capacity change from 0 to 8192 [ 190.799369][ T9421] __nla_validate_parse: 3 callbacks suppressed [ 190.799385][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 190.842030][ T9426] loop3: detected capacity change from 0 to 8192 [ 191.008653][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 191.026511][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 191.124653][ T9436] loop3: detected capacity change from 0 to 8192 [ 191.263875][ T3798] Bluetooth: hci0: command 0x1003 tx timeout [ 191.288844][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.009505][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 192.408090][ T3868] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 192.680625][ T9562] loop1: detected capacity change from 0 to 256 [ 192.694044][ T9562] FAT-fs (loop1): Directory bread(block 64) failed [ 192.700753][ T9562] FAT-fs (loop1): Directory bread(block 65) failed [ 192.707384][ T9562] FAT-fs (loop1): Directory bread(block 66) failed [ 192.714110][ T9562] FAT-fs (loop1): Directory bread(block 67) failed [ 192.720738][ T9562] FAT-fs (loop1): Directory bread(block 68) failed [ 192.727423][ T9562] FAT-fs (loop1): Directory bread(block 69) failed [ 192.734325][ T9562] FAT-fs (loop1): Directory bread(block 70) failed [ 192.741046][ T9562] FAT-fs (loop1): Directory bread(block 71) failed [ 192.747678][ T9562] FAT-fs (loop1): Directory bread(block 72) failed [ 192.754427][ T9562] FAT-fs (loop1): Directory bread(block 73) failed [ 192.778418][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.785843][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.793248][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.800641][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.808200][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.815595][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.823086][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.830498][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.837938][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.845367][ T23] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 192.853540][ T23] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [sy] on syz0 [ 192.987193][ T9579] loop0: detected capacity change from 0 to 256 [ 193.000990][ T9581] sch_fq: defrate 4294967295 ignored. [ 193.021679][ T9579] FAT-fs (loop0): Directory bread(block 64) failed [ 193.038019][ T9579] FAT-fs (loop0): Directory bread(block 65) failed [ 193.045534][ T9579] FAT-fs (loop0): Directory bread(block 66) failed [ 193.064907][ T9579] FAT-fs (loop0): Directory bread(block 67) failed [ 193.075055][ T9579] FAT-fs (loop0): Directory bread(block 68) failed [ 193.079216][ T9583] loop2: detected capacity change from 0 to 8192 [ 193.082932][ T9579] FAT-fs (loop0): Directory bread(block 69) failed [ 193.105824][ T9579] FAT-fs (loop0): Directory bread(block 70) failed [ 193.115117][ T9579] FAT-fs (loop0): Directory bread(block 71) failed [ 193.121975][ T9579] FAT-fs (loop0): Directory bread(block 72) failed [ 193.128828][ T9579] FAT-fs (loop0): Directory bread(block 73) failed [ 193.258933][ T9594] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2219'. [ 193.303177][ T3549] hid-generic 0000:3000000:0000.0041: hidraw0: HID v0.00 Device [sy] on syz0 [ 193.355336][ T9604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'. [ 193.364679][ T9604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'. [ 193.377714][ T9604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'. [ 193.386755][ T9604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'. [ 193.453842][ T9611] loop4: detected capacity change from 0 to 8192 [ 193.534023][ T3479] hid-generic 0000:3000000:0000.0042: hidraw0: HID v0.00 Device [sy] on syz0 [ 193.632884][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.646093][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.696831][ T3401] hid-generic 0000:3000000:0000.0043: hidraw0: HID v0.00 Device [sy] on syz0 [ 193.761260][ T9644] loop4: detected capacity change from 0 to 8192 [ 193.761346][ T9646] loop0: detected capacity change from 0 to 8192 [ 193.927574][ T23] hid-generic 0000:3000000:0000.0044: hidraw0: HID v0.00 Device [sy] on syz0 [ 193.975137][ T9662] loop3: detected capacity change from 0 to 256 [ 193.989225][ T9662] FAT-fs (loop3): Directory bread(block 64) failed [ 193.996282][ T9662] FAT-fs (loop3): Directory bread(block 65) failed [ 194.003075][ T9662] FAT-fs (loop3): Directory bread(block 66) failed [ 194.010132][ T9662] FAT-fs (loop3): Directory bread(block 67) failed [ 194.016826][ T9662] FAT-fs (loop3): Directory bread(block 68) failed [ 194.023598][ T9662] FAT-fs (loop3): Directory bread(block 69) failed [ 194.030237][ T9662] FAT-fs (loop3): Directory bread(block 70) failed [ 194.037054][ T9662] FAT-fs (loop3): Directory bread(block 71) failed [ 194.043774][ T9662] FAT-fs (loop3): Directory bread(block 72) failed [ 194.050495][ T9662] FAT-fs (loop3): Directory bread(block 73) failed [ 194.108043][ T3401] hid-generic 0000:3000000:0000.0045: hidraw0: HID v0.00 Device [sy] on syz0 [ 194.181058][ T9676] sch_fq: defrate 4294967295 ignored. [ 194.222439][ T29] kauditd_printk_skb: 908 callbacks suppressed [ 194.222454][ T29] audit: type=1400 audit(1765121582.259:28727): avc: denied { map_create } for pid=9680 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.248651][ T29] audit: type=1400 audit(1765121582.259:28728): avc: denied { bpf } for pid=9680 comm="syz.0.2258" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.269389][ T29] audit: type=1400 audit(1765121582.259:28729): avc: denied { map_read map_write } for pid=9680 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.289393][ T29] audit: type=1400 audit(1765121582.259:28730): avc: denied { prog_load } for pid=9680 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.308582][ T29] audit: type=1400 audit(1765121582.259:28731): avc: denied { perfmon } for pid=9680 comm="syz.0.2258" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.329627][ T29] audit: type=1400 audit(1765121582.259:28732): avc: denied { prog_run } for pid=9680 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.349916][ T29] audit: type=1400 audit(1765121582.289:28733): avc: denied { create } for pid=9680 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.369821][ T29] audit: type=1400 audit(1765121582.289:28734): avc: denied { bind } for pid=9680 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.389406][ T29] audit: type=1400 audit(1765121582.289:28735): avc: denied { connect } for pid=9680 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.409180][ T29] audit: type=1400 audit(1765121582.289:28736): avc: denied { accept } for pid=9680 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.441188][ T9686] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.456389][ T3479] hid-generic 0000:3000000:0000.0046: hidraw0: HID v0.00 Device [sy] on syz0 [ 194.490206][ T9686] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.529651][ T9686] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.580640][ T9686] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.680787][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.700480][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.703123][ T3479] hid-generic 0000:3000000:0000.0047: hidraw0: HID v0.00 Device [sy] on syz0 [ 194.709579][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.727537][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.917280][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.948066][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.968814][ T9705] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2267'. [ 195.198520][ T3549] hid-generic 0000:3000000:0000.0048: hidraw0: HID v0.00 Device [sy] on syz0 [ 195.327216][ T9711] loop3: detected capacity change from 0 to 8192 [ 195.741376][ T9727] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.810062][ T9727] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.879888][ T9727] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.939925][ T9727] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.998756][ T298] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.016447][ T298] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.047755][ T298] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.071362][ T298] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.154141][ T9737] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2281'. [ 196.274526][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 196.283704][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 196.298471][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 196.313992][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 196.323034][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 196.336248][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2287'. [ 196.710517][ T9771] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2296'. [ 196.858814][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 196.964453][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 197.932778][ T9815] set_capacity_and_notify: 1 callbacks suppressed [ 197.932797][ T9815] loop4: detected capacity change from 0 to 256 [ 197.990581][ T9815] FAT-fs (loop4): Directory bread(block 64) failed [ 198.019134][ T9815] FAT-fs (loop4): Directory bread(block 65) failed [ 198.044883][ T9815] FAT-fs (loop4): Directory bread(block 66) failed [ 198.070207][ T9815] FAT-fs (loop4): Directory bread(block 67) failed [ 198.097828][ T9815] FAT-fs (loop4): Directory bread(block 68) failed [ 198.114240][ T9815] FAT-fs (loop4): Directory bread(block 69) failed [ 198.136958][ T9815] FAT-fs (loop4): Directory bread(block 70) failed [ 198.159111][ T9815] FAT-fs (loop4): Directory bread(block 71) failed [ 198.175846][ T9815] FAT-fs (loop4): Directory bread(block 72) failed [ 198.184889][ T9815] FAT-fs (loop4): Directory bread(block 73) failed [ 198.247364][ T3479] hid_parser_main: 82 callbacks suppressed [ 198.247452][ T3479] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x4 [ 198.261049][ T3479] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x2 [ 198.344455][ T3479] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x3 [ 198.456905][ T3479] hid-generic 0000:3000000:0000.0049: hidraw0: HID v0.00 Device [sy] on syz0 [ 198.496657][ T9832] netlink: 'syz.4.2317': attribute type 10 has an invalid length. [ 199.062892][ T3479] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x4 [ 199.070615][ T3479] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x2 [ 199.105045][ T3479] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x3 [ 199.159780][ T3479] hid-generic 0000:3000000:0000.004A: hidraw0: HID v0.00 Device [sy] on syz0 [ 199.228242][ T29] kauditd_printk_skb: 1155 callbacks suppressed [ 199.228320][ T29] audit: type=1326 audit(1765121587.259:29892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 199.275717][ T3479] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x4 [ 199.282938][ T29] audit: type=1326 audit(1765121587.299:29893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43ed2965e7 code=0x7ffc0000 [ 199.283451][ T3479] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x2 [ 199.306797][ T29] audit: type=1326 audit(1765121587.299:29894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43ed23b829 code=0x7ffc0000 [ 199.337793][ T29] audit: type=1326 audit(1765121587.299:29895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 199.361442][ T29] audit: type=1326 audit(1765121587.309:29896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43ed2965e7 code=0x7ffc0000 [ 199.384842][ T29] audit: type=1326 audit(1765121587.309:29897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43ed23b829 code=0x7ffc0000 [ 199.408378][ T29] audit: type=1326 audit(1765121587.309:29898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 199.408847][ T3479] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x3 [ 199.442036][ T29] audit: type=1326 audit(1765121587.349:29899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43ed2965e7 code=0x7ffc0000 [ 199.465493][ T29] audit: type=1326 audit(1765121587.349:29900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f43ed23b829 code=0x7ffc0000 [ 199.488917][ T29] audit: type=1326 audit(1765121587.349:29901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed29f749 code=0x7ffc0000 [ 199.513362][ T3479] hid-generic 0000:3000000:0000.004B: hidraw0: HID v0.00 Device [sy] on syz0 [ 199.613521][ T3480] hid-generic 0000:3000000:0000.004C: unknown main item tag 0x4 [ 199.621965][ T3480] hid-generic 0000:3000000:0000.004C: hidraw0: HID v0.00 Device [sy] on syz0 [ 199.775817][ T9994] loop1: detected capacity change from 0 to 8192 [ 199.786984][T10001] loop0: detected capacity change from 0 to 256 [ 199.982820][T10001] FAT-fs (loop0): Directory bread(block 64) failed [ 200.008980][T10001] FAT-fs (loop0): Directory bread(block 65) failed [ 200.036960][T10001] FAT-fs (loop0): Directory bread(block 66) failed [ 200.098569][T10001] FAT-fs (loop0): Directory bread(block 67) failed [ 200.141115][T10001] FAT-fs (loop0): Directory bread(block 68) failed [ 200.179363][T10001] FAT-fs (loop0): Directory bread(block 69) failed [ 200.227545][T10001] FAT-fs (loop0): Directory bread(block 70) failed [ 200.265025][T10001] FAT-fs (loop0): Directory bread(block 71) failed [ 200.290208][T10001] FAT-fs (loop0): Directory bread(block 72) failed [ 200.316201][T10001] FAT-fs (loop0): Directory bread(block 73) failed [ 200.428763][T10024] loop1: detected capacity change from 0 to 256 [ 200.446983][T10024] FAT-fs (loop1): Directory bread(block 64) failed [ 200.505150][T10024] FAT-fs (loop1): Directory bread(block 65) failed [ 200.521237][T10024] FAT-fs (loop1): Directory bread(block 66) failed [ 200.528248][T10024] FAT-fs (loop1): Directory bread(block 67) failed [ 200.534826][T10024] FAT-fs (loop1): Directory bread(block 68) failed [ 200.541643][T10024] FAT-fs (loop1): Directory bread(block 69) failed [ 200.548554][T10024] FAT-fs (loop1): Directory bread(block 70) failed [ 200.555127][T10024] FAT-fs (loop1): Directory bread(block 71) failed [ 200.561704][T10024] FAT-fs (loop1): Directory bread(block 72) failed [ 200.569197][T10024] FAT-fs (loop1): Directory bread(block 73) failed [ 200.679099][ T3479] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [sy] on syz0 [ 200.831656][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.876310][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.203313][ T3479] hid-generic 0000:3000000:0000.004E: hidraw0: HID v0.00 Device [sy] on syz0 [ 201.290067][T10189] loop1: detected capacity change from 0 to 256 [ 201.330222][T10193] __nla_validate_parse: 10 callbacks suppressed [ 201.330262][T10193] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2390'. [ 201.352643][T10189] FAT-fs (loop1): Directory bread(block 64) failed [ 201.364837][T10189] FAT-fs (loop1): Directory bread(block 65) failed [ 201.436965][T10189] FAT-fs (loop1): Directory bread(block 66) failed [ 201.446781][T10189] FAT-fs (loop1): Directory bread(block 67) failed [ 201.453475][T10189] FAT-fs (loop1): Directory bread(block 68) failed [ 201.461234][T10189] FAT-fs (loop1): Directory bread(block 69) failed [ 201.467824][T10189] FAT-fs (loop1): Directory bread(block 70) failed [ 201.474728][T10189] FAT-fs (loop1): Directory bread(block 71) failed [ 201.481416][T10189] FAT-fs (loop1): Directory bread(block 72) failed [ 201.488200][T10189] FAT-fs (loop1): Directory bread(block 73) failed [ 201.929560][ T3479] hid-generic 0000:3000000:0000.004F: hidraw0: HID v0.00 Device [sy] on syz0 [ 202.068454][ T3479] hid-generic 0000:3000000:0000.0050: hidraw0: HID v0.00 Device [sy] on syz0 [ 202.100651][T10328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2405'. [ 202.149750][T10331] loop0: detected capacity change from 0 to 8192 [ 202.373518][ T3479] hid-generic 0000:3000000:0000.0051: hidraw0: HID v0.00 Device [sy] on syz0 [ 202.596716][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 202.643245][T10460] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.656081][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 202.672380][T10457] loop3: detected capacity change from 0 to 8192 [ 202.742450][T10460] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.771169][ T23] hid-generic 0000:3000000:0000.0052: hidraw0: HID v0.00 Device [sy] on syz0 [ 202.830375][T10460] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.901800][T10460] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.971456][ T1030] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.995707][ T1030] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.023771][ T1030] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.046794][ T1030] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.165416][T10605] loop0: detected capacity change from 0 to 256 [ 203.186805][T10605] FAT-fs (loop0): Directory bread(block 64) failed [ 203.201485][T10605] FAT-fs (loop0): Directory bread(block 65) failed [ 203.216922][T10605] FAT-fs (loop0): Directory bread(block 66) failed [ 203.225426][T10603] loop1: detected capacity change from 0 to 8192 [ 203.233220][T10605] FAT-fs (loop0): Directory bread(block 67) failed [ 203.240274][T10605] FAT-fs (loop0): Directory bread(block 68) failed [ 203.247000][T10605] FAT-fs (loop0): Directory bread(block 69) failed [ 203.254960][T10605] FAT-fs (loop0): Directory bread(block 70) failed [ 203.262568][T10605] FAT-fs (loop0): Directory bread(block 71) failed [ 203.288134][T10605] FAT-fs (loop0): Directory bread(block 72) failed [ 203.312573][T10605] FAT-fs (loop0): Directory bread(block 73) failed [ 203.373594][T10610] loop3: detected capacity change from 0 to 8192 [ 203.449726][ T3401] hid_parser_main: 72 callbacks suppressed [ 203.449756][ T3401] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x4 [ 203.463439][ T3401] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x2 [ 203.477721][ T3401] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x3 [ 203.487637][ T3401] hid-generic 0000:3000000:0000.0053: hidraw0: HID v0.00 Device [sy] on syz0 [ 203.590875][T10635] loop2: detected capacity change from 0 to 8192 [ 203.626109][T10638] loop3: detected capacity change from 0 to 256 [ 203.653452][T10638] FAT-fs (loop3): Directory bread(block 64) failed [ 203.671987][T10638] FAT-fs (loop3): Directory bread(block 65) failed [ 203.690159][T10638] FAT-fs (loop3): Directory bread(block 66) failed [ 203.704763][T10638] FAT-fs (loop3): Directory bread(block 67) failed [ 203.726433][T10638] FAT-fs (loop3): Directory bread(block 68) failed [ 203.739933][T10638] FAT-fs (loop3): Directory bread(block 69) failed [ 203.758048][T10638] FAT-fs (loop3): Directory bread(block 70) failed [ 203.764873][T10638] FAT-fs (loop3): Directory bread(block 71) failed [ 203.786907][T10638] FAT-fs (loop3): Directory bread(block 72) failed [ 203.808662][T10638] FAT-fs (loop3): Directory bread(block 73) failed [ 203.817920][ T3401] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x4 [ 203.825713][ T3401] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x2 [ 203.858041][ T3401] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x3 [ 203.867546][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.893735][ T3401] hid-generic 0000:3000000:0000.0054: hidraw0: HID v0.00 Device [sy] on syz0 [ 203.908108][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.920242][T10648] loop2: detected capacity change from 0 to 8192 [ 204.220357][ T1030] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.230975][T10677] loop3: detected capacity change from 0 to 256 [ 204.238641][ T29] kauditd_printk_skb: 1118 callbacks suppressed [ 204.238656][ T29] audit: type=1400 audit(1765121592.279:31021): avc: denied { create } for pid=10670 comm="syz.2.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.251580][T10677] FAT-fs (loop3): Directory bread(block 64) failed [ 204.265615][ T29] audit: type=1326 audit(1765121592.269:31019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073407f749 code=0x7ffc0000 [ 204.295668][ T29] audit: type=1326 audit(1765121592.279:31022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07340765e7 code=0x7ffc0000 [ 204.305509][T10677] FAT-fs (loop3): Directory bread(block 65) failed [ 204.319179][ T29] audit: type=1326 audit(1765121592.279:31023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f073401b829 code=0x7ffc0000 [ 204.319216][ T29] audit: type=1326 audit(1765121592.279:31024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073407f749 code=0x7ffc0000 [ 204.356589][T10677] FAT-fs (loop3): Directory bread(block 66) failed [ 204.372871][ T29] audit: type=1400 audit(1765121592.319:31025): avc: denied { read } for pid=10674 comm="syz.1.2469" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 204.400727][ T29] audit: type=1400 audit(1765121592.319:31026): avc: denied { open } for pid=10674 comm="syz.1.2469" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 204.401333][T10677] FAT-fs (loop3): Directory bread(block 67) failed [ 204.424203][ T29] audit: type=1400 audit(1765121592.319:31027): avc: denied { create } for pid=10674 comm="syz.1.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.450895][ T29] audit: type=1326 audit(1765121592.319:31028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07340765e7 code=0x7ffc0000 [ 204.463121][T10677] FAT-fs (loop3): Directory bread(block 68) failed [ 204.474811][ T29] audit: type=1326 audit(1765121592.319:31029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f073401b829 code=0x7ffc0000 [ 204.513040][T10677] FAT-fs (loop3): Directory bread(block 69) failed [ 204.520013][T10677] FAT-fs (loop3): Directory bread(block 70) failed [ 204.520682][ T3549] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x4 [ 204.526742][T10677] FAT-fs (loop3): Directory bread(block 71) failed [ 204.534277][ T3549] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x2 [ 204.541411][ T3549] hid-generic 0000:3000000:0000.0055: unknown main item tag 0x3 [ 204.558508][T10677] FAT-fs (loop3): Directory bread(block 72) failed [ 204.565248][ T3549] hid-generic 0000:3000000:0000.0055: hidraw0: HID v0.00 Device [sy] on syz0 [ 204.574156][T10685] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2473'. [ 204.575714][T10677] FAT-fs (loop3): Directory bread(block 73) failed [ 204.682487][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.692346][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.695592][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 204.792797][T10710] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2485'. [ 205.005751][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 205.121268][T10936] loop2: detected capacity change from 0 to 8192 [ 205.172107][T10938] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2498'. [ 205.284156][T10947] loop4: detected capacity change from 0 to 8192 [ 205.341920][ T3401] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x4 [ 205.358558][ T3401] hid-generic 0000:3000000:0000.0056: hidraw0: HID v0.00 Device [sy] on syz0 [ 205.429880][ T3401] hid-generic 0000:3000000:0000.0057: hidraw0: HID v0.00 Device [sy] on syz0 [ 205.528313][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'. [ 205.762426][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.780459][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.981402][T11086] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.030732][T11086] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.047909][T11091] netlink: 'syz.0.2521': attribute type 6 has an invalid length. [ 206.069239][T11091] IPVS: persistence engine module ip_vs_pe_ not found [ 206.079830][T11086] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.129991][T11086] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.145400][T11090] ================================================================== [ 206.153583][T11090] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step [ 206.161832][T11090] [ 206.164149][T11090] write to 0xffff888128a894dc of 4 bytes by task 28 on cpu 0: [ 206.171595][T11090] rcu_tasks_trace_pregp_step+0x1ac/0x920 [ 206.177323][T11090] rcu_tasks_wait_gp+0x8b/0x530 [ 206.182215][T11090] rcu_tasks_one_gp+0x7f6/0x8e0 [ 206.187061][T11090] rcu_tasks_kthread+0xf7/0x110 [ 206.191929][T11090] kthread+0x489/0x510 [ 206.196011][T11090] ret_from_fork+0x149/0x290 [ 206.200612][T11090] ret_from_fork_asm+0x1a/0x30 [ 206.205394][T11090] [ 206.207709][T11090] read to 0xffff888128a89080 of 3264 bytes by task 11090 on cpu 1: [ 206.215592][T11090] memcpy_and_pad+0x48/0x80 [ 206.220107][T11090] arch_dup_task_struct+0x2c/0x40 [ 206.225129][T11090] dup_task_struct+0x6e/0x950 [ 206.229820][T11090] copy_process+0x37d/0x1ef0 [ 206.234413][T11090] kernel_clone+0x16c/0x5c0 [ 206.237995][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 206.238916][T11090] __se_sys_clone3+0x1c2/0x200 [ 206.249743][T11090] __x64_sys_clone3+0x31/0x40 [ 206.254424][T11090] x64_sys_call+0x2c0f/0x3000 [ 206.259101][T11090] do_syscall_64+0xd8/0x2a0 [ 206.263617][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.269603][T11090] [ 206.271955][T11090] Reported by Kernel Concurrency Sanitizer on: [ 206.278106][T11090] CPU: 1 UID: 0 PID: 11090 Comm: syz.0.2521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.287907][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.297977][T11090] ================================================================== [ 206.336673][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.347844][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.360026][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.371392][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0