last executing test programs: 2m54.624012917s ago: executing program 3 (id=1976): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x100) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) 2m52.568502513s ago: executing program 3 (id=1985): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002000010027bd6900fddbdf250a108010000000081600000014000200fc020000000000000000000000000020140001"], 0x44}}, 0x40080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000300)={0x7, 0x0, 0x1, {0x0, 0x4001, 0x0, 0x4}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m50.77223206s ago: executing program 3 (id=1989): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x1}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={r2, 0xfae}, 0x8) 2m50.276566445s ago: executing program 3 (id=1991): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x52, &(0x7f0000000500)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1d, 0x6, 0x0, @remote, @local, {[@hopopts={0xff}], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2m50.062559533s ago: executing program 3 (id=1997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 2m49.100912362s ago: executing program 3 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='svc_unregister\x00', r1, 0x0, 0x8}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m37.956852294s ago: executing program 1 (id=2068): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x5c0a, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x2e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x1) 2m37.949359373s ago: executing program 1 (id=2069): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfff, 0x4) 2m37.755112782s ago: executing program 1 (id=2070): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 2m37.708168648s ago: executing program 1 (id=2071): symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0}]) umount2(&(0x7f0000000080)='./file0\x00', 0x80000000002) 2m37.451431486s ago: executing program 1 (id=2072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 2m36.342773989s ago: executing program 1 (id=2077): io_uring_setup(0x177f, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m33.958039082s ago: executing program 32 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='svc_unregister\x00', r1, 0x0, 0x8}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m21.102732039s ago: executing program 33 (id=2077): io_uring_setup(0x177f, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 6.909233929s ago: executing program 6 (id=3009): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'nicvf0\x00'}}, 0x1e) 6.90173984s ago: executing program 2 (id=3010): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) fstatfs(r3, 0x0) 6.725083298s ago: executing program 2 (id=3013): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000200)=0x8000000) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x8, 0x2, 0x1}, &(0x7f0000000240)=0x10) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sync() bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.260837533s ago: executing program 2 (id=3019): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x80, 0x4, 0x286}, 0x0, &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) ioctl$LOOP_CLR_FD(r8, 0x4c01) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r6, 0x0, &(0x7f0000000440)="96cbd6c0205f79ba40726cb491561647f0239e292665e667a3fe9b8a519b7bb10a355cf8b652587a35d0adcf022c563d71729b71bf24a6ac2d35430b6c84cb8f69b757b9ecbd76a1659e76f186c80d25b7b1bcf303baf7ccb9035f9720fdd53c401591a319c48d3a10dad4163c26c6f2e4f4dac98a84ac2b63e6c02364f519adad664602851f09d6a3a27abe47aafe2713601bb3696b5dce6f3f8dd73750f6176357d4edfac8644b0879", 0xaa, 0x40000110}) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000006c0)="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", 0x2000, 0x0) r9 = dup3(0xffffffffffffffff, r6, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000026c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x458d}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6d8c}], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1a, r8, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x5, 0x5}, 0x10, 0x896e, r8, 0x6, &(0x7f0000000580)=[0xffffffffffffffff, r8, 0xffffffffffffffff, r9], &(0x7f00000005c0)=[{0x201, 0x2, 0xe, 0x1}, {0x2, 0x3, 0x3}, {0x5, 0x2, 0x6, 0x7}, {0x1, 0x2, 0x10, 0x8}, {0x4, 0x3, 0x7, 0x1}, {0x0, 0x5, 0x9, 0x8}], 0x10, 0xe, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r13, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x50]}, 0x2a) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYRES16=r11, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r12, @ANYRES8=r13], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 6.170650184s ago: executing program 6 (id=3021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x40, 0xffffffff, 0x2, 0x81]}}, 0x5c) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.901465134s ago: executing program 6 (id=3022): syz_usb_connect(0x0, 0x40, &(0x7f0000002d80)={{0x12, 0x1, 0x0, 0xc9, 0xd1, 0xc4, 0x8, 0x499, 0x500a, 0xe7b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xd, 0xd5, 0xce, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x41, 0x6, 0xcf}}]}}]}}, 0x0) 4.60882517s ago: executing program 5 (id=3032): syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r4, 0x154e, 0x0, 0x41, 0x0, 0x0) 3.867593004s ago: executing program 6 (id=3035): r0 = semget(0x0, 0x0, 0x40) semop(r0, 0x0, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0xe8, 0x0, 0x0, [{{0x3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7, 0x0, 0x173d4, {0x0, 0x8000, 0x3f8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x2, 0xdffffffd}}, {0x4, 0x0, 0x3e, 0x0, '.&^\'\x9b\x8e\xf1\x8a\xbb\xbe\xddn=@\x9bE\xe4c\xfd\xcc\xba\xed\x0f\xd1\xb5}v-\xccq\x91\xe6\xbdw5\x06\x15\xd5\xf8\xec\"|\x00\x00\x00\x7f\xdf\xdf\xac&{d)v\x94\xd4B\xfd\'\xbc@\x95'}}]}, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/192, 0xc0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.815753117s ago: executing program 4 (id=3036): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.755584423s ago: executing program 5 (id=3037): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3880, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) 3.754994233s ago: executing program 4 (id=3038): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x4db3023e, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.670476104s ago: executing program 4 (id=3039): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 3.538111175s ago: executing program 4 (id=3040): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 3.448652321s ago: executing program 4 (id=3041): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500"], 0x50) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 3.253901093s ago: executing program 4 (id=3042): syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x800) r0 = syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x25e9, &(0x7f00000017c0)={0x0, 0x82ea, 0x1, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 3.066260497s ago: executing program 2 (id=3043): socket$nl_route(0x10, 0x3, 0x0) capset(0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) 2.953054877s ago: executing program 6 (id=3046): syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75000905"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 2.810127977s ago: executing program 5 (id=3047): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffdb8, 0x0}, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 2.786434343s ago: executing program 0 (id=3048): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'nicvf0\x00'}}, 0x1e) 2.690908791s ago: executing program 0 (id=3049): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8643e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c040}, 0x8041) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@getchain={0x34, 0x66, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xf}, {0xfff2, 0x2}, {0xfff2, 0xfff1}}, [{0x8, 0xb, 0xfffffbff}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x814}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r9 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = syz_open_procfs(0x0, 0x0) syz_fuse_handle_req(r11, &(0x7f0000004200)="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", 0x2000, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r10, r9, 0x0, 0x9c) 2.342536874s ago: executing program 0 (id=3050): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 2.291049132s ago: executing program 0 (id=3051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x40, 0xffffffff, 0x2, 0x81]}}, 0x5c) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.085728198s ago: executing program 2 (id=3052): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="a980b2a0cb0809541841ee4e1262808a24fc8f1c27d5e4506f13af5c6d63172360b6baad9d0c3df046f4f5f0adc0308e3ef659787d0489cf1b2965169fccccd319634be2722fd699c8ed", 0x4a}, {&(0x7f0000000440)="b4462ead4cd93f40db60bf447a1a6bdf72e253d86ae256e9910dcbfb8dd7edbb6b8ae117154b30ab1c7fae42a9d398ee41d0f486ad54dc3832847d201f9a55131f9f76f2e00cf1105b10a47921f04087cb12b3d49446bcc2ec3564a6376c10f73cc539fbb8a0dd111d0c0f6ed38796250527a6e59c960b5b1219eb41a8248a4d56a5f4e20f248aa6c383ad528e822413ceeb4a5e5c3e8268662e94b56b9fd93a4175c7d9fdce4609faa21aa9f63caf1130269b9445386e4f473a0e6feb415ccf9919147f8c9f16c8be580a2363a0f66fcfac0e4311c8db2cf1f3987e1d02dfb97b", 0xe1}, {&(0x7f00000011c0)="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", 0x12c}], 0x3}, 0x88d4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 1.843602199s ago: executing program 2 (id=3053): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x181240) fadvise64(r5, 0x8000000000000002, 0x9, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x4a2499fd4c68d2f3, 0x2, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r10, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x3, 0x401, 0x2, 0x401, 0x6]}, &(0x7f0000000080)=0x46) writev(r0, &(0x7f00000002c0)=[{0x0, 0x2b}, {&(0x7f0000000080)='-', 0x1}], 0x2) 1.7645067s ago: executing program 0 (id=3054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x3ff, 0x8, 0x8000000000000000, 0x2, 0x6, 0x9, 0x1}, 0x0) io_setup(0x8, &(0x7f0000000000)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = getpid() r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x800, 0x4, 0x316}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r2, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800}) open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x100) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x418580, 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000000)=0x7, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.394307513s ago: executing program 5 (id=3055): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e20, 0xffffffdf, @empty, 0x9}}, 0x7, 0x8}, 0x90) 1.05984909s ago: executing program 6 (id=3056): listen(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 984.791017ms ago: executing program 5 (id=3057): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3880, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) 63.14149ms ago: executing program 0 (id=3058): pipe(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) openat$dir(0xffffffffffffff9c, 0x0, 0x86040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 5 (id=3059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x90}, 0x0) kernel console output (not intermixed with test programs): fe on all matching packets. [ 661.758578][T12667] program syz.4.1872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.999580][T12670] siw: device registration error -23 [ 662.758761][T12676] siw: device registration error -23 [ 663.700984][T12685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.723208][T12682] program syz.2.1877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 664.380772][T12692] program syz.3.1879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.790374][ T93] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 665.980773][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.016997][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.180639][ T93] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 666.192620][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.559368][T12714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.992041][ T93] usb 4-1: config 0 descriptor?? [ 667.802213][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.920582][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.960378][ T5928] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 669.413133][ T5928] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 669.423675][ T5928] usb 1-1: config 0 has no interface number 0 [ 669.433918][ T5928] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 669.443667][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.458058][ T5928] usb 1-1: Product: syz [ 669.465559][ T5928] usb 1-1: Manufacturer: syz [ 669.470393][ T5928] usb 1-1: SerialNumber: syz [ 669.479756][ T5928] usb 1-1: config 0 descriptor?? [ 669.638931][ T93] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003C/input/input40 [ 670.207207][ T93] uclogic 0003:256C:006D.003C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 670.244362][ T93] usb 4-1: USB disconnect, device number 24 [ 670.521209][ T5928] usb 1-1: Firmware: major: 20, minor: 217, hardware type: UNKNOWN (255) [ 670.658249][T12760] program syz.1.1896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.927926][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.951799][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.448808][ T5928] usb 1-1: failed to fetch extended address, random address set [ 671.490308][ T5928] usb 1-1: atusb_probe: initialization failed, error = -524 [ 671.499779][ T5928] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 671.743299][ T48] usb 1-1: USB disconnect, device number 30 [ 672.040478][ T5928] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 672.102651][T12782] program syz.4.1903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.225770][ T5928] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 672.276578][ T5928] usb 2-1: config 0 has no interface number 0 [ 672.299311][ T5928] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 672.319976][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.331807][ T5928] usb 2-1: Product: syz [ 672.336061][ T5928] usb 2-1: Manufacturer: syz [ 672.351866][ T5928] usb 2-1: SerialNumber: syz [ 672.403120][ T5928] usb 2-1: config 0 descriptor?? [ 673.812812][T12783] siw: device registration error -23 [ 674.172952][ T5928] usb 2-1: Firmware: major: 20, minor: 217, hardware type: UNKNOWN (255) [ 674.374284][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.409722][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.545738][ T5928] usb 2-1: failed to fetch extended address, random address set [ 674.554363][ T5928] usb 2-1: atusb_probe: initialization failed, error = -524 [ 674.573772][ T5928] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 675.271925][ T5937] usb 2-1: USB disconnect, device number 30 [ 678.552134][T12830] siw: device registration error -23 [ 679.610141][T12852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.170452][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 680.251409][T12859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.722102][T12869] siw: device registration error -23 [ 683.352180][T12885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.406709][T12892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.480562][ T918] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 685.291954][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.298386][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.362155][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.394817][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.533031][ T918] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 685.542224][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.054276][T12906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.071352][ T918] usb 2-1: config 0 descriptor?? [ 686.530548][T12912] program syz.4.1936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.542251][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.559245][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.643933][T12915] program syz.2.1935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.463969][T12923] program syz.4.1938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.375463][ T918] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.003D/input/input41 [ 688.492229][ T5928] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 688.715548][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.726034][ T918] uclogic 0003:256C:006D.003D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 688.747962][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.815944][ T918] usb 2-1: USB disconnect, device number 31 [ 688.824675][ T5928] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 689.049407][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.409708][ T5928] usb 3-1: config 0 descriptor?? [ 689.549403][T12937] fido_id[12937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 689.887079][T12951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.249152][T12925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.260815][T12925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.229451][T12960] program syz.4.1949 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 691.610517][ T5929] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 691.961151][ T5929] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 692.002521][ T5929] usb 4-1: config 0 has no interface number 0 [ 692.053444][ T5929] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 692.066666][ T5928] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003E/input/input42 [ 692.084736][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.093215][ T5929] usb 4-1: Product: syz [ 692.097434][ T5929] usb 4-1: Manufacturer: syz [ 692.115460][ T5929] usb 4-1: SerialNumber: syz [ 692.137788][ T5929] usb 4-1: config 0 descriptor?? [ 692.208125][ T5928] uclogic 0003:256C:006D.003E: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 692.246486][T12968] overlayfs: missing 'lowerdir' [ 692.281833][ T5928] usb 3-1: USB disconnect, device number 25 [ 692.471649][T12969] fido_id[12969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 692.578230][T12973] program syz.1.1952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.022321][ T5929] usb 4-1: Firmware: major: 20, minor: 217, hardware type: UNKNOWN (255) [ 693.338754][T12955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.368183][T12955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.994879][ T5929] usb 4-1: failed to fetch extended address, random address set [ 694.015108][ T5929] usb 4-1: atusb_probe: initialization failed, error = -524 [ 694.082395][ T5929] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 694.108229][ T5929] usb 4-1: USB disconnect, device number 25 [ 694.510569][ T93] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 694.701110][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.729472][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.777469][ T93] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 694.838091][ T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.035503][ T93] usb 3-1: config 0 descriptor?? [ 695.327774][T12992] program syz.1.1957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.518997][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.530477][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 695.532803][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.692800][T12998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.840273][ C0] hrtimer: interrupt took 40312 ns [ 696.385178][T13004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.944070][ T93] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input43 [ 697.061564][T13009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.311494][ T93] uclogic 0003:256C:006D.003F: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 697.397192][T13008] siw: device registration error -23 [ 697.455493][ T93] usb 3-1: USB disconnect, device number 26 [ 697.942863][T13012] fido_id[13012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 698.840458][ T93] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 699.342404][ T5928] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 699.358151][ T93] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.379430][ T93] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.390997][ T93] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 699.470518][ T93] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.525079][ T5928] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 699.758652][ T5928] usb 5-1: config 0 has no interface number 0 [ 699.767450][ T93] usb 1-1: config 0 descriptor?? [ 700.018184][ T5928] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 700.028904][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.158560][ T5928] usb 5-1: Product: syz [ 700.169402][ T5928] usb 5-1: Manufacturer: syz [ 700.183239][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.200522][ T5928] usb 5-1: SerialNumber: syz [ 700.221427][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.279788][ T5928] usb 5-1: config 0 descriptor?? [ 700.535755][T13047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.010198][ T5928] usb 5-1: Firmware: major: 20, minor: 217, hardware type: UNKNOWN (255) [ 702.232830][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.284925][ T93] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0040/input/input44 [ 702.289520][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.332325][ T5928] usb 5-1: failed to fetch extended address, random address set [ 702.369005][ T5928] usb 5-1: atusb_probe: initialization failed, error = -524 [ 702.383894][ T5928] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 702.412945][ T5928] usb 5-1: USB disconnect, device number 29 [ 702.425033][ T93] uclogic 0003:256C:006D.0040: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 702.573506][ T93] usb 1-1: USB disconnect, device number 31 [ 702.939162][T13069] fido_id[13069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 703.356331][T13077] program syz.4.1980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.689014][T13079] siw: device registration error -23 [ 706.426257][T13110] bridge0: port 3(syz_tun) entered blocking state [ 706.447050][T13110] bridge0: port 3(syz_tun) entered disabled state [ 706.460741][T13110] syz_tun: entered allmulticast mode [ 706.478125][T13110] syz_tun: entered promiscuous mode [ 706.485602][T13116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.498995][T13110] bridge0: port 3(syz_tun) entered blocking state [ 706.505880][T13110] bridge0: port 3(syz_tun) entered forwarding state [ 706.556110][T13119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.611750][ T30] audit: type=1400 audit(1750411007.938:470): avc: denied { bind } for pid=13118 comm="syz.4.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 706.633437][T13119] bond0: (slave rose0): Enslaving as an active interface with an up link [ 706.658110][ T30] audit: type=1400 audit(1750411007.958:471): avc: denied { connect } for pid=13118 comm="syz.4.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 706.709139][ T30] audit: type=1400 audit(1750411007.958:472): avc: denied { search } for pid=13120 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.767748][ T30] audit: type=1400 audit(1750411007.958:473): avc: denied { search } for pid=13120 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.790569][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.799390][ T30] audit: type=1400 audit(1750411007.958:474): avc: denied { search } for pid=13120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.822574][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.906128][ T30] audit: type=1400 audit(1750411007.958:475): avc: denied { search } for pid=13120 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.929948][ T30] audit: type=1400 audit(1750411007.958:476): avc: denied { read open } for pid=13124 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.987547][T13136] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 707.031489][ T77] Bluetooth: hci5: Frame reassembly failed (-84) [ 707.080679][ T30] audit: type=1400 audit(1750411007.958:477): avc: denied { getattr } for pid=13124 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.106022][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.135150][ T30] audit: type=1400 audit(1750411007.958:478): avc: denied { getattr } for pid=13124 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 707.205834][ T30] audit: type=1400 audit(1750411008.128:479): avc: denied { read } for pid=13128 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 707.207759][T13144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.375491][T13144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.402388][T13144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.582204][ T93] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 707.603774][T13161] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.611193][T13161] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.744940][ T93] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.745749][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.762915][ T93] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 707.771458][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.786886][ T93] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.801063][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.819519][ T93] usb 5-1: Product: syz [ 707.828236][ T93] usb 5-1: Manufacturer: syz [ 707.841151][ T93] usb 5-1: SerialNumber: syz [ 707.875858][T13161] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.890443][T13161] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.900149][T13161] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.909654][T13161] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.072419][T13178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.072564][T13153] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 708.158149][T13178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.181682][T13178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.239822][T13187] lo speed is unknown, defaulting to 1000 [ 708.383624][T13181] lec:lec_atm_close: lec0: Shut down! [ 708.704837][T13153] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 708.916619][ T93] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 708.930041][ T93] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 708.961518][ T93] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 709.050812][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 709.057525][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 709.130485][ T93] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 709.160014][ T93] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 709.257151][ T93] wwan wwan0: port wwan0mbim0 attached [ 709.353175][ T93] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 709.469642][ T5929] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 709.545946][T13235] syz_tun: entered allmulticast mode [ 709.555883][T13229] syz_tun: left allmulticast mode [ 709.584658][T13234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.648869][T13234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.660747][T13234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.674278][T13234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.722633][ T5929] usb 3-1: config 0 has no interfaces? [ 709.745310][ T5929] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 709.779065][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.894251][ T5929] usb 3-1: Product: syz [ 709.920341][ T5929] usb 3-1: Manufacturer: syz [ 709.933115][ T5929] usb 3-1: SerialNumber: syz [ 709.953177][ T5929] usb 3-1: config 0 descriptor?? [ 710.044081][T13252] usb 5-1: USB disconnect, device number 30 [ 710.052450][T13252] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 710.093424][ T5483] lec:lec_start_xmit: lec0:No lecd attached [ 710.122980][T13252] wwan wwan0: port wwan0mbim0 disconnected [ 710.184742][T13227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.194407][T13227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.259931][T13255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.416193][T13267] netlink: 'syz.4.2024': attribute type 13 has an invalid length. [ 711.468058][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.475327][T13267] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.591816][T13267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.606392][T13267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.735503][T13267] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.745022][T13267] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.754268][T13267] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.036912][T13267] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.189241][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 712.189258][ T30] audit: type=1400 audit(1750411013.188:490): avc: denied { getopt } for pid=13268 comm="syz.0.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 712.263019][ T48] usb 3-1: USB disconnect, device number 27 [ 712.383230][ T30] audit: type=1400 audit(1750411013.708:491): avc: denied { getopt } for pid=13280 comm="syz.1.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 712.557852][T13287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2028'. [ 712.575290][ T9607] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 712.855378][T13295] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 712.899748][ T30] audit: type=1400 audit(1750411014.208:492): avc: denied { ioctl } for pid=13294 comm="syz.1.2032" path="socket:[52671]" dev="sockfs" ino=52671 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 713.016875][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 713.138017][T13298] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 713.159989][T13298] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 713.447296][ T30] audit: type=1400 audit(1750411014.758:493): avc: denied { read } for pid=13292 comm="syz.4.2031" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 713.481933][ T30] audit: type=1400 audit(1750411014.758:494): avc: denied { open } for pid=13292 comm="syz.4.2031" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 714.218696][ T30] audit: type=1400 audit(1750411015.538:495): avc: denied { create } for pid=13312 comm="syz.1.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 714.314165][T13320] delete_channel: no stack [ 714.386751][T13319] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.394030][T13319] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.659603][ T5928] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 714.688854][T13319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.696608][ T5928] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 714.780957][T13319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.893611][T13319] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.916798][T13319] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.935772][T13319] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.950388][T13319] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.034863][T13322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2042'. [ 715.227546][T13337] lo speed is unknown, defaulting to 1000 [ 715.355656][ T30] audit: type=1400 audit(1750411016.678:496): avc: denied { write } for pid=13331 comm="syz.0.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 715.858118][T13331] lec:lec_atm_close: lec0: Shut down! [ 715.947990][ T30] audit: type=1400 audit(1750411017.268:497): avc: denied { read write } for pid=13351 comm="syz.2.2050" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 716.044005][ T30] audit: type=1400 audit(1750411017.268:498): avc: denied { ioctl open } for pid=13351 comm="syz.2.2050" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 716.099919][T13359] syz.1.2051 uses obsolete (PF_INET,SOCK_PACKET) [ 716.486424][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2056'. [ 717.311204][ T30] audit: type=1400 audit(1750411018.628:499): avc: denied { create } for pid=13383 comm="syz.2.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 717.549102][T13391] xt_hashlimit: max too large, truncated to 1048576 [ 718.611531][T13402] capability: warning: `syz.1.2067' uses deprecated v2 capabilities in a way that may be insecure [ 719.928790][ T93] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 719.946265][ T93] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 720.060354][ T5928] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 720.245357][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 720.286385][ T5928] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 720.303939][ T5928] usb 1-1: config 0 has no interface number 1 [ 720.310076][ T5928] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 720.328871][ T5928] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 720.343416][ T5928] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 720.356167][ T5928] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 720.370015][ T5928] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 720.386171][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 720.399724][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.417225][ T5928] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 720.426730][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.437590][ T5928] usb 1-1: Product: syz [ 720.442038][ T5928] usb 1-1: Manufacturer: syz [ 720.446761][ T5928] usb 1-1: SerialNumber: syz [ 720.457697][ T5928] usb 1-1: config 0 descriptor?? [ 720.464086][T13423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 720.478758][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 720.493337][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 720.501613][ T5928] usb 1-1: invalid MIDI in EP 0 [ 720.542593][ T5928] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 720.742769][ T5928] usb 1-1: USB disconnect, device number 32 [ 721.183360][T13400] Set syz1 is full, maxelem 65536 reached [ 721.370269][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 721.378652][ C0] lec:lec_tx_timeout: lec0 [ 721.383527][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 721.756154][T13464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.147655][T13470] lo speed is unknown, defaulting to 1000 [ 722.664956][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 723.179772][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 723.194759][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 723.205529][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 723.214694][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 723.222399][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 723.265701][ T30] audit: type=1400 audit(1750411024.588:500): avc: denied { mounton } for pid=13504 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 723.354650][T13504] lo speed is unknown, defaulting to 1000 [ 723.935337][T13504] chnl_net:caif_netlink_parms(): no params data found [ 724.721687][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.754833][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.780933][T13504] bridge_slave_0: entered allmulticast mode [ 724.807293][T13504] bridge_slave_0: entered promiscuous mode [ 724.854237][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.886005][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.934124][T13504] bridge_slave_1: entered allmulticast mode [ 724.966805][T13504] bridge_slave_1: entered promiscuous mode [ 725.290835][ T5830] Bluetooth: hci5: command tx timeout [ 725.343495][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.403062][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.570799][T13504] team0: Port device team_slave_0 added [ 725.590159][T13504] team0: Port device team_slave_1 added [ 725.713342][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.733204][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.785892][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.812143][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.836989][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.862985][ T5884] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 725.890374][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.981766][ T30] audit: type=1400 audit(1750411027.288:501): avc: denied { write } for pid=13547 comm="syz.0.2103" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 726.022805][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 726.032185][ T5884] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 726.042972][ T5884] usb 3-1: config 0 has no interface number 0 [ 726.049079][ T5884] usb 3-1: config 0 interface 184 has no altsetting 0 [ 726.074090][ T5884] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 726.085778][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.102610][ T5884] usb 3-1: Product: syz [ 726.106950][ T5884] usb 3-1: Manufacturer: syz [ 726.123401][ T5884] usb 3-1: SerialNumber: syz [ 726.136896][T13504] hsr_slave_0: entered promiscuous mode [ 726.148780][ T5884] usb 3-1: config 0 descriptor?? [ 726.160735][T13504] hsr_slave_1: entered promiscuous mode [ 726.166358][ T5884] smsc75xx v1.0.0 [ 726.171913][ T5884] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 726.190987][T13504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.205584][T13504] Cannot create hsr debugfs directory [ 726.235654][ T5884] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 726.349521][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'. [ 726.420282][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 726.428318][ C0] lec:lec_tx_timeout: lec0 [ 726.433081][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 726.885921][T13504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 726.897344][T13504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 726.913336][T13504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 726.924570][T13504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 727.008635][T13569] xt_CT: No such helper "snmp" [ 727.020135][T13504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.051792][T13504] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.068832][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.075998][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.097066][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.104172][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.243257][T13504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.376051][ T5830] Bluetooth: hci5: command tx timeout [ 727.409381][T13504] veth0_vlan: entered promiscuous mode [ 727.418926][T13504] veth1_vlan: entered promiscuous mode [ 727.442208][T13504] veth0_macvtap: entered promiscuous mode [ 727.450857][T13504] veth1_macvtap: entered promiscuous mode [ 727.465825][T13504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.477834][T13504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.489857][T13504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.499014][T13504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.508104][T13504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.517124][T13504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.575480][ T9624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.583708][ T9624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.616073][ T9624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.623998][ T9624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.642497][ T30] audit: type=1400 audit(1750411028.968:502): avc: denied { mount } for pid=13504 comm="syz-executor" name="/" dev="gadgetfs" ino=5826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 728.047435][T13596] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.2109'. [ 728.656351][ T5884] usb 3-1: USB disconnect, device number 28 [ 729.003422][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 729.155661][T13615] IPVS: Error connecting to the multicast addr [ 729.167423][T13615] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 729.178009][T13615] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 729.351134][ T30] audit: type=1400 audit(1750411030.658:503): avc: denied { relabelfrom } for pid=13612 comm="syz.0.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 729.401613][ T30] audit: type=1400 audit(1750411030.658:504): avc: denied { relabelto } for pid=13612 comm="syz.0.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 729.451033][ T5830] Bluetooth: hci5: command tx timeout [ 730.447440][T13630] lo speed is unknown, defaulting to 1000 [ 730.912279][T13640] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 731.246240][ T30] audit: type=1400 audit(1750411032.568:505): avc: denied { map } for pid=13643 comm="syz.2.2124" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 731.276929][ T30] audit: type=1400 audit(1750411032.598:506): avc: denied { call } for pid=13643 comm="syz.2.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 731.440293][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 731.448345][ C0] lec:lec_tx_timeout: lec0 [ 731.453094][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 731.558417][ T5830] Bluetooth: hci5: command tx timeout [ 731.638789][ T30] audit: type=1400 audit(1750411032.958:507): avc: denied { ioctl } for pid=13659 comm="syz.4.2131" path="socket:[55404]" dev="sockfs" ino=55404 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 731.797835][T13662] lo speed is unknown, defaulting to 1000 [ 731.871685][T13659] lec:lec_atm_close: lec0: Shut down! [ 731.937056][T13671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'. [ 732.077169][T13675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.157935][T13675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.195866][T13675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.673772][ T30] audit: type=1400 audit(1750411033.908:508): avc: denied { create } for pid=13684 comm="syz.5.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 733.033635][ T30] audit: type=1400 audit(1750411034.338:509): avc: denied { read write } for pid=13695 comm="syz.0.2143" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 733.066261][ T30] audit: type=1400 audit(1750411034.338:510): avc: denied { open } for pid=13695 comm="syz.0.2143" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 733.129314][T13703] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 733.138435][T13703] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 733.518495][ T30] audit: type=1400 audit(1750411034.838:511): avc: denied { ioctl } for pid=13695 comm="syz.0.2143" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 734.375406][T13726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.437052][T13726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.453941][T13726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.495574][ T30] audit: type=1326 audit(1750411035.818:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.5.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60738e929 code=0x7fc00000 [ 736.030832][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.049251][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.064051][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 736.111334][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 736.138961][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 736.262666][T13770] lo speed is unknown, defaulting to 1000 [ 736.759822][T13770] chnl_net:caif_netlink_parms(): no params data found [ 736.891578][T13795] lo speed is unknown, defaulting to 1000 [ 736.913875][ T30] audit: type=1400 audit(1750411038.238:513): avc: denied { write } for pid=13787 comm="syz.5.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 736.986483][ T30] audit: type=1400 audit(1750411038.288:514): avc: denied { cmd } for pid=13803 comm="syz.4.2173" path="socket:[55000]" dev="sockfs" ino=55000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 737.062775][T13770] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.070674][T13770] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.080997][T13770] bridge_slave_0: entered allmulticast mode [ 737.092385][T13787] lec:lec_atm_close: lec0: Shut down! [ 737.221028][T13770] bridge_slave_0: entered promiscuous mode [ 737.272824][ T30] audit: type=1400 audit(1750411038.558:515): avc: denied { create } for pid=13802 comm="syz.0.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 737.370718][T13770] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.377863][T13770] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.450461][T13770] bridge_slave_1: entered allmulticast mode [ 737.454443][ T30] audit: type=1400 audit(1750411038.778:516): avc: denied { mount } for pid=13802 comm="syz.0.2174" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 737.463377][T13770] bridge_slave_1: entered promiscuous mode [ 737.648056][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2176'. [ 738.107917][T13770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.174138][ T5830] Bluetooth: hci6: command tx timeout [ 738.219436][T13770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.493914][T13831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.577771][T13770] team0: Port device team_slave_0 added [ 738.599553][T13770] team0: Port device team_slave_1 added [ 738.712476][T13770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.729757][T13770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.761236][ T30] audit: type=1800 audit(1750411040.088:517): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2182" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 738.797065][T13770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.813482][T13770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.821080][T13770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.846958][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.903988][T13770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.051349][T13770] hsr_slave_0: entered promiscuous mode [ 739.057917][T13770] hsr_slave_1: entered promiscuous mode [ 739.067983][T13770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.075867][T13770] Cannot create hsr debugfs directory [ 739.473484][T13868] lo speed is unknown, defaulting to 1000 [ 739.689626][T13770] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 739.738703][T13770] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 739.804024][T13770] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 739.881084][T13770] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 740.250356][ T51] Bluetooth: hci6: command tx timeout [ 740.277996][T13770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.395626][T13770] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.462256][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.469531][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.541306][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.548452][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.981065][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'. [ 741.088911][T13770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.490211][T13939] lo speed is unknown, defaulting to 1000 [ 741.502769][ T30] audit: type=1400 audit(1750411042.828:518): avc: denied { bind } for pid=13937 comm="syz.0.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 741.583559][ T30] audit: type=1400 audit(1750411042.828:519): avc: denied { setopt } for pid=13937 comm="syz.0.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 741.827961][ T30] audit: type=1400 audit(1750411043.148:520): avc: denied { append } for pid=13937 comm="syz.0.2219" name="qat_adf_ctl" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 741.858625][T13952] lo speed is unknown, defaulting to 1000 [ 741.944266][T13770] veth0_vlan: entered promiscuous mode [ 741.986621][T13770] veth1_vlan: entered promiscuous mode [ 742.127024][T13770] veth0_macvtap: entered promiscuous mode [ 742.157250][T13770] veth1_macvtap: entered promiscuous mode [ 742.330924][ T51] Bluetooth: hci6: command 0x040f tx timeout [ 742.342511][T13770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.360092][T13770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.408221][T13770] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.417011][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 742.417058][ C0] lec:lec_tx_timeout: lec0 [ 742.425380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 742.669178][T13770] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.767801][ T93] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 742.784798][T13770] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.826611][T13770] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.951321][ T93] usb 6-1: device descriptor read/64, error -71 [ 743.280285][ T93] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 743.346023][ T9622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.370640][ T9622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.407375][T13988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2231'. [ 743.416480][ T93] usb 6-1: device descriptor read/64, error -71 [ 743.436453][ T9618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.459325][ T9618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.545228][ T93] usb usb6-port1: attempt power cycle [ 743.903721][ T93] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 743.977712][T14001] lo speed is unknown, defaulting to 1000 [ 744.070879][ T93] usb 6-1: device descriptor read/8, error -71 [ 744.310654][ T93] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 744.374969][ T93] usb 6-1: device descriptor read/8, error -71 [ 744.410548][ T5830] Bluetooth: hci6: command 0x040f tx timeout [ 744.490647][ T93] usb usb6-port1: unable to enumerate USB device [ 744.497818][ T30] audit: type=1326 audit(1750411045.818:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.6.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8158e929 code=0x7fc00000 [ 744.521197][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.697129][T14017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.744950][T14017] audit: audit_backlog=65 > audit_backlog_limit=64 [ 744.755519][T14017] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 744.768438][T14017] audit: backlog limit exceeded [ 744.797908][ T30] audit: type=1326 audit(1750411045.818:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.6.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7faf8158e929 code=0x7fc00000 [ 744.821302][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.885212][ T30] audit: type=1326 audit(1750411045.818:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.6.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8158e929 code=0x7fc00000 [ 744.929571][ T30] audit: type=1326 audit(1750411045.818:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.6.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8158e929 code=0x7fc00000 [ 744.952980][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.772755][T14040] lo speed is unknown, defaulting to 1000 [ 746.345871][T14052] TCP: TCP_TX_DELAY enabled [ 746.499404][ T5830] Bluetooth: hci6: command 0x040f tx timeout [ 746.739830][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.746371][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.924004][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 746.924016][ T30] audit: type=1400 audit(1750411048.248:592): avc: denied { map } for pid=14066 comm="syz.4.2254" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 746.954148][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.430264][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 747.438305][ C0] lec:lec_tx_timeout: lec0 [ 747.442921][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.616490][T14079] lo speed is unknown, defaulting to 1000 [ 748.488854][T14105] lo speed is unknown, defaulting to 1000 [ 750.097318][ T5884] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 750.133173][ T5884] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 750.164015][T14134] lo speed is unknown, defaulting to 1000 [ 750.497123][T14143] netlink: 'syz.4.2275': attribute type 83 has an invalid length. [ 751.470152][T14165] lo speed is unknown, defaulting to 1000 [ 751.567917][T14155] delete_channel: no stack [ 752.232977][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2285'. [ 752.450419][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 752.458491][ C0] lec:lec_tx_timeout: lec0 [ 752.463130][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 752.541862][T10748] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 752.573682][T10748] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 752.625339][T14192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.724683][T14192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.846334][ T9624] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 754.562185][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888078746800: rx timeout, send abort [ 754.587473][ T30] audit: type=1400 audit(1750411055.908:593): avc: denied { read } for pid=5170 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 754.743801][ T30] audit: type=1400 audit(1750411055.908:594): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.828337][ T30] audit: type=1400 audit(1750411055.908:595): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.893268][ T30] audit: type=1400 audit(1750411055.908:596): avc: denied { add_name } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.926875][ T30] audit: type=1400 audit(1750411055.908:597): avc: denied { create } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 754.966686][ T30] audit: type=1400 audit(1750411055.908:598): avc: denied { append open } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 754.993897][ T30] audit: type=1400 audit(1750411055.908:599): avc: denied { getattr } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 755.047041][ T30] audit: type=1400 audit(1750411056.188:600): avc: denied { module_request } for pid=14228 comm="syz.4.2303" kmod="bt-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 755.062296][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888078745000: rx timeout, send abort [ 755.077812][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888078746800: abort rx timeout. Force session deactivation [ 755.245834][T10748] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 755.283201][T10748] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 755.577029][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888078745000: abort rx timeout. Force session deactivation [ 756.178998][ T30] audit: type=1326 audit(1750411057.458:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 756.403606][T14257] delete_channel: no stack [ 757.470243][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 757.478301][ C0] lec:lec_tx_timeout: lec0 [ 757.482906][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 757.808929][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803244e000: rx timeout, send abort [ 758.309033][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880265d5c00: rx timeout, send abort [ 758.320312][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803244e000: abort rx timeout. Force session deactivation [ 758.435159][T14305] loop4: detected capacity change from 0 to 63 [ 758.817375][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880265d5c00: abort rx timeout. Force session deactivation [ 759.928422][ T30] audit: type=1400 audit(1750411061.248:602): avc: denied { connect } for pid=14329 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 761.996119][T14223] Set syz1 is full, maxelem 65536 reached [ 762.196024][T14388] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2355'. [ 762.212836][T14389] Cannot find add_set index 0 as target [ 762.326309][T14389] libceph: resolve '4..' (ret=-3): failed [ 762.490248][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 762.498335][ C0] lec:lec_tx_timeout: lec0 [ 762.502884][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 763.164076][T14408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.265667][T14408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.331123][ T30] audit: type=1400 audit(1750411064.608:603): avc: denied { create } for pid=14412 comm="syz.0.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 763.395677][ T30] audit: type=1400 audit(1750411064.608:604): avc: denied { ioctl } for pid=14412 comm="syz.0.2364" path="socket:[59009]" dev="sockfs" ino=59009 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 764.063075][T14426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2368'. [ 764.477218][T14431] lo speed is unknown, defaulting to 1000 [ 764.870612][ T5884] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 765.070295][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 765.103872][T14457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.114943][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 765.138191][ T5884] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 765.163214][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.195688][ T5884] usb 1-1: Product: syz [ 765.237824][ T5884] usb 1-1: Manufacturer: syz [ 765.248880][ T5884] usb 1-1: SerialNumber: syz [ 765.262570][ T5884] usb 1-1: config 0 descriptor?? [ 765.269289][ T5884] hub 1-1:0.0: bad descriptor, ignoring hub [ 765.275509][ T5884] hub 1-1:0.0: probe with driver hub failed with error -5 [ 765.297001][ T5884] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input46 [ 765.306350][ T5937] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 765.519293][ T5937] usb 6-1: config 0 has no interfaces? [ 765.600560][ T5937] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 765.639405][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.773197][ T5937] usb 6-1: Product: syz [ 765.830012][ T5937] usb 6-1: Manufacturer: syz [ 765.877006][ T5937] usb 6-1: SerialNumber: syz [ 765.888526][ T5937] usb 6-1: config 0 descriptor?? [ 766.154727][ T30] audit: type=1800 audit(1750411067.468:605): pid=14456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2377" name="file0" dev="tmpfs" ino=237 res=0 errno=0 [ 766.255831][T14471] lo speed is unknown, defaulting to 1000 [ 767.510344][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 767.518382][ C0] lec:lec_tx_timeout: lec0 [ 767.524135][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 767.810511][T14504] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 768.478740][ T5928] usb 6-1: USB disconnect, device number 6 [ 769.489313][ T93] usb 1-1: USB disconnect, device number 33 [ 770.744245][ T30] audit: type=1326 audit(1750411072.068:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 770.850406][ T30] audit: type=1326 audit(1750411072.068:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 770.986871][T14584] lo speed is unknown, defaulting to 1000 [ 771.023128][ T30] audit: type=1326 audit(1750411072.068:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 771.370788][ T30] audit: type=1326 audit(1750411072.068:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 771.460483][ T30] audit: type=1326 audit(1750411072.068:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 771.568013][T14592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.730417][ T30] audit: type=1326 audit(1750411072.068:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 771.787616][ T30] audit: type=1326 audit(1750411072.068:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 771.987295][ T30] audit: type=1326 audit(1750411072.098:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 772.137751][ T30] audit: type=1326 audit(1750411072.098:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 772.219448][ T30] audit: type=1326 audit(1750411072.098:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 772.283382][ T30] audit: type=1326 audit(1750411072.098:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 772.344868][ T30] audit: type=1326 audit(1750411072.098:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 772.372029][ T30] audit: type=1326 audit(1750411072.098:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.2.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a78e929 code=0x7fc00000 [ 772.530292][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 772.538330][ C0] lec:lec_tx_timeout: lec0 [ 772.543097][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 773.259297][T14639] lo speed is unknown, defaulting to 1000 [ 775.107531][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2445'. [ 775.823716][T14719] libceph: resolve '4..' (ret=-3): failed [ 776.037047][T14738] lo speed is unknown, defaulting to 1000 [ 776.538647][T14761] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2462'. [ 776.691406][ T5929] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 776.738592][ T5929] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 777.550252][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 777.558306][ C0] lec:lec_tx_timeout: lec0 [ 777.570284][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 777.639102][T14800] lo speed is unknown, defaulting to 1000 [ 778.123492][ T93] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 778.329419][ T93] usb 7-1: Using ep0 maxpacket: 8 [ 778.343426][ T93] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 778.360345][ T93] usb 7-1: config 0 has no interface number 0 [ 778.484975][ T93] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.554985][ T93] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 778.667778][ T93] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 778.730451][ T93] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 778.750255][ T93] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.817431][ T93] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 778.840420][ T93] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.868754][ T93] usb 7-1: Product: syz [ 778.883617][ T93] usb 7-1: Manufacturer: syz [ 778.888248][ T93] usb 7-1: SerialNumber: syz [ 778.955006][ T93] usb 7-1: config 0 descriptor?? [ 778.981400][T14807] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 778.997883][ T93] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 779.208808][ T5937] usb 7-1: USB disconnect, device number 2 [ 780.990309][ T5884] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 781.140314][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 781.147534][ T5884] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 781.170331][ T5884] usb 7-1: config 0 has no interface number 0 [ 781.176465][ T5884] usb 7-1: config 0 interface 184 has no altsetting 0 [ 781.199396][ T5884] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 781.234718][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.253579][ T5884] usb 7-1: Product: syz [ 781.258208][ T5884] usb 7-1: Manufacturer: syz [ 781.263197][ T5884] usb 7-1: SerialNumber: syz [ 781.271037][ T5884] usb 7-1: config 0 descriptor?? [ 781.277626][ T5884] smsc75xx v1.0.0 [ 781.285386][ T5884] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 781.301060][ T5884] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 782.000443][ T93] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 782.590349][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 782.598420][ C0] lec:lec_tx_timeout: lec0 [ 782.603061][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 783.541379][T14950] xt_hashlimit: size too large, truncated to 1048576 [ 783.769547][ T5937] usb 7-1: USB disconnect, device number 3 [ 784.556731][T14971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2521'. [ 784.997860][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 784.997876][ T30] audit: type=1400 audit(1750411086.278:660): avc: denied { read } for pid=14974 comm="syz.4.2522" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 785.119308][ T30] audit: type=1400 audit(1750411086.278:661): avc: denied { open } for pid=14974 comm="syz.4.2522" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 785.660139][T14999] netlink: 'syz.2.2530': attribute type 4 has an invalid length. [ 785.676826][T14997] binder: 14996:14997 ioctl c0306201 0 returned -14 [ 785.932843][ T5937] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 785.951832][ T5937] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.143460][T15013] delete_channel: no stack [ 787.387822][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2535'. [ 788.970227][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6370 ms [ 788.978252][ C0] lec:lec_tx_timeout: lec0 [ 788.983012][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 789.317320][T15067] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 789.351120][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 789.926287][ T30] audit: type=1326 audit(1750411091.248:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.5.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60738e929 code=0x7ffc0000 [ 789.949679][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.142254][T15085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.149100][T15085] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 790.317745][T15085] audit: backlog limit exceeded [ 790.320372][ T30] audit: type=1326 audit(1750411091.248:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.5.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60732ab19 code=0x7ffc0000 [ 790.356814][T15090] capability: warning: `syz.4.2557' uses 32-bit capabilities (legacy support in use) [ 790.411622][T15083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.445405][ T30] audit: type=1326 audit(1750411091.248:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.5.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60732ab19 code=0x7ffc0000 [ 790.468720][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.692312][ T30] audit: type=1326 audit(1750411091.248:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.5.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60738e929 code=0x7ffc0000 [ 790.715703][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.854782][ T30] audit: type=1326 audit(1750411091.408:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.5.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60732ab19 code=0x7ffc0000 [ 791.160320][ T30] audit: type=1326 audit(1750411091.408:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.5.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60732ab19 code=0x7ffc0000 [ 791.183628][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.433204][ T30] audit: type=1326 audit(1750411091.408:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.5.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60732ab19 code=0x7ffc0000 [ 791.461587][ T30] audit: type=1326 audit(1750411091.408:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15078 comm="syz.5.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60732ab19 code=0x7ffc0000 [ 791.484903][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.518649][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2562'. [ 792.179749][T15123] fuse: Bad value for 'fd' [ 792.395443][T15126] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 794.449058][ T5884] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 794.620363][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 794.626945][ T5884] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 794.650797][ T5884] usb 3-1: config 0 has no interface number 1 [ 794.659985][ T5884] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 794.673989][ T5884] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 794.730273][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 794.738313][ C0] lec:lec_tx_timeout: lec0 [ 794.743153][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 794.810539][ T5884] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 794.822011][ T5884] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 794.832347][ T5884] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.887933][ T5884] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 794.897347][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.905999][ T5884] usb 3-1: Product: syz [ 794.935898][T15172] Cannot find add_set index 0 as target [ 795.003031][T15172] libceph: resolve '4..' (ret=-3): failed [ 795.023437][T15174] netlink: 'syz.0.2577': attribute type 30 has an invalid length. [ 795.190479][ T5884] usb 3-1: Manufacturer: syz [ 795.195311][ T5884] usb 3-1: SerialNumber: syz [ 795.203259][ T5884] usb 3-1: config 0 descriptor?? [ 795.208949][T15153] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 795.256826][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 795.267414][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 795.305522][ T5884] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 795.466820][ T5928] usb 3-1: USB disconnect, device number 29 [ 795.577129][ T30] kauditd_printk_skb: 306 callbacks suppressed [ 795.577145][ T30] audit: type=1400 audit(1750411096.898:976): avc: denied { map } for pid=15179 comm="syz.5.2581" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 795.607168][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.690108][T15184] fuse: Bad value for 'fd' [ 795.701257][ T30] audit: type=1400 audit(1750411096.898:977): avc: denied { execute } for pid=15179 comm="syz.5.2581" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 795.725407][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.158375][T15201] netlink: 'syz.2.2589': attribute type 83 has an invalid length. [ 796.828624][T15213] loop4: detected capacity change from 0 to 63 [ 796.856572][T13431] buffer_io_error: 23 callbacks suppressed [ 796.856589][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 796.923659][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 796.933655][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 796.955107][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 796.976341][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 798.223294][T15239] xt_hashlimit: size too large, truncated to 1048576 [ 798.494377][T15245] loop4: detected capacity change from 0 to 63 [ 798.546816][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 798.591323][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 798.630499][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 798.667328][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 798.698107][T13431] Buffer I/O error on dev loop4, logical block 0, async page read [ 800.282470][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2618'. [ 800.490268][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 800.498293][ C0] lec:lec_tx_timeout: lec0 [ 800.502835][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 800.536218][T15286] loop4: detected capacity change from 0 to 63 [ 801.174952][T15301] input: syz0 as /devices/virtual/input/input49 [ 802.202435][T15318] lo speed is unknown, defaulting to 1000 [ 803.441470][ T5884] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 803.670270][ T5884] usb 3-1: device descriptor read/64, error -71 [ 803.960305][ T5884] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 804.121000][ T5884] usb 3-1: device descriptor read/64, error -71 [ 804.230613][ T5884] usb usb3-port1: attempt power cycle [ 804.619707][ T5884] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 804.641596][ T5884] usb 3-1: device descriptor read/8, error -71 [ 804.711686][T15369] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2644'. [ 804.910266][ T5884] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 804.980333][ T5884] usb 3-1: device descriptor read/8, error -71 [ 805.090785][ T5884] usb usb3-port1: unable to enumerate USB device [ 805.497446][T15380] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2647'. [ 805.510235][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 805.518269][ C0] lec:lec_tx_timeout: lec0 [ 805.522896][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 806.825864][T15403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.634101][T15414] netlink: 'syz.0.2658': attribute type 10 has an invalid length. [ 807.645093][T15414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2658'. [ 807.658384][T15414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.668923][T15414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.677932][T15414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.686995][T15414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.742056][T15414] team0: Device geneve0 failed to register rx_handler [ 807.785572][T15414] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.795893][T15414] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.806429][T15414] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.816742][T15414] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.835514][T15414] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 808.173528][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.185683][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.776932][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 809.222905][ T30] audit: type=1400 audit(1750411110.548:978): avc: denied { ioctl } for pid=15439 comm="syz.2.2667" path="socket:[63507]" dev="sockfs" ino=63507 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 809.241360][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 809.261279][T15448] input: syz0 as /devices/virtual/input/input50 [ 809.302579][T15448] Cannot find del_set index 1 as target [ 810.530320][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 810.538379][ C0] lec:lec_tx_timeout: lec0 [ 810.542960][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 810.714949][T15467] input: syz0 as /devices/virtual/input/input51 [ 813.207011][T15515] input: syz0 as /devices/virtual/input/input52 [ 813.544820][ T5884] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 813.721711][ T5884] usb 6-1: config 0 has no interfaces? [ 813.730271][ T5884] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 813.739492][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.753769][ T5884] usb 6-1: Product: syz [ 813.757939][ T5884] usb 6-1: Manufacturer: syz [ 813.770431][ T5884] usb 6-1: SerialNumber: syz [ 813.782912][T15527] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8) [ 813.808135][ T5884] usb 6-1: config 0 descriptor?? [ 815.305874][T15559] netlink: 'syz.4.2703': attribute type 10 has an invalid length. [ 815.325343][T15559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2703'. [ 815.340779][T15559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.351621][T15559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.360829][T15559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.369622][T15559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.384359][T15559] team0: Port device geneve0 added [ 815.550259][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 815.558312][ C0] lec:lec_tx_timeout: lec0 [ 815.562968][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 815.988620][ T5929] usb 6-1: USB disconnect, device number 7 [ 816.712546][ T5928] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 817.300421][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 817.313077][ T5928] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 817.340458][ T5928] usb 7-1: config 0 has no interface number 1 [ 817.364980][ T5928] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 817.399678][ T5928] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 817.435384][ T5928] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 817.447564][ T5928] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 817.467921][ T5928] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.501623][ T5928] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 817.511117][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.530797][ T5928] usb 7-1: Product: syz [ 817.538754][ T5928] usb 7-1: Manufacturer: syz [ 817.552724][ T5928] usb 7-1: SerialNumber: syz [ 817.584724][ T5928] usb 7-1: config 0 descriptor?? [ 817.592155][T15581] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 817.604720][ T5928] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.620575][ T5928] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 817.686055][ T5928] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.874806][ T5928] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 817.898341][T13431] udevd[13431]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.978514][ T5928] usb 7-1: USB disconnect, device number 4 [ 818.759340][ T5928] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 818.774220][ T5928] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 819.327114][ T5937] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 819.415748][T15628] Cannot find add_set index 0 as target [ 819.424245][T15628] libceph: resolve '4..' (ret=-3): failed [ 819.523943][ T5937] usb 3-1: config 0 has no interfaces? [ 819.546994][ T5937] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 819.556977][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.579054][ T5937] usb 3-1: Product: syz [ 819.594459][ T5937] usb 3-1: Manufacturer: syz [ 819.615487][ T5937] usb 3-1: SerialNumber: syz [ 819.641864][ T5937] usb 3-1: config 0 descriptor?? [ 819.919197][T15619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.929126][T15619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.580441][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 820.588500][ C0] lec:lec_tx_timeout: lec0 [ 820.593260][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 822.424604][ T918] usb 3-1: USB disconnect, device number 34 [ 822.937660][ T5929] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 823.012724][ T5929] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 823.053791][T15697] binder: 15677:15697 ioctl 4018620d 0 returned -22 [ 823.686018][ T30] audit: type=1326 audit(1750411124.998:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15690 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc0d8e929 code=0x7fc00000 [ 824.021685][T15715] netlink: 'syz.2.2754': attribute type 10 has an invalid length. [ 824.032479][T15715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2754'. [ 824.043256][T15715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.053575][T15715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.063091][T15715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.072480][T15715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.088493][T15715] team0: Port device geneve0 added [ 824.739133][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802a67b000: rx timeout, send abort [ 825.232332][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2770'. [ 825.239178][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802a67a800: rx timeout, send abort [ 825.249820][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802a67b000: abort rx timeout. Force session deactivation [ 825.291774][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2770'. [ 825.749586][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802a67a800: abort rx timeout. Force session deactivation [ 826.730224][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6140 ms [ 826.738245][ C0] lec:lec_tx_timeout: lec0 [ 826.743010][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 826.761410][T15800] use of bytesused == 0 is deprecated and will be removed in the future, [ 826.770069][T15800] use the actual size instead. [ 826.817735][T15805] fuse: Unknown parameter 'grou00000000000000000000' [ 826.916439][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 827.002086][T15810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2788'. [ 827.858302][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2791'. [ 828.364058][T15832] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 828.511218][T15833] delete_channel: no stack [ 829.001461][ T918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 829.144220][T15847] fuse: Unknown parameter 'grou00000000000000000000' [ 829.170348][ T918] usb 6-1: Using ep0 maxpacket: 16 [ 829.182807][ T918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 829.210430][ T918] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 829.229595][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.255354][ T918] usb 6-1: config 0 descriptor?? [ 829.283490][ T918] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input53 [ 829.483597][ T5173] bcm5974 6-1:0.0: could not read from device [ 829.490283][ T93] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 829.532768][ T918] bcm5974 6-1:0.0: could not read from device [ 829.573936][ T5173] bcm5974 6-1:0.0: could not read from device [ 829.613805][ T918] input: failed to attach handler mousedev to device input53, error: -5 [ 829.655555][ T918] usb 6-1: USB disconnect, device number 8 [ 829.662605][ T5173] bcm5974 6-1:0.0: could not read from device [ 829.683625][ T5173] bcm5974 6-1:0.0: could not read from device [ 829.762891][ T93] usb 3-1: config 0 has no interfaces? [ 829.773411][ T93] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 829.786285][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.799577][ T93] usb 3-1: Product: syz [ 829.827568][ T93] usb 3-1: Manufacturer: syz [ 829.837496][ T93] usb 3-1: SerialNumber: syz [ 829.907566][ T30] audit: type=1400 audit(1750411131.218:980): avc: denied { create } for pid=15852 comm="syz.4.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 830.083465][T15866] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2804'. [ 830.181087][ T93] usb 3-1: config 0 descriptor?? [ 830.299757][T15870] input: syz0 as /devices/virtual/input/input54 [ 830.375659][ T5928] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 830.427722][ T5928] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 830.531634][T15849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.562569][T15849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.583739][T15886] fuse: Unknown parameter 'grou00000000000000000000' [ 831.593644][T15887] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2811'. [ 832.490296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 832.498348][ C0] lec:lec_tx_timeout: lec0 [ 832.503104][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 832.555928][ T918] usb 3-1: USB disconnect, device number 35 [ 832.892611][T15904] input: syz0 as /devices/virtual/input/input55 [ 833.166974][ T30] audit: type=1400 audit(1750411134.488:981): avc: denied { mounton } for pid=15910 comm="syz.0.2820" path="/596/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 833.189276][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.405290][T15916] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[15916] [ 833.455046][ T30] audit: type=1400 audit(1750411134.778:982): avc: denied { ioctl } for pid=15901 comm="syz.2.2816" path="socket:[65591]" dev="sockfs" ino=65591 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 833.560389][ T93] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 833.754606][T15918] xt_hashlimit: size too large, truncated to 1048576 [ 833.763341][ T93] usb 1-1: Using ep0 maxpacket: 16 [ 833.783552][ T93] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.820432][ T93] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 833.839213][ T93] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.847325][ T93] usb 1-1: Product: syz [ 833.856488][ T93] usb 1-1: Manufacturer: syz [ 833.862988][ T93] usb 1-1: SerialNumber: syz [ 833.880557][ T93] usb 1-1: config 0 descriptor?? [ 834.128100][ T5937] usb 1-1: USB disconnect, device number 35 [ 834.228663][ T30] audit: type=1326 audit(1750411135.548:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60738e929 code=0x7ffc0000 [ 834.290554][ T30] audit: type=1326 audit(1750411135.578:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60738e929 code=0x7ffc0000 [ 834.326366][ T30] audit: type=1326 audit(1750411135.588:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fe60738e929 code=0x7ffc0000 [ 834.357552][ T30] audit: type=1326 audit(1750411135.588:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60738e929 code=0x7ffc0000 [ 834.388036][ T30] audit: type=1326 audit(1750411135.588:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60738e929 code=0x7ffc0000 [ 835.069148][T15949] netlink: 'syz.4.2833': attribute type 10 has an invalid length. [ 835.124547][T15949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2833'. [ 835.151120][T15949] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.183567][T15949] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.203781][T15949] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.222229][T15949] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.272100][ T5937] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 835.528587][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short [ 835.570037][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 835.586702][ T5937] usb 1-1: can't read configurations, error -71 [ 836.169206][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 836.525644][ T5928] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 836.534409][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 836.547255][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 836.557038][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 836.566538][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 836.574539][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 836.628173][T15977] lo speed is unknown, defaulting to 1000 [ 836.667939][ T30] audit: type=1400 audit(1750411137.988:988): avc: denied { read write } for pid=15979 comm="syz.6.2841" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 836.693482][ T30] audit: type=1400 audit(1750411138.018:989): avc: denied { open } for pid=15979 comm="syz.6.2841" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 836.724408][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 836.731680][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.751089][ T5928] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 836.760548][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.768633][ T5928] usb 6-1: Product: syz [ 836.773237][ T5928] usb 6-1: Manufacturer: syz [ 836.777903][ T5928] usb 6-1: SerialNumber: syz [ 836.797517][ T5928] usb 6-1: config 0 descriptor?? [ 837.510225][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 837.518254][ C0] lec:lec_tx_timeout: lec0 [ 837.522813][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 837.530132][ T30] audit: type=1400 audit(1750411138.228:990): avc: denied { map } for pid=15979 comm="syz.6.2841" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 837.555068][ T30] audit: type=1400 audit(1750411138.238:991): avc: denied { execute } for pid=15979 comm="syz.6.2841" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 837.589386][ T5884] usb 6-1: USB disconnect, device number 9 [ 837.822053][T15977] chnl_net:caif_netlink_parms(): no params data found [ 838.608215][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.661903][ T5830] Bluetooth: hci1: command tx timeout [ 838.734687][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.786448][T15977] bridge_slave_0: entered allmulticast mode [ 838.833773][T15977] bridge_slave_0: entered promiscuous mode [ 838.855322][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.869874][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.887754][T15977] bridge_slave_1: entered allmulticast mode [ 838.910528][T15977] bridge_slave_1: entered promiscuous mode [ 838.961825][ T36] bridge_slave_1: left allmulticast mode [ 838.968056][ T36] bridge_slave_1: left promiscuous mode [ 838.977720][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.990047][ T36] bridge_slave_0: left allmulticast mode [ 838.997640][ T36] bridge_slave_0: left promiscuous mode [ 839.006203][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.410491][ T30] audit: type=1326 audit(1750411140.728:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.6.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8158e929 code=0x7ffc0000 [ 839.438790][ T30] audit: type=1326 audit(1750411140.728:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.6.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7faf8158e929 code=0x7ffc0000 [ 839.476923][ T30] audit: type=1326 audit(1750411140.728:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.6.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8158e929 code=0x7ffc0000 [ 840.008956][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.026779][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.039825][ T36] bond0 (unregistering): Released all slaves [ 840.117300][T15977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.213624][T15977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.364780][T15977] team0: Port device team_slave_0 added [ 840.378284][T16025] input: syz0 as /devices/virtual/input/input56 [ 840.396535][T15977] team0: Port device team_slave_1 added [ 840.518762][T15977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.526462][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.556554][T15977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.581711][T15977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.597342][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.658584][ T30] audit: type=1400 audit(1750411141.948:995): avc: denied { accept } for pid=16026 comm="syz.5.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 840.705908][T15977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.722190][ T93] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 840.730772][ T5830] Bluetooth: hci1: command tx timeout [ 840.883173][ T93] usb 7-1: Using ep0 maxpacket: 16 [ 840.917318][T15977] hsr_slave_0: entered promiscuous mode [ 840.924520][T15977] hsr_slave_1: entered promiscuous mode [ 840.924722][ T93] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.947596][ T93] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 840.957174][ T93] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.960741][T15977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.978857][ T93] usb 7-1: Product: syz [ 840.989520][T15977] Cannot create hsr debugfs directory [ 840.992998][ T93] usb 7-1: Manufacturer: syz [ 841.011230][ T93] usb 7-1: SerialNumber: syz [ 841.032676][ T93] usb 7-1: config 0 descriptor?? [ 841.062562][ T36] hsr_slave_0: left promiscuous mode [ 841.069216][ T36] hsr_slave_1: left promiscuous mode [ 841.099733][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.159417][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.272276][ T93] usb 7-1: USB disconnect, device number 5 [ 841.694880][ T36] team0 (unregistering): Port device team_slave_1 removed [ 841.828874][ T36] team0 (unregistering): Port device team_slave_0 removed [ 841.880442][ T30] audit: type=1400 audit(1750411143.198:996): avc: denied { mount } for pid=16046 comm="syz.5.2854" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 842.005725][T16055] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2855'. [ 842.530231][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 842.538335][ C0] lec:lec_tx_timeout: lec0 [ 842.546294][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 842.820334][ T5830] Bluetooth: hci1: command tx timeout [ 843.294392][ T36] IPVS: stop unused estimator thread 0... [ 843.872326][T15977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 843.903723][T15977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 843.971069][T15977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 843.997469][T15977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 844.277555][T15977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.315934][ T5937] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 844.343515][ T5937] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 844.357337][T15977] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.401664][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.408792][ T9618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.424943][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.433132][ T9618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.703390][T16126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.896032][ T51] Bluetooth: hci1: command tx timeout [ 844.986082][T15977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.407224][T15977] veth0_vlan: entered promiscuous mode [ 845.516209][T15977] veth1_vlan: entered promiscuous mode [ 845.648405][T15977] veth0_macvtap: entered promiscuous mode [ 845.694023][T15977] veth1_macvtap: entered promiscuous mode [ 845.758358][T15977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.803654][T15977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.874550][T15977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.904519][T15977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.926548][T15977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.960479][T15977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.313725][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 846.320076][ T30] audit: type=1400 audit(1750411147.638:997): avc: denied { read } for pid=16150 comm="syz.6.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 846.503512][ T9607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.597524][ T9607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.645005][T16168] binder: 16166:16168 ioctl 4018620d 0 returned -22 [ 847.039476][ T9611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.152889][ T9611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.560247][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 847.568269][ C0] lec:lec_tx_timeout: lec0 [ 847.574090][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 847.703796][T16220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2882'. [ 848.775554][ T30] audit: type=1400 audit(1750411150.068:998): avc: denied { listen } for pid=16248 comm="syz.0.2888" lport=58629 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 848.851241][ T30] audit: type=1400 audit(1750411150.138:999): avc: denied { accept } for pid=16248 comm="syz.0.2888" lport=58629 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 849.327752][ T918] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 849.536114][T16268] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2890'. [ 849.558749][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 849.604146][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 849.695835][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 849.706830][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 849.716798][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 849.903940][T16266] lo speed is unknown, defaulting to 1000 [ 850.245299][ T918] usb 7-1: unable to get BOS descriptor or descriptor too short [ 850.332979][ T918] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 850.351502][ T918] usb 7-1: can't read configurations, error -71 [ 850.569630][ T9624] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.646770][ T9624] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.668959][T16266] chnl_net:caif_netlink_parms(): no params data found [ 850.729507][ T9624] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.752450][T16266] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.759646][T16266] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.768824][T16266] bridge_slave_0: entered allmulticast mode [ 850.776388][T16266] bridge_slave_0: entered promiscuous mode [ 850.794146][ T9624] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.810793][T16266] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.818295][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.827772][T16266] bridge_slave_1: entered allmulticast mode [ 850.838704][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056e3a000: rx timeout, send abort [ 850.848393][T16266] bridge_slave_1: entered promiscuous mode [ 850.888731][T16266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.904987][T16266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.962452][T16266] team0: Port device team_slave_0 added [ 850.989431][T16266] team0: Port device team_slave_1 added [ 851.074640][T16266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.091301][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.124984][T16289] binder: BINDER_SET_CONTEXT_MGR already set [ 851.145318][T16289] binder: 16288:16289 ioctl 4018620d 200000000040 returned -16 [ 851.165575][T16266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.199982][ T30] audit: type=1326 audit(1750411152.518:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc0d8e929 code=0x7ffc0000 [ 851.207984][T16266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.223473][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.259750][ T30] audit: type=1326 audit(1750411152.518:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc0d8e929 code=0x7ffc0000 [ 851.292338][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.322918][ T30] audit: type=1326 audit(1750411152.568:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f1cc0d8e929 code=0x7ffc0000 [ 851.338752][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056e38400: rx timeout, send abort [ 851.354935][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056e3a000: abort rx timeout. Force session deactivation [ 851.368548][ T30] audit: type=1326 audit(1750411152.568:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc0d8e929 code=0x7ffc0000 [ 851.406204][T16266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.456282][ T30] audit: type=1326 audit(1750411152.568:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc0d8e929 code=0x7ffc0000 [ 851.575338][ T9624] bridge_slave_1: left allmulticast mode [ 851.581820][ T9624] bridge_slave_1: left promiscuous mode [ 851.588797][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.634505][ T9624] bridge_slave_0: left allmulticast mode [ 851.654727][ T9624] bridge_slave_0: left promiscuous mode [ 851.663326][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.854775][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056e38400: abort rx timeout. Force session deactivation [ 851.890855][ T5830] Bluetooth: hci7: command tx timeout [ 851.920341][ T30] audit: type=1400 audit(1750411153.168:1005): avc: denied { bind } for pid=16312 comm="syz.5.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 852.361179][ T9624] team0: Port device geneve0 removed [ 852.580547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 852.588588][ C0] lec:lec_tx_timeout: lec0 [ 852.593125][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 852.952195][ T9624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.003222][ T9624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.031969][ T9624] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 853.033501][T16329] fuse: Unknown parameter 'grou00000000000000000000' [ 853.058421][ T9624] bond0 (unregistering): Released all slaves [ 853.225929][T16266] hsr_slave_0: entered promiscuous mode [ 853.232548][T16266] hsr_slave_1: entered promiscuous mode [ 853.238804][T16266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.252824][T16266] Cannot create hsr debugfs directory [ 853.360717][ T5884] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 853.642124][ T5884] usb 7-1: config 0 has an invalid interface number: 104 but max is 0 [ 853.653095][ T5884] usb 7-1: config 0 has no interface number 0 [ 853.675468][ T5884] usb 7-1: config 0 interface 104 has no altsetting 0 [ 853.732968][ T5884] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 853.742269][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.751450][ T5884] usb 7-1: Product: syz [ 853.765468][ T5884] usb 7-1: Manufacturer: syz [ 853.780032][ T5884] usb 7-1: SerialNumber: syz [ 853.799333][ T5884] usb 7-1: config 0 descriptor?? [ 853.819777][ T5884] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 853.930482][ T5830] Bluetooth: hci7: command tx timeout [ 854.068982][ T5884] gspca_vc032x: reg_r err -71 [ 854.074281][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.089060][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.097981][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.105607][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.132657][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.139635][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.156220][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.171150][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.178151][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.184054][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.189493][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.332141][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.347201][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.400449][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.406032][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.416140][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.432497][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.442503][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 854.453335][ T5884] gspca_vc032x: Unknown sensor... [ 854.462885][ T5884] vc032x 7-1:0.104: probe with driver vc032x failed with error -22 [ 854.484070][ T5884] usb 7-1: USB disconnect, device number 8 [ 854.536687][ T5929] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 854.745585][T16266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 854.785009][T16266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 854.804278][T16266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 854.827455][T16266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 854.946621][ T9624] tipc: Left network mode [ 854.985659][ T5929] usb 1-1: config 0 has no interfaces? [ 855.033243][ T5929] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 855.048959][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.061337][ T5929] usb 1-1: Product: syz [ 855.070631][ T5929] usb 1-1: Manufacturer: syz [ 855.075263][ T5929] usb 1-1: SerialNumber: syz [ 855.088940][ T5929] usb 1-1: config 0 descriptor?? [ 855.508802][T16266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.866752][ T9624] hsr_slave_0: left promiscuous mode [ 855.872594][ T9624] hsr_slave_1: left promiscuous mode [ 855.884720][ T9624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.071168][ T5830] Bluetooth: hci7: command tx timeout [ 856.116425][T16409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.237044][ T9624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.680360][T16418] fuse: Unknown parameter 'grou00000000000000000000' [ 857.165333][ T9624] team0 (unregistering): Port device team_slave_1 removed [ 857.250655][T10748] usb 1-1: USB disconnect, device number 38 [ 857.285808][ T9624] team0 (unregistering): Port device team_slave_0 removed [ 857.748203][T16266] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.784958][T16193] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.792160][T16193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.824683][T16193] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.831860][T16193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.103439][ T5830] Bluetooth: hci7: command tx timeout [ 858.110292][T16456] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2943'. [ 858.238074][T16463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 858.280317][ T5884] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 858.282632][ T9624] IPVS: stop unused estimator thread 0... [ 858.296991][T16266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.338298][T16467] binder: 16466:16467 ioctl c0306201 0 returned -14 [ 858.391464][T16266] veth0_vlan: entered promiscuous mode [ 858.451657][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 858.457976][T16266] veth1_vlan: entered promiscuous mode [ 858.469143][ T5884] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 858.485846][ T5884] usb 6-1: config 0 has no interface number 0 [ 858.499943][ T5884] usb 6-1: config 0 interface 184 has no altsetting 0 [ 858.513417][T16474] Cannot find add_set index 0 as target [ 858.553623][ T5884] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 858.555977][T16266] veth0_macvtap: entered promiscuous mode [ 858.569425][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.578075][T16474] libceph: resolve '4..' (ret=-3): failed [ 858.589164][ T5884] usb 6-1: Product: syz [ 858.590910][T16266] veth1_macvtap: entered promiscuous mode [ 858.594586][ T5884] usb 6-1: Manufacturer: syz [ 858.603936][ T5884] usb 6-1: SerialNumber: syz [ 858.616892][ T5884] usb 6-1: config 0 descriptor?? [ 858.619059][T16266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.626431][ T5884] smsc75xx v1.0.0 [ 858.634719][ T5884] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 858.645942][ T5884] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 858.697441][T16266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.711999][T16266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.728589][T16266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.737357][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6140 ms [ 858.737390][ C0] lec:lec_tx_timeout: lec0 [ 858.747230][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 858.760836][T16266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.806392][T16266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.942934][ T9624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.952401][ T9624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.004414][ T9624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.024160][ T9624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.456615][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079595800: rx timeout, send abort [ 859.618477][T16495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2955'. [ 859.956674][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079594800: rx timeout, send abort [ 859.965163][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079595800: abort rx timeout. Force session deactivation [ 860.465006][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079594800: abort rx timeout. Force session deactivation [ 861.123383][ T5929] usb 6-1: USB disconnect, device number 10 [ 861.478542][ T51] Bluetooth: hci6: command 0x040f tx timeout [ 862.003178][T16537] xt_hashlimit: size too large, truncated to 1048576 [ 862.342470][T16543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.816066][T16557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 863.960138][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'. [ 864.491650][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 864.499711][ C0] lec:lec_tx_timeout: lec0 [ 864.504731][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 864.880533][ T5884] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 865.231820][ T5884] usb 7-1: config 0 has no interfaces? [ 865.245391][ T5884] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 865.255696][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.270280][ T5884] usb 7-1: Product: syz [ 865.274434][ T5884] usb 7-1: Manufacturer: syz [ 865.306281][ T5884] usb 7-1: SerialNumber: syz [ 865.361571][ T5884] usb 7-1: config 0 descriptor?? [ 866.178389][ T30] audit: type=1400 audit(1750411167.488:1006): avc: denied { write } for pid=16613 comm="syz.4.2992" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 866.201604][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.191532][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2996'. [ 867.307795][T16635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.356638][T16638] fuse: Unknown parameter '00000000000000000000' [ 868.061246][T16642] xt_hashlimit: size too large, truncated to 1048576 [ 868.833829][T10748] usb 7-1: USB disconnect, device number 9 [ 869.530217][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 869.538267][ C0] lec:lec_tx_timeout: lec0 [ 869.543085][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 869.615402][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.622015][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.839406][T16675] fuse: Unknown parameter '00000000000000000000' [ 869.847995][T16679] kernel read not supported for file /eth0 (pid: 16679 comm: syz.5.3012) [ 869.851118][T16677] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3009'. [ 869.857182][ T30] audit: type=1800 audit(1750411171.188:1007): pid=16679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3012" name="eth0" dev="mqueue" ino=69606 res=0 errno=0 [ 870.145800][T16696] delete_channel: no stack [ 870.212443][T16677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.233132][T16677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.271908][T16677] bond0 (unregistering): Released all slaves [ 870.910796][ T5928] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 870.931529][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 871.030105][T16718] fuse: Unknown parameter '00000000000000000000' [ 871.037223][T10748] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 871.115845][ T24] usb 1-1: config 0 has no interfaces? [ 871.154115][ T5928] usb 3-1: config 0 has no interfaces? [ 871.168100][ T5928] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 871.180085][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.241337][T10748] usb 7-1: Using ep0 maxpacket: 8 [ 871.259848][ T5928] usb 3-1: Product: syz [ 871.314293][ T5928] usb 3-1: Manufacturer: syz [ 871.314459][T10748] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 871.343662][ T5928] usb 3-1: SerialNumber: syz [ 871.348013][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 871.377197][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.396004][ T5928] usb 3-1: config 0 descriptor?? [ 871.424428][ T24] usb 1-1: Product: syz [ 871.580285][ T24] usb 1-1: Manufacturer: syz [ 871.600252][ T24] usb 1-1: SerialNumber: syz [ 871.624430][ T24] usb 1-1: config 0 descriptor?? [ 871.632385][T10748] usb 7-1: config 0 has no interface number 1 [ 871.691313][T10748] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 871.724819][T10748] usb 7-1: config 0 interface 151 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 871.818768][T10748] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 871.876605][T10748] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 871.888412][T10748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.985097][T10748] usb 7-1: Product: syz [ 871.989731][T10748] usb 7-1: Manufacturer: syz [ 871.994561][T10748] usb 7-1: SerialNumber: syz [ 872.016895][T10748] usb 7-1: config 0 descriptor?? [ 872.026831][T10748] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.036184][T10748] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 872.047548][T10748] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.085423][T10748] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 872.165950][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.249760][ T24] usb 7-1: USB disconnect, device number 10 [ 872.678968][T16748] xt_hashlimit: size too large, truncated to 1048576 [ 873.533432][ T24] usb 3-1: USB disconnect, device number 36 [ 873.608592][ T5928] usb 1-1: USB disconnect, device number 39 [ 874.013685][ T918] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 874.311700][ T918] usb 7-1: Using ep0 maxpacket: 16 [ 874.330724][ T918] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 874.350559][ T918] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 874.362877][ T918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.371314][ T918] usb 7-1: Product: syz [ 874.418120][ T918] usb 7-1: Manufacturer: syz [ 874.449925][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 874.466340][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 874.477452][ T918] usb 7-1: SerialNumber: syz [ 874.486008][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 874.496063][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 874.506346][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 874.550494][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 874.558554][ C0] lec:lec_tx_timeout: lec0 [ 874.563061][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 874.595431][ T918] usb 7-1: config 0 descriptor?? [ 874.648175][ T918] hub 7-1:0.0: bad descriptor, ignoring hub [ 874.679153][ T918] hub 7-1:0.0: probe with driver hub failed with error -5 [ 874.701023][T16795] lo speed is unknown, defaulting to 1000 [ 875.002940][ T24] usb 7-1: USB disconnect, device number 11 [ 875.190415][T16207] bridge_slave_1: left allmulticast mode [ 875.196088][T16207] bridge_slave_1: left promiscuous mode [ 875.207375][T16207] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.248237][T16207] bridge_slave_0: left allmulticast mode [ 875.254759][T16207] bridge_slave_0: left promiscuous mode [ 875.260488][T16207] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.570803][ T5830] Bluetooth: hci0: command tx timeout [ 876.652155][ T31] INFO: task syz.1.2077:13429 blocked for more than 143 seconds. [ 876.659915][ T31] Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 [ 876.673478][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 876.684149][ T31] task:syz.1.2077 state:D stack:28136 pid:13429 tgid:13428 ppid:5820 task_flags:0x400140 flags:0x00024004 [ 876.721392][ T31] Call Trace: [ 876.732486][ T31] [ 876.806766][ T31] __schedule+0x116a/0x5de0 [ 876.824470][ T31] ? __lock_acquire+0x622/0x1c90 [ 876.870214][ T31] ? __pfx___schedule+0x10/0x10 [ 876.937342][ T31] ? find_held_lock+0x2b/0x80 [ 876.976323][ T31] ? schedule+0x2d7/0x3a0 [ 876.984969][ T31] schedule+0xe7/0x3a0 [ 876.996318][ T31] schedule_preempt_disabled+0x13/0x30 [ 877.060362][ T31] __mutex_lock+0x6c7/0xb90 [ 877.092253][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 877.097209][ T31] ? nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 877.117563][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 877.130313][ T31] ? __asan_memset+0x23/0x50 [ 877.140472][ T31] ? nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 877.150412][ T31] nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 877.160516][ T31] ? rcu_is_watching+0x12/0xc0 [ 877.165944][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 877.172423][ T31] ? __nla_parse+0x40/0x60 [ 877.176834][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 877.184402][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 877.192056][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 877.201489][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 877.210491][ T31] ? bpf_lsm_capable+0x9/0x10 [ 877.215177][ T31] ? security_capable+0x7e/0x260 [ 877.221802][ T31] genl_rcv_msg+0x55c/0x800 [ 877.226355][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 877.232230][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 877.238404][ T31] netlink_rcv_skb+0x158/0x420 [ 877.243587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 877.248621][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 877.254028][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 877.259414][ T31] genl_rcv+0x28/0x40 [ 877.263537][ T31] netlink_unicast+0x53a/0x7f0 [ 877.268455][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 877.273896][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 877.278680][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.284024][ T31] ____sys_sendmsg+0xa95/0xc70 [ 877.288787][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 877.294805][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 877.300080][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 877.305432][ T31] ___sys_sendmsg+0x134/0x1d0 [ 877.310119][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.315514][ T31] ? __lock_acquire+0x622/0x1c90 [ 877.320574][ T31] __sys_sendmsg+0x16d/0x220 [ 877.325194][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 877.330365][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 877.335332][ T31] do_syscall_64+0xcd/0x4c0 [ 877.339831][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.345916][ T31] RIP: 0033:0x7fa43678e929 [ 877.350382][ T31] RSP: 002b:00007fa437687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.358796][ T31] RAX: ffffffffffffffda RBX: 00007fa4369b5fa0 RCX: 00007fa43678e929 [ 877.366806][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000004 [ 877.375127][ T31] RBP: 00007fa436810b39 R08: 0000000000000000 R09: 0000000000000000 [ 877.383153][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.391148][ T31] R13: 0000000000000000 R14: 00007fa4369b5fa0 R15: 00007fffb28eac78 [ 877.399127][ T31] [ 877.402559][ T31] [ 877.402559][ T31] Showing all locks held in the system: [ 877.410857][ T31] 1 lock held by khungtaskd/31: [ 877.415720][ T31] #0: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 877.430276][ T31] 2 locks held by kworker/u8:3/49: [ 877.435402][ T31] #0: ffff888021b90148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 877.455882][ T31] #1: ffffc90000b97d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 877.467660][ T31] 1 lock held by dhcpcd/5483: [ 877.472641][ T31] #0: ffffffff9034d2a8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26d/0x1f50 [ 877.482302][ T31] 2 locks held by getty/5578: [ 877.486973][ T31] #0: ffff8880361620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 877.496746][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 877.506880][ T31] 3 locks held by kworker/0:6/5928: [ 877.512100][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 877.522599][ T31] #1: ffffc90004b2fd10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 877.533075][ T31] #2: ffffffff9034d2a8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 877.543518][ T31] 2 locks held by syz.3.2005/13165: [ 877.548689][ T31] #0: ffffffff903f1ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 877.556915][ T31] #1: ffffffff8e9deb68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 877.567058][ T31] 2 locks held by syz.1.2077/13429: [ 877.572267][ T31] #0: ffffffff903f1ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 877.581138][ T31] #1: ffffffff8e9deb68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 877.591317][ T31] 3 locks held by kworker/u8:6/16193: [ 877.596680][ T31] 3 locks held by kworker/u8:8/16197: [ 877.602073][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 877.613271][ T31] #1: ffffc9001c1bfd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 877.623629][ T31] #2: ffffffff9034d2a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 877.632705][ T31] 5 locks held by kworker/u8:19/16207: [ 877.638134][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 877.648502][ T31] #1: ffffc9001c4dfd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 877.658462][ T31] #2: ffffffff90337250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 877.667802][ T31] #3: ffffffff9034d2a8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 877.677348][ T31] #4: ffffffff8e5cfe78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 877.687429][ T31] 2 locks held by syz-executor/16795: [ 877.692827][ T31] #0: ffffffff90a9fe00 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 877.702618][ T31] #1: ffffffff9034d2a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 877.711729][ T31] 1 lock held by syz.2.3053/16809: [ 877.716834][ T31] #0: ffffffff9034d2a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0xfa/0x210 [ 877.726173][ T31] 1 lock held by syz.2.3053/16811: [ 877.731309][ T31] #0: ffffffff9034d2a8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x253/0x5b90 [ 877.740311][ T31] 1 lock held by syz.0.3058/16837: [ 877.745414][ T31] #0: ffffffff8e5cfe78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 877.755481][ T31] [ 877.770248][ T31] ============================================= [ 877.770248][ T31] [ 877.786464][ T31] NMI backtrace for cpu 1 [ 877.786481][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 877.786503][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 877.786513][ T31] Call Trace: [ 877.786519][ T31] [ 877.786526][ T31] dump_stack_lvl+0x116/0x1f0 [ 877.786555][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 877.786574][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.786597][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 877.786622][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 877.786644][ T31] watchdog+0xf70/0x12c0 [ 877.786669][ T31] ? __pfx_watchdog+0x10/0x10 [ 877.786686][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 877.786713][ T31] ? __kthread_parkme+0x19e/0x250 [ 877.786739][ T31] ? __pfx_watchdog+0x10/0x10 [ 877.786758][ T31] kthread+0x3c2/0x780 [ 877.786774][ T31] ? __pfx_kthread+0x10/0x10 [ 877.786791][ T31] ? rcu_is_watching+0x12/0xc0 [ 877.786812][ T31] ? __pfx_kthread+0x10/0x10 [ 877.786829][ T31] ret_from_fork+0x5d4/0x6f0 [ 877.786852][ T31] ? __pfx_kthread+0x10/0x10 [ 877.786868][ T31] ret_from_fork_asm+0x1a/0x30 [ 877.786898][ T31] [ 877.786906][ T31] Sending NMI from CPU 1 to CPUs 0: [ 877.911472][ C0] NMI backtrace for cpu 0 [ 877.911485][ C0] CPU: 0 UID: 0 PID: 16195 Comm: kworker/u8:7 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 877.911503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 877.911512][ C0] Workqueue: bat_events batadv_nc_worker [ 877.911533][ C0] RIP: 0010:batadv_nc_worker+0xe7/0x1030 [ 877.911551][ C0] Code: 89 44 24 48 48 c1 e8 03 48 89 c2 48 b8 00 00 00 00 00 fc ff df 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 56 0e 00 00 41 8b 5c 24 10 <31> ff 89 de e8 50 ce 6e f6 85 db 0f 84 ce 0c 00 00 4c 89 e0 4c 89 [ 877.911564][ C0] RSP: 0018:ffffc9001c1dfb28 EFLAGS: 00000246 [ 877.911575][ C0] RAX: 0000000000000000 RBX: 0000000000000400 RCX: ffffffff81838ef6 [ 877.911584][ C0] RDX: 1ffff1100e8c78da RSI: ffffffff8b4d48e7 RDI: ffff888031b40df8 [ 877.911592][ C0] RBP: ffff888031b417e0 R08: 0000000000000001 R09: 0000000000000000 [ 877.911601][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807463c6c0 [ 877.911609][ C0] R13: 0000000000000000 R14: ffffffff90a84c44 R15: ffff888031b417e0 [ 877.911618][ C0] FS: 0000000000000000(0000) GS:ffff888124753000(0000) knlGS:0000000000000000 [ 877.911631][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 877.911640][ C0] CR2: 0000200000404030 CR3: 000000000e382000 CR4: 00000000003526f0 [ 877.911649][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 877.911657][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 877.911665][ C0] Call Trace: [ 877.911670][ C0] [ 877.911677][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.911696][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 877.911718][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 877.911738][ C0] ? rcu_is_watching+0x12/0xc0 [ 877.911755][ C0] process_one_work+0x9cc/0x1b70 [ 877.911772][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 877.911789][ C0] ? __pfx_process_one_work+0x10/0x10 [ 877.911805][ C0] ? assign_work+0x1a0/0x250 [ 877.911825][ C0] worker_thread+0x6c8/0xf10 [ 877.911843][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.911860][ C0] kthread+0x3c2/0x780 [ 877.911873][ C0] ? __pfx_kthread+0x10/0x10 [ 877.911885][ C0] ? rcu_is_watching+0x12/0xc0 [ 877.911900][ C0] ? __pfx_kthread+0x10/0x10 [ 877.911912][ C0] ret_from_fork+0x5d4/0x6f0 [ 877.911930][ C0] ? __pfx_kthread+0x10/0x10 [ 877.911942][ C0] ret_from_fork_asm+0x1a/0x30 [ 877.911961][ C0] [ 878.167581][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 878.174475][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 878.186285][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.196348][ T31] Call Trace: [ 878.199626][ T31] [ 878.202563][ T31] dump_stack_lvl+0x3d/0x1f0 [ 878.207168][ T31] panic+0x71c/0x800 [ 878.211081][ T31] ? __pfx_panic+0x10/0x10 [ 878.215507][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 878.220887][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 878.226873][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 878.232260][ T31] ? watchdog+0xdda/0x12c0 [ 878.236680][ T31] ? watchdog+0xdcd/0x12c0 [ 878.241104][ T31] watchdog+0xdeb/0x12c0 [ 878.245351][ T31] ? __pfx_watchdog+0x10/0x10 [ 878.250037][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.255254][ T31] ? __kthread_parkme+0x19e/0x250 [ 878.260282][ T31] ? __pfx_watchdog+0x10/0x10 [ 878.264945][ T31] kthread+0x3c2/0x780 [ 878.268997][ T31] ? __pfx_kthread+0x10/0x10 [ 878.273570][ T31] ? rcu_is_watching+0x12/0xc0 [ 878.278326][ T31] ? __pfx_kthread+0x10/0x10 [ 878.282921][ T31] ret_from_fork+0x5d4/0x6f0 [ 878.287500][ T31] ? __pfx_kthread+0x10/0x10 [ 878.292076][ T31] ret_from_fork_asm+0x1a/0x30 [ 878.296855][ T31] [ 878.300071][ T31] Kernel Offset: disabled [ 878.304377][ T31] Rebooting in 86400 seconds..