last executing test programs: 12.769568709s ago: executing program 2 (id=377): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@updpolicy={0xb8, 0x1d, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8000000000000001}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0xfffffffffffffe00, 0x0, 0x2, 0x100000001, 0xd]}, &(0x7f0000000440)=0x78) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)) sendmsg$kcm(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}, 0x20000084) add_key$user(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) 11.415733308s ago: executing program 2 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002940)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x3, 0x6}, 0x6, 0x1}, [{0x10000, 0x4, 0x7, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x1285, 0x401, 0xb0d0, 0x9}, {0x6, 0x7f, 0x4, 0x800, 0x4, 0x8}, {0x5, 0x0, 0xa08c, 0x81, 0x4}, {0x800, 0x200, 0x800, 0x4, 0x3, 0x2}, {0xffff, 0xfffffffc, 0x8001, 0x17, 0x4, 0x1}, {0xfffffffd, 0x4, 0x0, 0x4, 0x75, 0x8001}, {0x6, 0x200, 0xffffff00, 0x4, 0x7, 0x1}, {0x6, 0x4, 0x14ba, 0x0, 0x5, 0x5}, {0x4, 0xd, 0x8000, 0x125ee151, 0xffff, 0x2}, {0x9e39, 0x4000, 0x7fffffff, 0x4, 0x0, 0x3ff}, {0x0, 0x5, 0x9, 0x3ff, 0x7, 0x7}, {0x5, 0x8001, 0x7, 0x1000, 0x6, 0x4}, {0x0, 0x1, 0x8, 0x6, 0xfffffffc, 0x6}, {0x2, 0x9, 0x8, 0x9, 0x0, 0x40}, {0x3, 0x1ff, 0x7, 0x2, 0x6}, {0x1, 0x3, 0x5, 0x5, 0x9, 0x9}, {0x3, 0x80000007, 0x4, 0xfffffffd, 0x9, 0x2}, {0xee4b, 0x1, 0x7f, 0xc494, 0x3, 0x5409}, {0x0, 0xb, 0x3, 0xa, 0x6, 0x7f}, {0x5, 0x401000, 0x0, 0x2, 0x1, 0x9}, {0xa, 0x7, 0x2, 0x8, 0x8, 0xc8}, {0x4, 0x5b90, 0x7f, 0x9, 0x7, 0x7}, {0x7, 0x7fff, 0x3, 0x6, 0x9, 0x5}, {0x2000000, 0x0, 0x3, 0x7, 0x1, 0x9}, {0x4, 0x0, 0x9, 0x80000001, 0x3b, 0x6}, {0x1ff, 0x1, 0x0, 0x2, 0x2, 0x458f}, {0x469, 0xcfe, 0x4, 0xff, 0xf9, 0x1}, {0x2, 0x9, 0x2, 0xa122, 0x8, 0x8001}, {0x80000001, 0x10, 0x81, 0x6, 0x8}, {0x91a, 0xb2, 0x9, 0xd30, 0x401, 0x8001}, {0xfa8f, 0x0, 0x8, 0x8, 0xffff, 0x8001}, {0xcf7, 0x416ad2ec, 0x401, 0x30000, 0x5, 0xd12}, {0x1, 0x2, 0x7, 0x10, 0xfffffff1, 0x275dca9e}, {0x0, 0xffffff44, 0x7ff, 0x7, 0x0, 0x6}, {0xffff, 0x7fff, 0x1fa, 0x8, 0x8, 0x7fffffff}, {0x8, 0x4, 0x100, 0x6, 0x5, 0xfff}, {0xd, 0x2, 0xf38, 0x8, 0x80000001, 0x4}, {0x4, 0x8000, 0x8, 0xddd, 0x1, 0x5}, {0xa, 0x6, 0x7, 0x8, 0x100, 0x400}, {0xc, 0x625f, 0x3, 0xc, 0xffff, 0x9}, {0x9, 0x400, 0x8, 0x1000, 0x4, 0x81}, {0x1ff, 0x9, 0xe39, 0x2, 0x5, 0x4}, {0x80, 0xfffff001, 0x7, 0x1c00000, 0x5, 0x9}, {0x8, 0x6, 0x2, 0x3, 0xacc, 0xffff}, {0x9, 0x7fffffff, 0x8, 0x3, 0x0, 0x3}, {0x2015, 0x0, 0x6c9, 0x3, 0xffffcd26, 0x3}, {0x1, 0x1, 0x3, 0x80, 0x2eba, 0xff}, {0x6, 0x0, 0x401, 0x2, 0x9, 0x3}, {0x93, 0x3, 0x1, 0x4, 0x9, 0xaef6}, {0x3, 0xb3, 0x7, 0x6, 0x800, 0x4}, {0xb, 0x806, 0x5, 0x2, 0xde4, 0x2}, {0x9, 0x4, 0x0, 0x401000, 0xfff}, {0x1, 0x6, 0xc5, 0x401, 0x6}, {0x5, 0x3, 0x9, 0xb6c9, 0xfffffffa, 0xff}, {0x10000, 0x5, 0x9, 0xfffffffa, 0x7, 0x6}, {0x7, 0x6, 0x10000000, 0x4, 0x8, 0xfffffff7}, {0x0, 0xfffffff9, 0x1, 0xfffffffa, 0x3}, {0x1, 0x4, 0x9, 0x5, 0x3, 0xa}, {0x3, 0x6, 0x81, 0x5, 0x7f, 0x2}, {0x3, 0x4, 0x1, 0x2, 0x2, 0xfffffff3}, {0x1cff, 0x1, 0x2, 0x8, 0x3f, 0x5e}, {0x3, 0xffff, 0x4, 0x22, 0x9, 0x59}, {0x3, 0x8, 0xd31, 0x1, 0x5002, 0xbf53}, {0x4, 0x100, 0x5, 0x5, 0x9, 0x9}, {0x1, 0x7, 0x5, 0x0, 0x3}, {0x4, 0x40, 0xfffffffc, 0x9, 0x9aad, 0xdac1}, {0xa1, 0x9, 0x7fffffff, 0x3, 0x800, 0x1}, {0x3, 0x7, 0x1, 0x8, 0x3, 0x6b10165f}, {0xfffffffb, 0xd, 0x6, 0x3, 0x8, 0x56}, {0x3, 0xd2, 0x1, 0x100, 0x0, 0x2}, {0xb, 0x5, 0x200, 0x7fffffff, 0xe, 0xffff}, {0x7f, 0x9, 0x12e842f4, 0x693, 0x5, 0x400}, {0x4, 0x8, 0x0, 0x7, 0x1000, 0x7}, {0xfff, 0x0, 0x3, 0x3, 0x81}, {0x5, 0x9, 0x8, 0x400, 0x401, 0x6}, {0x2, 0x16, 0xdae, 0x4, 0xfffffffc, 0xb9a}, {0x101, 0x8001, 0xff, 0x7, 0x600, 0x5eb}, {0x2, 0x1, 0x6aa8, 0x4000, 0x0, 0x5}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x7}, {0x4008, 0xb4a9, 0x339, 0xfffffff7, 0x8, 0x7}, {0x0, 0x8ef, 0x8, 0x7, 0x7, 0x3}, {0x4, 0xe, 0x8, 0x3, 0x3, 0x101}, {0xa, 0x2, 0x4, 0x6, 0x200, 0xfffffffc}, {0x8, 0x498, 0xffffff3a, 0xc000000, 0x4, 0x7}, {0x1, 0xb7, 0xf, 0xfff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x6, 0x2000000, 0x4c5}, {0x8, 0x1, 0x6, 0xff, 0xffffffff, 0x3ff}, {0x4b, 0x4, 0x7, 0x1, 0x8, 0x200}, {0x81, 0xfffffffa, 0x9, 0x7894, 0x4}, {0x8, 0x800, 0xfffffffe, 0x4, 0x7, 0x101}, {0x6, 0x9, 0x80000001, 0x3, 0x21, 0xf49}, {0x0, 0x7, 0x1, 0x6, 0xba6d, 0x8}, {0x5, 0x4a9, 0x1, 0x3, 0xe, 0x5}, {0x3, 0x0, 0x6, 0x2, 0x5, 0x7}, {0x2, 0x40, 0x9bf, 0x3, 0x80, 0x9}, {0x3fe, 0x3, 0x84f, 0x0, 0x7, 0x7}, {0x0, 0x4, 0x81, 0x8001, 0x8, 0x74}, {0x1ff, 0x0, 0x10000, 0x7, 0xff, 0x5}, {0x8bf, 0x8, 0x200, 0xfffffffb, 0x8, 0x6}, {0x6, 0xac2, 0x5, 0x2, 0x7ff, 0xfffffff8}, {0x1, 0x5, 0x7fffffff, 0x43, 0xfffff001, 0xfb}, {0xe, 0x8cd6, 0x5, 0x0, 0xa, 0x8}, {0x2, 0x0, 0x1, 0x2, 0x101, 0x9}, {0xd, 0x7, 0x3, 0x4, 0x1, 0x4}, {0x8, 0x1, 0x8, 0x8, 0x1, 0x1}, {0xd1b, 0x7f, 0x6, 0x6, 0x4}, {0x1, 0xffff, 0x80000000, 0x800, 0x0, 0x8}, {0x5, 0x0, 0x101, 0x3, 0x3ff, 0xc0e}, {0xc, 0x9, 0xb, 0x8, 0xe00, 0x80000000}, {0x6c4e, 0xf, 0x1, 0x6, 0x2, 0x1}, {0x6, 0x2, 0x8, 0xad2, 0x6, 0x400}, {0x40, 0x8001, 0x9, 0x9, 0x5, 0xffff}, {0x4, 0x5d24, 0x5, 0xf, 0x772, 0x100}, {0x10, 0x5, 0x0, 0x4, 0x6, 0x1}, {0x7, 0x3, 0x800, 0x250, 0x100, 0x9}, {0x6, 0x7f, 0x100, 0x6, 0x8, 0x4}, {0xb61, 0x7, 0x7fff, 0x2, 0xc3, 0x2}, {0x0, 0x9, 0x8, 0xec30, 0x4, 0x2}, {0x10, 0x2000000, 0xd1bcbe4, 0x10000, 0x0, 0x1}, {0x49f, 0x6, 0x3, 0x9, 0x9, 0xffffff01}, {0x4b0, 0x445a3bbc, 0xf39, 0xc0, 0x3ff, 0x5}, {0x80000000, 0x6, 0x4b4, 0xf3, 0x5, 0x4}, {0x9, 0x0, 0x4, 0x0, 0x5, 0xffffffff}, {0x5388, 0x80000001, 0xfffffff9, 0x1, 0x4f, 0x76d}, {0x8, 0x3, 0x4, 0xe, 0x151, 0x2}, {0x2, 0x7224, 0x8, 0xfffff90e, 0x0, 0x7d6a7490}, {0x2, 0x0, 0x8, 0x7, 0x0, 0x7}], [{}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {}, {}, {}, {0x5, 0x1cbd97c212d608d4}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0xffcf6d4e6fee8093}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) 11.116625201s ago: executing program 2 (id=382): r0 = socket$inet(0xa, 0x801, 0x84) semget(0x1, 0x1, 0x192) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, "8162b068f08d2a3f9a00001000ff4eb1d936ff"}) r2 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) write$tun(0xffffffffffffffff, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x26008001) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 10.592195716s ago: executing program 0 (id=383): setreuid(0xee01, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, @in=@local, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0xa, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x24, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x24}}, 0x8040010) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) msgget$private(0x0, 0xe4ffffff) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181402, 0x0) fsync(r5) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a"], 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 9.488662891s ago: executing program 3 (id=385): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x7c1807, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x2, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000480)={r6, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x800, 0x2, 0xdf000000, 0x6, 0x8001}, &(0x7f0000000300)=0x98) sendto$inet6(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240), &(0x7f0000000200)) 8.751979774s ago: executing program 3 (id=387): rseq(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES64], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) creat(&(0x7f0000000040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=@random={'trusted.', 'tlsW\x00\xef\xe9\xc1\xa2\x1f\x11\xf5\x1b%!\x85\xd3\x19'}) 8.160649428s ago: executing program 3 (id=388): mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000000000,privport']) 8.128313339s ago: executing program 0 (id=389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000300)=""/84) 7.154440308s ago: executing program 0 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000000008000200050000000a0006"], 0x4c}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000240)={0x1, r8, r7}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x60, r10, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r14 = syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r14, 0x1, &(0x7f0000000080)=0x7) 7.153243485s ago: executing program 3 (id=392): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x11080, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) getsockopt$inet_int(r2, 0x10d, 0xc4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000001700), 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r4, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}], 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000002180)={0xa, 0x0, 0x80000000, @mcast1, 0x1}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmmsg$inet6(r6, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002080)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0xfffffff3, @private2, 0xfffffffc}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="79ca97dee393a299a6f2efe40aaae4993d7babed1a9e20903d51c8", 0x1b}, {&(0x7f00000003c0)="b24a68231899ace9488be0dbb8f2259aeb34ea6892a7919959043262c1", 0x1d}], 0x2, &(0x7f00000021c0)}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x4, @private2, 0x9}, 0x1c, &(0x7f0000000800)=[{0x0}], 0x1}}], 0x3, 0x400c81c) socket$nl_generic(0x10, 0x3, 0x10) 5.770927941s ago: executing program 0 (id=394): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%\x00\x002', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r3, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r3, 0x6, 0x0, @val=@tracing}, 0x40) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002d000100000000000000000001"], 0x114}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c000000100002040000000000000000006e0986dbed44bf080eb8000400", @ANYRES32=0x0, @ANYBLOB="97020000000000005c00128009000100626f6e64000000004c00028008000a00000000001800088000000000e00000017f0000016401010200000000050001000000000008000700010000"], 0x8c}}, 0x0) 5.65050848s ago: executing program 3 (id=395): syz_usb_connect$cdc_ecm(0x4, 0x81, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x8, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0xf7, {{0x8, 0x24, 0x6, 0x0, 0x0, "2cdbe0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x34f, 0x81, 0x80}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0xa, 0x6, 0x3}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0x3, 0x5, 0x3, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x81, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xf1, 0xdad}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x8, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x40, 0x8}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000) r1 = getpid() sched_setaffinity(0x0, 0x58, &(0x7f00000002c0)=0xffffffffffffe5f6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) r6 = dup2(r5, r5) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) write$P9_RREADDIR(r6, &(0x7f0000000180)={0x2a, 0x29, 0x2, {0x2, [{{0x1, 0x80001, 0x1}, 0x0, 0xf8, 0x7, './file0'}]}}, 0x2a) clock_getres(0x6, &(0x7f0000000000)) unshare(0x62040200) 5.540182196s ago: executing program 0 (id=396): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x0, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 5.248186269s ago: executing program 0 (id=399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x604beb11e6f3d84c, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback=0x7f000011, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, r2, 0x100, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r7, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x2, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2d4197505caaa5ca}, 0x40000) 4.943166721s ago: executing program 32 (id=399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x604beb11e6f3d84c, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback=0x7f000011, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, r2, 0x100, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r7, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x2, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2d4197505caaa5ca}, 0x40000) 4.932867173s ago: executing program 1 (id=401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000300)=""/84) 4.932383816s ago: executing program 2 (id=402): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000d0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x0, 0x800000000000, 0x6, 0xffffffffffffffff, 0x1, 0x2, 0x7fff, 0x5dbc, 0x4, 0x5, 0x5, 0x5, 0x8, 0xffffffffffff6bee, 0xffffffff, 0x8001, 0x2a4b, 0x7, 0x7, 0x9, 0x1c3f, 0x9, 0xf, 0x4, 0xfffffffffffff08f, 0x8d1}) 4.380760466s ago: executing program 1 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xe8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xcc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9cc155ac8747d69c4792d8df45e694d2833f7274654aea52f21a964084c6bb16"}, @NL802154_KEY_ATTR_ID={0x9c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20044011}, 0x4000880) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x20, 0x1, 0x3, 0xfe, 0x2}}, 0x1c}}, 0x0) 4.308072959s ago: executing program 4 (id=404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x1e, 0x25, 0x40, 0x45e, 0xf4, 0xd551, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xe9, 0xbe}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002380)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x304c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x82) write$UHID_CREATE2(r0, &(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 4.264156992s ago: executing program 2 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={'streebog512\x00'}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDISABIO(r2, 0x4b37) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffa) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004d40)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f00000005c0)={0x0}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000280)) r9 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) 4.056304195s ago: executing program 1 (id=406): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x11080, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) getsockopt$inet_int(r2, 0x10d, 0xc4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000001700), 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r4, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}], 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000002180)={0xa, 0x0, 0x80000000, @mcast1, 0x1}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmmsg$inet6(r6, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002080)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0xfffffff3, @private2, 0xfffffffc}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="79ca97dee393a299a6f2efe40aaae4993d7babed1a9e20903d51c8", 0x1b}, {&(0x7f00000003c0)="b24a68231899ace9488be0dbb8f2259aeb34ea6892a7919959043262c1", 0x1d}], 0x2, &(0x7f00000021c0)}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x4, @private2, 0x9}, 0x1c, &(0x7f0000000800)=[{0x0}], 0x1}}], 0x3, 0x400c81c) socket$nl_generic(0x10, 0x3, 0x10) 3.035411268s ago: executing program 1 (id=407): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="cc000000efc20841d164e7961ba4bb33f6a4f61b62c7a41523cf36606a934998473c0c6c666b18a5c7e563be0299f90d93b64da6701e8e1e37ea27e37b5abd96fe632c2d03e06e7c397cdf1053e802965f531384ef955a64", @ANYRESOCT, @ANYBLOB="01002cbd7000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x40035) timer_create(0x5, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={&(0x7f0000000300)="d97d558b8ba9e84ffba0e98de77a68864c0787ed520a217ccfb85fe46df9d1f9acc6aa3979705bcd885cbb2309209a9c2cc828c01c0139274a660b3fe7ba1c6c1fffcda18cdd", &(0x7f0000001300)="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"}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940), 0x480042, 0x0) ioctl$TCFLSH(r1, 0x80045438, 0x300000000000000) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x12, 0x4, @thr={&(0x7f0000000780)="0519db92119dda19f259af4c4515ac94e90308cee30467ccf2b15bfb61b59617d869ccc914e3d8d361124b05dcb20165bba3665033c35c4d40855a0a2aebb882d46592b39d915c60bd88f449d9163ad1d1bc848b3aa03d37264fa96ce46954b82b93ba139d95e39bb421f18a609917bdf3252ca8a6841ed353d5ca3c6fe67448b3ed20f82caea308b7f3961217cf405444b678afca98eb78322e5bb6ec04167a61936e05c96b4b32", &(0x7f0000000840)="e4fb1460fb92"}}, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="b7bf165c5c55635274805839f7d5c39455d3f350c055386d8a3abd85ceb89521e6ae5a324170dd446df93257d3f9bd70c93703c23cc530759905e5c394d6de3d07495802185ae479cfa5fbe8f491efae0c0d8e2696d621d5b706002f4acba78781e694b1f841f91e38c8aaf51f8aaebb314a4c64d0f64622884c3371287663220b2354e9c7872d09630d7327ccbb7b594e5084cac211855a011340908e03f7af441145ef17e693d612bc3971e2121243176480fcf6dfca0dc9100c19a797fc8641c368c382e783d85353676b610a40c90f3366f1a22966705d67e052614877c58aab8aca7d2d2635fdf003b9a5afc296fa6e1aa366efd9", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085001f000c000000b700000000006849aeb02b9fb979fe493c5e1be0b5c677caac4d4c5c6f22ac42b333dd658c2ad2d003bc1bce1415e255a75296de4113907ab4edfb1ea2917b7d2433be9a04b41360f3808da7baef5e509e0be41e7097b5ae1af262d3c375ddfc844398bae64d23443af692bfedf757537c6f259d63e6ce761f321044231c70c5b6651cbc2e68de963ec89f673351445ff19b74a79d3acad6"], &(0x7f0000000380)='syzkaller\x00', 0xfffffffe, 0xffffffffffffff18, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000100), 0x8) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, 0x0, &(0x7f00000000c0)=r3}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=r0], 0x48) 2.468266838s ago: executing program 4 (id=408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x3f}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.466491336s ago: executing program 3 (id=409): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x0, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.41332233s ago: executing program 4 (id=410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioperm(0x4, 0x9fe6, 0xfffffffffffffff7) r3 = io_uring_setup(0x4fe1, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x1}) r4 = dup2(r3, r3) eventfd(0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x28, 0x3, r5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x4}}) io_uring_enter(r5, 0x47ff, 0xd377, 0x5, 0x0, 0x0) gettid() 1.380244565s ago: executing program 1 (id=411): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) listen(r0, 0x9) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200, 0x100, 0x22}, 0x18) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="e3b21fa70370b847f7f504a70abc9c37d087ea7c48af31c8d08fddf00cb899359a1b17b322ad8cc068b30fa778d83b9bce0be158de7436c974cbc98849604555eeadddd86cd77b67d8f9b395c34414c100736ec71577bb749443df233948616a3fbc91c831d8c66aafefee2e72f6bda5bd37b5ec4d7c86e0f035cd7e05be8591fd71c9b6425bc24d6b62ec3fb74f2eba4538f2f57771c17c1060b8eb8ee943537d15b04902058ea248f5d0c39037dd8c48a1dc8e4dde5aa44c82a4cd1cb7a056677c", 0xc2}, {&(0x7f0000000200)="366b1f1207f349964bafdf360fab31177d6ef560303d3adfb27baa69a8029dd6f5ab13e76bbafcc49cd8d368b9be855d6d02d4361973c16f40d3f7d6", 0x3c}, {&(0x7f0000000240)="69229b3949909375facb1d7250f94434bdabf6040c0c3f144a7f45801eb980b3fb127921a185120ad83ad283e22a5058efeafb98cb66611315d8ee1fe7ca2d2b24d25690ecb768c21ec6e8391f9f18ae0f8fb0465314375e9f68adcc9a80704493ec2ed6495f2a87f7b99a4ad09333bcb0106d2df14e6449c027e32e84c79f168eac0fee660542e2cad6fd12ba1a01fce8be47fa721cd39a0722bbada460016fcd42627992d2d93069d3786de8ec794840f73e93049175bcd22c3440be88b867a90b2a834a18ab37985fd0a933f6b2888fbd50553a487e7d583f654fc993e25b5a463f150fbbd64e378d0d6a1d9c955ab80ba9", 0xf3}, {&(0x7f0000000380)="a7dc8465111e66599d96f596d8abb0a8cd209afae6910da225cd739dde3a96954be334d27e54ca8845f138bfacbf56eda80cb5555d572a63d1006e1d8df2df0a342f093233fbabb4b46c53779da0a5afc7c502cbb3629b333c934530e4595e6bc6ab823a89ccec3f471b1ec8d6a83c58bb411b3b9f7e5484fdb8f3c5b4fe65274f364090ef3565e747566a3cd1d5e101f6dc22fcc3b13a651f7d8bc57683b92f8e8c42", 0xa3}, {&(0x7f0000000440)="c098f36ed4642620f426b196de1ce3bc20122716e788b7f6bd72f51379ca3db82a7ab5ab210761ee83f2c0e7b28fd2f278747505e32feb1bb81796b0f51ef1ce1afcadf5e3520abbb7268836cd86f9ab88bb885acc1cc35075c7a665387ae18a80cee6985f46aef2a9c466371361f25abf43e7eb744f3b252d5576ead73b504e0e4e786203dfbcf04189dfe12ee3b1b56476ba5d6ea6b40cf0932888be31ffc6002d00a7f51a30745d9906f8cce1059bb56a3a11da564bd3ba19703706d5c38a2cc926a6b5e06a2eeaf2e1c176a0add9c5307304c714cde3b47c6d06c060bcbe38d437f8cb6de656837732", 0xeb}, {&(0x7f0000000540)="13d160b640374066d49d3c43140cb5101caa", 0x12}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="400000000000000006000000f7ffffff494a8bd84603fd85aa7a342b8451ff8ce87d3d9157bb02155e0056e8faeccc14150e4b5d3743bc8f34523d0000000000"], 0x40}, 0x44000) sendto$inet6(r1, &(0x7f0000000680)="30ace91bf896b32b4d7dd88bc18f5889339e0c892b559c2f9656224ef81039b1e8ca77fa17278f9edab2831e80396448a2b1e378aa90f69fd2853dd98d0e4aa8e48345c0d6081f5435f639c007372194337b4847d215a4aebcc4c8c6e15f16cb9b1d639688b9b39fce241804758a5edeff6cf453002fa8b301fb7b873a0b31ec67d02d51979a43931a00c435d51593f5f478620b22acc473d423d05d88225b1eb8e72109d4a6155960c560b7a73b59a40ebf86152293aedd067a4c040917d86972b7ddb7fbd674343bb3ce02cd75e7dbf7358ad2f364cbd32de7d2ef6d9f8c9e0b3c023a4a4b80b613c427a51f3a7dbc4a7bf5", 0xf3, 0x5, &(0x7f0000000780)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x1c) read$eventfd(r1, &(0x7f00000007c0), 0x8) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) r6 = syz_open_dev$media(&(0x7f0000000040), 0x1, 0x101e01) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.291023315s ago: executing program 4 (id=412): mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 1.185912108s ago: executing program 4 (id=413): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee00, 0xee00, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(r3, 0x9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@inet=@length={{0x28}, {0x3800, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xfffffffd}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0xfc, 0x0, 0x1, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.114273095s ago: executing program 1 (id=414): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x101}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) io_uring_setup(0x6506, &(0x7f0000001300)={0x0, 0x0, 0x1046, 0x0, 0x1f9}) socket$inet_udplite(0x2, 0x2, 0x88) 129.810546ms ago: executing program 4 (id=415): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sysinfo(0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000157000/0x2000)=nil, 0x2000, &(0x7f0000000c00)=' \xeeJ\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x10, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0xa, 0x5, 0x1, 0xc, 0x3c6, 0xb, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbcde, 0x7ff, 0x1, 0x8, 0xffff, 0xe, 0x4, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x3fe, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0xdaae, 0x5, 0x9, 0x6, 0x8, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xfffffffd, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0xfffffff7, 0x8, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x400, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0xfff, 0x3, 0x5, 0x0, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x10000001, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x9, 0x7, 0x6, 0x2, 0x81, 0x8, 0xffffff20, 0x55f2, 0x5, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x9, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x8e8, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x2, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x6, 0x7, 0x1, 0x9, 0x1, 0x4, 0x9, 0x100, 0x3, 0x3c, 0x1000, 0x3, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) 0s ago: executing program 2 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000000008000200050000000a0006"], 0x4c}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000240)={0x1, r8, r7}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x60, r10, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r14 = syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r14, 0x1, &(0x7f0000000080)=0x7) kernel console output (not intermixed with test programs): ss=rds_socket permissive=1 [ 82.640681][ T29] audit: type=1400 audit(1736694759.381:269): avc: denied { write } for pid=6183 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.782669][ T5897] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 82.793644][ T5897] asix 3-1:0.251: probe with driver asix failed with error -524 [ 83.852386][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.944269][ T6211] netlink: 'syz.4.67': attribute type 21 has an invalid length. [ 84.174420][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 84.436482][ T6211] netlink: 156 bytes leftover after parsing attributes in process `syz.4.67'. [ 84.438004][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.457886][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.471472][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.484469][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.493670][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.549068][ T6212] block nbd1: shutting down sockets [ 84.568493][ T9] usb 1-1: config 0 descriptor?? [ 84.606009][ T6216] netlink: 'syz.4.67': attribute type 21 has an invalid length. [ 84.629880][ T6216] netlink: 156 bytes leftover after parsing attributes in process `syz.4.67'. [ 84.676700][ T6225] IPv6: Can't replace route, no match found [ 84.839948][ T5907] usb 3-1: USB disconnect, device number 4 [ 84.888994][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 85.675997][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input9 [ 85.768208][ T9] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 85.890412][ T9] usb 1-1: USB disconnect, device number 3 [ 86.074236][ T6225] syz.3.69 (6225): drop_caches: 2 [ 86.112814][ T6244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'. [ 86.323226][ T969] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 86.396637][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 86.396680][ T29] audit: type=1400 audit(1736694763.531:272): avc: denied { map } for pid=6245 comm="syz.0.77" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.604946][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 86.620434][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.641663][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.654994][ T969] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.668031][ T969] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.677242][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.699495][ T969] usb 3-1: config 0 descriptor?? [ 86.752655][ T5927] vhci_hcd: vhci_device speed not set [ 86.857321][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.82'. [ 86.990505][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 87.123450][ T969] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input10 [ 87.152924][ T969] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 87.187546][ T1538] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.347668][ T1538] usb 4-1: Using ep0 maxpacket: 16 [ 87.389011][ T1538] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 87.445126][ T1538] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 87.463073][ T1538] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 87.491274][ T1538] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 87.547362][ T1538] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 87.567924][ T969] usb 3-1: USB disconnect, device number 5 [ 87.582152][ T1538] usb 4-1: config 1 interface 0 has no altsetting 0 [ 87.624829][ T1538] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 87.680281][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.714974][ T1538] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 87.744004][ T29] audit: type=1400 audit(1736694764.881:273): avc: denied { open } for pid=6274 comm="syz.4.86" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 87.978786][ T29] audit: type=1400 audit(1736694765.121:274): avc: denied { getopt } for pid=6257 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.132239][ T1538] scsi host1: usb-storage 4-1:1.0 [ 88.298921][ T6285] process 'syz.2.88' launched './file0' with NULL argv: empty string added [ 88.302406][ T29] audit: type=1400 audit(1736694765.441:275): avc: denied { execute } for pid=6283 comm="syz.2.88" name="file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.642513][ T29] audit: type=1400 audit(1736694765.451:276): avc: denied { execute_no_trans } for pid=6283 comm="syz.2.88" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.716751][ T1538] usb 4-1: USB disconnect, device number 5 [ 88.760217][ T6287] vxcan1: tx drop: invalid da for name 0x0000000004000003 [ 88.798208][ T29] audit: type=1400 audit(1736694765.901:277): avc: denied { ioctl } for pid=6286 comm="syz.4.89" path="socket:[9573]" dev="sockfs" ino=9573 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.824332][ T29] audit: type=1400 audit(1736694765.901:278): avc: denied { bind } for pid=6286 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.843646][ T29] audit: type=1400 audit(1736694765.901:279): avc: denied { write } for pid=6286 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.862667][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.921859][ T6294] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 88.932465][ T6294] audit: out of memory in audit_log_start [ 88.939674][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 90.436983][ T6315] lo: entered allmulticast mode [ 90.445032][ T6315] pimreg: entered allmulticast mode [ 90.458661][ T6315] tmpfs: Bad value for 'mpol' [ 90.533326][ T6315] pimreg: left allmulticast mode [ 90.551036][ T6315] lo: left allmulticast mode [ 90.625051][ T5927] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.093566][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 91.100086][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 91.109502][ T5927] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 91.130074][ T5927] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 91.163267][ T5927] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 91.188462][ T5927] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 91.219273][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 91.262647][ T5927] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 91.271724][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.365454][ T5927] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 91.502531][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 91.502549][ T29] audit: type=1400 audit(1736694768.641:285): avc: denied { mounton } for pid=6332 comm="syz.3.105" path="/19/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.530547][ T6335] bridge0: port 3(erspan0) entered disabled state [ 91.551004][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.561792][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.727874][ T6333] netlink: 72 bytes leftover after parsing attributes in process `syz.3.105'. [ 91.808033][ T29] audit: type=1400 audit(1736694768.951:286): avc: denied { write } for pid=6332 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.941457][ T5927] scsi host1: usb-storage 5-1:1.0 [ 91.958458][ T5927] usb 5-1: USB disconnect, device number 3 [ 92.206210][ T6344] ntfs3(nullb0): Primary boot signature is not NTFS. [ 92.213239][ T6344] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 92.223464][ T6344] bridge0: port 3(erspan0) entered blocking state [ 92.229958][ T6344] bridge0: port 3(erspan0) entered disabled state [ 92.236588][ T6344] erspan0: entered allmulticast mode [ 92.525104][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 93.011861][ T29] audit: type=1400 audit(1736694769.451:287): avc: denied { connect } for pid=6340 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.440549][ T29] audit: type=1400 audit(1736694770.581:288): avc: denied { sqpoll } for pid=6340 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.646792][ T6344] erspan0: entered promiscuous mode [ 93.652614][ T6344] bridge0: port 3(erspan0) entered blocking state [ 93.659109][ T6344] bridge0: port 3(erspan0) entered forwarding state [ 93.917354][ T29] audit: type=1400 audit(1736694771.061:289): avc: denied { read write } for pid=6359 comm="syz.1.113" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.967776][ T29] audit: type=1400 audit(1736694771.101:290): avc: denied { open } for pid=6357 comm="syz.3.112" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.040868][ T29] audit: type=1400 audit(1736694771.181:291): avc: denied { connect } for pid=6361 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.234389][ T969] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.238471][ T1538] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 94.413090][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 94.492483][ T1538] usb 4-1: Using ep0 maxpacket: 16 [ 94.518354][ T969] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 94.519670][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.566149][ T969] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 94.575439][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.588496][ T969] usb 2-1: Product: syz [ 94.595135][ T969] usb 2-1: Manufacturer: syz [ 94.600115][ T969] usb 2-1: SerialNumber: syz [ 94.621665][ T969] usb 2-1: config 0 descriptor?? [ 94.622335][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.637899][ T6360] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.645326][ T1538] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.658504][ T969] hub 2-1:0.0: bad descriptor, ignoring hub [ 94.663349][ T1538] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.675895][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.693639][ T969] hub 2-1:0.0: probe with driver hub failed with error -5 [ 94.708087][ T1538] usb 4-1: config 0 descriptor?? [ 94.713827][ T969] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 94.737214][ T29] audit: type=1400 audit(1736694771.881:292): avc: denied { map } for pid=6371 comm="syz.4.116" path="/28/file0" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.882514][ T29] audit: type=1400 audit(1736694772.011:293): avc: denied { mount } for pid=6373 comm="syz.0.117" name="/" dev="autofs" ino=9714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.904686][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.938778][ T5927] usb 2-1: USB disconnect, device number 2 [ 94.944807][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 95.062533][ T5897] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.206884][ T1538] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input12 [ 95.273870][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 95.288452][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.393655][ T1538] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 95.406809][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.447826][ T5897] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 95.463249][ T1538] usb 4-1: USB disconnect, device number 6 [ 95.479712][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.513643][ T5897] usb 5-1: config 0 descriptor?? [ 95.684717][ T29] audit: type=1400 audit(1736694772.831:294): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 95.871956][ T6384] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 96.082353][ T6386] dvmrp5: entered allmulticast mode [ 96.317317][ T969] IPVS: starting estimator thread 0... [ 96.527800][ T6388] IPVS: using max 29 ests per chain, 69600 per kthread [ 96.535172][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 96.535185][ T29] audit: type=1400 audit(1736694773.661:296): avc: denied { create } for pid=6391 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.441439][ T5911] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.607792][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 97.611445][ T6402] fuse: Bad value for 'fd' [ 97.614098][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.623545][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'. [ 97.652635][ T5897] usb 5-1: USB disconnect, device number 4 [ 97.752385][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 97.763735][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.775891][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.790478][ T5911] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.805681][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.914657][ T5911] usb 1-1: config 0 descriptor?? [ 98.988804][ T6415] syz.3.130[6415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.989045][ T6415] syz.3.130[6415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.002041][ T6415] syz.3.130[6415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.099153][ T29] audit: type=1400 audit(1736694776.241:297): avc: denied { create } for pid=6423 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 99.548689][ T6415] netlink: 44 bytes leftover after parsing attributes in process `syz.3.130'. [ 99.597574][ T6415] netlink: 43 bytes leftover after parsing attributes in process `syz.3.130'. [ 99.613371][ T29] audit: type=1400 audit(1736694776.761:298): avc: denied { getopt } for pid=6429 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.638275][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 99.663615][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 99.672012][ T6415] netlink: 'syz.3.130': attribute type 6 has an invalid length. [ 99.691846][ T5911] usb 1-1: USB disconnect, device number 4 [ 99.740306][ T6415] netlink: 'syz.3.130': attribute type 5 has an invalid length. [ 99.748112][ T6415] netlink: 43 bytes leftover after parsing attributes in process `syz.3.130'. [ 100.051873][ T29] audit: type=1400 audit(1736694777.191:299): avc: denied { create } for pid=6434 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 100.054571][ T6437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6437 comm=syz.2.135 [ 100.099468][ T29] audit: type=1400 audit(1736694777.201:300): avc: denied { ioctl } for pid=6434 comm="syz.2.135" path="socket:[9901]" dev="sockfs" ino=9901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 100.125029][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.132482][ T29] audit: type=1400 audit(1736694777.201:301): avc: denied { write } for pid=6434 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 100.171717][ T6437] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 100.219539][ T6440] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 100.226072][ T6440] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.233962][ T6440] vhci_hcd vhci_hcd.0: Device attached [ 100.251427][ T6441] vhci_hcd: connection closed [ 100.251979][ T1145] vhci_hcd: stop threads [ 100.261113][ T1145] vhci_hcd: release socket [ 100.279309][ T1145] vhci_hcd: disconnect device [ 100.422538][ T29] audit: type=1400 audit(1736694777.561:302): avc: denied { read } for pid=6443 comm="syz.3.137" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.491668][ T29] audit: type=1400 audit(1736694777.561:303): avc: denied { open } for pid=6443 comm="syz.3.137" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.542918][ T6448] netlink: 36 bytes leftover after parsing attributes in process `syz.2.139'. [ 100.553809][ T29] audit: type=1400 audit(1736694777.561:304): avc: denied { ioctl } for pid=6443 comm="syz.3.137" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.965145][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.045497][ T29] audit: type=1400 audit(1736694779.191:305): avc: denied { ioctl } for pid=6465 comm="syz.1.144" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 102.070796][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.184032][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.197750][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 102.207530][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.352339][ T29] audit: type=1400 audit(1736694779.471:306): avc: denied { listen } for pid=6465 comm="syz.1.144" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.419904][ T5911] usb 3-1: config 0 descriptor?? [ 102.460556][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 102.572609][ T29] audit: type=1400 audit(1736694779.571:307): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.616766][ T29] audit: type=1400 audit(1736694779.571:308): avc: denied { unlink } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.677385][ T6473] xfrm1: entered promiscuous mode [ 102.695579][ T6473] xfrm1: entered allmulticast mode [ 102.725308][ T29] audit: type=1400 audit(1736694779.591:309): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.746420][ T29] audit: type=1400 audit(1736694779.871:310): avc: denied { create } for pid=6472 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 102.767552][ T29] audit: type=1400 audit(1736694779.891:311): avc: denied { write } for pid=6472 comm="syz.4.147" path="socket:[10824]" dev="sockfs" ino=10824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 102.793597][ T29] audit: type=1400 audit(1736694779.891:312): avc: denied { nlmsg_read } for pid=6472 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 103.083107][ T5911] pwc: recv_control_msg error -71 req 02 val 2700 [ 103.092092][ T5911] pwc: recv_control_msg error -71 req 02 val 2c00 [ 103.108454][ T29] audit: type=1400 audit(1736694780.251:313): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.124089][ T5911] pwc: recv_control_msg error -71 req 04 val 1000 [ 103.140883][ T5911] pwc: recv_control_msg error -71 req 04 val 1300 [ 103.152491][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.153990][ T5911] pwc: recv_control_msg error -71 req 04 val 1400 [ 103.303035][ T5911] pwc: recv_control_msg error -71 req 02 val 2000 [ 103.863601][ T5911] pwc: recv_control_msg error -71 req 02 val 2100 [ 103.870417][ T5911] pwc: recv_control_msg error -71 req 04 val 1500 [ 103.877648][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 103.884466][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 103.891205][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 103.897976][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 103.904735][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 103.911524][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 103.946633][ T29] audit: type=1400 audit(1736694781.091:314): avc: denied { bind } for pid=6482 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.978803][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 103.991910][ T5911] pwc: Registered as video103. [ 104.056497][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 104.123644][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 104.130637][ T5927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 104.139897][ T5927] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 104.165250][ T5927] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 104.181069][ T5927] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 104.251218][ T5911] usb 3-1: USB disconnect, device number 6 [ 105.261282][ T5927] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 105.277518][ T5927] usb 1-1: config 1 interface 0 has no altsetting 0 [ 105.284271][ T5927] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 105.732912][ T6498] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.745007][ T6498] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 106.200441][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.989006][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 106.996331][ T5927] usb 1-1: can't set config #1, error -32 [ 107.024018][ T5927] usb 1-1: USB disconnect, device number 5 [ 107.164770][ T5897] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.018365][ T6520] 9pnet_fd: p9_fd_create_tcp (6520): problem connecting socket to 127.0.0.1 [ 108.102494][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 108.114668][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.128822][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.353967][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.366920][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.376012][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.386813][ T5897] usb 4-1: config 0 descriptor?? [ 108.992868][ T5897] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input14 [ 109.015194][ T5897] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 109.243013][ T5897] usb 4-1: USB disconnect, device number 7 [ 109.588040][ T6537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.113252][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 110.113270][ T29] audit: type=1400 audit(1736694787.261:318): avc: denied { write } for pid=6543 comm="syz.4.166" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 110.421805][ T1538] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.430375][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.438155][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.559385][ T29] audit: type=1400 audit(1736694787.931:319): avc: denied { read } for pid=6552 comm="syz.2.170" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 111.682444][ T29] audit: type=1400 audit(1736694787.931:320): avc: denied { open } for pid=6552 comm="syz.2.170" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 111.705849][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.489463][ T29] audit: type=1400 audit(1736694788.111:321): avc: denied { create } for pid=6552 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.603081][ T1538] usb 2-1: Using ep0 maxpacket: 16 [ 112.613014][ T1538] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 112.622060][ T1538] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 112.631915][ T1538] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 112.641827][ T1538] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 112.651630][ T1538] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 112.662121][ T1538] usb 2-1: config 1 interface 0 has no altsetting 0 [ 112.669227][ T1538] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 112.679863][ T1538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.698492][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.709633][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.719813][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.732808][ T5897] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.741862][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.752568][ T46] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.761208][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.770249][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.786368][ T5897] usb 4-1: config 0 descriptor?? [ 112.802249][ T1538] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 112.849452][ T46] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.863248][ T46] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.892395][ T46] usb 1-1: Product: syz [ 112.902844][ T46] usb 1-1: Manufacturer: syz [ 113.413328][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 113.424537][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 113.429838][ T46] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 113.663563][ T46] usb 1-1: USB disconnect, device number 6 [ 113.680199][ T5897] usbhid 4-1:0.0: can't add hid device: -71 [ 113.691744][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 113.759919][ T6578] syz.1.174 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.771842][ T6578] mmap: syz.1.174 (6578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.425232][ T29] audit: type=1400 audit(1736694790.941:322): avc: denied { create } for pid=6571 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.450675][ T29] audit: type=1400 audit(1736694790.941:323): avc: denied { bind } for pid=6571 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.647689][ T5897] usb 4-1: USB disconnect, device number 8 [ 115.312114][ T29] audit: type=1400 audit(1736694792.431:324): avc: denied { map } for pid=6583 comm="syz.1.176" path="socket:[11270]" dev="sockfs" ino=11270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 115.335000][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.340854][ T1538] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 115.491291][ T1538] usb 2-1: USB disconnect, device number 3 [ 115.595515][ T29] audit: type=1400 audit(1736694792.741:325): avc: denied { bind } for pid=6597 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.722495][ T969] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.872616][ T5905] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 115.886058][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 115.902995][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.921093][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.937368][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.957089][ T969] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.969947][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.997373][ T969] usb 1-1: config 0 descriptor?? [ 116.012532][ T5905] usb 3-1: device descriptor read/64, error -71 [ 116.134932][ T6617] 9pnet_fd: p9_fd_create_tcp (6617): problem connecting socket to 127.0.0.1 [ 116.252553][ T5905] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 116.414113][ T1538] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 116.453458][ T5905] usb 3-1: device descriptor read/64, error -71 [ 116.486425][ T969] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input17 [ 116.501171][ T969] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 116.563592][ T5905] usb usb3-port1: attempt power cycle [ 116.578546][ T1538] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.589648][ T1538] usb 5-1: not running at top speed; connect to a high speed hub [ 116.754754][ T1538] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.891068][ T6633] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 116.897616][ T6633] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.905586][ T6633] vhci_hcd vhci_hcd.0: Device attached [ 116.963413][ T1538] usb 5-1: config 1 interface 0 has no altsetting 0 [ 117.001125][ T1538] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 117.022674][ T5905] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 117.037493][ T1538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.037504][ T6635] vhci_hcd: connection closed [ 117.037522][ T1538] usb 5-1: Product: syz [ 117.046117][ T5905] usb 3-1: device descriptor read/8, error -71 [ 117.062096][ T35] vhci_hcd: stop threads [ 117.066666][ T1538] usb 5-1: Manufacturer: syz [ 117.066723][ T35] vhci_hcd: release socket [ 117.075789][ T1538] usb 5-1: SerialNumber: syz [ 117.083781][ T35] vhci_hcd: disconnect device [ 117.098722][ T8] usb 1-1: USB disconnect, device number 7 [ 117.143334][ T969] vhci_hcd: vhci_device speed not set [ 117.293606][ T5905] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 117.312950][ T5905] usb 3-1: device descriptor read/8, error -71 [ 118.302919][ T5905] usb usb3-port1: unable to enumerate USB device [ 119.594808][ T1538] usbhid 5-1:1.0: can't add hid device: -71 [ 119.600971][ T1538] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 120.064385][ T1538] usb 5-1: USB disconnect, device number 5 [ 120.132653][ T5825] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.312621][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 120.332773][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 120.434813][ T5825] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 120.542341][ T5825] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 120.579003][ T46] libceph: connect (1)[c::]:6789 error -101 [ 120.591294][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 120.661105][ T5825] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 120.684107][ T6660] ceph: No mds server is up or the cluster is laggy [ 120.787516][ T46] libceph: connect (1)[c::]:6789 error -101 [ 120.817644][ T5825] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 120.913687][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 121.129373][ T5825] usb 2-1: config 1 interface 0 has no altsetting 0 [ 121.201673][ T6669] sit0: entered promiscuous mode [ 121.209867][ T6669] sit0: entered allmulticast mode [ 121.229677][ T5825] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 121.257507][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.280372][ T29] audit: type=1400 audit(1736694798.421:326): avc: denied { setopt } for pid=6670 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.292384][ T5825] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 121.672402][ T5825] scsi host1: usb-storage 2-1:1.0 [ 121.990785][ T5825] usb 2-1: USB disconnect, device number 4 [ 122.371111][ T1538] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 122.742474][ T1538] usb 3-1: Using ep0 maxpacket: 16 [ 122.755347][ T1538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.771919][ T1538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.821991][ T6697] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 122.828545][ T6697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.835125][ T1538] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.846483][ T6697] vhci_hcd vhci_hcd.0: Device attached [ 122.896215][ T1538] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.983011][ T1538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.983166][ T969] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.204611][ T1538] usb 3-1: config 0 descriptor?? [ 123.266998][ T6698] vhci_hcd: connection closed [ 123.282774][ T1145] vhci_hcd: stop threads [ 123.297412][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.332405][ T5905] vhci_hcd: vhci_device speed not set [ 123.352552][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 123.367183][ T1145] vhci_hcd: release socket [ 123.377875][ T1145] vhci_hcd: disconnect device [ 123.384828][ T969] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 123.397534][ T969] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 123.407489][ T5905] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 123.416989][ T5905] usb 35-1: enqueue for inactive port 0 [ 123.432640][ T969] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 123.444573][ T969] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 123.454685][ T969] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 123.467113][ T969] usb 1-1: config 1 interface 0 has no altsetting 0 [ 123.475755][ T969] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 123.490452][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.503353][ T5905] vhci_hcd: vhci_device speed not set [ 123.512362][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 123.519756][ T969] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 123.528243][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 123.541755][ T9] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 123.552461][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.552488][ T9] usb 4-1: Product: syz [ 123.552504][ T9] usb 4-1: Manufacturer: syz [ 123.552520][ T9] usb 4-1: SerialNumber: syz [ 123.554769][ T9] usb 4-1: config 0 descriptor?? [ 123.712811][ T6695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 123.721361][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 123.728072][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 123.760342][ T1538] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input19 [ 123.774025][ T1538] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 123.775302][ T969] scsi host1: usb-storage 1-1:1.0 [ 123.802045][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 124.361385][ T969] usb 1-1: USB disconnect, device number 8 [ 124.410213][ T8] usb 3-1: USB disconnect, device number 11 [ 124.501604][ T9] usb 4-1: USB disconnect, device number 9 [ 124.501651][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 125.517871][ T29] audit: type=1400 audit(1736694802.661:327): avc: denied { read write } for pid=6721 comm="syz.0.204" name="mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 125.727316][ T6725] FAULT_INJECTION: forcing a failure. [ 125.727316][ T6725] name failslab, interval 1, probability 0, space 0, times 0 [ 125.740157][ T6725] CPU: 1 UID: 0 PID: 6725 Comm: syz.4.203 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 125.750738][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.760796][ T6725] Call Trace: [ 125.764102][ T6725] [ 125.767015][ T6725] dump_stack_lvl+0x16c/0x1f0 [ 125.771698][ T6725] should_fail_ex+0x497/0x5b0 [ 125.776387][ T6725] ? fs_reclaim_acquire+0xae/0x150 [ 125.781492][ T6725] should_failslab+0xc2/0x120 [ 125.786164][ T6725] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 125.791970][ T6725] ? copy_process+0x4be/0x8e50 [ 125.796749][ T6725] copy_process+0x4be/0x8e50 [ 125.801374][ T6725] ? mark_held_locks+0x9f/0xe0 [ 125.806167][ T6725] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 125.811996][ T6725] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.817220][ T6725] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.823048][ T6725] ? stack_depot_save_flags+0x38f/0x9c0 [ 125.828627][ T6725] ? create_io_worker+0x49/0x5f0 [ 125.833589][ T6725] ? __pfx_copy_process+0x10/0x10 [ 125.838728][ T6725] ? kasan_save_track+0x14/0x30 [ 125.843601][ T6725] ? __kasan_kmalloc+0xaa/0xb0 [ 125.848381][ T6725] ? create_io_worker+0xcc/0x5f0 [ 125.853332][ T6725] ? io_wq_enqueue+0x664/0xb30 [ 125.858111][ T6725] ? io_queue_iowq+0x28b/0x5c0 [ 125.862886][ T6725] ? io_queue_sqe_fallback+0xcd/0x9f0 [ 125.868267][ T6725] ? io_submit_sqes+0x135c/0x25c0 [ 125.873282][ T6725] ? __do_sys_io_uring_enter+0xd43/0x1620 [ 125.878995][ T6725] ? do_syscall_64+0xcd/0x250 [ 125.883659][ T6725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.889741][ T6725] ? __pfx_io_wq_worker+0x10/0x10 [ 125.894760][ T6725] ? create_io_worker+0x49/0x5f0 [ 125.899700][ T6725] create_io_thread+0xaa/0xf0 [ 125.904376][ T6725] ? __pfx_create_io_thread+0x10/0x10 [ 125.909744][ T6725] ? __pfx_io_wq_worker+0x10/0x10 [ 125.914759][ T6725] ? __init_swait_queue_head+0xca/0x150 [ 125.920480][ T6725] create_io_worker+0x1c2/0x5f0 [ 125.925321][ T6725] io_wq_enqueue+0x664/0xb30 [ 125.929912][ T6725] ? __pfx_io_wq_enqueue+0x10/0x10 [ 125.935021][ T6725] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 125.940816][ T6725] ? io_prep_async_work+0x3c3/0x770 [ 125.946001][ T6725] ? __io_alloc_req_refill+0x30c/0x5b0 [ 125.951462][ T6725] io_queue_iowq+0x28b/0x5c0 [ 125.956041][ T6725] io_queue_sqe_fallback+0xcd/0x9f0 [ 125.961231][ T6725] io_submit_sqes+0x135c/0x25c0 [ 125.966078][ T6725] __do_sys_io_uring_enter+0xd43/0x1620 [ 125.971615][ T6725] ? __fget_files+0x206/0x3a0 [ 125.976285][ T6725] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 125.982258][ T6725] ? fput+0x67/0x440 [ 125.986157][ T6725] ? ksys_write+0x1ba/0x250 [ 125.990662][ T6725] ? __pfx_ksys_write+0x10/0x10 [ 125.995510][ T6725] do_syscall_64+0xcd/0x250 [ 126.000026][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.005997][ T6725] RIP: 0033:0x7f76cf985d29 [ 126.010399][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.030020][ T6725] RSP: 002b:00007f76d072d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 126.038438][ T6725] RAX: ffffffffffffffda RBX: 00007f76cfb76080 RCX: 00007f76cf985d29 [ 126.046403][ T6725] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000008 [ 126.054360][ T6725] RBP: 00007f76d072d090 R08: 0000000000000000 R09: 0000000000000000 [ 126.062500][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.070477][ T6725] R13: 0000000000000000 R14: 00007f76cfb76080 R15: 00007fffcbf7daf8 [ 126.078446][ T6725] [ 126.475451][ T29] audit: type=1400 audit(1736694802.691:328): avc: denied { open } for pid=6721 comm="syz.0.204" path="/dev/input/mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 126.499361][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.794280][ T29] audit: type=1400 audit(1736694803.891:329): avc: denied { create } for pid=6721 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.402533][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.869960][ T46] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 127.881955][ T46] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.884561][ T6743] ceph: No mds server is up or the cluster is laggy [ 127.893158][ T46] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.900692][ T8] libceph: connect (1)[c::]:6789 error -101 [ 127.919325][ T46] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.985384][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 127.997825][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.098443][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.118291][ T46] usb 3-1: invalid MIDI out EP 0 [ 128.273615][ T46] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 129.319529][ T29] audit: type=1400 audit(1736694806.151:330): avc: denied { name_bind } for pid=6753 comm="syz.0.211" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 129.484581][ T6764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.505106][ T9] usb 3-1: USB disconnect, device number 12 [ 130.675929][ T29] audit: type=1400 audit(1736694807.821:331): avc: denied { write } for pid=6777 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.796474][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.252483][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.451411][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 131.476463][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 131.503991][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 131.652597][ T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 131.973043][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 132.077606][ T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 132.120443][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 132.130258][ T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 132.140030][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.193429][ T9] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 132.684411][ T9] scsi host1: usb-storage 1-1:1.0 [ 132.792406][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.860052][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 132.875750][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882258][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.964702][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 132.975111][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 132.990837][ T8] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 133.004363][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.012513][ T8] usb 5-1: Product: syz [ 133.016689][ T8] usb 5-1: Manufacturer: syz [ 133.021299][ T8] usb 5-1: SerialNumber: syz [ 133.152530][ T29] audit: type=1400 audit(1736694810.251:332): avc: denied { write } for pid=6808 comm="syz.1.226" path="socket:[12379]" dev="sockfs" ino=12379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.181154][ T46] usb 1-1: USB disconnect, device number 9 [ 133.217050][ T8] usb 5-1: config 0 descriptor?? [ 133.227303][ T6790] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 133.248224][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 133.254253][ T8] hub 5-1:0.0: probe with driver hub failed with error -5 [ 133.265268][ T8] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 133.824841][ T5825] usb 5-1: USB disconnect, device number 6 [ 133.824972][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 133.991735][ T1538] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.318165][ T1538] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.357295][ T1538] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.458330][ T1538] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.562018][ T1538] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.642053][ T1538] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.655882][ T1538] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.664040][ T1538] usb 2-1: Product: syz [ 134.668219][ T1538] usb 2-1: Manufacturer: syz [ 134.711168][ T29] audit: type=1400 audit(1736694811.821:333): avc: denied { setopt } for pid=6821 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.725569][ T1538] cdc_wdm 2-1:1.0: skipping garbage [ 134.742752][ T1538] cdc_wdm 2-1:1.0: skipping garbage [ 134.978918][ T1538] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 134.990460][ T1538] cdc_wdm 2-1:1.0: Unknown control protocol [ 135.158431][ T6797] syz.3.222 (6797): drop_caches: 1 [ 135.837022][ T1538] usb 2-1: USB disconnect, device number 5 [ 135.884006][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.084012][ T29] audit: type=1400 audit(1736694813.141:334): avc: denied { setopt } for pid=6832 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.386755][ T29] audit: type=1400 audit(1736694813.161:335): avc: denied { read } for pid=6832 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.525590][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 136.649062][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.660155][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.870397][ T969] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 136.938493][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.964231][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.973384][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.000550][ T8] usb 1-1: config 0 descriptor?? [ 137.122479][ T46] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.136104][ T969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.153843][ T969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 137.245784][ T969] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 137.357994][ T969] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.459585][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input24 [ 137.522889][ T969] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.543716][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.551802][ T969] usb 5-1: Product: syz [ 137.619469][ T46] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 137.635001][ T46] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 137.646368][ T46] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 137.655706][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.670306][ T969] usb 5-1: Manufacturer: syz [ 137.682797][ T6843] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 137.687070][ T969] usb 5-1: SerialNumber: syz [ 137.706012][ T8] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 137.726905][ T6837] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 137.804730][ T8] usb 1-1: USB disconnect, device number 10 [ 137.845873][ T29] audit: type=1400 audit(1736694814.991:336): avc: denied { create } for pid=6848 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.918760][ T29] audit: type=1400 audit(1736694815.021:337): avc: denied { connect } for pid=6848 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.978476][ T29] audit: type=1400 audit(1736694815.031:338): avc: denied { bind } for pid=6848 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.019554][ T29] audit: type=1400 audit(1736694815.031:339): avc: denied { name_bind } for pid=6848 comm="syz.1.237" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 138.048450][ T29] audit: type=1400 audit(1736694815.031:340): avc: denied { node_bind } for pid=6848 comm="syz.1.237" saddr=ff02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 138.222361][ T6843] tmpfs: Unknown parameter '0xffffffffffffffff' [ 139.346363][ T29] audit: type=1400 audit(1736694816.491:341): avc: denied { setopt } for pid=6840 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.543330][ T5927] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 139.596509][ T6858] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 139.606401][ T6858] overlayfs: missing 'lowerdir' [ 139.702629][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 139.714172][ T5927] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 139.728970][ T6863] FAULT_INJECTION: forcing a failure. [ 139.728970][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 139.745188][ T5927] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 139.751117][ T6863] CPU: 1 UID: 0 PID: 6863 Comm: syz.3.241 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 139.762491][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.764791][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.764806][ T6863] Call Trace: [ 139.764814][ T6863] [ 139.764823][ T6863] dump_stack_lvl+0x16c/0x1f0 [ 139.786481][ T5927] usb 1-1: Product: syz [ 139.789026][ T6863] should_fail_ex+0x497/0x5b0 [ 139.789063][ T6863] ? fs_reclaim_acquire+0xae/0x150 [ 139.802479][ T5927] usb 1-1: Manufacturer: syz [ 139.802539][ T6863] should_failslab+0xc2/0x120 [ 139.815404][ T5927] usb 1-1: SerialNumber: syz [ 139.816864][ T6863] __kmalloc_noprof+0xcb/0x510 [ 139.816895][ T6863] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 139.831914][ T6863] tomoyo_realpath_from_path+0xb9/0x720 [ 139.834234][ T5927] usb 1-1: config 0 descriptor?? [ 139.837470][ T6863] ? tomoyo_path_number_perm+0x235/0x590 [ 139.837502][ T6863] ? tomoyo_path_number_perm+0x235/0x590 [ 139.837530][ T6863] tomoyo_path_number_perm+0x248/0x590 [ 139.859121][ T6863] ? tomoyo_path_number_perm+0x235/0x590 [ 139.864773][ T6863] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.870771][ T6863] ? __pfx_lock_release+0x10/0x10 [ 139.875790][ T6863] ? trace_lock_acquire+0x14e/0x1f0 [ 139.880990][ T6863] ? lock_acquire+0x2f/0xb0 [ 139.885483][ T6863] ? __fget_files+0x40/0x3a0 [ 139.890086][ T6863] ? __fget_files+0x206/0x3a0 [ 139.894758][ T6863] security_file_ioctl+0x9b/0x240 [ 139.899792][ T6863] __x64_sys_ioctl+0xb7/0x200 [ 139.904469][ T6863] do_syscall_64+0xcd/0x250 [ 139.908968][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.914854][ T6863] RIP: 0033:0x7fe10bd85d29 [ 139.919257][ T6863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.938870][ T6863] RSP: 002b:00007fe10cc67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.947278][ T6863] RAX: ffffffffffffffda RBX: 00007fe10bf75fa0 RCX: 00007fe10bd85d29 [ 139.955249][ T6863] RDX: 0000000020001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 139.963211][ T6863] RBP: 00007fe10cc67090 R08: 0000000000000000 R09: 0000000000000000 [ 139.971167][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.979125][ T6863] R13: 0000000000000000 R14: 00007fe10bf75fa0 R15: 00007fffface4f88 [ 139.987093][ T6863] [ 139.991271][ T6857] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.000009][ T5927] hub 1-1:0.0: bad descriptor, ignoring hub [ 140.007928][ T5927] hub 1-1:0.0: probe with driver hub failed with error -5 [ 140.044393][ T6863] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.047937][ T5927] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 140.060129][ T29] audit: type=1400 audit(1736694817.191:342): avc: denied { write } for pid=6840 comm="syz.2.234" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 140.267076][ T46] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 140.321867][ T46] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input25 [ 140.591940][ T46] usb 3-1: USB disconnect, device number 13 [ 140.591984][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 140.646150][ T5869] usb 1-1: USB disconnect, device number 11 [ 140.652131][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 140.704063][ T969] cdc_ncm 5-1:1.0: bind() failure [ 140.715466][ T969] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 140.724336][ T969] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 140.740326][ T969] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 140.763427][ T969] usb 5-1: USB disconnect, device number 7 [ 140.985002][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 140.997560][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 141.771004][ T6865] ceph: No mds server is up or the cluster is laggy [ 142.188223][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 142.383251][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 142.458254][ T6880] syz.4.246 uses obsolete (PF_INET,SOCK_PACKET) [ 143.464426][ T6903] ntfs3(nullb0): Primary boot signature is not NTFS. [ 143.471631][ T6903] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 143.490862][ T6903] bridge0: port 3(erspan0) entered blocking state [ 143.497663][ T6903] bridge0: port 3(erspan0) entered disabled state [ 143.506247][ T6903] erspan0: entered allmulticast mode [ 143.516063][ T6903] erspan0: entered promiscuous mode [ 143.522727][ T6903] bridge0: port 3(erspan0) entered blocking state [ 143.529311][ T6903] bridge0: port 3(erspan0) entered forwarding state [ 145.322672][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 145.356875][ T29] audit: type=1400 audit(1736694822.501:343): avc: denied { mounton } for pid=6908 comm="syz.2.253" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 145.733466][ T6910] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 145.739988][ T6910] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.342848][ T6910] vhci_hcd vhci_hcd.0: Device attached [ 146.348481][ T6912] vhci_hcd: connection closed [ 146.356518][ T53] vhci_hcd: stop threads [ 146.371499][ T53] vhci_hcd: release socket [ 146.373671][ T6909] 9pnet_fd: p9_fd_create_tcp (6909): problem connecting socket to 127.0.0.1 [ 146.385825][ T53] vhci_hcd: disconnect device [ 146.485964][ T6924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.520589][ T6928] fuse: Unknown parameter 'group' [ 146.542636][ T29] audit: type=1400 audit(1736694823.681:344): avc: denied { ioctl } for pid=6927 comm="syz.0.257" path="socket:[12592]" dev="sockfs" ino=12592 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 146.662050][ T29] audit: type=1400 audit(1736694823.801:345): avc: denied { bind } for pid=6929 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.682651][ T5905] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.816834][ T29] audit: type=1400 audit(1736694823.961:346): avc: denied { read write } for pid=6933 comm="syz.3.261" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 146.842414][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 146.847526][ T29] audit: type=1400 audit(1736694823.961:347): avc: denied { open } for pid=6933 comm="syz.3.261" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 146.872439][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 146.891362][ T5905] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 146.900580][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.908752][ T5905] usb 5-1: Product: syz [ 146.913110][ T5905] usb 5-1: Manufacturer: syz [ 146.918375][ T5905] usb 5-1: SerialNumber: syz [ 146.932662][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.941910][ T5905] usb 5-1: config 0 descriptor?? [ 146.947766][ T5869] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 146.998832][ T6926] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.031401][ T5905] hub 5-1:0.0: bad descriptor, ignoring hub [ 147.362549][ T5905] hub 5-1:0.0: probe with driver hub failed with error -5 [ 147.391535][ T5905] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 147.413715][ T5905] usb 5-1: USB disconnect, device number 8 [ 147.419601][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 147.430206][ T5897] usb 2-1: config 0 has too many interfaces: 138, using maximum allowed: 32 [ 147.443162][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 147.482461][ T5897] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 138 [ 147.495697][ T5869] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 147.536946][ T5869] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 147.542978][ T5897] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=a9.c8 [ 147.567295][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.571319][ T5869] usb 3-1: config 0 has no interface number 0 [ 147.589097][ T5869] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.603495][ T5869] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.614217][ T5897] usb 2-1: Product: syz [ 147.618639][ T5897] usb 2-1: Manufacturer: syz [ 147.619511][ T5869] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.628866][ T5897] usb 2-1: SerialNumber: syz [ 147.653510][ T5897] usb 2-1: config 0 descriptor?? [ 147.670218][ T5869] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 147.711219][ T5869] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 147.741476][ T5869] usb 3-1: Product: syz [ 147.768499][ T5869] usb 3-1: Manufacturer: syz [ 147.784256][ T5869] usb 3-1: config 0 descriptor?? [ 148.571177][ T46] usb 2-1: USB disconnect, device number 6 [ 148.681391][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.733125][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.798137][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.819274][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.827336][ T6955] netlink: 168 bytes leftover after parsing attributes in process `syz.0.262'. [ 148.849344][ T29] audit: type=1400 audit(1736694825.971:348): avc: denied { write } for pid=6941 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.870102][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.940588][ T29] audit: type=1400 audit(1736694825.971:349): avc: denied { nlmsg_write } for pid=6941 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.008245][ T29] audit: type=1400 audit(1736694826.151:350): avc: denied { bind } for pid=6954 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.034794][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.124255][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.181459][ T5869] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input28 [ 149.214604][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.226004][ T5869] input: failed to attach handler kbd to device input28, error: -5 [ 149.292444][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.482546][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 149.506943][ T46] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de [ 149.532532][ T12] bridge_slave_1: left allmulticast mode [ 149.540532][ T12] bridge_slave_1: left promiscuous mode [ 149.542404][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.563180][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.572461][ T46] usb 5-1: Product: syz [ 149.586918][ T46] usb 5-1: Manufacturer: syz [ 149.591659][ T46] usb 5-1: SerialNumber: syz [ 149.601545][ T12] bridge_slave_0: left allmulticast mode [ 149.619402][ T12] bridge_slave_0: left promiscuous mode [ 149.623056][ T46] usb 5-1: config 0 descriptor?? [ 149.638331][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.644047][ T46] ems_usb 5-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 149.666535][ T46] ems_usb 5-1:0.0: probe with driver ems_usb failed with error -22 [ 149.678037][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.695355][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.703709][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.722812][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.730411][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.738726][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.749273][ T29] audit: type=1400 audit(1736694826.891:351): avc: denied { mounton } for pid=6966 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 150.131152][ T46] usb 5-1: USB disconnect, device number 9 [ 151.038074][ T5927] usb 3-1: USB disconnect, device number 14 [ 151.789953][ T29] audit: type=1400 audit(1736694828.931:352): avc: denied { create } for pid=6982 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.850091][ T5836] Bluetooth: hci0: command tx timeout [ 151.865910][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.887136][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.896787][ T12] bond0 (unregistering): Released all slaves [ 152.060612][ T29] audit: type=1400 audit(1736694829.201:353): avc: denied { bind } for pid=6992 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.325174][ T29] audit: type=1400 audit(1736694829.471:354): avc: denied { setopt } for pid=6998 comm="syz.4.277" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.397054][ T5869] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 152.995734][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 153.122554][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 153.529771][ T29] audit: type=1400 audit(1736694830.321:355): avc: denied { write } for pid=7009 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 153.575431][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 153.812433][ T5869] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 153.832372][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.840410][ T5869] usb 3-1: Product: syz [ 153.852358][ T5869] usb 3-1: Manufacturer: syz [ 153.862353][ T5869] usb 3-1: SerialNumber: syz [ 153.920087][ T5836] Bluetooth: hci0: command tx timeout [ 154.346948][ T5869] usb 3-1: config 0 descriptor?? [ 155.121039][ T7019] ceph: No mds server is up or the cluster is laggy [ 155.154570][ T8] libceph: connect (1)[c::]:6789 error -101 [ 155.162706][ T6997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.178261][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 155.440599][ T5869] usb 3-1: can't set config #0, error -71 [ 155.464409][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 155.470500][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 155.504191][ T5869] usb 3-1: USB disconnect, device number 15 [ 155.543911][ T12] hsr_slave_0: left promiscuous mode [ 155.549791][ T12] hsr_slave_1: left promiscuous mode [ 155.556259][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.574569][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.033193][ T5836] Bluetooth: hci0: command tx timeout [ 156.196402][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.209291][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.510654][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 156.514956][ T12] veth1_macvtap: left promiscuous mode [ 156.524497][ T12] veth0_macvtap: left promiscuous mode [ 156.530378][ T12] veth1_vlan: left promiscuous mode [ 156.536110][ T12] veth0_vlan: left promiscuous mode [ 156.695410][ T29] audit: type=1400 audit(1736694833.741:356): avc: denied { connect } for pid=7045 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.905742][ T29] audit: type=1400 audit(1736694833.751:357): avc: denied { shutdown } for pid=7045 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.122432][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 157.137499][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 157.151338][ T8] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 157.160765][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.168892][ T8] usb 1-1: Product: syz [ 157.173304][ T8] usb 1-1: Manufacturer: syz [ 157.177913][ T8] usb 1-1: SerialNumber: syz [ 157.192103][ T8] usb 1-1: config 0 descriptor?? [ 157.200414][ T7042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.208806][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 157.214909][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 157.224259][ T8] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 157.849749][ T8] usb 1-1: USB disconnect, device number 12 [ 157.849799][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 158.102068][ T5836] Bluetooth: hci0: command tx timeout [ 160.095021][ T12] team0 (unregistering): Port device team_slave_1 removed [ 160.112400][ T29] audit: type=1400 audit(1736694837.251:358): avc: denied { getopt } for pid=7080 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.172598][ T29] audit: type=1400 audit(1736694837.301:359): avc: denied { write } for pid=7082 comm="syz.0.294" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.259291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 161.910845][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.919575][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.927594][ T6966] bridge_slave_0: entered allmulticast mode [ 161.940083][ T6966] bridge_slave_0: entered promiscuous mode [ 161.955601][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.991776][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.999770][ T6966] bridge_slave_1: entered allmulticast mode [ 162.011263][ T6966] bridge_slave_1: entered promiscuous mode [ 162.082730][ T29] audit: type=1400 audit(1736694839.121:360): avc: denied { nlmsg_read } for pid=7101 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.103106][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.321455][ T29] audit: type=1400 audit(1736694839.131:361): avc: denied { read } for pid=7101 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.409254][ T29] audit: type=1400 audit(1736694839.341:362): avc: denied { read write } for pid=7101 comm="syz.2.297" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.432922][ T29] audit: type=1400 audit(1736694839.341:363): avc: denied { open } for pid=7101 comm="syz.2.297" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.455890][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.821529][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.869871][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.149317][ T29] audit: type=1400 audit(1736694840.141:364): avc: denied { ioctl } for pid=7109 comm="syz.0.300" path="socket:[12172]" dev="sockfs" ino=12172 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.231552][ T7119] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 163.231552][ T7119] The task syz.2.301 (7119) triggered the difference, watch for misbehavior. [ 163.392444][ T6966] team0: Port device team_slave_0 added [ 163.420986][ T6966] team0: Port device team_slave_1 added [ 163.483595][ T29] audit: type=1400 audit(1736694840.631:365): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 163.518443][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.538249][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.564423][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.862973][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.870101][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.897532][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.604991][ T6966] hsr_slave_0: entered promiscuous mode [ 164.638309][ T6966] hsr_slave_1: entered promiscuous mode [ 165.382441][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.562818][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 165.585884][ T46] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 165.597354][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.615250][ T1538] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 165.762497][ T46] usb 1-1: Product: syz [ 165.770325][ T46] usb 1-1: Manufacturer: syz [ 165.775987][ T46] usb 1-1: SerialNumber: syz [ 165.835221][ T46] usb 1-1: config 0 descriptor?? [ 165.845315][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'. [ 165.855440][ T1538] usb 3-1: Using ep0 maxpacket: 32 [ 165.865480][ T1538] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 165.926799][ T1538] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 165.962953][ T1538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.971024][ T1538] usb 3-1: Product: syz [ 166.004469][ T1538] usb 3-1: Manufacturer: syz [ 166.012898][ T1538] usb 3-1: SerialNumber: syz [ 166.029224][ T6966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.035695][ T1538] usb 3-1: config 0 descriptor?? [ 166.046671][ T6966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.054932][ T7139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.063255][ T1538] hub 3-1:0.0: bad descriptor, ignoring hub [ 166.069300][ T1538] hub 3-1:0.0: probe with driver hub failed with error -5 [ 166.076216][ T6966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.084179][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.094897][ T1538] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 166.106619][ T6966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.261734][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.268792][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 166.295398][ T5927] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 166.329728][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.334590][ T1538] usb 3-1: USB disconnect, device number 16 [ 166.337782][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 166.340746][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.363617][ T5927] usb 5-1: Product: syz [ 166.367821][ T5927] usb 5-1: Manufacturer: syz [ 166.385126][ T5927] usb 5-1: SerialNumber: syz [ 166.403581][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.410733][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.428443][ T5927] usb 5-1: config 0 descriptor?? [ 166.440385][ T5927] gspca_main: se401-2.14.0 probing 047d:5003 [ 166.452175][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.459323][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.524375][ T6966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.548039][ T6966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.908616][ T5927] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 166.936716][ T5927] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 166.989113][ T5927] usb 5-1: USB disconnect, device number 10 [ 167.227763][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.342177][ T6966] veth0_vlan: entered promiscuous mode [ 167.382035][ T6966] veth1_vlan: entered promiscuous mode [ 167.424642][ T46] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 167.435116][ T46] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 167.442247][ T46] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 167.494656][ T6966] veth0_macvtap: entered promiscuous mode [ 167.525319][ T46] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 167.558644][ T6966] veth1_macvtap: entered promiscuous mode [ 167.589073][ T46] usb 1-1: USB disconnect, device number 13 [ 167.892883][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.904005][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.913998][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.924816][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.764449][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.828866][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.880189][ T1538] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 168.883830][ T7173] block device autoloading is deprecated and will be removed. [ 169.062473][ T1538] usb 5-1: Using ep0 maxpacket: 32 [ 169.070897][ T1538] usb 5-1: config 1 interface 0 altsetting 204 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.180572][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.211226][ T1538] usb 5-1: config 1 interface 0 altsetting 204 endpoint 0x82 has invalid maxpacket 58814, setting to 1024 [ 169.244184][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.267811][ T1538] usb 5-1: config 1 interface 0 altsetting 204 bulk endpoint 0x82 has invalid maxpacket 1024 [ 169.500903][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.508327][ T1538] usb 5-1: config 1 interface 0 altsetting 204 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.524555][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.535128][ T1538] usb 5-1: config 1 interface 0 has no altsetting 0 [ 169.541833][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.626735][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.637886][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.648018][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.658701][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.668794][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.679537][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.951366][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.957047][ T6966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.971616][ T6966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.980537][ T6966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.989519][ T6966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.382199][ T1538] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.391542][ T1538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.399792][ T1538] usb 5-1: Product: syz [ 170.404123][ T1538] usb 5-1: Manufacturer: 溨閇ᤏ殜ේ뗄ð懙濵䒌ඎ༪讅唹㮢㞟䄭旣쯝໦鍭冦ᤨ犖붦Ṧ憨鏽㟣㱛촫Р扒奊ꁆ꤬떖뉼怔ᥘ쐣ᦕൗ饣娰 [ 170.421512][ T1538] usb 5-1: SerialNumber: syz [ 170.540397][ T7166] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.798148][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 170.817138][ T7170] slcan: can't register candev [ 170.997045][ T7176] syz.0.314 (7176) used greatest stack depth: 20288 bytes left [ 171.061018][ T1538] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 171.084928][ T1538] usb 5-1: USB disconnect, device number 11 [ 171.131658][ T29] audit: type=1400 audit(1736694848.231:366): avc: denied { name_connect } for pid=7190 comm="syz.0.318" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 172.066804][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.102468][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.330788][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.493036][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 172.502076][ T46] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.513783][ T46] usb 5-1: config 0 has no interface number 0 [ 172.513992][ T46] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 172.514045][ T46] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 172.541932][ T46] usb 5-1: config 0 interface 41 has no altsetting 0 [ 172.556499][ T46] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 172.556806][ T8] libceph: connect (1)[c::]:6789 error -101 [ 172.565908][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.592925][ T46] usb 5-1: Product: syz [ 172.602636][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 172.622993][ T46] usb 5-1: Manufacturer: syz [ 172.632772][ T46] usb 5-1: SerialNumber: syz [ 172.651626][ T7198] ceph: No mds server is up or the cluster is laggy [ 172.678995][ T46] usb 5-1: config 0 descriptor?? [ 172.704566][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.907419][ T7196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.914808][ T7196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.922188][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.950894][ T29] audit: type=1400 audit(1736694850.091:367): avc: denied { mounton } for pid=6966 comm="syz-executor" path="/root/syzkaller.ftYk5U/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 173.034690][ T29] audit: type=1400 audit(1736694850.171:368): avc: denied { mount } for pid=6966 comm="syz-executor" name="/" dev="gadgetfs" ino=6811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 173.124180][ T7196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 173.131463][ T7196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 173.612336][ T46] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 173.626500][ T46] usb 5-1: USB disconnect, device number 12 [ 174.793822][ T29] audit: type=1400 audit(1736694851.931:369): avc: denied { connect } for pid=7211 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 176.977452][ T8] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 177.382944][ T8] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 177.629259][ T7249] ceph: No mds server is up or the cluster is laggy [ 177.669747][ T8] usb 1-1: config 8 has no interface number 0 [ 177.676205][ T8] usb 1-1: config 8 interface 177 has no altsetting 0 [ 177.683234][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 177.692807][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.703645][ T969] libceph: connect (1)[c::]:6789 error -101 [ 177.710895][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 178.192586][ T1538] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 178.313637][ T5927] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.444297][ T8] usb 1-1: string descriptor 0 read error: -71 [ 178.454654][ T8] ir_toy 1-1:8.177: required endpoints not found [ 178.472663][ T1538] usb 2-1: Using ep0 maxpacket: 16 [ 178.474007][ T5927] usb 4-1: device descriptor read/64, error -71 [ 178.479224][ T1538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.487814][ T8] usb 1-1: USB disconnect, device number 14 [ 178.517987][ T1538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.530963][ T1538] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.546112][ T1538] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 178.557010][ T1538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.574591][ T1538] usb 2-1: config 0 descriptor?? [ 178.593094][ T969] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 178.722520][ T5927] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.752466][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 178.760659][ T969] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 178.762514][ T5825] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 178.768986][ T969] usb 3-1: config 0 has no interface number 0 [ 178.783909][ T969] usb 3-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=e1.1f [ 178.793440][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.804695][ T969] usb 3-1: config 0 descriptor?? [ 178.862485][ T5927] usb 4-1: device descriptor read/64, error -71 [ 178.932397][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 178.940422][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 178.951157][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.972923][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.982402][ T5927] usb usb4-port1: attempt power cycle [ 178.990485][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 179.014167][ T5825] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 179.025284][ T969] usb 3-1: string descriptor 0 read error: -71 [ 179.028564][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.039756][ T5825] usb 5-1: Product: syz [ 179.044111][ T5825] usb 5-1: Manufacturer: syz [ 179.052373][ T5825] usb 5-1: SerialNumber: syz [ 179.058159][ T1538] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input32 [ 179.074224][ T5825] usb 5-1: config 0 descriptor?? [ 179.076444][ T969] snd-usb-caiaq 3-1:0.150: can't set alt interface. [ 179.081150][ T7267] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.100855][ T1538] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 179.117810][ T969] usb 3-1: unable to init card! (ret=-5) [ 179.138566][ T969] snd-usb-caiaq 3-1:0.150: probe with driver snd-usb-caiaq failed with error -5 [ 179.188964][ T969] usb 3-1: USB disconnect, device number 17 [ 179.223143][ T8] usb 2-1: USB disconnect, device number 7 [ 179.327447][ T5825] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 179.336088][ T5825] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input33 [ 179.354874][ T5927] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.385299][ T5927] usb 4-1: device descriptor read/8, error -71 [ 179.622419][ T5927] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 179.651364][ T29] audit: type=1400 audit(1736694856.791:370): avc: denied { listen } for pid=7266 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.671620][ T29] audit: type=1400 audit(1736694856.791:371): avc: denied { accept } for pid=7266 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.687290][ T5927] usb 4-1: device descriptor read/8, error -71 [ 179.711368][ T29] audit: type=1400 audit(1736694856.851:372): avc: denied { shutdown } for pid=7266 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.731147][ T29] audit: type=1400 audit(1736694856.851:373): avc: denied { read write } for pid=7266 comm="syz.4.335" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.754928][ T29] audit: type=1400 audit(1736694856.851:374): avc: denied { open } for pid=7266 comm="syz.4.335" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.778109][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.822003][ T5927] usb usb4-port1: unable to enumerate USB device [ 180.873407][ T7283] 9pnet_fd: p9_fd_create_tcp (7283): problem connecting socket to 127.0.0.1 [ 181.191572][ T7284] ntfs3(nullb0): Primary boot signature is not NTFS. [ 181.198468][ T7284] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 181.208872][ T969] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 181.226906][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 181.234267][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 181.242267][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 181.249775][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 181.447014][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 181.463348][ T969] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 181.492507][ T969] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 181.651044][ T29] audit: type=1400 audit(1736694858.791:375): avc: denied { write } for pid=7287 comm="syz.1.343" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.681200][ T969] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 181.691494][ T969] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 181.703051][ T969] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 181.734614][ T969] usb 3-1: config 1 interface 0 has no altsetting 0 [ 181.741399][ T969] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 181.750931][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.821275][ T969] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 183.056629][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.181993][ T969] scsi host1: usb-storage 3-1:1.0 [ 183.239901][ C1] powermate: config urb returned -71 [ 183.242588][ T969] usb 5-1: USB disconnect, device number 13 [ 183.245254][ C1] powermate: usb_submit_urb(config) failed [ 183.251415][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 183.266019][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.325665][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.503795][ T5897] usb 3-1: USB disconnect, device number 18 [ 183.679150][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.688742][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.699357][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.707916][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.717708][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.725675][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.733678][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.738381][ T7313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.836874][ T29] audit: type=1400 audit(1736694860.981:376): avc: denied { write } for pid=7308 comm="syz.1.346" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 183.839457][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.859968][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.881450][ T29] audit: type=1400 audit(1736694861.011:377): avc: denied { ioctl } for pid=7308 comm="syz.1.346" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 183.965555][ T29] audit: type=1400 audit(1736694861.111:378): avc: denied { bind } for pid=7308 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 184.012428][ T29] audit: type=1400 audit(1736694861.111:379): avc: denied { write } for pid=7308 comm="syz.1.346" path="socket:[14686]" dev="sockfs" ino=14686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 184.052430][ T5825] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 184.184297][ T7310] chnl_net:caif_netlink_parms(): no params data found [ 184.205380][ T1145] erspan0: left allmulticast mode [ 184.210719][ T1145] erspan0: left promiscuous mode [ 184.212440][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 184.216325][ T1145] bridge0: port 3(erspan0) entered disabled state [ 184.234928][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.250771][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.267163][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.280908][ T5825] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.282937][ T1145] bridge_slave_1: left allmulticast mode [ 184.295445][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.323387][ T1145] bridge_slave_1: left promiscuous mode [ 184.352567][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.364722][ T5825] usb 5-1: config 0 descriptor?? [ 184.382570][ T1145] bridge_slave_0: left allmulticast mode [ 184.412398][ T1145] bridge_slave_0: left promiscuous mode [ 184.429285][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.892494][ T5825] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input35 [ 184.985717][ T5825] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 185.100108][ T969] usb 5-1: USB disconnect, device number 14 [ 185.343100][ T1145] dvmrp5 (unregistering): left allmulticast mode [ 185.519249][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.529591][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.552744][ T1145] bond0 (unregistering): Released all slaves [ 185.780880][ T54] Bluetooth: hci1: command tx timeout [ 186.047483][ T7351] netlink: 168 bytes leftover after parsing attributes in process `syz.4.354'. [ 187.832722][ T54] Bluetooth: hci1: command tx timeout [ 188.502892][ T5825] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.037799][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 189.037815][ T29] audit: type=1400 audit(1736694866.151:381): avc: denied { mount } for pid=7361 comm="syz.4.358" name="/" dev="pstore" ino=4247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 189.178893][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 189.383176][ T5825] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 189.395361][ T5825] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 189.454981][ T5825] usb 2-1: config 0 has no interface number 0 [ 189.586224][ T5825] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.668132][ T5825] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.764714][ T5825] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.781750][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.852519][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.921443][ T54] Bluetooth: hci1: command tx timeout [ 189.922732][ T7310] bridge_slave_0: entered allmulticast mode [ 189.964185][ T5825] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 189.988523][ T5825] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 190.014610][ T7310] bridge_slave_0: entered promiscuous mode [ 190.018927][ T5825] usb 2-1: Product: syz [ 190.034240][ T5825] usb 2-1: Manufacturer: syz [ 190.397821][ T5825] usb 2-1: config 0 descriptor?? [ 190.497449][ T1145] hsr_slave_0: left promiscuous mode [ 190.512491][ T1145] hsr_slave_1: left promiscuous mode [ 190.539907][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.686477][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.742578][ T46] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 190.753748][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.761687][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.081101][ T7396] ceph: No mds server is up or the cluster is laggy [ 191.088710][ T8] libceph: connect (1)[c::]:6789 error -101 [ 191.090359][ T1145] veth1_macvtap: left promiscuous mode [ 191.095524][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 191.132759][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 191.235864][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.368072][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.372776][ T1145] veth0_macvtap: left promiscuous mode [ 191.447682][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.476666][ T46] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.490641][ T1145] veth1_vlan: left promiscuous mode [ 191.491933][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.520623][ T5825] usb 2-1: USB disconnect, device number 8 [ 191.573289][ T1145] veth0_vlan: left promiscuous mode [ 191.607180][ T46] usb 4-1: config 0 descriptor?? [ 191.695983][ T29] audit: type=1400 audit(1736694868.841:382): avc: denied { create } for pid=7404 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.718159][ T29] audit: type=1400 audit(1736694868.841:383): avc: denied { getopt } for pid=7404 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.950027][ T7407] FAULT_INJECTION: forcing a failure. [ 191.950027][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 191.962907][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.1.367 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 191.973509][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.983570][ T7407] Call Trace: [ 191.986850][ T7407] [ 191.989781][ T7407] dump_stack_lvl+0x16c/0x1f0 [ 191.994489][ T7407] should_fail_ex+0x497/0x5b0 [ 191.999179][ T7407] ? fs_reclaim_acquire+0xae/0x150 [ 192.004297][ T7407] should_failslab+0xc2/0x120 [ 192.009000][ T7407] __kmalloc_noprof+0xcb/0x510 [ 192.013776][ T7407] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 192.019505][ T7407] tomoyo_realpath_from_path+0xb9/0x720 [ 192.025061][ T7407] ? tomoyo_path_number_perm+0x235/0x590 [ 192.030700][ T7407] ? tomoyo_path_number_perm+0x235/0x590 [ 192.036345][ T7407] tomoyo_path_number_perm+0x248/0x590 [ 192.041810][ T7407] ? tomoyo_path_number_perm+0x235/0x590 [ 192.047539][ T7407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 192.053549][ T7407] ? __pfx___schedule+0x10/0x10 [ 192.058421][ T7407] ? irqentry_exit+0x3b/0x90 [ 192.063021][ T7407] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.068239][ T7407] ? security_file_ioctl+0x21c/0x240 [ 192.073537][ T7407] security_file_ioctl+0x9b/0x240 [ 192.078570][ T7407] __x64_sys_ioctl+0xb7/0x200 [ 192.083260][ T7407] do_syscall_64+0xcd/0x250 [ 192.087782][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.093857][ T7407] RIP: 0033:0x7f0872985d29 [ 192.098284][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.117907][ T7407] RSP: 002b:00007f0873754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.126337][ T7407] RAX: ffffffffffffffda RBX: 00007f0872b76160 RCX: 00007f0872985d29 [ 192.134314][ T7407] RDX: 0000000020000040 RSI: 0000000000008946 RDI: 000000000000000c [ 192.142285][ T7407] RBP: 00007f0873754090 R08: 0000000000000000 R09: 0000000000000000 [ 192.150270][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.158251][ T7407] R13: 0000000000000000 R14: 00007f0872b76160 R15: 00007fff96565cb8 [ 192.166246][ T7407] [ 192.169905][ T7407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.202185][ T54] Bluetooth: hci1: command tx timeout [ 192.280603][ T46] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input37 [ 192.481582][ T46] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 192.544796][ T46] usb 4-1: USB disconnect, device number 14 [ 193.580549][ T29] audit: type=1400 audit(1736694870.721:384): avc: denied { append } for pid=7415 comm="syz.3.369" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 193.784897][ T29] audit: type=1400 audit(1736694870.921:385): avc: denied { read } for pid=7415 comm="syz.3.369" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.838318][ T7420] netlink: 104 bytes leftover after parsing attributes in process `syz.3.369'. [ 193.866465][ T29] audit: type=1400 audit(1736694870.921:386): avc: denied { open } for pid=7415 comm="syz.3.369" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.917303][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 193.999760][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 194.102586][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 194.507986][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514406][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.179382][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.186695][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.194067][ T7310] bridge_slave_1: entered allmulticast mode [ 195.200600][ T7310] bridge_slave_1: entered promiscuous mode [ 195.314850][ T7310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.334850][ T7310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.372470][ T29] audit: type=1400 audit(1736694872.491:387): avc: denied { create } for pid=7428 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.397629][ T29] audit: type=1400 audit(1736694872.501:388): avc: denied { getopt } for pid=7428 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.496857][ T7310] team0: Port device team_slave_0 added [ 195.574046][ T7310] team0: Port device team_slave_1 added [ 195.815098][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.838524][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.893817][ T7310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.952132][ T1145] IPVS: stop unused estimator thread 0... [ 195.959613][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.974547][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.002994][ T7310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.037643][ T7310] hsr_slave_0: entered promiscuous mode [ 196.045312][ T7310] hsr_slave_1: entered promiscuous mode [ 196.051292][ T7310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.059134][ T7310] Cannot create hsr debugfs directory [ 196.350287][ T7310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.359434][ T7310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.368112][ T7310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.387118][ T7310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.426764][ T7310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.444318][ T7310] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.455363][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.462565][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.477262][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.484459][ T7020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.576225][ T7416] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.584374][ T7416] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 196.596561][ T7416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.602703][ T7416] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 196.613877][ T7416] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.620029][ T7416] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.631399][ T7416] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.638536][ T7310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.641964][ T7416] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 196.663386][ T7416] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 196.680924][ T7416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.683269][ T7310] veth0_vlan: entered promiscuous mode [ 196.687074][ T7416] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.699537][ T7416] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.800929][ T7310] veth1_vlan: entered promiscuous mode [ 196.900609][ T7310] veth0_macvtap: entered promiscuous mode [ 196.910180][ T7310] veth1_macvtap: entered promiscuous mode [ 196.982765][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.993372][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.004041][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.015418][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.039133][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.241111][ T5905] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 197.314642][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 197.342813][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.360673][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.373799][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 197.373889][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.398972][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.414586][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.432201][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.444050][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.462662][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.474482][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.507887][ T5905] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 197.606572][ T9] usb 5-1: config 0 has an invalid interface number: 158 but max is 0 [ 197.622854][ T9] usb 5-1: config 0 has no interface number 0 [ 197.631232][ T9] usb 5-1: config 0 interface 158 has no altsetting 0 [ 197.712721][ T5905] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 197.722626][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.738781][ T5905] usb 2-1: Product: syz [ 197.795927][ T5905] usb 2-1: Manufacturer: syz [ 197.802609][ T5905] usb 2-1: SerialNumber: syz [ 197.806269][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.831207][ T9] usb 5-1: New USB device found, idVendor=c32a, idProduct=8339, bcdDevice=17.2b [ 197.849774][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.956289][ T5905] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 197.967388][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.988323][ T9] usb 5-1: Product: syz [ 197.996414][ T9] usb 5-1: Manufacturer: syz [ 198.001045][ T9] usb 5-1: SerialNumber: syz [ 198.006930][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.020688][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.069456][ T9] usb 5-1: config 0 descriptor?? [ 198.085737][ T9] cdc_eem 5-1:0.158: probe with driver cdc_eem failed with error -22 [ 198.117692][ T7310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.129225][ T7310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.138095][ T7310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.167833][ T7310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.194552][ T5869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 198.372733][ T46] usb 5-1: USB disconnect, device number 15 [ 198.386185][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.413908][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.441853][ T9] usb 2-1: USB disconnect, device number 9 [ 198.452400][ T5905] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.486433][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.511770][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.630310][ T5905] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 198.642437][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.648529][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 198.655199][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 198.661418][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.711177][ T5905] usb 4-1: Product: syz [ 198.715737][ T5905] usb 4-1: Manufacturer: syz [ 198.720760][ T5905] usb 4-1: SerialNumber: syz [ 198.748746][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.749848][ T5905] usb 4-1: config 0 descriptor?? [ 198.820330][ T7459] netlink: 168 bytes leftover after parsing attributes in process `syz.2.377'. [ 199.350060][ T5869] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 199.357522][ T5869] ath9k_htc: Failed to initialize the device [ 199.367968][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 199.492864][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 200.014240][ T1538] usb 4-1: USB disconnect, device number 15 [ 200.714796][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 200.716490][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 200.720824][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.858538][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 201.208997][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.216933][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.917649][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.928904][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 201.938157][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.983664][ T46] usb 2-1: config 0 descriptor?? [ 202.253156][ T29] audit: type=1400 audit(1736694879.401:389): avc: denied { append } for pid=7475 comm="syz.0.383" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 202.278373][ T5824] Bluetooth: unknown link type 115 [ 202.284024][ T5824] Bluetooth: hci1: connection err: -111 [ 202.391566][ T7491] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 202.398119][ T7491] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.406025][ T7491] vhci_hcd vhci_hcd.0: Device attached [ 202.433044][ T7493] vhci_hcd: connection closed [ 202.453315][ T7053] vhci_hcd: stop threads [ 202.492498][ T7053] vhci_hcd: release socket [ 202.503359][ T7053] vhci_hcd: disconnect device [ 202.889095][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.895405][ T46] microsoft 0003:045E:009D.000C: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0 [ 202.918557][ T46] microsoft 0003:045E:009D.000C: no inputs found [ 202.988887][ T46] microsoft 0003:045E:009D.000C: could not initialize ff, continuing anyway [ 203.048513][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 203.097960][ T7499] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 203.116180][ T7499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.381'. [ 203.258811][ T46] usb 2-1: USB disconnect, device number 10 [ 203.277596][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.366888][ T7507] 9pnet_fd: p9_fd_create_tcp (7507): problem connecting socket to 127.0.0.1 [ 204.462075][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 205.454144][ T7524] kAFS: unparsable volume name [ 205.477685][ T7524] netlink: 256 bytes leftover after parsing attributes in process `syz.0.394'. [ 205.519346][ T7522] can0: slcan on ttyS3. [ 205.693629][ T7509] can0 (unregistered): slcan off ttyS3. [ 205.906185][ T29] audit: type=1400 audit(1736694883.041:390): avc: denied { map } for pid=7532 comm="syz.4.398" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 206.024567][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.048604][ T29] audit: type=1400 audit(1736694883.191:391): avc: denied { create } for pid=7532 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 206.149674][ T29] audit: type=1400 audit(1736694883.191:392): avc: denied { module_request } for pid=7532 comm="syz.4.398" kmod="net-pf-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 206.205808][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.374128][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.836661][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.265505][ T969] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.520274][ T969] usb 5-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 207.520316][ T69] bridge_slave_1: left allmulticast mode [ 207.542800][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.555352][ T969] usb 5-1: config 0 descriptor?? [ 207.557265][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.562109][ T69] bridge_slave_1: left promiscuous mode [ 207.580543][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.581226][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.692080][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.917668][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 207.930504][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.940320][ T969] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 207.943245][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.957070][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.043161][ T69] bridge_slave_0: left allmulticast mode [ 208.054500][ T69] bridge_slave_0: left promiscuous mode [ 208.061663][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.064183][ T969] gspca_sn9c20x: Write register 1000 failed -71 [ 208.076697][ T969] gspca_sn9c20x: Device initialization failed [ 208.083143][ T969] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 208.110944][ T969] usb 5-1: USB disconnect, device number 16 [ 209.713998][ T1538] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 209.978118][ T29] audit: type=1400 audit(1736694887.121:393): avc: denied { append } for pid=7589 comm="syz.1.411" name="media1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.000879][ T5824] Bluetooth: hci1: command tx timeout [ 210.006832][ T29] audit: type=1400 audit(1736694887.131:394): avc: denied { cmd } for pid=7589 comm="syz.1.411" path="socket:[16232]" dev="sockfs" ino=16232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 210.072814][ T1538] usb 4-1: Using ep0 maxpacket: 16 [ 210.080607][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.093207][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.112391][ T1538] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.128173][ T1538] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.189153][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.250407][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.287245][ T69] bond0 (unregistering): Released all slaves [ 210.295789][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.306192][ T1538] usb 4-1: config 0 descriptor?? [ 210.990805][ T1538] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input38 [ 211.121764][ T1538] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 211.202986][ T1538] usb 4-1: USB disconnect, device number 16 [ 211.630279][ T7613] ------------[ cut here ]------------ [ 211.636280][ T7613] WARNING: CPU: 1 PID: 7613 at drivers/gpu/drm/vkms/vkms_crtc.c:98 vkms_get_vblank_timestamp+0x185/0x1e0 [ 211.647573][ T7613] Modules linked in: [ 211.651485][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: syz.2.416 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 211.662143][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.672373][ T7613] RIP: 0010:vkms_get_vblank_timestamp+0x185/0x1e0 [ 211.678840][ T7613] Code: da fb e8 1e 83 c8 fb 48 89 e9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 50 48 89 45 00 eb c0 e8 dc b9 da fb 90 <0f> 0b 90 eb b5 e8 51 5c 3d fc e9 dc fe ff ff 48 89 df e8 d4 5c 3d [ 211.698454][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.705003][ T7613] RSP: 0018:ffffc900100e7700 EFLAGS: 00010283 [ 211.711096][ T7613] RAX: 000000000000277f RBX: 00000031442edb88 RCX: ffffc90010139000 [ 211.719262][ T7613] RDX: 0000000000080000 RSI: ffffffff85bf5a84 RDI: 0000000000000006 [ 211.727322][ T7613] RBP: ffffc900100e7868 R08: 0000000000000006 R09: 00000031442edb88 [ 211.735384][ T7613] R10: 00000031442edb88 R11: 0000000000000000 R12: 00000031442edb88 [ 211.743424][ T7613] R13: ffff888025120000 R14: 0000000000004e20 R15: ffffffff85bf5900 [ 211.751436][ T7613] FS: 00007f07bcdb46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 211.760805][ T7613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.767452][ T7613] CR2: 00007f07bef69ae0 CR3: 000000007dd08000 CR4: 00000000003526f0 [ 211.775475][ T7613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.783522][ T7613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.791510][ T7613] Call Trace: [ 211.794855][ T7613] [ 211.797822][ T7613] ? __warn+0xea/0x3c0 [ 211.801906][ T7613] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 211.807959][ T7613] ? report_bug+0x3c0/0x580 [ 211.812676][ T7613] ? handle_bug+0x54/0xa0 [ 211.817061][ T7613] ? exc_invalid_op+0x17/0x50 [ 211.821755][ T7613] ? asm_exc_invalid_op+0x1a/0x20 [ 211.826816][ T7613] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 211.833146][ T7613] ? vkms_get_vblank_timestamp+0x184/0x1e0 [ 211.838964][ T7613] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 211.844804][ T7613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.850826][ T7613] drm_crtc_get_last_vbltimestamp+0x103/0x1b0 [ 211.856946][ T7613] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 211.863801][ T7613] drm_crtc_next_vblank_start+0x182/0x300 [ 211.869670][ T7613] drm_atomic_helper_wait_for_fences+0x1fc/0x820 [ 211.876179][ T7613] ? vkms_prepare_fb+0x8e/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.881201][ T7613] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 211.888264][ T7613] drm_atomic_helper_commit+0x1cf/0x380 [ 211.894031][ T7613] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 211.900320][ T7613] drm_atomic_commit+0x232/0x300 [ 211.905511][ T7613] ? __pfx_drm_atomic_commit+0x10/0x10 [ 211.911301][ T7613] ? __pfx___drm_printfn_info+0x10/0x10 [ 211.917263][ T7613] ? modeset_lock+0x114/0x6e0 [ 211.922180][ T7613] set_property_atomic+0x172/0x380 [ 211.927999][ T7613] ? __pfx_set_property_atomic+0x10/0x10 [ 211.933911][ T7613] ? drm_master_put+0x6f/0xe0 [ 211.938629][ T7613] ? __pfx___drm_mode_object_find+0x10/0x10 [ 211.944745][ T7613] drm_mode_obj_set_property_ioctl+0x411/0x5c0 [ 211.951105][ T7613] drm_connector_property_set_ioctl+0x103/0x170 [ 211.957592][ T7613] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 211.964569][ T7613] ? do_raw_spin_unlock+0x172/0x230 [ 211.969797][ T7613] drm_ioctl_kernel+0x1e6/0x3d0 [ 211.975190][ T7613] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 211.982116][ T7613] ? __might_fault+0x41/0x190 [ 211.986898][ T7613] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 211.992402][ T7613] ? __might_fault+0xe3/0x190 [ 211.997132][ T7613] drm_ioctl+0x5d6/0xc00 [ 212.001399][ T7613] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 212.008253][ T7613] ? __pfx_drm_ioctl+0x10/0x10 [ 212.013282][ T7613] ? __pfx_lock_release+0x10/0x10 [ 212.018351][ T7613] ? selinux_file_ioctl+0x180/0x270 [ 212.023758][ T7613] ? selinux_file_ioctl+0xb4/0x270 [ 212.028928][ T7613] ? __pfx_drm_ioctl+0x10/0x10 [ 212.033816][ T7613] __x64_sys_ioctl+0x190/0x200 [ 212.038659][ T7613] do_syscall_64+0xcd/0x250 [ 212.043224][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.049216][ T7613] RIP: 0033:0x7f07bef85d29 [ 212.053732][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.073527][ T7613] RSP: 002b:00007f07bcdb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.079717][ T5824] Bluetooth: hci1: command 0x041b tx timeout [ 212.081961][ T7613] RAX: ffffffffffffffda RBX: 00007f07bf176160 RCX: 00007f07bef85d29 [ 212.096307][ T7613] RDX: 0000000020000240 RSI: 00000000c01064ab RDI: 0000000000000007 [ 212.104353][ T7613] RBP: 00007f07bf001b08 R08: 0000000000000000 R09: 0000000000000000 [ 212.112559][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.120740][ T7613] R13: 0000000000000000 R14: 00007f07bf176160 R15: 00007ffd401b9c38 [ 212.128814][ T7613] [ 212.131867][ T7613] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.139154][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: syz.2.416 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 212.149755][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 212.159829][ T7613] Call Trace: [ 212.163147][ T7613] [ 212.166089][ T7613] dump_stack_lvl+0x3d/0x1f0 [ 212.170695][ T7613] panic+0x71d/0x800 [ 212.174599][ T7613] ? __pfx_panic+0x10/0x10 [ 212.179042][ T7613] ? show_trace_log_lvl+0x29d/0x3d0 [ 212.184279][ T7613] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 212.190110][ T7613] check_panic_on_warn+0xab/0xb0 [ 212.195064][ T7613] __warn+0xf6/0x3c0 [ 212.198970][ T7613] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 212.204798][ T7613] report_bug+0x3c0/0x580 [ 212.209149][ T7613] handle_bug+0x54/0xa0 [ 212.213328][ T7613] exc_invalid_op+0x17/0x50 [ 212.217850][ T7613] asm_exc_invalid_op+0x1a/0x20 [ 212.222719][ T7613] RIP: 0010:vkms_get_vblank_timestamp+0x185/0x1e0 [ 212.229162][ T7613] Code: da fb e8 1e 83 c8 fb 48 89 e9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 50 48 89 45 00 eb c0 e8 dc b9 da fb 90 <0f> 0b 90 eb b5 e8 51 5c 3d fc e9 dc fe ff ff 48 89 df e8 d4 5c 3d [ 212.248785][ T7613] RSP: 0018:ffffc900100e7700 EFLAGS: 00010283 [ 212.254852][ T7613] RAX: 000000000000277f RBX: 00000031442edb88 RCX: ffffc90010139000 [ 212.262817][ T7613] RDX: 0000000000080000 RSI: ffffffff85bf5a84 RDI: 0000000000000006 [ 212.270777][ T7613] RBP: ffffc900100e7868 R08: 0000000000000006 R09: 00000031442edb88 [ 212.278735][ T7613] R10: 00000031442edb88 R11: 0000000000000000 R12: 00000031442edb88 [ 212.286694][ T7613] R13: ffff888025120000 R14: 0000000000004e20 R15: ffffffff85bf5900 [ 212.294654][ T7613] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 212.300838][ T7613] ? vkms_get_vblank_timestamp+0x184/0x1e0 [ 212.306658][ T7613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.312656][ T7613] drm_crtc_get_last_vbltimestamp+0x103/0x1b0 [ 212.318741][ T7613] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 212.325342][ T7613] drm_crtc_next_vblank_start+0x182/0x300 [ 212.331061][ T7613] drm_atomic_helper_wait_for_fences+0x1fc/0x820 [ 212.337387][ T7613] ? vkms_prepare_fb+0x8e/0xb0 [ 212.342139][ T7613] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 212.348987][ T7613] drm_atomic_helper_commit+0x1cf/0x380 [ 212.354526][ T7613] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 212.360585][ T7613] drm_atomic_commit+0x232/0x300 [ 212.365511][ T7613] ? __pfx_drm_atomic_commit+0x10/0x10 [ 212.370962][ T7613] ? __pfx___drm_printfn_info+0x10/0x10 [ 212.376513][ T7613] ? modeset_lock+0x114/0x6e0 [ 212.381187][ T7613] set_property_atomic+0x172/0x380 [ 212.386292][ T7613] ? __pfx_set_property_atomic+0x10/0x10 [ 212.391912][ T7613] ? drm_master_put+0x6f/0xe0 [ 212.396589][ T7613] ? __pfx___drm_mode_object_find+0x10/0x10 [ 212.402479][ T7613] drm_mode_obj_set_property_ioctl+0x411/0x5c0 [ 212.408628][ T7613] drm_connector_property_set_ioctl+0x103/0x170 [ 212.414860][ T7613] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 212.421619][ T7613] ? do_raw_spin_unlock+0x172/0x230 [ 212.426820][ T7613] drm_ioctl_kernel+0x1e6/0x3d0 [ 212.431668][ T7613] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 212.438425][ T7613] ? __might_fault+0x41/0x190 [ 212.443101][ T7613] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 212.448464][ T7613] ? __might_fault+0xe3/0x190 [ 212.453140][ T7613] drm_ioctl+0x5d6/0xc00 [ 212.457379][ T7613] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 212.464134][ T7613] ? __pfx_drm_ioctl+0x10/0x10 [ 212.468889][ T7613] ? __pfx_lock_release+0x10/0x10 [ 212.473912][ T7613] ? selinux_file_ioctl+0x180/0x270 [ 212.479138][ T7613] ? selinux_file_ioctl+0xb4/0x270 [ 212.484243][ T7613] ? __pfx_drm_ioctl+0x10/0x10 [ 212.489007][ T7613] __x64_sys_ioctl+0x190/0x200 [ 212.493776][ T7613] do_syscall_64+0xcd/0x250 [ 212.498287][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.504172][ T7613] RIP: 0033:0x7f07bef85d29 [ 212.508575][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.528178][ T7613] RSP: 002b:00007f07bcdb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.536586][ T7613] RAX: ffffffffffffffda RBX: 00007f07bf176160 RCX: 00007f07bef85d29 [ 212.544545][ T7613] RDX: 0000000020000240 RSI: 00000000c01064ab RDI: 0000000000000007 [ 212.552513][ T7613] RBP: 00007f07bf001b08 R08: 0000000000000000 R09: 0000000000000000 [ 212.560491][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.568459][ T7613] R13: 0000000000000000 R14: 00007f07bf176160 R15: 00007ffd401b9c38 [ 212.576439][ T7613] [ 212.579647][ T7613] Kernel Offset: disabled [ 212.584029][ T7613] Rebooting in 86400 seconds..