last executing test programs: 1m8.940043853s ago: executing program 1 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000640)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m8.206497228s ago: executing program 1 (id=160): r0 = socket(0x2b, 0x1, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_vhci(&(0x7f0000001000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x1, 0xc9, @any, 0x2, 0x2, 0x1, 0xb45d, 0x8001, 0x5}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'geneve0\x00', {'ip6erspan0\x00'}, 0xffed}) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="7e8a", 0x2, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, r9, r10, 0x0) 1m7.203512217s ago: executing program 1 (id=164): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x3, 0xb, 0x13ec, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x8a6}, 0x1c) shutdown(r7, 0x1) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00 \x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03&`\xd5\xe7\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x98(\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\xba\xb4+v\xb7i\a\x7f\v(\x11>\x9b\x1c\xd7', 0x6) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x8) 1m5.633641787s ago: executing program 1 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xf0ffffff) 1m5.270313175s ago: executing program 1 (id=171): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() write(0xffffffffffffffff, &(0x7f00000010c0)="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", 0xfe0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01deff0000000000000054000000"], 0x14}}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x2, "100093", 0x9, 0xfc}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/22) write(r6, &(0x7f0000000040)="05000000010000", 0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x22, 0x5, 0x0, 0x0, r7}) 1m4.130470515s ago: executing program 1 (id=174): r0 = socket(0x2b, 0x1, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_vhci(&(0x7f0000001000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x1, 0xc9, @any, 0x2, 0x2, 0x1, 0xb45d, 0x8001, 0x5}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'geneve0\x00', {'ip6erspan0\x00'}, 0xffed}) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="7e8a", 0x2, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, r9, r10, 0x0) 1m3.611447707s ago: executing program 32 (id=174): r0 = socket(0x2b, 0x1, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_vhci(&(0x7f0000001000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x1, 0xc9, @any, 0x2, 0x2, 0x1, 0xb45d, 0x8001, 0x5}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'geneve0\x00', {'ip6erspan0\x00'}, 0xffed}) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="7e8a", 0x2, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, r9, r10, 0x0) 11.26610594s ago: executing program 5 (id=343): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0xb40526c34f4553ac) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={[&(0x7f00000001c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000d00)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141103) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x22002, 0x0) 10.634939703s ago: executing program 3 (id=345): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = gettid() (async) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x4) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 10.604837626s ago: executing program 4 (id=346): syz_open_dev$usbmon(&(0x7f0000001b80), 0x4, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() pipe(&(0x7f0000000040)) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x27, 0x1, 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) prlimit64(r0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='cramfs\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x80080) creat(&(0x7f00000002c0)='./file0\x00', 0x60) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 9.286354099s ago: executing program 4 (id=348): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014"], 0x68}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x36) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="b2f1c85617f972dae3bfcad70b962690"], 0x60}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, 0x0, 0x44004) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x11, 0x0, 0x8, 0x615, 0x3, 0x4, 0x22, 0xa, '\x00', 0x7, 0x3}) openat$dir(0xffffffffffffff9c, 0x0, 0xa0042, 0x12) 8.487330629s ago: executing program 5 (id=350): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0xfffffffd, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x40, 0x8}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000008000000010000008000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 8.290553295s ago: executing program 5 (id=351): io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001, 0x40, 0x2, 0x2f7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) open$dir(&(0x7f0000000000)='./file0\x00', 0x26380, 0x1c0) 8.1977665s ago: executing program 4 (id=353): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x3c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 7.338745279s ago: executing program 5 (id=354): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x7f) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000280)='./file0\x00') syz_init_net_socket$802154_raw(0x24, 0x3, 0xf0ffff) 6.990571484s ago: executing program 3 (id=355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x20000000, 0x0, 0x0, [], [0x1, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0xb68a], [0x0, 0x2, 0x0, 0xcbb]}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x20000000, 0x0, 0x0, [], [0x1, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0xb68a], [0x0, 0x2, 0x0, 0xcbb]}) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000100)={r5}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000038c0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) 6.078622375s ago: executing program 2 (id=361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000055c0), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) r3 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a000000000106000110c41fc8a325ca58fcf0019c3084267d3b5b49488e15d3c0d13226526c54d4647764e414a813ca774d"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '@@\'],\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x48800}, 0x20004000) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={&(0x7f0000005600)={0x2c, r1, 0x1, 0x5, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 5.856391197s ago: executing program 0 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @random="4894826645f8", @val={@void}, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @random="46d588477cc4", @dev, @link_local, @loopback}}}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6c, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=""/15, &(0x7f0000000300), &(0x7f00000006c0)="cee10804cd4a5c7bf7fd751bb94b2578c427d53d864006614aa6845f53c9fd9ceffa1ffee2109d2bb3f7abaa644276720df4fe688f7dd400703a32764dd066c1b84df049f1bc030ab47485f6976312fc0fb33c17eae4c2c2dcb770a374ba21aeffdb6d00fe8d7aeb3b8318451ce5f976fae5949ad2300bcff8b6ede21b5e3a7cf5090d9e5f1a7a8b2f6defb5572bd37637eb9fccc034a426eddbd727ed53e475675225c823ad16655fbc80e92ecd3fe55d95013d46323178d658978bd6aff75969bc5a58177fc9100271c80117051d4e1987ea99", 0x7, r5, 0x4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r7 = socket$inet(0x2, 0xa, 0x4) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}}, 0x20}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) 5.824450621s ago: executing program 4 (id=363): sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000100010000000800010001000000050001000000000008000100010000000800010000000000080001000100000008000100000000"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x80) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900010000000000fbdbdf2580201400001100050000000008000fc7aa00feffffff"], 0x24}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_delroute={0x28, 0x19, 0x800, 0x70bd28, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x6, 0xff, 0x4, 0x0, 0x7, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0xe81f, 0x4, 0x81}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0xf, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8810) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast1, 0x9}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x48000) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 5.778448092s ago: executing program 2 (id=364): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) fadvise64(0xffffffffffffffff, 0x18, 0x8800, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000440)={0x0, @reserved}) landlock_create_ruleset(&(0x7f0000000040)={0x8127, 0x2}, 0x18, 0x0) semctl$GETALL(0x0, 0x0, 0x6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r9}, 0x10) 5.777898832s ago: executing program 3 (id=365): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x101) sync() r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x18}], 0x30, 0x40000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x8, 0x0, 0x2b96c184, 0x80, '\x00', 0x3}, 0x5, 0x0, 0x9, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="cf", 0x1}, {0x0}], 0x3, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x88, 0x117, 0x2, 0x70, "82802661b8764c1a97e50f8d32dfb5c2cb07b736e82052a19a32320e29c4dee5ba9457193e22aea1e22d8ca05c868cd06bceddf8ffcb883ebd8e0a7ff64d293ffd811fad9ae43a991c24aae71c0177b1f4161de153457c0562f5282fb320fdd0fd0e5175c4cb86afac182e25bc3acb67"}, @iv={0xe0, 0x117, 0x2, 0xca, "2afa241aec3111513cd2b8c83430231f76d8afd3813faf70eff864b36806280b4b00b23a61235bb04e35cf181be2b4a4159294ad390f9a087eea8cd58939f22897dd4e4ecf72d6bc62754df9bc974bea6eccea09ac8ec478ff9146d1ca870f71ab493ec740086313ff483478a50acd0a2fd4be9ecec8ce357be88d2c7469a78f6329ab066f2b6359085537acce31b82b8c36b523ad1ab8a8e56649125e8a27e7b1520f02e61db083289e86b9d90fded38c2f764247d4fc0380da7e1a8db0fa49f6674995e0ae1e0bfebb"}, @assoc={0x18, 0x117, 0x4, 0x100}], 0x198}, 0x8000808) 4.845105699s ago: executing program 2 (id=366): io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001, 0x40, 0x2, 0x2f7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000080), 0x0) splice(r3, 0x0, r5, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4) 4.664220485s ago: executing program 0 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x2, 0x20000000, 0x7fc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="c6e68541442bea2435052f191d"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x15, 0x0, &(0x7f0000001400)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x4, 0x12) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) 3.867812007s ago: executing program 2 (id=368): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffeff7, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) userfaultfd(0x80001) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfb, &(0x7f0000000040)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000180)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 3.022492046s ago: executing program 5 (id=369): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='source\xcf\x87\x86\x1bY\x0f\xde\xd6\xcd\xc0\x01\xd3\x19>K\x04\xfe\x86YG\xa5\x0f\xed\xa0\x9f\x1e\x14R\x9e\x04\xfa\xed\xd0TG&\x88\xeaz\x9aD\xf8Tt\x8c\x00{\x1fm\xfe\x9c\xf6_h\x9e\xfc\'', &(0x7f00000001c0)='sou\x01ce', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088484820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000640)={0x7ff, {{0xa, 0x4e22, 0x8, @private1, 0x7ca}}, {{0xa, 0x4e23, 0xca, @mcast2, 0x6}}}, 0x108) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0xfffffffc, @local, 0x1}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x401, 0x8001, 0x0, 0x9, 0x1, 0x6, 0x4, 0x1, r9}, &(0x7f00000003c0)=0x20) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @remote}, 0x4a, {}, 'veth1_to_bridge\x00'}) r10 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x50400) r12 = syz_open_dev$sndctrl(0x0, 0x1, 0x141000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r12, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) madvise(&(0x7f0000cd0000/0x4000)=nil, 0xffffffffdf32ffff, 0x16) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000000200)={"6080d517", 0x3, 0x9, 0x1, 0x2, 0xfffffffc, "f9a927627a359827fdc4ed7cb20708", "ae6c49d8", "1c4391b3", "aa04df4e", ["e4e7d0b3748a08eb4117a58f", "a42a5eb8b97b66092e22038e", "00284dc8b857e17ccdef2efa", "d89c67314b6a13a76640b81a"]}) tkill(r10, 0xb) 3.018718911s ago: executing program 4 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0xed8, 0x8000000000000}, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19ef, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x104}}, 0x40) close(0xffffffffffffffff) ioctl$TCSETSW2(r5, 0x5425, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.450617661s ago: executing program 2 (id=371): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x3c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r7 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) 2.312109908s ago: executing program 4 (id=372): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) unshare(0x2a000680) r4 = msgget$private(0x0, 0x75e) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x4, 0x800) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r4, 0x0, 0x0, 0x1, 0x5800) listen(r3, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x2, 0xffffffff, &(0x7f0000000480)="00eebf9bf2bb8133d3976f504100d89ceb0aed39b0d9e8aaa866bcc846aa66edc4945a8a2e32e1aa85553b018d966fec2c70efe1d4e705f37591fe8f90946b320dd8e1c179ac58031b71ffc3f9df1442ac3b722672dd5a8ea020a1229efa9322bfc402d359bc821173d190e12089c40cc2fcf38f4ca799248a5417ae9a68115fe86f4bd90f5f9b", 0x2e) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000003380), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0xfffffffffffffffd, 0x8040) 1.594919988s ago: executing program 5 (id=373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001ac0)={'#! ', './file0'}, 0xb) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x4b48, 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x24, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) sched_setaffinity(r4, 0x8, &(0x7f00000001c0)=0x9) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x98, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x3, 0x1, 0x4}}, {@llc_tr={0x11, {@llc={0x8e, 0x1, "25d6", "f3178efb4cd0893efb5041120b3b4245d06c4c83249dfdd9de745d7490fb7a945675b89e8154166ff0395d7c1b3461db7565f5998e37333eb357e7648f2f5f117301df0fbeac78237e6e3cff719f4904f4d5f3d64bc35e53e8906a47a59908f956cb3aee6c0641190a2238929573ccc1790b1e91e7aa4b748dda614f8bcc"}}}}}, &(0x7f0000000180)={0x1, 0x1, [0x94f, 0x3e1, 0xf62, 0x2a7]}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "76510000008000", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) unshare(0x22020400) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r7, r6, &(0x7f0000002700)=0x23, 0x1c) 1.535733269s ago: executing program 0 (id=374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000055c0), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) r3 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a000000000106000110c41fc8a325ca58fcf0019c3084267d3b5b49488e15d3c0d13226526c54d4647764e414a813ca774d"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '@@\'],\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x48800}, 0x20004000) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={&(0x7f0000005600)={0x2c, r1, 0x1, 0x5, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.402160057s ago: executing program 0 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x2, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000280)) capget(&(0x7f0000000180)={0x20080522}, &(0x7f0000000300)={0xf57, 0x1, 0xfffffffb, 0xfffffffa, 0x100, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008040) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r6], 0x10}}, 0x24000034) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x240}}) r8 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180080001006c6f6700180002800900024073797a320000000008000340000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0) close(r9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.396316042s ago: executing program 3 (id=376): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x1c00, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.082431314s ago: executing program 3 (id=377): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000280)=[0x0], 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa3e00103afffe800000000000000000000000000000ff020000000000000000000000000001770090780000020000000000007d5d106e6a4821d0ddf4b9107ecba3c1000000"], 0x0) syz_emit_ethernet(0x89, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "380400", 0x53, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, {[@fragment={0x87, 0x0, 0xc1, 0x0, 0x0, 0x7, 0x64}, @dstopts={0x32, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xfe}, @pad1]}], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x1, 0x32, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, [], '\x00\x00\x00'}}}}}}}, 0x0) 436.828834ms ago: executing program 0 (id=378): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() write(0xffffffffffffffff, &(0x7f00000010c0)="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", 0xfe0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x0) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01deff0000000000000054000000"], 0x14}}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x2, "100093", 0x9, 0xfc}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/22) write(r5, &(0x7f0000000040)="05000000010000", 0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x22, 0x5, 0x0, 0x0, r6}) 369.383583ms ago: executing program 3 (id=379): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x122, &(0x7f0000000500)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '(\vh', 0xec, 0x3a, 0xff, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @ni={0x8b, 0x0, 0x0, 0x9, 0x5, 0x7, "aee600a0e422318435841f53a7be7498de7306fbe7d947ae214da52a91aeab9ce91f2fbc536fc318116c6f2e63f80992c5ad8c9d3dc6c37624177c74966e03000000701f6c80713bb40b802ce8229c7efac4b0c14224ca877138f38a437e125e2efc70b8f49858c32aa03ce30d2c29c43400ec62dd75030443c02227af9c026a157da8df4dc73597dd3aa0873f2ecc47b2f070801f4968196c42353ab73f41a0865ba3b46ef1ad51df116086cf36b6d632c9945bc3c734594f1c829a3677eaf54f3063f6cafb80f0fdc3c36b73811463c5e46723fa1adcfe90199b05"}}}}}}, 0x0) syz_emit_ethernet(0x5b, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaabaaaaa0693aa0086dd607428dd00253afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010001122b472e41e24b11f34b608d63e370cb0a9173583bec34966c13e3348d1377556210e3d9a1"], 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0xd4f, @mcast2, 0x6}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d6664010000006e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) chmod(&(0x7f0000000140)='./file0\x00', 0xc0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0xc, 0xd1c, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x8000, 0x7800, 0x80000000, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', r8, 0x2f, 0x7, 0x1, 0xd3c, 0x2b, @mcast2, @loopback, 0x8, 0x7, 0x7e70, 0x5}}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 288.390576ms ago: executing program 2 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x219c}}, 0x0) socket$inet(0x2b, 0x801, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) r5 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000240)={0xf0f001, 0x3f}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @remote}, 0x2009}, 0x1c) io_setup(0x6, &(0x7f0000000680)) sendmmsg$inet(r1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r9, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/172, 0xac}], 0x1) 0s ago: executing program 0 (id=381): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x3, 0xb, 0x13ec, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x8a6}, 0x1c) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x1, 0x0) memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00 \x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03&`\xd5\xe7\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x98(\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\xba\xb4+v\xb7i\a\x7f\v(\x11>\x9b\x1c\xd7', 0x6) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x8) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) kernel console output (not intermixed with test programs): slave_1) entered blocking state [ 55.670645][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.677733][ T5815] bridge_slave_1: entered allmulticast mode [ 55.684727][ T5815] bridge_slave_1: entered promiscuous mode [ 55.694544][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.705204][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.717336][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.743259][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.762692][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.769897][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.777000][ T5816] bridge_slave_0: entered allmulticast mode [ 55.783912][ T5816] bridge_slave_0: entered promiscuous mode [ 55.804696][ T5817] team0: Port device team_slave_0 added [ 55.814896][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.824058][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.831343][ T5816] bridge_slave_1: entered allmulticast mode [ 55.837676][ T5816] bridge_slave_1: entered promiscuous mode [ 55.850854][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.865531][ T5817] team0: Port device team_slave_1 added [ 55.879683][ T5831] team0: Port device team_slave_0 added [ 55.890663][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.914863][ T5831] team0: Port device team_slave_1 added [ 55.923054][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.938437][ T5815] team0: Port device team_slave_0 added [ 55.946374][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.953554][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.960732][ T5814] bridge_slave_0: entered allmulticast mode [ 55.967035][ T5814] bridge_slave_0: entered promiscuous mode [ 55.974600][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.981722][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.007674][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.025813][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.041654][ T5815] team0: Port device team_slave_1 added [ 56.047421][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.054563][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.062128][ T5814] bridge_slave_1: entered allmulticast mode [ 56.068509][ T5814] bridge_slave_1: entered promiscuous mode [ 56.080859][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.087801][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.113907][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.130527][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.137502][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.163577][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.181326][ T5816] team0: Port device team_slave_0 added [ 56.198774][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.205906][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.232852][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.244895][ T5816] team0: Port device team_slave_1 added [ 56.256785][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.267938][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.304992][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.313563][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.339622][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.351151][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.358086][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.384324][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.402541][ T5814] team0: Port device team_slave_0 added [ 56.409979][ T5814] team0: Port device team_slave_1 added [ 56.415957][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.423203][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.449460][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.477837][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.484848][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.511359][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.533828][ T5817] hsr_slave_0: entered promiscuous mode [ 56.539923][ T5817] hsr_slave_1: entered promiscuous mode [ 56.552588][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.559599][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.586054][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.606046][ T5831] hsr_slave_0: entered promiscuous mode [ 56.612069][ T5831] hsr_slave_1: entered promiscuous mode [ 56.617935][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.626069][ T5831] Cannot create hsr debugfs directory [ 56.633995][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.641184][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.667117][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.714738][ T5816] hsr_slave_0: entered promiscuous mode [ 56.720848][ T5816] hsr_slave_1: entered promiscuous mode [ 56.726590][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.734628][ T5816] Cannot create hsr debugfs directory [ 56.753967][ T5815] hsr_slave_0: entered promiscuous mode [ 56.759968][ T5815] hsr_slave_1: entered promiscuous mode [ 56.765698][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.773451][ T5815] Cannot create hsr debugfs directory [ 56.824995][ T5814] hsr_slave_0: entered promiscuous mode [ 56.831305][ T5814] hsr_slave_1: entered promiscuous mode [ 56.837090][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.844925][ T5814] Cannot create hsr debugfs directory [ 57.019997][ T5833] Bluetooth: hci3: command tx timeout [ 57.020041][ T5823] Bluetooth: hci2: command tx timeout [ 57.025733][ T5833] Bluetooth: hci1: command tx timeout [ 57.031261][ T5823] Bluetooth: hci0: command tx timeout [ 57.042560][ T5821] Bluetooth: hci4: command tx timeout [ 57.046698][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.056968][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.066925][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.076240][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.110321][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.118519][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.129044][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.141436][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.187823][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.214123][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.223085][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.233206][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.286329][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.312275][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.320250][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.328704][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.337368][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.377584][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.387135][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.396235][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.407962][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.428679][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.440881][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.448045][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.476962][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.484061][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.498581][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.534910][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.548491][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.573585][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.580684][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.606104][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.613191][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.631972][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.668644][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.680320][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.687374][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.710812][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.718636][ T30] audit: type=1400 audit(1741835150.078:111): avc: denied { sys_module } for pid=5817 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.740443][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.755620][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.772356][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.779453][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.812989][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.834178][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.856517][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.863639][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.931309][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.938393][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.954350][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.961470][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.985549][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.002670][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.009748][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.023054][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.081322][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.111870][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.166690][ T5817] veth0_vlan: entered promiscuous mode [ 58.183025][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.226583][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.236531][ T5817] veth1_vlan: entered promiscuous mode [ 58.253370][ T5831] veth0_vlan: entered promiscuous mode [ 58.293018][ T5831] veth1_vlan: entered promiscuous mode [ 58.305805][ T5817] veth0_macvtap: entered promiscuous mode [ 58.336000][ T5816] veth0_vlan: entered promiscuous mode [ 58.344491][ T5817] veth1_macvtap: entered promiscuous mode [ 58.357071][ T5831] veth0_macvtap: entered promiscuous mode [ 58.377989][ T5831] veth1_macvtap: entered promiscuous mode [ 58.387947][ T5816] veth1_vlan: entered promiscuous mode [ 58.404257][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.428361][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.439855][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.451093][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.466152][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.484897][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.493846][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.506650][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.515580][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527703][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.551683][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.562497][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.573339][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.582938][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.591782][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.600891][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.610020][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.658105][ T5816] veth0_macvtap: entered promiscuous mode [ 58.678648][ T5815] veth0_vlan: entered promiscuous mode [ 58.686856][ T5816] veth1_macvtap: entered promiscuous mode [ 58.707696][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.720681][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.730924][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.741784][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.752406][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.761851][ T5815] veth1_vlan: entered promiscuous mode [ 58.776245][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.787451][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.798332][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.810084][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.820792][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.859088][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.868377][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.877947][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.886918][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.906472][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.914967][ T3652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.914975][ T5814] veth0_vlan: entered promiscuous mode [ 58.933243][ T5814] veth1_vlan: entered promiscuous mode [ 58.940372][ T3652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.942611][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.977174][ T5815] veth0_macvtap: entered promiscuous mode [ 58.988914][ T5815] veth1_macvtap: entered promiscuous mode [ 59.021463][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.029854][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.044187][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.056220][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.066483][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.077778][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.087921][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.098403][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.109079][ T5823] Bluetooth: hci0: command tx timeout [ 59.114515][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.122059][ T5821] Bluetooth: hci4: command tx timeout [ 59.127458][ T55] Bluetooth: hci1: command tx timeout [ 59.127594][ T5139] Bluetooth: hci3: command tx timeout [ 59.134696][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.138476][ T5833] Bluetooth: hci2: command tx timeout [ 59.148929][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.164284][ T30] audit: type=1400 audit(1741835151.488:112): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/root/syzkaller.jcgusn/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.173784][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.201010][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.203175][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.210885][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.229306][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.245754][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.250489][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.265105][ T30] audit: type=1400 audit(1741835151.488:113): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.298592][ T30] audit: type=1400 audit(1741835151.488:114): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/root/syzkaller.jcgusn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.302004][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.324381][ T30] audit: type=1400 audit(1741835151.488:115): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.354011][ T5814] veth0_macvtap: entered promiscuous mode [ 59.367014][ T30] audit: type=1400 audit(1741835151.538:116): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/root/syzkaller.jcgusn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.376972][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.403698][ T30] audit: type=1400 audit(1741835151.538:117): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/root/syzkaller.jcgusn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.406187][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.431567][ T30] audit: type=1400 audit(1741835151.538:118): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.447215][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.459723][ T30] audit: type=1400 audit(1741835151.608:119): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.491547][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.530230][ T5814] veth1_macvtap: entered promiscuous mode [ 59.583367][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.592874][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.598666][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.625169][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.645781][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.715685][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.728183][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.738912][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.749993][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.760781][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.782170][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.846266][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.857511][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.867729][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.437743][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.447677][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.458245][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.468157][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.478753][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.490189][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.519594][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 60.519609][ T30] audit: type=1400 audit(1741835152.878:138): avc: denied { unlink } for pid=5831 comm="syz-executor" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.568568][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.597545][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.610720][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.623574][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.648374][ T30] audit: type=1400 audit(1741835153.008:139): avc: denied { read write } for pid=5913 comm="syz.1.8" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.649849][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.678741][ T30] audit: type=1400 audit(1741835153.008:140): avc: denied { open } for pid=5913 comm="syz.1.8" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.703882][ T30] audit: type=1400 audit(1741835153.038:141): avc: denied { ioctl } for pid=5913 comm="syz.1.8" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.749043][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.758585][ T5912] FAULT_INJECTION: forcing a failure. [ 60.758585][ T5912] name failslab, interval 1, probability 0, space 0, times 1 [ 60.779632][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.0.7 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 60.779655][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.779663][ T5912] Call Trace: [ 60.779668][ T5912] [ 60.779674][ T5912] dump_stack_lvl+0x16c/0x1f0 [ 60.779702][ T5912] should_fail_ex+0x50a/0x650 [ 60.779725][ T5912] ? fs_reclaim_acquire+0xae/0x150 [ 60.779751][ T5912] should_failslab+0xc2/0x120 [ 60.779769][ T5912] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 60.779796][ T5912] ? __alloc_skb+0x2b1/0x380 [ 60.779822][ T5912] __alloc_skb+0x2b1/0x380 [ 60.779843][ T5912] ? __pfx___alloc_skb+0x10/0x10 [ 60.779861][ T5912] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 60.779884][ T5912] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 60.779912][ T5912] netlink_alloc_large_skb+0x69/0x130 [ 60.779938][ T5912] netlink_sendmsg+0x689/0xd70 [ 60.779965][ T5912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.779997][ T5912] ____sys_sendmsg+0xaaf/0xc90 [ 60.780017][ T5912] ? copy_msghdr_from_user+0x10b/0x160 [ 60.780042][ T5912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.780071][ T5912] ___sys_sendmsg+0x135/0x1e0 [ 60.780097][ T5912] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.780130][ T5912] ? __pfx_lock_release+0x10/0x10 [ 60.780154][ T5912] ? trace_lock_acquire+0x14e/0x1f0 [ 60.780180][ T5912] ? __fget_files+0x206/0x3a0 [ 60.780203][ T5912] __sys_sendmsg+0x16e/0x220 [ 60.780228][ T5912] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.780267][ T5912] do_syscall_64+0xcd/0x250 [ 60.780292][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.780314][ T5912] RIP: 0033:0x7f5c9cf8d169 [ 60.780327][ T5912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.780342][ T5912] RSP: 002b:00007f5c9de00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.780358][ T5912] RAX: ffffffffffffffda RBX: 00007f5c9d1a5fa0 RCX: 00007f5c9cf8d169 [ 60.780368][ T5912] RDX: 0000000020000000 RSI: 0000400000006040 RDI: 0000000000000004 [ 60.780377][ T5912] RBP: 00007f5c9de00090 R08: 0000000000000000 R09: 0000000000000000 [ 60.780385][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.780394][ T5912] R13: 0000000000000000 R14: 00007f5c9d1a5fa0 R15: 00007ffe08a318d8 [ 60.780414][ T5912] [ 61.033843][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.044002][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.103971][ T30] audit: type=1400 audit(1741835153.458:142): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.4DMWd7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.146576][ T30] audit: type=1400 audit(1741835153.508:143): avc: denied { read } for pid=5923 comm="syz.0.11" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.172305][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.180659][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.188594][ T5833] Bluetooth: hci0: command tx timeout [ 61.194700][ T5833] Bluetooth: hci1: command tx timeout [ 61.197377][ T5139] Bluetooth: hci2: command tx timeout [ 61.200118][ T5833] Bluetooth: hci3: command tx timeout [ 61.200143][ T5833] Bluetooth: hci4: command tx timeout [ 61.218983][ T30] audit: type=1400 audit(1741835153.578:144): avc: denied { open } for pid=5923 comm="syz.0.11" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.325546][ T5929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 61.424539][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.437807][ T30] audit: type=1400 audit(1741835153.788:145): avc: denied { create } for pid=5930 comm="syz.3.4" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.520512][ T5926] afs: Unknown parameter 'd[' [ 61.680016][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.730223][ T5936] Bluetooth: MGMT ver 1.23 [ 61.735558][ T5932] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 61.745923][ T30] audit: type=1400 audit(1741835154.088:146): avc: denied { bind } for pid=5923 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.353970][ T30] audit: type=1400 audit(1741835154.098:147): avc: denied { write } for pid=5923 comm="syz.0.11" path="socket:[8579]" dev="sockfs" ino=8579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.433904][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 62.442501][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.453530][ T5938] FAULT_INJECTION: forcing a failure. [ 62.453530][ T5938] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.460583][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.475170][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.4.5 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 62.475191][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.475201][ T5938] Call Trace: [ 62.475205][ T5938] [ 62.475211][ T5938] dump_stack_lvl+0x16c/0x1f0 [ 62.475240][ T5938] should_fail_ex+0x50a/0x650 [ 62.475268][ T5938] _copy_from_user+0x2e/0xd0 [ 62.475285][ T5938] core_sys_select+0x361/0xb80 [ 62.475304][ T5938] ? __pfx_core_sys_select+0x10/0x10 [ 62.475316][ T5938] ? get_pid_task+0xfc/0x250 [ 62.475354][ T5938] ? set_user_sigmask+0x217/0x2a0 [ 62.475375][ T5938] ? __pfx_set_user_sigmask+0x10/0x10 [ 62.475398][ T5938] do_pselect.constprop.0+0x1a0/0x1f0 [ 62.475413][ T5938] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 62.475436][ T5938] __x64_sys_pselect6+0x183/0x240 [ 62.475468][ T5938] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 62.475491][ T5938] do_syscall_64+0xcd/0x250 [ 62.475516][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.475538][ T5938] RIP: 0033:0x7f30a358d169 [ 62.475551][ T5938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.475565][ T5938] RSP: 002b:00007f30a430f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 62.475583][ T5938] RAX: ffffffffffffffda RBX: 00007f30a37a5fa0 RCX: 00007f30a358d169 [ 62.475594][ T5938] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000040 [ 62.475602][ T5938] RBP: 00007f30a430f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.475610][ T5938] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 62.475619][ T5938] R13: 0000000000000000 R14: 00007f30a37a5fa0 R15: 00007ffd90085b38 [ 62.475637][ T5938] [ 62.648279][ C0] vkms_vblank_simulate: vblank timer overrun [ 63.259264][ T5833] Bluetooth: hci2: command tx timeout [ 63.259366][ T5139] Bluetooth: hci3: command tx timeout [ 63.264982][ T5833] Bluetooth: hci1: command tx timeout [ 63.270112][ T5823] Bluetooth: hci0: command tx timeout [ 63.270144][ T5823] Bluetooth: hci4: command tx timeout [ 63.559396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.559483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.583615][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.592746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.001076][ T5821] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 64.099304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.104597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.259930][ T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.849319][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 64.862994][ T52] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.899299][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 64.945554][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.955499][ T52] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 64.996138][ T52] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.019555][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 65.043714][ T52] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 65.075177][ T5967] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.116655][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.370628][ T5821] Bluetooth: hci0: command 0x0401 tx timeout [ 65.376994][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 65.419316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.425645][ T52] usb 5-1: config 0 descriptor?? [ 65.435805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.612282][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 65.627547][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.379975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.395855][ T9] usb 4-1: config 0 descriptor?? [ 66.430635][ T9] usb 4-1: can't set config #0, error -71 [ 66.699409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.709628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.928260][ T52] usbhid 5-1:0.0: can't add hid device: -71 [ 66.934550][ T52] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 66.998213][ T9] usb 4-1: USB disconnect, device number 2 [ 67.603541][ T5821] Bluetooth: hci0: command 0x0401 tx timeout [ 67.949793][ T52] usb 5-1: USB disconnect, device number 2 [ 68.055680][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 68.055716][ T30] audit: type=1400 audit(1741835160.408:177): avc: denied { read } for pid=5992 comm="syz.0.24" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.403779][ T30] audit: type=1400 audit(1741835160.408:178): avc: denied { open } for pid=5992 comm="syz.0.24" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.879068][ T30] audit: type=1400 audit(1741835160.418:179): avc: denied { create } for pid=5992 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.899254][ T30] audit: type=1400 audit(1741835160.418:180): avc: denied { connect } for pid=5992 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.924730][ T30] audit: type=1400 audit(1741835160.418:181): avc: denied { bind } for pid=5992 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.500301][ T30] audit: type=1400 audit(1741835160.418:182): avc: denied { write } for pid=5992 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.530212][ T30] audit: type=1400 audit(1741835160.768:183): avc: denied { read } for pid=6003 comm="syz.1.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.553807][ T30] audit: type=1400 audit(1741835160.768:184): avc: denied { open } for pid=6003 comm="syz.1.27" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.705271][ T30] audit: type=1400 audit(1741835160.768:185): avc: denied { ioctl } for pid=6003 comm="syz.1.27" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.705376][ T6018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.30'. [ 69.737276][ T30] audit: type=1400 audit(1741835161.318:186): avc: denied { write } for pid=6003 comm="syz.1.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.459514][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.825412][ T6029] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 71.184829][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.192051][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.259296][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 71.509534][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.661610][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 72.036003][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 72.089607][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 72.834670][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.859344][ T5833] Bluetooth: hci0: command 0x0401 tx timeout [ 72.865534][ T5821] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 72.872480][ T9] usb 5-1: config 0 descriptor?? [ 73.288507][ T9] usb 5-1: can't set config #0, error -71 [ 73.395643][ T9] usb 5-1: USB disconnect, device number 3 [ 73.789282][ T52] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.825656][ T6053] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure [ 74.223209][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 74.230601][ T52] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 74.250750][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 74.380713][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 74.380731][ T30] audit: type=1400 audit(1741835166.698:188): avc: denied { ioctl } for pid=6057 comm="syz.1.39" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7859 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.124848][ T5821] Bluetooth: hci0: command 0x0401 tx timeout [ 75.198131][ T52] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.777360][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.800058][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.816610][ T52] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 75.824481][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.836724][ T52] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.848819][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.031927][ T6075] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 76.204899][ T974] cfg80211: failed to load regulatory.db [ 76.443299][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.499369][ T52] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 76.531869][ T52] usb 3-1: can't read configurations, error -71 [ 76.804919][ T30] audit: type=1400 audit(1741835169.168:189): avc: denied { getopt } for pid=6078 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.583228][ T30] audit: type=1400 audit(1741835169.918:190): avc: denied { create } for pid=6088 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.598913][ T6089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6089 comm=syz.0.49 [ 77.603151][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.607378][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.641439][ T30] audit: type=1400 audit(1741835169.948:191): avc: denied { write } for pid=6088 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.661502][ T30] audit: type=1400 audit(1741835169.948:192): avc: denied { nlmsg_write } for pid=6088 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.760093][ T30] audit: type=1400 audit(1741835170.078:193): avc: denied { create } for pid=6076 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 77.854074][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'. [ 77.910712][ T5870] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 77.961036][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.961057][ T6097] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 77.971355][ T5870] usb 4-1: config 0 descriptor?? [ 77.975709][ T6097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.989282][ T6097] vhci_hcd vhci_hcd.0: Device attached [ 78.051999][ T30] audit: type=1400 audit(1741835170.418:194): avc: denied { create } for pid=6096 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.077085][ T6098] Zero length message leads to an empty skb [ 78.122450][ T30] audit: type=1400 audit(1741835170.488:195): avc: denied { create } for pid=6103 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.179408][ T30] audit: type=1400 audit(1741835170.508:196): avc: denied { create } for pid=6103 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.272158][ T6080] random: crng reseeded on system resumption [ 78.336954][ T974] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 78.483090][ T30] audit: type=1400 audit(1741835170.508:197): avc: denied { create } for pid=6103 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.621598][ T5870] ath6kl: Failed to submit usb control message: -71 [ 78.629358][ T5870] ath6kl: unable to send the bmi data to the device: -71 [ 78.652293][ T5870] ath6kl: Unable to send get target info: -71 [ 78.666579][ T5870] ath6kl: Failed to init ath6kl core: -71 [ 78.675921][ T5870] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 78.726940][ T5870] usb 4-1: USB disconnect, device number 3 [ 79.697552][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 79.708899][ T30] audit: type=1326 audit(1741835171.998:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.221269][ T30] audit: type=1326 audit(1741835171.998:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.290444][ T30] audit: type=1326 audit(1741835172.008:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f021878bad0 code=0x7ffc0000 [ 80.345462][ T30] audit: type=1326 audit(1741835172.008:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.380711][ T30] audit: type=1326 audit(1741835172.008:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.410199][ T30] audit: type=1326 audit(1741835172.008:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.435372][ T30] audit: type=1326 audit(1741835172.008:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.511323][ T30] audit: type=1326 audit(1741835172.008:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.541762][ T30] audit: type=1326 audit(1741835172.018:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.577722][ T30] audit: type=1326 audit(1741835172.018:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 80.966926][ T6099] vhci_hcd: connection reset by peer [ 81.069112][ T205] vhci_hcd: stop threads [ 81.081080][ T205] vhci_hcd: release socket [ 81.109491][ T205] vhci_hcd: disconnect device [ 81.463033][ T6136] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 82.649822][ T6137] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 83.273637][ T6148] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 83.499368][ T5833] Bluetooth: hci0: command tx timeout [ 83.589877][ T974] vhci_hcd: vhci_device speed not set [ 83.859729][ T6150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.64'. [ 85.852965][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 85.852979][ T30] audit: type=1400 audit(1741835178.218:299): avc: denied { read } for pid=6183 comm="syz.0.73" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.889196][ T30] audit: type=1400 audit(1741835178.218:300): avc: denied { open } for pid=6183 comm="syz.0.73" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.914365][ T30] audit: type=1400 audit(1741835178.248:301): avc: denied { ioctl } for pid=6183 comm="syz.0.73" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.914948][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 85.939380][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.068663][ T30] audit: type=1400 audit(1741835178.248:302): avc: denied { create } for pid=6182 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.664313][ T30] audit: type=1326 audit(1741835178.718:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19af98d169 code=0x7ffc0000 [ 86.980411][ T30] audit: type=1326 audit(1741835178.718:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19af98d169 code=0x7ffc0000 [ 87.004513][ T30] audit: type=1326 audit(1741835178.728:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f19af98d169 code=0x7ffc0000 [ 87.037831][ T30] audit: type=1326 audit(1741835178.728:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19af98d169 code=0x7ffc0000 [ 87.067838][ T30] audit: type=1326 audit(1741835178.728:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19af98d169 code=0x7ffc0000 [ 87.093796][ T30] audit: type=1326 audit(1741835178.728:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f19af98d169 code=0x7ffc0000 [ 87.172151][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.190080][ T974] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.310468][ T5870] usb 3-1: device descriptor read/64, error -71 [ 87.439922][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 87.545807][ T974] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.556637][ T974] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.577978][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.588088][ T974] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 87.626729][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.661575][ T5870] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.685096][ T974] usb 2-1: config 0 descriptor?? [ 87.901714][ T5870] usb 3-1: device descriptor read/64, error -71 [ 88.070539][ T5870] usb usb3-port1: attempt power cycle [ 88.679387][ T974] usbhid 2-1:0.0: can't add hid device: -71 [ 88.691706][ T974] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 88.726940][ T974] usb 2-1: USB disconnect, device number 2 [ 89.093189][ T6217] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 89.849447][ T6221] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 91.177869][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 91.177884][ T30] audit: type=1400 audit(1741835183.538:348): avc: denied { ioctl } for pid=6228 comm="syz.4.84" path="socket:[10252]" dev="sockfs" ino=10252 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.208531][ T5821] Bluetooth: hci0: command tx timeout [ 91.224168][ T6229] x_tables: duplicate underflow at hook 2 [ 91.236398][ T30] audit: type=1400 audit(1741835183.588:349): avc: denied { create } for pid=6228 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.284855][ T6238] fuse: Unknown parameter '00000000000000000008' [ 91.291305][ T30] audit: type=1400 audit(1741835183.588:350): avc: denied { setopt } for pid=6228 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.314515][ T30] audit: type=1400 audit(1741835183.628:351): avc: denied { read write } for pid=6226 comm="syz.2.83" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.475470][ T30] audit: type=1400 audit(1741835183.638:352): avc: denied { open } for pid=6226 comm="syz.2.83" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.498444][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.505620][ T30] audit: type=1400 audit(1741835183.778:353): avc: denied { unmount } for pid=6226 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.525401][ T30] audit: type=1400 audit(1741835183.818:354): avc: denied { ioctl } for pid=6228 comm="syz.4.84" path="socket:[9314]" dev="sockfs" ino=9314 ioctlcmd=0x4d65 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.549646][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.259781][ T974] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.489188][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 92.520655][ T974] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 92.619704][ T6263] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 92.655410][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.705038][ T974] usb 5-1: Product: syz [ 92.738654][ T974] usb 5-1: Manufacturer: syz [ 92.769731][ T974] usb 5-1: SerialNumber: syz [ 92.840441][ T974] usb 5-1: config 0 descriptor?? [ 92.907799][ T974] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 93.271627][ T30] audit: type=1400 audit(1741835185.638:355): avc: denied { read write } for pid=6261 comm="syz.1.89" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.439247][ T30] audit: type=1400 audit(1741835185.638:356): avc: denied { open } for pid=6261 comm="syz.1.89" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.594396][ T30] audit: type=1400 audit(1741835185.958:357): avc: denied { ioctl } for pid=6270 comm="syz.1.94" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.879828][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.140871][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 94.324429][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.363716][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.375881][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 94.384894][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.384947][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 94.384967][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.386388][ T9] usb 2-1: config 0 descriptor?? [ 94.418910][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.493270][ T5834] usb 5-1: USB disconnect, device number 4 [ 94.516901][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 94.699337][ T5821] Bluetooth: hci0: command tx timeout [ 95.405598][ T9] wacom 0003:056A:00B9.0001: ignoring exceeding usage max [ 95.417473][ T9] wacom 0003:056A:00B9.0001: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 95.670551][ T9] wacom 0003:056A:00B9.0001: hidraw0: USB HID v0.00 Device [HID 056a:00b9] on usb-dummy_hcd.1-1/input0 [ 95.768089][ T9] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B9.0001/input/input5 [ 96.512006][ T9] usb 2-1: USB disconnect, device number 3 [ 96.902114][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 96.902128][ T30] audit: type=1400 audit(1741835189.268:367): avc: denied { setopt } for pid=6300 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.369258][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.386351][ T30] audit: type=1400 audit(1741835189.748:368): avc: denied { bind } for pid=6305 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.406881][ T30] audit: type=1400 audit(1741835189.748:369): avc: denied { node_bind } for pid=6305 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 97.427310][ T30] audit: type=1400 audit(1741835189.748:370): avc: denied { bind } for pid=6305 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.486231][ T30] audit: type=1400 audit(1741835189.758:371): avc: denied { write } for pid=6305 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.549222][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 98.002307][ T30] audit: type=1400 audit(1741835189.758:372): avc: denied { read } for pid=6305 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.027990][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.045239][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.082220][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.096223][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 98.140114][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.154433][ T9] usb 4-1: config 0 descriptor?? [ 99.272323][ T6318] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 100.012685][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 100.097555][ T30] audit: type=1400 audit(1741835192.378:373): avc: denied { write } for pid=6322 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.189280][ T5821] Bluetooth: hci0: command tx timeout [ 102.565264][ T6334] xt_connbytes: Forcing CT accounting to be enabled [ 102.573511][ T6334] --map-set only usable from mangle table [ 102.636753][ T30] audit: type=1326 audit(1741835193.888:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 102.659972][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.670376][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 102.698453][ T30] audit: type=1326 audit(1741835193.888:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 102.702042][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.721746][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.723901][ T30] audit: type=1326 audit(1741835194.018:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f021878bad0 code=0x7ffc0000 [ 102.760109][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.948740][ T9] usb 4-1: USB disconnect, device number 4 [ 102.957258][ T30] audit: type=1326 audit(1741835194.018:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 103.022628][ T30] audit: type=1326 audit(1741835194.018:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 103.108719][ T30] audit: type=1326 audit(1741835194.138:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 103.186678][ T30] audit: type=1326 audit(1741835194.138:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 103.210603][ T30] audit: type=1326 audit(1741835194.138:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 103.235537][ T30] audit: type=1326 audit(1741835194.288:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 103.238516][ T6347] fuse: Bad value for 'fd' [ 103.260610][ T30] audit: type=1326 audit(1741835194.288:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021878d169 code=0x7ffc0000 [ 103.284830][ T6347] ======================================================= [ 103.284830][ T6347] WARNING: The mand mount option has been deprecated and [ 103.284830][ T6347] and is ignored by this kernel. Remove the mand [ 103.284830][ T6347] option from the mount to silence this warning. [ 103.284830][ T6347] ======================================================= [ 103.321445][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.389243][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.569269][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 103.577790][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.588452][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.597867][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.610421][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.623400][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.636808][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.650089][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 103.659784][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.671587][ T9] usb 4-1: config 0 descriptor?? [ 103.893284][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.455340][ T5834] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.748196][ T5834] usb 5-1: config 1 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.300253][ T5834] usb 5-1: config 1 interface 0 has no altsetting 0 [ 105.349981][ T5834] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 105.376252][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.392603][ T6365] netlink: 'syz.1.121': attribute type 4 has an invalid length. [ 105.404770][ T5834] usb 5-1: Product: Ъ [ 105.413056][ T5834] usb 5-1: Manufacturer: ੆끋귕扽ྊ㣬ဍ鐘䠳혐疶윫懳⏰뱁㪷錄Ჰ鱴缛ꝸⰒ쉹㬠㯲࣯櫵྽ሷ녑㿐圏霦ꅓ摶崜蹴ꉑ죠哄ʙ赵௛␨뗅K䩭◐窈娖寧੃윹᜴⚇᧿ꇀ썜郃᳆窽퐺ퟦ阴 [ 105.482955][ T5834] usb 5-1: SerialNumber: syz [ 106.433108][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 107.233297][ T972] usb 4-1: USB disconnect, device number 5 [ 107.283397][ T972] usblp0: removed [ 107.305158][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 107.527023][ T6380] bridge_slave_1: left allmulticast mode [ 107.556740][ T6380] bridge_slave_1: left promiscuous mode [ 108.440179][ T6388] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 108.493812][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.561951][ T6380] bridge_slave_0: left allmulticast mode [ 108.569167][ T6380] bridge_slave_0: left promiscuous mode [ 108.582721][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.704991][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 109.180606][ T5834] usbhid 5-1:1.0: can't add hid device: -71 [ 109.261453][ T5834] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 109.347707][ T5834] usb 5-1: USB disconnect, device number 5 [ 109.984174][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 109.984188][ T30] audit: type=1400 audit(1741835202.348:404): avc: denied { create } for pid=6401 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.013175][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 110.084454][ T30] audit: type=1400 audit(1741835202.378:405): avc: denied { getopt } for pid=6401 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.285320][ T30] audit: type=1400 audit(1741835202.388:406): avc: denied { read append } for pid=6401 comm="syz.1.126" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 110.469297][ T5833] Bluetooth: hci0: command tx timeout [ 110.862658][ T30] audit: type=1400 audit(1741835202.388:407): avc: denied { open } for pid=6401 comm="syz.1.126" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 110.889414][ T30] audit: type=1400 audit(1741835202.388:408): avc: denied { map } for pid=6401 comm="syz.1.126" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 110.913119][ T30] audit: type=1400 audit(1741835202.388:409): avc: denied { execute } for pid=6401 comm="syz.1.126" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 111.030160][ T30] audit: type=1400 audit(1741835202.388:410): avc: denied { write } for pid=6401 comm="syz.1.126" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 111.097610][ T30] audit: type=1400 audit(1741835202.608:411): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 111.210512][ T30] audit: type=1326 audit(1741835203.568:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.2.138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19af98d169 code=0x0 [ 111.534754][ T6427] xt_policy: neither incoming nor outgoing policy selected [ 112.456576][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 112.881403][ T30] audit: type=1400 audit(1741835205.248:413): avc: denied { mount } for pid=6446 comm="syz.2.146" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 112.903495][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.205003][ T6476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6476 comm=syz.0.156 [ 116.039291][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.209180][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 116.415194][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.436056][ T5927] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 116.485512][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.507041][ T5927] usb 4-1: config 0 descriptor?? [ 116.644992][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 116.645007][ T30] audit: type=1400 audit(1741835209.008:419): avc: denied { lock } for pid=6493 comm="syz.2.155" path="socket:[10878]" dev="sockfs" ino=10878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 116.679025][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 116.687836][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.155'. [ 116.725423][ T30] audit: type=1400 audit(1741835209.088:420): avc: denied { read } for pid=6459 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.903220][ T6499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6499 comm=syz.4.159 [ 117.542086][ T30] audit: type=1800 audit(1741835209.908:421): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.163" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 117.808575][ T6511] xt_connbytes: Forcing CT accounting to be enabled [ 117.815918][ T6511] Cannot find add_set index 0 as target [ 120.823863][ T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.966357][ T30] audit: type=1400 audit(1741835213.328:422): avc: denied { create } for pid=6531 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.148702][ T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.246313][ T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.362951][ T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.440520][ T6540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6540 comm=syz.4.177 [ 121.592741][ T5927] usbhid 4-1:0.0: can't add hid device: -32 [ 121.611102][ T82] bridge_slave_1: left allmulticast mode [ 121.628372][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 121.665558][ T82] bridge_slave_1: left promiscuous mode [ 121.686253][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.700137][ T30] audit: type=1400 audit(1741835214.068:423): avc: denied { rename } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.730348][ T82] bridge_slave_0: left allmulticast mode [ 121.777559][ T82] bridge_slave_0: left promiscuous mode [ 121.787480][ T30] audit: type=1400 audit(1741835214.068:424): avc: denied { unlink } for pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.807940][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.019344][ T30] audit: type=1400 audit(1741835214.068:425): avc: denied { create } for pid=5174 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.133514][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.812655][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.821626][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.835762][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.844186][ T5821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 122.852487][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.876277][ T30] audit: type=1400 audit(1741835215.228:426): avc: denied { mounton } for pid=6547 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 122.994058][ T5834] usb 4-1: USB disconnect, device number 6 [ 123.398060][ T6554] xt_connbytes: Forcing CT accounting to be enabled [ 123.405446][ T6554] Cannot find add_set index 0 as target [ 123.988454][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.041989][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.089409][ T82] bond0 (unregistering): Released all slaves [ 124.134282][ T6566] netlink: 'syz.3.184': attribute type 12 has an invalid length. [ 124.324882][ T6566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.184'. [ 124.969252][ T5821] Bluetooth: hci3: command tx timeout [ 125.814394][ T30] audit: type=1400 audit(1741835218.178:427): avc: denied { search } for pid=5486 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.492269][ T30] audit: type=1400 audit(1741835218.208:428): avc: denied { read } for pid=5486 comm="dhcpcd" name="n100" dev="tmpfs" ino=2373 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.514057][ T30] audit: type=1400 audit(1741835218.208:429): avc: denied { open } for pid=5486 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2373 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.537096][ T30] audit: type=1400 audit(1741835218.208:430): avc: denied { getattr } for pid=5486 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2373 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.669932][ T30] audit: type=1400 audit(1741835218.998:431): avc: denied { write } for pid=6586 comm="syz.3.190" name="event2" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.757601][ T30] audit: type=1400 audit(1741835218.998:432): avc: denied { open } for pid=6586 comm="syz.3.190" path="/dev/input/event2" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.842130][ T30] audit: type=1400 audit(1741835219.108:433): avc: denied { ioctl } for pid=6586 comm="syz.3.190" path="/dev/input/event2" dev="devtmpfs" ino=933 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.907759][ T30] audit: type=1400 audit(1741835219.118:434): avc: denied { create } for pid=6586 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.927968][ T30] audit: type=1400 audit(1741835219.118:435): avc: denied { bind } for pid=6586 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.964594][ T30] audit: type=1400 audit(1741835219.118:436): avc: denied { listen } for pid=6586 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.984819][ T30] audit: type=1400 audit(1741835219.118:437): avc: denied { connect } for pid=6586 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.018198][ T6607] process 'syz.4.192' launched './file0' with NULL argv: empty string added [ 127.029273][ T5821] Bluetooth: hci3: command tx timeout [ 127.225644][ T30] audit: type=1400 audit(1741835219.488:438): avc: denied { read write } for pid=6605 comm="syz.0.195" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.722771][ T30] audit: type=1400 audit(1741835219.488:439): avc: denied { open } for pid=6605 comm="syz.0.195" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.750182][ T82] hsr_slave_0: left promiscuous mode [ 127.778276][ T82] hsr_slave_1: left promiscuous mode [ 127.810089][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.889399][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.018713][ T30] audit: type=1400 audit(1741835220.378:440): avc: denied { read } for pid=6662 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.049402][ T30] audit: type=1400 audit(1741835220.378:441): avc: denied { open } for pid=6662 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.074338][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.096537][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.118210][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.218228][ T82] veth1_macvtap: left promiscuous mode [ 128.282742][ T82] veth0_macvtap: left promiscuous mode [ 128.288600][ T82] veth1_vlan: left promiscuous mode [ 128.404142][ T82] veth0_vlan: left promiscuous mode [ 128.930054][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.111252][ T5821] Bluetooth: hci3: command tx timeout [ 129.119696][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 129.131947][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.144647][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.169215][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.175854][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 129.202098][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.228858][ T9] usb 4-1: config 0 descriptor?? [ 129.547445][ T82] team0 (unregistering): Port device team_slave_1 removed [ 129.701314][ T82] team0 (unregistering): Port device team_slave_0 removed [ 129.721011][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 129.732301][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 129.755380][ T9] usb 4-1: USB disconnect, device number 7 [ 130.076251][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 130.320525][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.327776][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.342681][ T6547] bridge_slave_0: entered allmulticast mode [ 130.351293][ T6547] bridge_slave_0: entered promiscuous mode [ 130.364259][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.378671][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.390710][ T6547] bridge_slave_1: entered allmulticast mode [ 130.397992][ T6547] bridge_slave_1: entered promiscuous mode [ 130.549299][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.566504][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.593430][ T6547] team0: Port device team_slave_0 added [ 130.617469][ T6547] team0: Port device team_slave_1 added [ 130.770164][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.782498][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.813877][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.843268][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.850600][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.912151][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.180323][ T5821] Bluetooth: hci3: command tx timeout [ 131.263483][ T6547] hsr_slave_0: entered promiscuous mode [ 131.302518][ T6547] hsr_slave_1: entered promiscuous mode [ 132.472124][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.516124][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.066298][ T6776] virtio-fs: tag <(null)> not found [ 133.200212][ T6547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.271523][ T6547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.413380][ T6547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.320333][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.696717][ T6547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.778107][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 134.778121][ T30] audit: type=1326 audit(1741835227.138:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6797 comm="syz.0.225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c9cf8d169 code=0x0 [ 134.779210][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 134.971065][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.984953][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 135.012686][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.201006][ T6807] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 135.593794][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 135.656473][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.761453][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.797841][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.798680][ T9] usb 4-1: config 0 descriptor?? [ 135.814792][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.821883][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.873797][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.880924][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.901774][ T9] usb 4-1: can't set config #0, error -71 [ 135.944595][ T9] usb 4-1: USB disconnect, device number 8 [ 136.153505][ T30] audit: type=1400 audit(1741835228.518:459): avc: denied { sys_module } for pid=6547 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 136.879520][ T5821] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 136.888076][ T5821] Bluetooth: hci2: Injecting HCI hardware error event [ 136.896559][ T5821] Bluetooth: hci2: hardware error 0x00 [ 136.974861][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 137.056940][ T30] audit: type=1400 audit(1741835229.418:460): avc: denied { audit_control } for pid=6834 comm="syz.0.232" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.146374][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.264299][ T5833] Bluetooth: hci0: command tx timeout [ 137.367348][ T30] audit: type=1326 audit(1741835229.728:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a358d169 code=0x7ffc0000 [ 137.489437][ T30] audit: type=1326 audit(1741835229.728:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a358d169 code=0x7ffc0000 [ 137.529295][ T30] audit: type=1326 audit(1741835229.728:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f30a358d169 code=0x7ffc0000 [ 137.601303][ T6854] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 137.924626][ T30] audit: type=1326 audit(1741835229.728:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a358d169 code=0x7ffc0000 [ 138.036914][ T30] audit: type=1326 audit(1741835229.728:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a358d169 code=0x7ffc0000 [ 138.112721][ T6854] syzkaller0: entered promiscuous mode [ 138.118253][ T6854] syzkaller0: entered allmulticast mode [ 138.124102][ T30] audit: type=1326 audit(1741835229.728:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30a358d169 code=0x7ffc0000 [ 138.196149][ T30] audit: type=1326 audit(1741835229.728:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a358d169 code=0x7ffc0000 [ 138.219402][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.719432][ T6875] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 139.149549][ T974] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.189844][ T5821] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 139.299239][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 139.312301][ T974] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.321552][ T974] usb 5-1: can't read configurations, error -61 [ 139.459283][ T974] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.621051][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 139.633443][ T974] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.641810][ T974] usb 5-1: can't read configurations, error -61 [ 139.662056][ T974] usb usb5-port1: attempt power cycle [ 139.914962][ T5927] IPVS: starting estimator thread 0... [ 140.009923][ T6878] IPVS: using max 31 ests per chain, 74400 per kthread [ 140.017358][ T974] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 140.049243][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 140.130029][ T974] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.156197][ T6547] veth0_vlan: entered promiscuous mode [ 140.162057][ T974] usb 5-1: can't read configurations, error -61 [ 140.207653][ T6547] veth1_vlan: entered promiscuous mode [ 140.245681][ T6547] veth0_macvtap: entered promiscuous mode [ 140.292800][ T6547] veth1_macvtap: entered promiscuous mode [ 140.315453][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.326159][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 140.326170][ T30] audit: type=1400 audit(1741835232.688:529): avc: denied { search } for pid=6879 comm="syz.2.240" name="/" dev="configfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.339244][ T974] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.382671][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 140.388577][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.390384][ T974] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.405320][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.407115][ T974] usb 5-1: can't read configurations, error -61 [ 140.424120][ T974] usb usb5-port1: unable to enumerate USB device [ 140.443364][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.453332][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.471034][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.487136][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.502868][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.525952][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.560123][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.583254][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.598184][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.640867][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.654927][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.665500][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.678775][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.693432][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.710632][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.746371][ T6547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.755980][ T6547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.767972][ T6547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.779213][ T5821] Bluetooth: hci0: command tx timeout [ 140.859250][ T6547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.178365][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.221098][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.351054][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.391010][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.446986][ T30] audit: type=1400 audit(1741835233.808:530): avc: denied { mounton } for pid=6547 comm="syz-executor" path="/root/syzkaller.k8Jfwt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 141.591844][ T30] audit: type=1400 audit(1741835233.958:531): avc: denied { mount } for pid=6547 comm="syz-executor" name="/" dev="gadgetfs" ino=8226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 141.924402][ T6929] sctp: [Deprecated]: syz.4.246 (pid 6929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.924402][ T6929] Use struct sctp_sack_info instead [ 142.430787][ T30] audit: type=1400 audit(1741835233.998:532): avc: denied { read } for pid=6923 comm="syz.4.246" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.537757][ T30] audit: type=1400 audit(1741835233.998:533): avc: denied { open } for pid=6923 comm="syz.4.246" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.193571][ T30] audit: type=1400 audit(1741835235.558:534): avc: denied { map } for pid=6944 comm="syz.3.249" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.218393][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.819637][ T30] audit: type=1400 audit(1741835235.558:535): avc: denied { execute } for pid=6944 comm="syz.3.249" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.865297][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 143.916233][ T6953] binder: 6952:6953 ioctl c0306201 400000000100 returned -22 [ 144.351853][ T30] audit: type=1400 audit(1741835236.718:536): avc: denied { connect } for pid=6959 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.476500][ T6960] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 144.679679][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 144.776545][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.824192][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 144.988263][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.008483][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 145.048771][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.078873][ T9] usb 6-1: config 0 descriptor?? [ 145.491563][ T30] audit: type=1400 audit(1741835237.858:537): avc: denied { write } for pid=6952 comm="syz.4.250" name="pfkey" dev="proc" ino=4026533425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 146.238493][ T9] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 146.435247][ T9] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -38 [ 146.483434][ T9] usb 6-1: USB disconnect, device number 2 [ 146.877195][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 148.471862][ T7030] SELinux: syz.0.263 (7030) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 148.553582][ T30] audit: type=1400 audit(1741835240.918:538): avc: denied { create } for pid=7028 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.730401][ T30] audit: type=1400 audit(1741835240.918:539): avc: denied { ioctl } for pid=7028 comm="syz.0.263" path="socket:[12929]" dev="sockfs" ino=12929 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.842354][ T7047] --map-set only usable from mangle table [ 150.057900][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 151.458806][ T30] audit: type=1400 audit(1741835243.808:540): avc: denied { setrlimit } for pid=7064 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 151.740392][ T7073] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 152.349854][ T7075] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 152.432285][ T7078] xt_connbytes: Forcing CT accounting to be enabled [ 152.439001][ T7078] --map-set only usable from mangle table [ 152.838275][ T30] audit: type=1400 audit(1741835245.198:541): avc: denied { write } for pid=7090 comm="syz.4.280" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.861225][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.892695][ T30] audit: type=1400 audit(1741835245.258:542): avc: denied { nlmsg_read } for pid=7090 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.258147][ T30] audit: type=1400 audit(1741835245.508:543): avc: denied { ioctl } for pid=7093 comm="syz.5.281" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 153.406378][ T30] audit: type=1400 audit(1741835245.748:544): avc: denied { ioctl } for pid=7093 comm="syz.5.281" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 153.699187][ T52] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 153.819176][ T5833] Bluetooth: hci0: command tx timeout [ 154.582670][ T7117] netlink: 'syz.5.284': attribute type 1 has an invalid length. [ 154.590773][ T7117] netlink: 'syz.5.284': attribute type 2 has an invalid length. [ 154.986300][ T30] audit: type=1400 audit(1741835247.348:545): avc: denied { create } for pid=7119 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.008139][ T30] audit: type=1400 audit(1741835247.348:546): avc: denied { listen } for pid=7119 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.094572][ T30] audit: type=1400 audit(1741835247.348:547): avc: denied { accept } for pid=7119 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.116071][ T52] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.153385][ T7122] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 155.164774][ T52] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.201639][ T52] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.529268][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.564798][ T7103] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.596700][ T52] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.913700][ T7139] fuse: Bad value for 'group_id' [ 155.918689][ T7139] fuse: Bad value for 'group_id' [ 156.568493][ T30] audit: type=1400 audit(1741835248.288:548): avc: denied { sqpoll } for pid=7136 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.154821][ T9] usb 5-1: USB disconnect, device number 10 [ 158.274492][ T7159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7159 comm=syz.2.294 [ 159.072698][ T30] audit: type=1400 audit(1741835251.438:549): avc: denied { create } for pid=7165 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.309810][ T30] audit: type=1400 audit(1741835251.668:550): avc: denied { ioctl } for pid=7165 comm="syz.0.296" path="socket:[13958]" dev="sockfs" ino=13958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.673250][ T30] audit: type=1400 audit(1741835252.038:551): avc: denied { create } for pid=7170 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.739435][ T30] audit: type=1400 audit(1741835252.088:552): avc: denied { ioctl } for pid=7170 comm="syz.0.298" path="socket:[13976]" dev="sockfs" ino=13976 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.740477][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 160.315652][ T7188] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 161.050804][ T30] audit: type=1804 audit(1741835253.358:553): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.303" name="/newroot/8/file0" dev="tmpfs" ino=59 res=1 errno=0 [ 161.206230][ T30] audit: type=1400 audit(1741835253.538:554): avc: denied { create } for pid=7179 comm="syz.0.301" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 161.407495][ T7199] syz.5.307 uses obsolete (PF_INET,SOCK_PACKET) [ 161.650263][ T30] audit: type=1400 audit(1741835253.748:555): avc: denied { mounton } for pid=7179 comm="syz.0.301" path="/62/file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 161.745274][ T7199] FAULT_INJECTION: forcing a failure. [ 161.745274][ T7199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.759017][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.5.307 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 161.759031][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.759037][ T7199] Call Trace: [ 161.759040][ T7199] [ 161.759044][ T7199] dump_stack_lvl+0x16c/0x1f0 [ 161.759064][ T7199] should_fail_ex+0x50a/0x650 [ 161.759089][ T7199] _copy_from_user+0x2e/0xd0 [ 161.759108][ T7199] move_addr_to_kernel+0x68/0x160 [ 161.759128][ T7199] __copy_msghdr+0x386/0x470 [ 161.759150][ T7199] copy_msghdr_from_user+0xc2/0x160 [ 161.759172][ T7199] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.759196][ T7199] ? __lock_acquire+0xcc5/0x3c40 [ 161.759223][ T7199] ___sys_sendmsg+0xff/0x1e0 [ 161.759245][ T7199] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.759276][ T7199] ? trace_lock_acquire+0x14e/0x1f0 [ 161.759310][ T7199] __sys_sendmmsg+0x201/0x420 [ 161.759327][ T7199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.759359][ T7199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.759391][ T7199] ? fput+0x67/0x440 [ 161.759411][ T7199] ? ksys_write+0x1ba/0x250 [ 161.759425][ T7199] ? __pfx_ksys_write+0x10/0x10 [ 161.759444][ T7199] __x64_sys_sendmmsg+0x9c/0x100 [ 161.759458][ T7199] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.759480][ T7199] do_syscall_64+0xcd/0x250 [ 161.759505][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.759527][ T7199] RIP: 0033:0x7fdf4d98d169 [ 161.759542][ T7199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.759557][ T7199] RSP: 002b:00007fdf4e72d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.759573][ T7199] RAX: ffffffffffffffda RBX: 00007fdf4dba5fa0 RCX: 00007fdf4d98d169 [ 161.759584][ T7199] RDX: 0000000000000001 RSI: 0000400000000440 RDI: 0000000000000017 [ 161.759593][ T7199] RBP: 00007fdf4e72d090 R08: 0000000000000000 R09: 0000000000000000 [ 161.759603][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.759612][ T7199] R13: 0000000000000000 R14: 00007fdf4dba5fa0 R15: 00007ffc91e51a58 [ 161.759634][ T7199] [ 161.977087][ T30] audit: type=1400 audit(1741835254.338:556): avc: denied { create } for pid=7202 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.998062][ T30] audit: type=1400 audit(1741835254.338:557): avc: denied { connect } for pid=7202 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.018260][ T30] audit: type=1400 audit(1741835254.338:558): avc: denied { write } for pid=7202 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.167803][ T30] audit: type=1400 audit(1741835254.518:559): avc: denied { read write } for pid=7207 comm="syz.3.308" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.379240][ T5833] Bluetooth: hci0: command tx timeout [ 162.397804][ T30] audit: type=1400 audit(1741835254.518:560): avc: denied { open } for pid=7207 comm="syz.3.308" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.434866][ T30] audit: type=1400 audit(1741835254.608:561): avc: denied { getopt } for pid=7212 comm="syz.5.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.123391][ T30] audit: type=1400 audit(1741835255.378:562): avc: denied { unlink } for pid=5831 comm="syz-executor" name="file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.257541][ T7232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.426528][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.314'. [ 163.596565][ T30] audit: type=1400 audit(1741835255.948:563): avc: denied { name_bind } for pid=7230 comm="syz.5.314" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 163.706061][ T7239] netlink: 72 bytes leftover after parsing attributes in process `syz.3.313'. [ 163.751640][ T7235] 9pnet_fd: Insufficient options for proto=fd [ 163.762687][ T7235] netlink: 'syz.0.309': attribute type 19 has an invalid length. [ 163.831156][ T7244] --map-set only usable from mangle table [ 164.153314][ T974] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 164.219472][ T5834] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 164.242565][ T30] audit: type=1400 audit(1741835256.598:564): avc: denied { getopt } for pid=7248 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 164.445207][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 164.539859][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 164.643106][ T974] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.665438][ T974] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.802239][ T5834] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.820451][ T5834] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.834687][ T974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.846302][ T974] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 165.809444][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.816152][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.824362][ T5834] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 165.834148][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.870039][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 165.878240][ T974] usb 5-1: config 0 descriptor?? [ 166.315043][ T5834] usb 6-1: config 0 descriptor?? [ 166.870703][ T974] usb 5-1: can't set config #0, error -71 [ 166.900721][ T5834] usb 6-1: can't set config #0, error -71 [ 166.919319][ T974] usb 5-1: USB disconnect, device number 11 [ 166.937399][ T5834] usb 6-1: USB disconnect, device number 3 [ 166.979462][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 167.014477][ T30] audit: type=1400 audit(1741835259.358:565): avc: denied { read write } for pid=7278 comm="syz.4.323" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 167.175693][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.185893][ T30] audit: type=1400 audit(1741835259.358:566): avc: denied { open } for pid=7278 comm="syz.4.323" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 167.239285][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 167.274762][ T5899] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.325213][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 167.424300][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 167.432092][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.469332][ T7285] netlink: 32 bytes leftover after parsing attributes in process `syz.5.324'. [ 167.554380][ T5899] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.568378][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 167.581863][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.591447][ T9] usb 4-1: config 0 descriptor?? [ 167.596826][ T9] usb 4-1: can't set config #0, error -71 [ 167.603854][ T9] usb 4-1: USB disconnect, device number 9 [ 167.734571][ T7296] --map-set only usable from mangle table [ 168.018109][ T7306] FAULT_INJECTION: forcing a failure. [ 168.018109][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 168.061575][ T30] audit: type=1400 audit(1741835260.428:567): avc: denied { read write } for pid=7308 comm="syz.3.329" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 168.097651][ T7286] netlink: 'syz.4.323': attribute type 2 has an invalid length. [ 168.125172][ T7286] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.323'. [ 168.148505][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.5.327 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 168.148528][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.148538][ T7306] Call Trace: [ 168.148543][ T7306] [ 168.148549][ T7306] dump_stack_lvl+0x16c/0x1f0 [ 168.148577][ T7306] should_fail_ex+0x50a/0x650 [ 168.148600][ T7306] ? fs_reclaim_acquire+0xae/0x150 [ 168.148625][ T7306] should_failslab+0xc2/0x120 [ 168.148643][ T7306] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 168.148660][ T7306] ? proc_alloc_inode+0x25/0x200 [ 168.148678][ T7306] ? __pfx_proc_alloc_inode+0x10/0x10 [ 168.148692][ T7306] proc_alloc_inode+0x25/0x200 [ 168.148705][ T7306] alloc_inode+0x5d/0x230 [ 168.148723][ T7306] new_inode+0x22/0x210 [ 168.148742][ T7306] proc_pid_make_inode+0x22/0x160 [ 168.148767][ T7306] proc_ns_instantiate+0x57/0x100 [ 168.148792][ T7306] proc_ns_dir_lookup+0x1ae/0x2f0 [ 168.148818][ T7306] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 168.148841][ T7306] lookup_open.isra.0+0x4d9/0x1580 [ 168.148868][ T7306] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 168.148895][ T7306] ? path_openat+0x88a/0x2d80 [ 168.148916][ T7306] ? lookup_fast+0x153/0x5f0 [ 168.148941][ T7306] path_openat+0x904/0x2d80 [ 168.148964][ T7306] ? __pfx_path_openat+0x10/0x10 [ 168.148979][ T7306] ? __pfx___lock_acquire+0x10/0x10 [ 168.148999][ T7306] ? lock_acquire.part.0+0x11b/0x380 [ 168.149020][ T7306] ? find_held_lock+0x2d/0x110 [ 168.149038][ T7306] do_filp_open+0x20c/0x470 [ 168.149053][ T7306] ? __pfx_do_filp_open+0x10/0x10 [ 168.149066][ T7306] ? find_held_lock+0x2d/0x110 [ 168.149093][ T7306] ? __pfx_kfree_link+0x10/0x10 [ 168.149118][ T7306] ? alloc_fd+0x41f/0x760 [ 168.149139][ T7306] do_sys_openat2+0x17a/0x1e0 [ 168.149158][ T7306] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.149179][ T7306] ? __fget_files+0x206/0x3a0 [ 168.149198][ T7306] __x64_sys_openat+0x175/0x210 [ 168.149217][ T7306] ? __pfx___x64_sys_openat+0x10/0x10 [ 168.149235][ T7306] ? ksys_write+0x1ba/0x250 [ 168.149256][ T7306] do_syscall_64+0xcd/0x250 [ 168.149288][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.149309][ T7306] RIP: 0033:0x7fdf4d98bad0 [ 168.149321][ T7306] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 168.149335][ T7306] RSP: 002b:00007fdf4b7f5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 168.149350][ T7306] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf4d98bad0 [ 168.149359][ T7306] RDX: 0000000000000000 RSI: 00007fdf4da0e3b8 RDI: 00000000ffffff9c [ 168.149368][ T7306] RBP: 00007fdf4da0e3b8 R08: 0000000000000000 R09: 0000000000000000 [ 168.149376][ T7306] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 168.149385][ T7306] R13: 0000000000000000 R14: 00007fdf4dba6160 R15: 00007ffc91e51a58 [ 168.149404][ T7306] [ 168.456841][ T30] audit: type=1400 audit(1741835260.428:568): avc: denied { open } for pid=7308 comm="syz.3.329" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 168.524517][ T30] audit: type=1400 audit(1741835260.528:569): avc: denied { mount } for pid=7304 comm="syz.2.328" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 168.546516][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.579271][ T5899] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.769277][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 168.778740][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 168.863753][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.947115][ T5899] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.961077][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.040875][ T5899] usb 4-1: Product: syz [ 169.055459][ T5899] usb 4-1: Manufacturer: syz [ 169.066752][ T5899] usb 4-1: SerialNumber: syz [ 169.089862][ T5899] usb 4-1: config 0 descriptor?? [ 169.110089][ T5899] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.128081][ T5899] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 169.374137][ T7328] tipc: Started in network mode [ 169.388591][ T7328] tipc: Node identity ac1414aa, cluster identity 4711 [ 169.463125][ T7328] tipc: Enabled bearer , priority 10 [ 169.589375][ T7334] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 169.699621][ T7332] tipc: Disabling bearer [ 170.017096][ T7328] netlink: 184 bytes leftover after parsing attributes in process `syz.4.333'. [ 170.026268][ T5899] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 170.072911][ T5899] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 170.444063][ T30] audit: type=1400 audit(1741835262.738:570): avc: denied { mount } for pid=7348 comm="syz.4.335" name="/" dev="rpc_pipefs" ino=14445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 170.467659][ T30] audit: type=1400 audit(1741835262.738:571): avc: denied { watch watch_reads } for pid=7348 comm="syz.4.335" path="/61/file0" dev="rpc_pipefs" ino=14445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 170.499224][ T30] audit: type=1400 audit(1741835262.748:572): avc: denied { unmount } for pid=7348 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 172.254646][ T30] audit: type=1400 audit(1741835262.828:573): avc: denied { connect } for pid=7348 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.305872][ T5899] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 172.312979][ T5833] Bluetooth: hci0: command tx timeout [ 172.321713][ T5899] em28xx 4-1:0.0: No AC97 audio processor [ 172.812966][ T5899] usb 4-1: USB disconnect, device number 10 [ 172.861214][ T5899] em28xx 4-1:0.0: Disconnecting em28xx [ 172.920994][ T5899] em28xx 4-1:0.0: Freeing device [ 172.971055][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.340'. [ 173.528906][ T7384] overlayfs: failed to resolve './file0': -2 [ 174.178707][ T30] audit: type=1400 audit(1741835266.038:574): avc: denied { getopt } for pid=7379 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.831501][ T7408] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 174.840822][ T7408] cramfs: wrong magic [ 174.845902][ T7408] No such timeout policy "syz0" [ 174.939970][ T5927] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 175.386828][ T5927] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 175.542960][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 175.567694][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.583870][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 175.602819][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 175.622208][ T5927] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 175.630260][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 175.645140][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.680958][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 175.756551][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 175.804883][ T5927] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 176.067632][ T7426] --map-set only usable from mangle table [ 176.309952][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 176.320420][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.333661][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 176.348090][ T5927] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 176.387287][ T5927] usb 4-1: string descriptor 0 read error: -22 [ 176.394818][ T5927] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 176.411335][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.442511][ T5927] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 176.791151][ T5833] Bluetooth: hci3: command tx timeout [ 177.787529][ T974] usb 4-1: USB disconnect, device number 11 [ 178.264980][ T30] audit: type=1400 audit(1741835270.598:575): avc: denied { create } for pid=7454 comm="syz.5.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.344434][ T30] audit: type=1400 audit(1741835270.708:576): avc: denied { getopt } for pid=7465 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.371738][ T30] audit: type=1400 audit(1741835270.738:577): avc: denied { setopt } for pid=7465 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.473809][ T30] audit: type=1400 audit(1741835270.838:578): avc: denied { write } for pid=7473 comm="syz.0.358" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.608897][ T30] audit: type=1400 audit(1741835270.868:579): avc: denied { ioctl } for pid=7473 comm="syz.0.358" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.859325][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 178.896199][ T30] audit: type=1400 audit(1741835271.258:580): avc: denied { create } for pid=7489 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 179.048341][ T30] audit: type=1400 audit(1741835271.288:581): avc: denied { read } for pid=7489 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 179.757260][ T7503] netlink: 'syz.0.362': attribute type 10 has an invalid length. [ 179.771265][ T7503] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.811376][ T7503] bond0: (slave team0): Enslaving as an active interface with an up link [ 179.833889][ T30] audit: type=1400 audit(1741835272.198:582): avc: denied { listen } for pid=7496 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 179.861986][ T7501] wlan0 speed is unknown, defaulting to 1000 [ 179.868125][ T7501] wlan0 speed is unknown, defaulting to 1000 [ 179.875334][ T7501] wlan0 speed is unknown, defaulting to 1000 [ 179.883444][ T7501] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 179.893035][ T7501] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 179.910156][ T7501] wlan0 speed is unknown, defaulting to 1000 [ 179.916787][ T7501] wlan0 speed is unknown, defaulting to 1000 [ 179.923718][ T7501] wlan0 speed is unknown, defaulting to 1000 [ 179.930224][ T7501] wlan0 speed is unknown, defaulting to 1000 [ 179.936583][ T7501] wlan0 speed is unknown, defaulting to 1000 [ 180.232869][ T30] audit: type=1400 audit(1741835272.598:583): avc: denied { bind } for pid=7502 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.947239][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 180.953953][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 182.503779][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 182.511077][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 182.548269][ T7538] ceph: No mds server is up or the cluster is laggy [ 182.551974][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 182.571434][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 182.662506][ T30] audit: type=1400 audit(1741835275.028:584): avc: denied { read } for pid=7549 comm="syz.4.372" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.013698][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 183.054394][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 183.377942][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 183.377953][ T30] audit: type=1400 audit(1741835275.738:592): avc: denied { getopt } for pid=7553 comm="syz.5.373" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.469237][ T7550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.475375][ T7550] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.801884][ T30] audit: type=1400 audit(1741835276.148:593): avc: denied { name_connect } for pid=7560 comm="syz.0.375" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 184.411901][ T7550] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.417829][ T7550] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 184.456372][ T7550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.494599][ T7550] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 184.530282][ T30] audit: type=1400 audit(1741835276.888:594): avc: denied { module_request } for pid=7575 comm="syz.3.379" kmod=39702D666401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 184.544607][ T7576] 9pnet: Could not find request transport: fd [ 184.551776][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.672135][ T7579] netlink: 76 bytes leftover after parsing attributes in process `syz.2.380'. [ 184.682215][ T7579] netlink: 76 bytes leftover after parsing attributes in process `syz.2.380'. [ 184.682341][ T7574] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 184.955945][ T7550] ================================================================== [ 184.964022][ T7550] BUG: KASAN: slab-use-after-free in sco_conn_put+0x471/0x4c0 [ 184.971480][ T7550] Write of size 8 at addr ffff88804262d5a0 by task syz.4.372/7550 [ 184.979264][ T7550] [ 184.981562][ T7550] CPU: 0 UID: 0 PID: 7550 Comm: syz.4.372 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 184.981574][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.981581][ T7550] Call Trace: [ 184.981585][ T7550] [ 184.981589][ T7550] dump_stack_lvl+0x116/0x1f0 [ 184.981607][ T7550] print_report+0xc3/0x670 [ 184.981619][ T7550] ? __virt_addr_valid+0x5e/0x590 [ 184.981631][ T7550] ? __phys_addr+0xc6/0x150 [ 184.981641][ T7550] kasan_report+0xd9/0x110 [ 184.981653][ T7550] ? sco_conn_put+0x471/0x4c0 [ 184.981669][ T7550] ? sco_conn_put+0x471/0x4c0 [ 184.981685][ T7550] sco_conn_put+0x471/0x4c0 [ 184.981700][ T7550] sco_conn_del+0x26f/0x2e0 [ 184.981715][ T7550] ? __pfx_sco_connect_cfm+0x10/0x10 [ 184.981730][ T7550] sco_connect_cfm+0x1d4/0xc00 [ 184.981745][ T7550] ? rcu_preempt_deferred_qs_irqrestore+0x502/0xbd0 [ 184.981762][ T7550] ? __pfx_sco_connect_cfm+0x10/0x10 [ 184.981778][ T7550] ? rcu_is_watching+0x12/0xc0 [ 184.981789][ T7550] ? __pfx_sco_connect_cfm+0x10/0x10 [ 184.981807][ T7550] hci_conn_failed+0x225/0x3e0 [ 184.981819][ T7550] ? __pfx_hci_conn_failed+0x10/0x10 [ 184.981832][ T7550] hci_conn_unlink+0x71e/0x9f0 [ 184.981845][ T7550] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 184.981861][ T7550] hci_conn_del+0x61/0xdb0 [ 184.981872][ T7550] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 184.981887][ T7550] hci_conn_failed+0x2a6/0x3e0 [ 184.981899][ T7550] ? __pfx_hci_conn_failed+0x10/0x10 [ 184.981911][ T7550] ? lock_acquire+0x2f/0xb0 [ 184.981924][ T7550] ? hci_abort_conn_sync+0x170/0xfe0 [ 184.981936][ T7550] hci_abort_conn_sync+0x91c/0xfe0 [ 184.981948][ T7550] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 184.981964][ T7550] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 184.981977][ T7550] ? __pfx_lock_release+0x10/0x10 [ 184.981990][ T7550] ? trace_lock_acquire+0x14e/0x1f0 [ 184.982003][ T7550] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 184.982016][ T7550] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 184.982029][ T7550] hci_suspend_sync+0x772/0xab0 [ 184.982042][ T7550] ? __pfx_hci_suspend_sync+0x10/0x10 [ 184.982055][ T7550] ? hci_send_monitor_ctrl_event+0x530/0x5b0 [ 184.982066][ T7550] ? __pfx_mgmt_suspending+0x10/0x10 [ 184.982084][ T7550] hci_suspend_dev+0x30a/0x510 [ 184.982094][ T7550] ? __pfx_hci_suspend_dev+0x10/0x10 [ 184.982104][ T7550] ? rcu_barrier+0x344/0x700 [ 184.982118][ T7550] ? kobject_get+0xbb/0x150 [ 184.982133][ T7550] hci_suspend_notifier+0x28d/0x2f0 [ 184.982143][ T7550] notifier_call_chain+0xb7/0x410 [ 184.982155][ T7550] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 184.982166][ T7550] blocking_notifier_call_chain_robust+0xc9/0x170 [ 184.982178][ T7550] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 184.982192][ T7550] pm_notifier_call_chain_robust+0x27/0x60 [ 184.982207][ T7550] snapshot_open+0x189/0x2b0 [ 184.982219][ T7550] ? __pfx_snapshot_open+0x10/0x10 [ 184.982233][ T7550] misc_open+0x35a/0x420 [ 184.982243][ T7550] ? __pfx_misc_open+0x10/0x10 [ 184.982252][ T7550] chrdev_open+0x237/0x6a0 [ 184.982263][ T7550] ? __pfx_chrdev_open+0x10/0x10 [ 184.982273][ T7550] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 184.982290][ T7550] do_dentry_open+0x735/0x1c40 [ 184.982300][ T7550] ? __pfx_chrdev_open+0x10/0x10 [ 184.982310][ T7550] ? inode_permission+0xdd/0x5f0 [ 184.982324][ T7550] vfs_open+0x82/0x3f0 [ 184.982336][ T7550] ? may_open+0x1f2/0x400 [ 184.982349][ T7550] path_openat+0x1e88/0x2d80 [ 184.982361][ T7550] ? __pfx_path_openat+0x10/0x10 [ 184.982371][ T7550] ? __pfx___lock_acquire+0x10/0x10 [ 184.982384][ T7550] ? lock_acquire.part.0+0x11b/0x380 [ 184.982398][ T7550] ? find_held_lock+0x2d/0x110 [ 184.982409][ T7550] do_filp_open+0x20c/0x470 [ 184.982419][ T7550] ? __pfx_do_filp_open+0x10/0x10 [ 184.982428][ T7550] ? find_held_lock+0x2d/0x110 [ 184.982442][ T7550] ? alloc_fd+0x41f/0x760 [ 184.982452][ T7550] do_sys_openat2+0x17a/0x1e0 [ 184.982465][ T7550] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.982479][ T7550] __x64_sys_openat+0x175/0x210 [ 184.982492][ T7550] ? __pfx___x64_sys_openat+0x10/0x10 [ 184.982507][ T7550] do_syscall_64+0xcd/0x250 [ 184.982522][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.982537][ T7550] RIP: 0033:0x7f30a358d169 [ 184.982546][ T7550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.982556][ T7550] RSP: 002b:00007f30a430f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.982566][ T7550] RAX: ffffffffffffffda RBX: 00007f30a37a5fa0 RCX: 00007f30a358d169 [ 184.982572][ T7550] RDX: 0000000000000080 RSI: 00004000000006c0 RDI: ffffffffffffff9c [ 184.982579][ T7550] RBP: 00007f30a360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.982585][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.982591][ T7550] R13: 0000000000000000 R14: 00007f30a37a5fa0 R15: 00007ffd90085b38 [ 184.982600][ T7550] [ 184.982603][ T7550] [ 185.455635][ T7550] Allocated by task 7405: [ 185.459946][ T7550] kasan_save_stack+0x33/0x60 [ 185.464606][ T7550] kasan_save_track+0x14/0x30 [ 185.469264][ T7550] __kasan_kmalloc+0xaa/0xb0 [ 185.473833][ T7550] __kmalloc_noprof+0x21c/0x510 [ 185.478662][ T7550] sk_prot_alloc+0x1a8/0x2a0 [ 185.483232][ T7550] sk_alloc+0x36/0xc20 [ 185.487285][ T7550] bt_sock_alloc+0x3b/0x3a0 [ 185.491773][ T7550] sco_sock_create+0xe3/0x3c0 [ 185.496434][ T7550] bt_sock_create+0x182/0x350 [ 185.501092][ T7550] __sock_create+0x335/0x8d0 [ 185.505662][ T7550] __sys_socket+0x14f/0x260 [ 185.510147][ T7550] __x64_sys_socket+0x72/0xb0 [ 185.514806][ T7550] do_syscall_64+0xcd/0x250 [ 185.519293][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.525170][ T7550] [ 185.527470][ T7550] Freed by task 7404: [ 185.531424][ T7550] kasan_save_stack+0x33/0x60 [ 185.536077][ T7550] kasan_save_track+0x14/0x30 [ 185.540733][ T7550] kasan_save_free_info+0x3b/0x60 [ 185.545738][ T7550] __kasan_slab_free+0x51/0x70 [ 185.550478][ T7550] kfree+0x2c4/0x4d0 [ 185.554358][ T7550] __sk_destruct+0x5ef/0x6f0 [ 185.558931][ T7550] sk_destruct+0xc2/0xf0 [ 185.563166][ T7550] __sk_free+0xf4/0x3e0 [ 185.567306][ T7550] sk_free+0x6a/0x90 [ 185.571184][ T7550] sco_sock_kill+0x11a/0x1c0 [ 185.575755][ T7550] sco_sock_release+0x154/0x2d0 [ 185.580588][ T7550] __sock_release+0xb0/0x270 [ 185.585153][ T7550] sock_close+0x1c/0x30 [ 185.589284][ T7550] __fput+0x3ff/0xb70 [ 185.593245][ T7550] task_work_run+0x14e/0x250 [ 185.597818][ T7550] do_exit+0xad8/0x2d70 [ 185.601956][ T7550] do_group_exit+0xd3/0x2a0 [ 185.606436][ T7550] get_signal+0x24ed/0x26c0 [ 185.610921][ T7550] arch_do_signal_or_restart+0x90/0x7e0 [ 185.616458][ T7550] syscall_exit_to_user_mode+0x150/0x2a0 [ 185.622090][ T7550] do_syscall_64+0xda/0x250 [ 185.626574][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.632448][ T7550] [ 185.634752][ T7550] The buggy address belongs to the object at ffff88804262d000 [ 185.634752][ T7550] which belongs to the cache kmalloc-2k of size 2048 [ 185.648781][ T7550] The buggy address is located 1440 bytes inside of [ 185.648781][ T7550] freed 2048-byte region [ffff88804262d000, ffff88804262d800) [ 185.662726][ T7550] [ 185.665029][ T7550] The buggy address belongs to the physical page: [ 185.671415][ T7550] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42628 [ 185.680150][ T7550] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.688621][ T7550] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 185.696160][ T7550] page_type: f5(slab) [ 185.700123][ T7550] raw: 00fff00000000040 ffff88801b042000 ffffea00010b0400 dead000000000002 [ 185.708683][ T7550] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 185.717244][ T7550] head: 00fff00000000040 ffff88801b042000 ffffea00010b0400 dead000000000002 [ 185.725893][ T7550] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 185.734540][ T7550] head: 00fff00000000003 ffffea0001098a01 ffffffffffffffff 0000000000000000 [ 185.743188][ T7550] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 185.751831][ T7550] page dumped because: kasan: bad access detected [ 185.758216][ T7550] page_owner tracks the page as allocated [ 185.763905][ T7550] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5870, tgid 5870 (kworker/1:4), ts 59345836896, free_ts 59296138958 [ 185.785156][ T7550] post_alloc_hook+0x181/0x1b0 [ 185.789904][ T7550] get_page_from_freelist+0xfce/0x2f80 [ 185.795346][ T7550] __alloc_frozen_pages_noprof+0x221/0x2470 [ 185.801220][ T7550] alloc_pages_mpol+0x1fc/0x540 [ 185.806051][ T7550] new_slab+0x23d/0x330 [ 185.810194][ T7550] ___slab_alloc+0xc5d/0x1720 [ 185.814854][ T7550] __slab_alloc.constprop.0+0x56/0xb0 [ 185.820210][ T7550] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 185.826601][ T7550] kmalloc_reserve+0xef/0x2c0 [ 185.831257][ T7550] __alloc_skb+0x164/0x380 [ 185.835657][ T7550] mld_newpack.isra.0+0x18f/0xa20 [ 185.840665][ T7550] add_grhead+0x299/0x340 [ 185.844977][ T7550] add_grec+0x111e/0x1670 [ 185.849285][ T7550] mld_ifc_work+0x41f/0xca0 [ 185.853765][ T7550] process_one_work+0x9c5/0x1ba0 [ 185.858685][ T7550] worker_thread+0x6c8/0xf00 [ 185.863257][ T7550] page last free pid 5816 tgid 5816 stack trace: [ 185.869558][ T7550] free_frozen_pages+0x6db/0xfb0 [ 185.874473][ T7550] qlist_free_all+0x4e/0x120 [ 185.879039][ T7550] kasan_quarantine_reduce+0x195/0x1e0 [ 185.884476][ T7550] __kasan_slab_alloc+0x69/0x90 [ 185.889308][ T7550] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 185.895091][ T7550] __d_alloc+0x31/0xaa0 [ 185.899226][ T7550] d_alloc+0x4a/0x1e0 [ 185.903204][ T7550] d_alloc_parallel+0xe7/0x12b0 [ 185.908034][ T7550] __lookup_slow+0x194/0x470 [ 185.912605][ T7550] lookup_one_len+0x181/0x1b0 [ 185.917265][ T7550] start_creating.part.0+0x12f/0x3a0 [ 185.922529][ T7550] __debugfs_create_file+0xa5/0x6b0 [ 185.927704][ T7550] debugfs_create_file_short+0x41/0x60 [ 185.933149][ T7550] debugfs_hw_add+0x149/0x3a0 [ 185.937813][ T7550] ieee80211_register_hw+0x2475/0x4060 [ 185.943257][ T7550] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 185.948961][ T7550] [ 185.951262][ T7550] Memory state around the buggy address: [ 185.956866][ T7550] ffff88804262d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.964907][ T7550] ffff88804262d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.972945][ T7550] >ffff88804262d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.980984][ T7550] ^ [ 185.986067][ T7550] ffff88804262d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.994104][ T7550] ffff88804262d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.002146][ T7550] ================================================================== [ 186.010304][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.383140][ T7550] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.390361][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.4.372 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 186.400930][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.410991][ T7550] Call Trace: [ 186.414252][ T7550] [ 186.417163][ T7550] dump_stack_lvl+0x3d/0x1f0 [ 186.421746][ T7550] panic+0x71d/0x800 [ 186.425621][ T7550] ? __pfx_panic+0x10/0x10 [ 186.430018][ T7550] ? preempt_schedule_thunk+0x1a/0x30 [ 186.435372][ T7550] ? preempt_schedule_common+0x44/0xc0 [ 186.440816][ T7550] check_panic_on_warn+0xab/0xb0 [ 186.445736][ T7550] end_report+0x117/0x180 [ 186.450046][ T7550] kasan_report+0xe9/0x110 [ 186.454445][ T7550] ? sco_conn_put+0x471/0x4c0 [ 186.459112][ T7550] ? sco_conn_put+0x471/0x4c0 [ 186.463798][ T7550] sco_conn_put+0x471/0x4c0 [ 186.468285][ T7550] sco_conn_del+0x26f/0x2e0 [ 186.472775][ T7550] ? __pfx_sco_connect_cfm+0x10/0x10 [ 186.478046][ T7550] sco_connect_cfm+0x1d4/0xc00 [ 186.482795][ T7550] ? rcu_preempt_deferred_qs_irqrestore+0x502/0xbd0 [ 186.489369][ T7550] ? __pfx_sco_connect_cfm+0x10/0x10 [ 186.494639][ T7550] ? rcu_is_watching+0x12/0xc0 [ 186.499384][ T7550] ? __pfx_sco_connect_cfm+0x10/0x10 [ 186.504652][ T7550] hci_conn_failed+0x225/0x3e0 [ 186.509424][ T7550] ? __pfx_hci_conn_failed+0x10/0x10 [ 186.514694][ T7550] hci_conn_unlink+0x71e/0x9f0 [ 186.519443][ T7550] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 186.524890][ T7550] hci_conn_del+0x61/0xdb0 [ 186.529288][ T7550] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 186.534731][ T7550] hci_conn_failed+0x2a6/0x3e0 [ 186.539476][ T7550] ? __pfx_hci_conn_failed+0x10/0x10 [ 186.544740][ T7550] ? lock_acquire+0x2f/0xb0 [ 186.549226][ T7550] ? hci_abort_conn_sync+0x170/0xfe0 [ 186.554494][ T7550] hci_abort_conn_sync+0x91c/0xfe0 [ 186.559589][ T7550] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 186.565204][ T7550] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 186.571773][ T7550] ? __pfx_lock_release+0x10/0x10 [ 186.576787][ T7550] ? trace_lock_acquire+0x14e/0x1f0 [ 186.581970][ T7550] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 186.588541][ T7550] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 186.595025][ T7550] hci_suspend_sync+0x772/0xab0 [ 186.599860][ T7550] ? __pfx_hci_suspend_sync+0x10/0x10 [ 186.605213][ T7550] ? hci_send_monitor_ctrl_event+0x530/0x5b0 [ 186.611173][ T7550] ? __pfx_mgmt_suspending+0x10/0x10 [ 186.616445][ T7550] hci_suspend_dev+0x30a/0x510 [ 186.621191][ T7550] ? __pfx_hci_suspend_dev+0x10/0x10 [ 186.626452][ T7550] ? rcu_barrier+0x344/0x700 [ 186.631029][ T7550] ? kobject_get+0xbb/0x150 [ 186.635522][ T7550] hci_suspend_notifier+0x28d/0x2f0 [ 186.640698][ T7550] notifier_call_chain+0xb7/0x410 [ 186.645705][ T7550] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 186.651406][ T7550] blocking_notifier_call_chain_robust+0xc9/0x170 [ 186.657802][ T7550] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 186.664807][ T7550] pm_notifier_call_chain_robust+0x27/0x60 [ 186.670598][ T7550] snapshot_open+0x189/0x2b0 [ 186.675171][ T7550] ? __pfx_snapshot_open+0x10/0x10 [ 186.680265][ T7550] misc_open+0x35a/0x420 [ 186.684488][ T7550] ? __pfx_misc_open+0x10/0x10 [ 186.689233][ T7550] chrdev_open+0x237/0x6a0 [ 186.693629][ T7550] ? __pfx_chrdev_open+0x10/0x10 [ 186.698547][ T7550] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 186.705295][ T7550] do_dentry_open+0x735/0x1c40 [ 186.710046][ T7550] ? __pfx_chrdev_open+0x10/0x10 [ 186.714965][ T7550] ? inode_permission+0xdd/0x5f0 [ 186.719889][ T7550] vfs_open+0x82/0x3f0 [ 186.723942][ T7550] ? may_open+0x1f2/0x400 [ 186.728256][ T7550] path_openat+0x1e88/0x2d80 [ 186.732829][ T7550] ? __pfx_path_openat+0x10/0x10 [ 186.737746][ T7550] ? __pfx___lock_acquire+0x10/0x10 [ 186.742946][ T7550] ? lock_acquire.part.0+0x11b/0x380 [ 186.748227][ T7550] ? find_held_lock+0x2d/0x110 [ 186.752973][ T7550] do_filp_open+0x20c/0x470 [ 186.757460][ T7550] ? __pfx_do_filp_open+0x10/0x10 [ 186.762462][ T7550] ? find_held_lock+0x2d/0x110 [ 186.767212][ T7550] ? alloc_fd+0x41f/0x760 [ 186.771522][ T7550] do_sys_openat2+0x17a/0x1e0 [ 186.776180][ T7550] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.781365][ T7550] __x64_sys_openat+0x175/0x210 [ 186.786201][ T7550] ? __pfx___x64_sys_openat+0x10/0x10 [ 186.791560][ T7550] do_syscall_64+0xcd/0x250 [ 186.796048][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.801927][ T7550] RIP: 0033:0x7f30a358d169 [ 186.806327][ T7550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.825917][ T7550] RSP: 002b:00007f30a430f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.834316][ T7550] RAX: ffffffffffffffda RBX: 00007f30a37a5fa0 RCX: 00007f30a358d169 [ 186.842266][ T7550] RDX: 0000000000000080 RSI: 00004000000006c0 RDI: ffffffffffffff9c [ 186.850216][ T7550] RBP: 00007f30a360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.858167][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.866117][ T7550] R13: 0000000000000000 R14: 00007f30a37a5fa0 R15: 00007ffd90085b38 [ 186.874077][ T7550] [ 186.877267][ T7550] Kernel Offset: disabled [ 186.881564][ T7550] Rebooting in 86400 seconds..