last executing test programs: 2m50.438565342s ago: executing program 3 (id=302): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) creat(0x0, 0x0) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000d0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x100) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0xd0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 2m49.43579408s ago: executing program 3 (id=306): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000900), 0x208000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000030000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r4, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40), 0x0, 0x28048085) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYRESOCT], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r5, 0x4, 0xc00) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x10001, 0xb91) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x1, @sdr={0x32314742, 0x2}}) close_range(r7, r6, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xd21e92724a9ef74}, 0x4004080) 2m45.715084002s ago: executing program 3 (id=319): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a030000000000000000000200000a0900030073797a30000000000c00024000000000000000010900010073797a30"], 0x60}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4100, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0x3eae, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) (async) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x8000, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400f04212000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350077673000"/28], 0x34}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c041}, 0x0) r9 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000180)=""/56, 0x38}], 0x1, 0x726, 0x7) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 2m43.8069617s ago: executing program 3 (id=325): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000380)=[{}], 0x2, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.764596634s ago: executing program 3 (id=335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x4e24}, {@in6=@private1, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {0x0, 0x0, 0x0, 0x40000000}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x144}}, 0x0) 2m41.589354906s ago: executing program 3 (id=336): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000700)=@raw=[@ldst={0x2, 0x0, 0x6, 0x0, 0x7, 0x50, 0xd}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x75c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x1, 0x7, 0x2}, 0x10, 0x21c49, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000006c0)=[{0x0, 0x4, 0xd}, {0x1, 0x1, 0x5, 0x9}], 0x10, 0x3, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x1, 0xfffc}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) unshare(0x400) r4 = socket(0x40000000002, 0x3, 0x5) setsockopt(r4, 0xff, 0x1, 0x0, 0x71) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sync() setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x200000, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0xfffffffd}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000884) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m26.575636552s ago: executing program 32 (id=336): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000700)=@raw=[@ldst={0x2, 0x0, 0x6, 0x0, 0x7, 0x50, 0xd}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x75c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x1, 0x7, 0x2}, 0x10, 0x21c49, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000006c0)=[{0x0, 0x4, 0xd}, {0x1, 0x1, 0x5, 0x9}], 0x10, 0x3, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x1, 0xfffc}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) unshare(0x400) r4 = socket(0x40000000002, 0x3, 0x5) setsockopt(r4, 0xff, 0x1, 0x0, 0x71) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sync() setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x200000, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0xfffffffd}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000884) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1m18.066474894s ago: executing program 5 (id=584): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xae}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x4000, 0xffffffff}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m17.903447026s ago: executing program 5 (id=586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget$private(0x0, 0xafb0e20fef6483ff) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x20000010) 1m16.983072369s ago: executing program 5 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x10, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x60, 0x51}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000400)="5aee41dea43e9e", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m15.782462053s ago: executing program 5 (id=598): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000003c0)={0x77359400}, &(0x7f00000004c0)={[0xd]}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c00128009000100766c616e000000000c000280060001000200000008e6b7ecf1d3f067aba403447c5a0400f2fe9e7749fc4f74b60904c24583ea0972455f52931ed134466bfa14132ef210dcb7b9c4213cf517308517316d5e67cbe92f321b3d669500c13ef7dcbaa56ed07fcb153842edf7a198c93c895f042a7ffad17d08cf", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 38.540092489s ago: executing program 5 (id=598): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000003c0)={0x77359400}, &(0x7f00000004c0)={[0xd]}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c00128009000100766c616e000000000c000280060001000200000008e6b7ecf1d3f067aba403447c5a0400f2fe9e7749fc4f74b60904c24583ea0972455f52931ed134466bfa14132ef210dcb7b9c4213cf517308517316d5e67cbe92f321b3d669500c13ef7dcbaa56ed07fcb153842edf7a198c93c895f042a7ffad17d08cf", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 27.084196239s ago: executing program 2 (id=737): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000003c000000000013"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 26.957597559s ago: executing program 2 (id=740): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1c0, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000003c0)={0x77359400}, &(0x7f00000004c0)={[0xd]}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c00128009000100766c616e000000000c000280060001000200000008e6b7ecf1d3f067aba403447c5a0400f2fe9e7749fc4f74b60904c24583ea0972455f52931ed134466bfa14132ef210dcb7b9c4213cf517308517316d5e67cbe92f321b3d669500c13ef7dcbaa56ed07fcb153842edf7a198c93c895f042a7ffad17d08cf", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 25.536833601s ago: executing program 4 (id=742): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007e8, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e755044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02042a000e000000000000000100000005000600320000000a004e2400000007ff0200000000000000000000000000010d0000000000000002000100000000000000fb020000000005000500320000000a"], 0x70}, 0x1, 0x7}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 25.250450514s ago: executing program 2 (id=744): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000005000000aa4e200e22"], 0x0) 24.79454024s ago: executing program 2 (id=745): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) creat(0x0, 0x0) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02ef000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x100) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0xd0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 24.513527972s ago: executing program 4 (id=746): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000180000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0xffffff6c, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0xc, 0xa0, 0xffffffff, 0xc, 0x2, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8a, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0xfffffffc, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x3, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xd, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x6, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0xc, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0xffffffff, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0x100a1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x10000401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) syz_emit_ethernet(0x124, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0004aaab2db1001000883e7b4f08002000000000bba48d22fb621d6d6c98959ffa00638557ba3a07b25f289fbc3a2b98ccb4cdd65f7c0abc7a41f23218b2264dd8164bfe45fe03339fe5097592b90f96c25033b9da83005b7c66b9b8f1ae4d4f7417cef6e4d0379c7c73db544765e9c8535518894259669253fb8b682b935d03f6f85ea255013c116350cafdc2b5e82f69a74913d3a0d0314037f5b5ac9ee8c970ebd43361976b83f6b3c923085f1dce2c1624e92c3ec3e80a9f71fc86dff4844a8e05cf2303c2e88962bb0c53b05a1f04b60f915a91a1d85ad0139c8cedfe7ad5fc0ae6702176c01123b8cf86274f0ab20b19b23bbd9dc7f5fc2e104a708bb447ce54c527fb03c8d5d0ddfb451d"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 23.44961935s ago: executing program 2 (id=748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x4e24}, {@in6=@private1, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {0x1c}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x144}}, 0x0) 23.249127639s ago: executing program 2 (id=749): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="3e759b566780226107050f9fc73a02699058b05eac604c39a4729408f276288487b7fa5cc4971f711a106733960b44899560b00a5f747bc51e3c38aac0c1cfee41d5516e1b53c8b60591ffd5ed9d9ae10a9815af1b68b4d6b6c25b8ba2ce9969824cf40bb0cc7eace1736a91ec60e12280", 0x71) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='ext4_unlink_enter\x00', r0}, 0x18) sync() syz_usb_connect(0x0, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b1945c40cd0cb300c8a901020301090209008a"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80000, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="3e759b566780226107050f9fc73a02699058b05eac604c39a4729408f276288487b7fa5cc4971f711a106733960b44899560b00a5f747bc51e3c38aac0c1cfee41d5516e1b53c8b60591ffd5ed9d9ae10a9815af1b68b4d6b6c25b8ba2ce9969824cf40bb0cc7eace1736a91ec60e12280", 0x71) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='ext4_unlink_enter\x00', r0}, 0x18) (async) sync() (async) syz_usb_connect(0x0, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b1945c40cd0cb300c8a901020301090209008a"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80000, 0x14) (async) 23.246433257s ago: executing program 4 (id=750): openat$vcsu(0xffffffffffffff9c, 0x0, 0x183822, 0x0) r0 = syz_io_uring_setup(0x34ff, 0x0, &(0x7f0000000240), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000001c0)='hfs\x00', 0x200480, 0x0) 22.612775491s ago: executing program 4 (id=752): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x10, 0x404080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000500000000000400040054ef0000100002daffffff0020"], 0x24, 0x2) syz_fuse_handle_req(r7, &(0x7f0000004300)="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", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0xfffffffffffffffe, {0x7, 0x29, 0x25c17c22, 0x40000, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x8, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x7}, @datasec={0xf, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x1}, {0x4, 0x1, 0x8}, {0x2, 0x9, 0x40}, {0x3, 0x80, 0x3}, {0x1, 0xfffffff9}, {0x3, 0x5}], 'O'}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x3, [{0xe, 0x3, 0x6}]}, @struct={0x4, 0x4, 0x0, 0x4, 0x1, 0x7, [{0x8, 0x4, 0x6}, {0x2, 0x2, 0xff}, {0x3, 0x2, 0x95}, {0xd, 0x5, 0x8}]}]}, {0x0, [0x5f, 0x61, 0x30, 0x61, 0x0, 0x5f]}}, &(0x7f0000000540)=""/77, 0xf4, 0x4d, 0x1, 0xad5, 0x0, @void, @value}, 0x28) 21.240757396s ago: executing program 4 (id=754): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1c0, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000003c0)={0x77359400}, &(0x7f00000004c0)={[0xd]}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c00128009000100766c616e000000000c000280060001000200000008e6b7ecf1d3f067aba403447c5a0400f2fe9e7749fc4f74b60904c24583ea0972455f52931ed134466bfa14132ef210dcb7b9c4213cf517308517316d5e67cbe92f321b3d669500c13ef7dcbaa56ed07fcb153842edf7a198c93c895f042a7ffad17d08cf", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 19.846139542s ago: executing program 4 (id=758): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="efca2a88655fc595c5faf7f5a2da98abed525a960c6ed31a58377197f032a96df8c1d03a1e1754768b92dd69", 0x2c}, {&(0x7f0000000180)="4ee6c632feea765074d23b4429cffc30409ce737bc222a7031130560d44241063713abff8cfe46c1ed7369d7b96fa9da66fe669ea6eeffef0936cce9310908240d52d331be32ede76108f8f7047dc5f9d8626630aa7cace32d6791caf667c151648d305e30fc26c45d0fefd9bd1373a3506bb71107a672443526d9d37281e560e007b893ab623365f779040ccf49a33acbf591fbf4bf2f13fcd792129bf9014c2109d71cbdd51f5b9b4f29cdcdcd4c68ec7548909e69f2272377", 0xba}, {&(0x7f0000000240)="8d56693ba7161535d54de9ad74336015566d4e3dc79494d78e584e20e58df4c43e70279589c2d14f26ad0dd1898b62ba633329a766f7364f1e0e14e9b2dc820af8c3b4e58ef02fd4767bf25dbf2b1640af011eaa5b1cf00ddcc5263031fe65fe362c714888a4bce1e8a33ecc5c346ff1be837a118a68ee562619dd28ca67a226165a9cb3ca2bf7c6e8ce082f784055acf8b5c87d69251b3a89c164f8f544bfe9d71dc957fd5a87163d91f1fe2c548a13c372c614fd5e49c9b13d694527197be5947c63bac9cc2bb8e7606226", 0xcc}, {&(0x7f0000000340)="12798701cb20d2bbee81c4a0f109e92d7d4b09fb3a83e2f5e76df28275b24604789c3a42e98a92bd1630da161b7895599683e885b35d108fbeb5dc0ce50c2410f03006b14c2c1f1ec600580de0e6f93cb2c9c4530141a8a6ce26ce4c7045ca81fdd221a485ea6afbaea893b42bcc8537402bc2616d494f39c496", 0x7a}], 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="30000000000000000100000007000000c8e675fd360000000000a2e01057dea3b4e0494d5a30726b153f5b00000000004800000000000000330200000600000035603cff9258c0c895749a6516de3d4594c155a97c7cb204af439c2306b0da353633396e8fe5075e653f3417a941aec304038c00000000005800000000000000110000000700000010732bdcaeffd2eb8e6ee2622168731ab8d76999f2ec6a831a9e95539f5191eedc6826a9ea01eeab4244e15da0b38d72935120e9077c3c6c3aed9ecf19e8c2ba3cf438260b515300"], 0xd0}, 0x40040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x4, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r6, 0x0) 9.565465856s ago: executing program 5 (id=598): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000003c0)={0x77359400}, &(0x7f00000004c0)={[0xd]}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c00128009000100766c616e000000000c000280060001000200000008e6b7ecf1d3f067aba403447c5a0400f2fe9e7749fc4f74b60904c24583ea0972455f52931ed134466bfa14132ef210dcb7b9c4213cf517308517316d5e67cbe92f321b3d669500c13ef7dcbaa56ed07fcb153842edf7a198c93c895f042a7ffad17d08cf", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 7.981536166s ago: executing program 33 (id=749): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="3e759b566780226107050f9fc73a02699058b05eac604c39a4729408f276288487b7fa5cc4971f711a106733960b44899560b00a5f747bc51e3c38aac0c1cfee41d5516e1b53c8b60591ffd5ed9d9ae10a9815af1b68b4d6b6c25b8ba2ce9969824cf40bb0cc7eace1736a91ec60e12280", 0x71) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='ext4_unlink_enter\x00', r0}, 0x18) sync() syz_usb_connect(0x0, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b1945c40cd0cb300c8a901020301090209008a"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80000, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="3e759b566780226107050f9fc73a02699058b05eac604c39a4729408f276288487b7fa5cc4971f711a106733960b44899560b00a5f747bc51e3c38aac0c1cfee41d5516e1b53c8b60591ffd5ed9d9ae10a9815af1b68b4d6b6c25b8ba2ce9969824cf40bb0cc7eace1736a91ec60e12280", 0x71) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='ext4_unlink_enter\x00', r0}, 0x18) (async) sync() (async) syz_usb_connect(0x0, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b1945c40cd0cb300c8a901020301090209008a"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80000, 0x14) (async) 5.92113816s ago: executing program 1 (id=792): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007e8, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e755044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02042a000e000000000000000100000005000600320000000a004e2400000007ff0200000000000000000000000000010d0000000000000002000100000000000000fb020000000005000500320000000a"], 0x70}, 0x1, 0x7}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) 4.82847415s ago: executing program 1 (id=794): mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000ffd000/0x2000)=nil) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010026bd700000"], 0x14}}, 0x804c4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r4, 0x0, 0x7fff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x42081}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) 4.781927161s ago: executing program 34 (id=758): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="efca2a88655fc595c5faf7f5a2da98abed525a960c6ed31a58377197f032a96df8c1d03a1e1754768b92dd69", 0x2c}, {&(0x7f0000000180)="4ee6c632feea765074d23b4429cffc30409ce737bc222a7031130560d44241063713abff8cfe46c1ed7369d7b96fa9da66fe669ea6eeffef0936cce9310908240d52d331be32ede76108f8f7047dc5f9d8626630aa7cace32d6791caf667c151648d305e30fc26c45d0fefd9bd1373a3506bb71107a672443526d9d37281e560e007b893ab623365f779040ccf49a33acbf591fbf4bf2f13fcd792129bf9014c2109d71cbdd51f5b9b4f29cdcdcd4c68ec7548909e69f2272377", 0xba}, {&(0x7f0000000240)="8d56693ba7161535d54de9ad74336015566d4e3dc79494d78e584e20e58df4c43e70279589c2d14f26ad0dd1898b62ba633329a766f7364f1e0e14e9b2dc820af8c3b4e58ef02fd4767bf25dbf2b1640af011eaa5b1cf00ddcc5263031fe65fe362c714888a4bce1e8a33ecc5c346ff1be837a118a68ee562619dd28ca67a226165a9cb3ca2bf7c6e8ce082f784055acf8b5c87d69251b3a89c164f8f544bfe9d71dc957fd5a87163d91f1fe2c548a13c372c614fd5e49c9b13d694527197be5947c63bac9cc2bb8e7606226", 0xcc}, {&(0x7f0000000340)="12798701cb20d2bbee81c4a0f109e92d7d4b09fb3a83e2f5e76df28275b24604789c3a42e98a92bd1630da161b7895599683e885b35d108fbeb5dc0ce50c2410f03006b14c2c1f1ec600580de0e6f93cb2c9c4530141a8a6ce26ce4c7045ca81fdd221a485ea6afbaea893b42bcc8537402bc2616d494f39c496", 0x7a}], 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="30000000000000000100000007000000c8e675fd360000000000a2e01057dea3b4e0494d5a30726b153f5b00000000004800000000000000330200000600000035603cff9258c0c895749a6516de3d4594c155a97c7cb204af439c2306b0da353633396e8fe5075e653f3417a941aec304038c00000000005800000000000000110000000700000010732bdcaeffd2eb8e6ee2622168731ab8d76999f2ec6a831a9e95539f5191eedc6826a9ea01eeab4244e15da0b38d72935120e9077c3c6c3aed9ecf19e8c2ba3cf438260b515300"], 0xd0}, 0x40040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x4, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r6, 0x0) 2.89074939s ago: executing program 1 (id=800): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xae}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x5, 0x1, 0x3, 0x3, 0x9, 0x2000}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.744636896s ago: executing program 1 (id=802): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0xffffff6c, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0xc, 0xa0, 0xffffffff, 0xc, 0x2, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8a, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0xfffffffc, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x3, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xd, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x6, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0xc, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0xffffffff, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0x100a1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x10000401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) syz_emit_ethernet(0x124, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.842398866s ago: executing program 0 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001e0001000000000000009e0007", @ANYRESHEX], 0x24}}, 0x0) 1.699222404s ago: executing program 1 (id=805): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x24008099}, 0x0) 1.618566627s ago: executing program 1 (id=806): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100677265746170"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x38) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r5 = socket(0x28, 0x80000, 0xfffffffd) preadv2(r5, &(0x7f0000000680)=[{&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000200)=""/211, 0xd3}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000480)=""/2, 0x2}, {&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/229, 0xe5}], 0xa, 0x0, 0x553, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000680)=ANY=[], 0x0) 1.61800201s ago: executing program 0 (id=807): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="db6a17c67d10beecea12519c84fe5395a32ca73436ce6975b46e5aaff7be26a1dff05c02a3e57710a7289df43f1d96dc1910a0d0e141e1ffd99503fa87475cd9552b0de94dc481d078c634a329327a61d069e7afd887", 0x56}, {&(0x7f0000000440)="028d9a7c7dc3d9decf249e204d8fd31920b3ceaf81d132403d926018086f8183304c9ba0791798c013e7d20c659eaa2171981edb1c37928d2a466c7192bb0c5534672b04798af4bbb1486bdf1e9e49f862f7cb464c3cf7aaa2d18bd01ab0f21a0c65f36ca0696f91f6424b6b635e0ed21be4476746c0f666166dc302bacec49a795f97869cbf1c3a91e6ca5bbcf281433f54f005bbc0c9858beea8715b67fb97cbced0995c9220e5f14ddb7016abec23fb2d8a638b31b5d75053b5cd61f5a85b491da66c49ba32bf1d", 0xc9}, {&(0x7f0000000740)="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", 0x13e}], 0x3}}], 0x4, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="8c", 0x1}], 0x1}}], 0x1, 0x884) 1.44023083s ago: executing program 0 (id=808): io_setup(0x6, &(0x7f0000001380)=0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(r0, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfe}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfcfd, 0x1ff, 0xffffffffffffffff, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x0, r1}]) 1.088661572s ago: executing program 0 (id=809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x81}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200140600fe8000000000000000000005000000bbf68000010100000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 950.611392ms ago: executing program 0 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) wait4(0x0, 0x0, 0x40000000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x3, 0xb6a, 0x1, 0x101, 0xfffffff8, 0x9, 0xffdf}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x4010, r4, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 0 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): em_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.394437][ T30] audit: type=1400 audit(1746903172.283:374): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.420344][ T30] audit: type=1400 audit(1746903172.283:375): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.550137][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 211.628348][ T7467] chnl_net:caif_netlink_parms(): no params data found [ 211.700282][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 211.707035][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.721248][ T5814] Bluetooth: hci5: command tx timeout [ 211.725319][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 211.738425][ T5896] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 211.749442][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.759452][ T5896] usb 1-1: Product: syz [ 211.778719][ T5896] usb 1-1: Manufacturer: syz [ 211.783822][ T5896] usb 1-1: SerialNumber: syz [ 211.799840][ T5896] usb 1-1: config 0 descriptor?? [ 211.807336][ T5896] hub 1-1:0.0: bad descriptor, ignoring hub [ 211.813448][ T5896] hub 1-1:0.0: probe with driver hub failed with error -5 [ 211.903719][ T5896] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 211.924629][ T6423] usb 1-1: Failed to submit usb control message: -71 [ 211.937133][ T6423] usb 1-1: unable to send the bmi data to the device: -71 [ 212.663332][ T6423] usb 1-1: unable to get target info from device [ 212.674223][ T7484] [U] è [ 212.679038][ T6423] usb 1-1: could not get target info (-71) [ 212.746999][ T6423] usb 1-1: could not probe fw (-71) [ 212.780354][ T5896] usb 1-1: USB disconnect, device number 13 [ 212.787023][ T5866] usb 5-1: USB disconnect, device number 14 [ 212.889667][ T7518] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=7518 comm=syz.4.405 [ 212.969301][ T7519] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 212.979654][ T7519] VFS: Can't find a romfs filesystem on dev nullb0. [ 212.979654][ T7519] [ 213.424542][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.444256][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.464581][ T7467] bridge_slave_0: entered allmulticast mode [ 213.481701][ T7467] bridge_slave_0: entered promiscuous mode [ 213.509181][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.530367][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.537608][ T7467] bridge_slave_1: entered allmulticast mode [ 213.561358][ T7467] bridge_slave_1: entered promiscuous mode [ 213.740597][ T7527] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 213.749609][ T7527] VFS: Can't find a romfs filesystem on dev nullb0. [ 213.749609][ T7527] [ 213.786994][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 213.787023][ T30] audit: type=1400 audit(1746903174.793:405): avc: denied { connect } for pid=7522 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.820870][ T5814] Bluetooth: hci5: command tx timeout [ 214.143331][ T30] audit: type=1400 audit(1746903174.933:406): avc: denied { write } for pid=7522 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.179536][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.192100][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.217327][ T30] audit: type=1400 audit(1746903175.283:407): avc: denied { read } for pid=7529 comm="syz.1.408" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.326928][ T7531] hfs: can't find a HFS filesystem on dev nullb0 [ 214.670218][ T30] audit: type=1400 audit(1746903175.283:408): avc: denied { open } for pid=7529 comm="syz.1.408" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.693595][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.780365][ T30] audit: type=1400 audit(1746903175.813:409): avc: denied { create } for pid=7532 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.809499][ T7467] team0: Port device team_slave_0 added [ 214.818842][ T30] audit: type=1400 audit(1746903175.813:410): avc: denied { read } for pid=7533 comm="syz.2.409" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.540241][ T30] audit: type=1400 audit(1746903175.813:411): avc: denied { open } for pid=7533 comm="syz.2.409" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.563089][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.569677][ T30] audit: type=1400 audit(1746903175.823:412): avc: denied { ioctl } for pid=7533 comm="syz.2.409" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.594023][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.618101][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 215.628957][ T7467] team0: Port device team_slave_1 added [ 215.651317][ T30] audit: type=1400 audit(1746903175.833:413): avc: denied { read } for pid=7532 comm="syz.0.410" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.654531][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 215.691668][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.733031][ T30] audit: type=1400 audit(1746903175.833:414): avc: denied { open } for pid=7532 comm="syz.0.410" path="net:[4026532810]" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.764980][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.843596][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.881803][ T5814] Bluetooth: hci5: command tx timeout [ 215.890343][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.897318][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.941959][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.230315][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 216.244908][ T7467] hsr_slave_0: entered promiscuous mode [ 216.269262][ T7467] hsr_slave_1: entered promiscuous mode [ 216.315835][ T7467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.324661][ T7467] Cannot create hsr debugfs directory [ 216.343350][ T7554] input: syz1 as /devices/virtual/input/input10 [ 216.790141][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 216.818103][ T5896] usb 2-1: config index 0 descriptor too short (expected 19739, got 27) [ 216.841178][ T5896] usb 2-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 216.902933][ T5896] usb 2-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 216.915558][ T5896] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 216.929200][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.937394][ T5896] usb 2-1: Product: syz [ 216.941619][ T5896] usb 2-1: Manufacturer: syz [ 216.946242][ T5896] usb 2-1: SerialNumber: syz [ 217.682517][ T7568] hfs: can't find a HFS filesystem on dev nullb0 [ 217.938527][ T7571] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 217.960978][ T5814] Bluetooth: hci5: command tx timeout [ 217.996516][ T7571] bond1: entered promiscuous mode [ 218.062351][ T7571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.175372][ T7576] bond1: (slave bridge1): making interface the new active one [ 218.183477][ T7576] bridge1: entered promiscuous mode [ 218.195247][ T7576] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 218.357706][ T7580] Cannot find add_set index 0 as target [ 218.489606][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 218.498641][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 219.279978][ T5896] usb 2-1: USB disconnect, device number 7 [ 219.313568][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 219.313583][ T30] audit: type=1400 audit(1746903180.383:451): avc: denied { read write } for pid=7589 comm="syz.0.427" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 219.417895][ T30] audit: type=1400 audit(1746903180.383:452): avc: denied { open } for pid=7589 comm="syz.0.427" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 219.426287][ T7467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.447550][ T30] audit: type=1400 audit(1746903180.413:453): avc: denied { mounton } for pid=7589 comm="syz.0.427" path="/81/file0" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.472554][ T30] audit: type=1400 audit(1746903180.433:454): avc: denied { mount } for pid=7589 comm="syz.0.427" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 219.515266][ T7467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.526667][ T7596] overlay: ./file0 is not a directory [ 219.535002][ T30] audit: type=1400 audit(1746903180.593:455): avc: denied { mounton } for pid=7589 comm="syz.0.427" path="/81/bus" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 219.584679][ T7467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.598404][ T7467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.820500][ T47] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 219.998885][ T47] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.012995][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.015146][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 220.019910][ T47] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 220.040688][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.051187][ T47] usb 1-1: config 0 descriptor?? [ 220.057664][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.083022][ T7467] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.090926][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 220.099932][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.107086][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.123165][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.130344][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.173448][ T7467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.192962][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 220.207820][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.218226][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.232073][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.242490][ T30] audit: type=1400 audit(1746903181.303:456): avc: denied { sys_module } for pid=7467 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 220.242834][ T10] usb 3-1: Product: syz [ 220.269032][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 220.289587][ T10] usb 3-1: Manufacturer: syz [ 220.295519][ T10] usb 3-1: SerialNumber: syz [ 220.306765][ T10] usb 3-1: config 0 descriptor?? [ 220.318424][ T10] usb 3-1: selecting invalid altsetting 0 [ 220.368736][ T5896] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 220.411640][ T5896] usb 2-1: config 0 has no interface number 0 [ 220.443337][ T5896] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 220.469601][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.510250][ T5896] usb 2-1: Product: syz [ 220.518076][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.531706][ T5896] usb 2-1: Manufacturer: syz [ 220.536317][ T5896] usb 2-1: SerialNumber: syz [ 220.551097][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.581227][ T5896] usb 2-1: config 0 descriptor?? [ 220.596838][ T10] usb 3-1: USB disconnect, device number 14 [ 220.616434][ T5896] hub 2-1:0.89: bad descriptor, ignoring hub [ 220.649135][ T5896] hub 2-1:0.89: probe with driver hub failed with error -5 [ 220.702878][ T5896] option 2-1:0.89: GSM modem (1-port) converter detected [ 220.710209][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.780682][ T7608] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 220.791570][ T7608] VFS: Can't find a romfs filesystem on dev nullb0. [ 220.791570][ T7608] [ 221.134202][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 221.167694][ T5896] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 221.188339][ T7586] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 221.508623][ T30] audit: type=1400 audit(1746903182.573:457): avc: denied { name_bind } for pid=7585 comm="syz.1.425" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 221.966212][ T7624] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 221.976342][ T7624] VFS: Can't find a romfs filesystem on dev nullb0. [ 221.976342][ T7624] [ 222.372794][ T7467] veth0_vlan: entered promiscuous mode [ 222.536372][ T7626] hfs: can't find a HFS filesystem on dev nullb0 [ 222.760527][ T7467] veth1_vlan: entered promiscuous mode [ 222.945033][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 222.964209][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 222.988289][ T30] audit: type=1400 audit(1746903184.053:458): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 222.995011][ T47] usb 1-1: USB disconnect, device number 14 [ 223.008216][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.034392][ T7467] veth0_macvtap: entered promiscuous mode [ 223.048937][ T7467] veth1_macvtap: entered promiscuous mode [ 223.094715][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.111478][ T7633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.436'. [ 223.119965][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.150408][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.171603][ T7633] netlink: 59 bytes leftover after parsing attributes in process `syz.0.436'. [ 223.178135][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.192494][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.223618][ T7633] netlink: 59 bytes leftover after parsing attributes in process `syz.0.436'. [ 223.295392][ T7634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.436'. [ 223.310256][ T5816] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 223.338337][ T7634] netlink: 59 bytes leftover after parsing attributes in process `syz.0.436'. [ 223.347211][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.357832][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.369360][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.378865][ T7634] netlink: 59 bytes leftover after parsing attributes in process `syz.0.436'. [ 223.379520][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.399264][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.415194][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.487217][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 223.496699][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 223.873893][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.912066][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.937770][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.965914][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.992792][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.003641][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 224.016061][ T5816] usb 3-1: config index 0 descriptor too short (expected 19739, got 27) [ 224.026119][ T5816] usb 3-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 224.036623][ T5816] usb 3-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 224.048356][ T5816] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 224.058434][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.066577][ T5816] usb 3-1: Product: syz [ 224.070782][ T5816] usb 3-1: Manufacturer: syz [ 224.075371][ T5816] usb 3-1: SerialNumber: syz [ 224.101857][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.111759][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.123618][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.133838][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.144328][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.172930][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.206085][ T7467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.236828][ T7467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.252772][ T7467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.270274][ T7467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.420266][ T47] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 224.420482][ T10] usb 2-1: USB disconnect, device number 8 [ 224.464355][ T10] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 224.474203][ T30] audit: type=1400 audit(1746903185.543:459): avc: denied { getopt } for pid=7648 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.495820][ T10] option 2-1:0.89: device disconnected [ 224.518016][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.582019][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.646299][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.673219][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.689305][ T30] audit: type=1400 audit(1746903185.753:460): avc: denied { mounton } for pid=7467 comm="syz-executor" path="/root/syzkaller.OfefsF/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 224.759821][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.942897][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.961963][ T47] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 224.974005][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.073031][ T30] audit: type=1400 audit(1746903185.753:461): avc: denied { mount } for pid=7467 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 225.099228][ T47] usb 5-1: config 0 descriptor?? [ 225.101684][ T30] audit: type=1400 audit(1746903185.763:462): avc: denied { mount } for pid=7467 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.133397][ T30] audit: type=1400 audit(1746903185.763:463): avc: denied { mounton } for pid=7467 comm="syz-executor" path="/root/syzkaller.OfefsF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 225.176702][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 225.212734][ T30] audit: type=1400 audit(1746903185.763:464): avc: denied { mounton } for pid=7467 comm="syz-executor" path="/root/syzkaller.OfefsF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 225.241427][ T30] audit: type=1400 audit(1746903185.773:465): avc: denied { unmount } for pid=7467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 225.261946][ T30] audit: type=1400 audit(1746903185.943:466): avc: denied { ioctl } for pid=7648 comm="syz.0.441" path="socket:[14843]" dev="sockfs" ino=14843 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.298227][ T30] audit: type=1400 audit(1746903185.963:467): avc: denied { name_bind } for pid=7648 comm="syz.0.441" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 225.401749][ T7644] openvswitch: netlink: Missing valid actions attribute. [ 225.567827][ T7644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.668719][ T30] audit: type=1400 audit(1746903185.973:468): avc: denied { node_bind } for pid=7648 comm="syz.0.441" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 226.499124][ T47] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 226.537579][ T47] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 226.554093][ T5816] usb 3-1: USB disconnect, device number 15 [ 226.711032][ T47] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 227.953089][ T7689] __nla_validate_parse: 1 callbacks suppressed [ 227.953106][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 227.974431][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 227.985885][ T7689] netlink: 'syz.2.450': attribute type 3 has an invalid length. [ 227.993572][ T7689] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 228.099578][ T47] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 228.191577][ T47] usb 5-1: USB disconnect, device number 15 [ 228.991215][ T7708] hfs: can't find a HFS filesystem on dev nullb0 [ 229.350202][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.641406][ T47] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.673519][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 229.816357][ T10] usb 2-1: config index 0 descriptor too short (expected 19739, got 27) [ 230.062031][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 230.208959][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 230.270383][ T30] audit: type=1400 audit(1746903191.233:483): avc: denied { setopt } for pid=7713 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 230.291567][ T47] usb 5-1: config index 0 descriptor too short (expected 19739, got 27) [ 230.301467][ T47] usb 5-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 230.312131][ T47] usb 5-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 230.324032][ T47] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 230.335824][ T10] usb 2-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 230.335829][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.335849][ T47] usb 5-1: Product: syz [ 230.361453][ T47] usb 5-1: Manufacturer: syz [ 230.366765][ T47] usb 5-1: SerialNumber: syz [ 230.396773][ T30] audit: type=1400 audit(1746903191.463:484): avc: denied { create } for pid=7720 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.419788][ T10] usb 2-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 230.434264][ T30] audit: type=1400 audit(1746903191.463:485): avc: denied { ioctl } for pid=7720 comm="syz.0.461" path="socket:[15891]" dev="sockfs" ino=15891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.645347][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 230.648149][ T30] audit: type=1400 audit(1746903191.683:486): avc: denied { connect } for pid=7683 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.008722][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.030456][ T10] usb 2-1: Product: syz [ 231.064277][ T10] usb 2-1: Manufacturer: syz [ 231.068760][ T30] audit: type=1400 audit(1746903191.683:487): avc: denied { getopt } for pid=7683 comm="syz.5.451" lport=55259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.090028][ T30] audit: type=1400 audit(1746903191.683:488): avc: denied { create } for pid=7683 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 231.177661][ T10] usb 2-1: SerialNumber: syz [ 231.219398][ T30] audit: type=1400 audit(1746903192.283:489): avc: denied { create } for pid=7726 comm="syz.2.462" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 231.250101][ C0] hrtimer: interrupt took 45100 ns [ 231.431600][ T30] audit: type=1400 audit(1746903192.483:490): avc: denied { write } for pid=7726 comm="syz.2.462" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 231.746133][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.463'. [ 231.754981][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.463'. [ 232.308642][ T7729] Invalid source name [ 232.312959][ T7729] UBIFS error (pid: 7729): cannot open "./file0", error -22 [ 232.366414][ T30] audit: type=1400 audit(1746903193.373:491): avc: denied { mounton } for pid=7726 comm="syz.2.462" path="/88/file0" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.472305][ T10] usb 2-1: USB disconnect, device number 9 [ 234.273057][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 234.465421][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 234.810813][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 234.923246][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.934733][ T24] usb 2-1: config 0 descriptor?? [ 234.971650][ T24] pwc: Philips SPC 900NC USB webcam detected. [ 235.130270][ T30] audit: type=1400 audit(1746903196.123:492): avc: denied { create } for pid=7746 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.417316][ T7738] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 235.480212][ T30] audit: type=1400 audit(1746903196.133:493): avc: denied { read write } for pid=7746 comm="syz.5.468" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 235.607101][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 235.629884][ T47] usb 5-1: USB disconnect, device number 16 [ 235.686092][ T30] audit: type=1400 audit(1746903196.133:494): avc: denied { open } for pid=7746 comm="syz.5.468" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 235.710550][ T30] audit: type=1400 audit(1746903196.133:495): avc: denied { ioctl } for pid=7746 comm="syz.5.468" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 235.736042][ T30] audit: type=1400 audit(1746903196.553:496): avc: denied { unlink } for pid=5819 comm="syz-executor" name="file0" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.201263][ T7762] hfs: can't find a HFS filesystem on dev nullb0 [ 236.382677][ T30] audit: type=1400 audit(1746903197.443:497): avc: denied { name_bind } for pid=7755 comm="syz.2.471" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 236.494654][ T24] pwc: Failed to set LED on/off time (-71) [ 236.665223][ T24] pwc: send_video_command error -71 [ 236.683378][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 236.720550][ T24] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 236.842461][ T30] audit: type=1400 audit(1746903197.873:498): avc: denied { bind } for pid=7765 comm="syz.5.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.918947][ T24] usb 2-1: USB disconnect, device number 10 [ 237.095119][ T30] audit: type=1400 audit(1746903197.873:499): avc: denied { write } for pid=7765 comm="syz.5.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.995912][ T7786] overlayfs: failed to resolve './file0': -2 [ 238.033577][ T4000] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.176689][ T47] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 238.352911][ T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 238.414035][ T4000] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.434890][ T4000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.448396][ T4000] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.471664][ T4000] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.481438][ T4000] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.489448][ T4000] usb 1-1: Product: syz [ 238.495699][ T4000] usb 1-1: Manufacturer: syz [ 238.500698][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 238.508372][ T47] usb 3-1: config index 0 descriptor too short (expected 19739, got 27) [ 238.519994][ T47] usb 3-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 238.532038][ T47] usb 3-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 238.542850][ T4000] cdc_wdm 1-1:1.0: skipping garbage [ 238.548104][ T4000] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 238.558571][ T47] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 238.578516][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.594906][ T47] usb 3-1: Product: syz [ 238.599490][ T47] usb 3-1: Manufacturer: syz [ 238.604404][ T47] usb 3-1: SerialNumber: syz [ 238.610046][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.622189][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'. [ 238.626057][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 238.639199][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'. [ 238.646979][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 238.659537][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.670566][ T24] usb 5-1: config 0 descriptor?? [ 238.689089][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 238.696319][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 238.707129][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 238.710263][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.720655][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 238.732919][ T24] usb 5-1: media controller created [ 238.739844][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.769942][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 238.777860][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 238.793050][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 239.010174][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 239.023466][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 239.025710][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 239.038946][ T10] usb 2-1: config 0 has no interface number 0 [ 239.044690][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 239.051744][ T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 239.514835][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 239.524569][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.540035][ T10] usb 2-1: Product: syz [ 239.544923][ T10] usb 2-1: Manufacturer: syz [ 239.551420][ T10] usb 2-1: SerialNumber: syz [ 239.559786][ T10] usb 2-1: config 0 descriptor?? [ 239.574704][ T24] dvb-usb: error while querying for an remote control event. [ 239.578935][ T10] hub 2-1:0.89: bad descriptor, ignoring hub [ 239.613737][ T10] hub 2-1:0.89: probe with driver hub failed with error -5 [ 239.630012][ T10] option 2-1:0.89: GSM modem (1-port) converter detected [ 239.663145][ T10] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 239.766799][ T10] usb 5-1: USB disconnect, device number 17 [ 239.819188][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 239.904188][ T24] usb 1-1: USB disconnect, device number 15 [ 239.968071][ T47] usb 3-1: USB disconnect, device number 16 [ 240.239833][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 240.248774][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 241.160800][ T6129] block nbd2: Possible stuck request ffff888026215080: control (read@0,4096B). Runtime 90 seconds [ 241.484430][ T7814] hfs: can't find a HFS filesystem on dev nullb0 [ 241.788904][ T30] audit: type=1400 audit(1746903202.853:500): avc: denied { getopt } for pid=7817 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.808312][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.126956][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 242.633093][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.151012][ T9] usb 2-1: USB disconnect, device number 11 [ 243.283922][ T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 243.293798][ T9] option 2-1:0.89: device disconnected [ 243.340191][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 243.564263][ T10] usb 5-1: config index 0 descriptor too short (expected 19739, got 27) [ 243.575579][ T10] usb 5-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 243.594162][ T10] usb 5-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 243.618390][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 243.654457][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.706584][ T10] usb 5-1: Product: syz [ 243.718815][ T10] usb 5-1: Manufacturer: syz [ 243.726262][ T10] usb 5-1: SerialNumber: syz [ 243.927002][ T7843] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 243.936486][ T7843] VFS: Can't find a romfs filesystem on dev nullb0. [ 243.936486][ T7843] [ 244.248710][ T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 244.466081][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 244.503965][ T47] usb 6-1: config index 0 descriptor too short (expected 19739, got 27) [ 244.577070][ T47] usb 6-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 244.607352][ T47] usb 6-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 244.643196][ T47] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 244.697611][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.708448][ T47] usb 6-1: Product: syz [ 244.715298][ T47] usb 6-1: Manufacturer: syz [ 244.719979][ T47] usb 6-1: SerialNumber: syz [ 245.329854][ T30] audit: type=1400 audit(1746903205.803:501): avc: denied { create } for pid=7849 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.390948][ T10] usb 5-1: USB disconnect, device number 18 [ 245.427378][ T30] audit: type=1400 audit(1746903205.803:502): avc: denied { bind } for pid=7849 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.267351][ T7866] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 246.278393][ T7866] VFS: Can't find a romfs filesystem on dev nullb0. [ 246.278393][ T7866] [ 247.607826][ T30] audit: type=1400 audit(1746903208.033:503): avc: denied { create } for pid=7869 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.735097][ T47] usb 6-1: USB disconnect, device number 2 [ 248.739672][ T30] audit: type=1400 audit(1746903209.803:504): avc: denied { write } for pid=7881 comm="syz.5.506" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.770678][ T7885] Invalid logical block size (8210) [ 248.854416][ T30] audit: type=1400 audit(1746903209.843:505): avc: denied { append } for pid=7873 comm="syz.2.504" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.255824][ T7891] lo speed is unknown, defaulting to 1000 [ 250.350723][ T5898] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 251.060202][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 251.069140][ T5898] usb 3-1: config index 0 descriptor too short (expected 19739, got 27) [ 251.102127][ T5898] usb 3-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 251.160012][ T5898] usb 3-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 251.194089][ T5898] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 251.219232][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.239503][ T5898] usb 3-1: Product: syz [ 251.268800][ T5898] usb 3-1: Manufacturer: syz [ 251.290517][ T5898] usb 3-1: SerialNumber: syz [ 251.397659][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 251.595151][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 251.605404][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 252.010347][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 252.660719][ T4000] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 252.932012][ T4000] usb 1-1: Using ep0 maxpacket: 32 [ 252.998543][ T4000] usb 1-1: config index 0 descriptor too short (expected 19739, got 27) [ 253.060823][ T4000] usb 1-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 253.077600][ T4000] usb 1-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 253.082493][ T5898] usb 3-1: USB disconnect, device number 17 [ 253.197153][ T4000] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 253.252216][ T4000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.366743][ T4000] usb 1-1: Product: syz [ 253.387690][ T4000] usb 1-1: Manufacturer: syz [ 253.395532][ T4000] usb 1-1: SerialNumber: syz [ 254.425359][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 254.486734][ T30] audit: type=1800 audit(1746903215.553:506): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.520" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 254.624991][ T7951] warning: `syz.1.523' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 254.674441][ T30] audit: type=1400 audit(1746903215.743:507): avc: denied { ioctl } for pid=7943 comm="syz.2.521" path="socket:[16560]" dev="sockfs" ino=16560 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 254.834598][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.868647][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.952740][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 255.483980][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.490571][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.753675][ T4000] usb 1-1: USB disconnect, device number 16 [ 256.070242][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 256.097874][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 256.311091][ T7969] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 256.432126][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 256.470722][ T10] usb 2-1: config index 0 descriptor too short (expected 19739, got 27) [ 256.925473][ T10] usb 2-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 256.940386][ T10] usb 2-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 257.013492][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 257.041983][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.049979][ T10] usb 2-1: Product: syz [ 257.067804][ T10] usb 2-1: Manufacturer: syz [ 257.126181][ T10] usb 2-1: SerialNumber: syz [ 257.362012][ T30] audit: type=1400 audit(1746903218.433:508): avc: denied { read write } for pid=7986 comm="syz.4.533" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.386002][ T30] audit: type=1400 audit(1746903218.433:509): avc: denied { open } for pid=7986 comm="syz.4.533" path="/103/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.482965][ T30] audit: type=1400 audit(1746903218.433:510): avc: denied { mounton } for pid=7986 comm="syz.4.533" path="/103/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.531320][ T30] audit: type=1400 audit(1746903218.433:511): avc: denied { mount } for pid=7986 comm="syz.4.533" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 257.604604][ T30] audit: type=1400 audit(1746903218.643:512): avc: denied { mount } for pid=7986 comm="syz.4.533" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 257.628095][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.554338][ T10] usb 2-1: USB disconnect, device number 12 [ 258.859467][ T30] audit: type=1400 audit(1746903219.923:513): avc: denied { create } for pid=8003 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 258.878675][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.928543][ T30] audit: type=1400 audit(1746903219.963:514): avc: denied { create } for pid=8003 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 259.412739][ T4000] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 259.780163][ T5898] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 260.340543][ T4000] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 260.480164][ T4000] usb 3-1: config 0 has no interface number 0 [ 260.492105][ T4000] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 260.517418][ T4000] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.520598][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 260.551070][ T5898] usb 1-1: config index 0 descriptor too short (expected 19739, got 27) [ 260.613292][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 260.622234][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 260.973535][ T5898] usb 1-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 261.010422][ T5898] usb 1-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 261.161784][ T5898] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 261.172104][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.180496][ T5898] usb 1-1: Product: syz [ 261.185014][ T5898] usb 1-1: Manufacturer: syz [ 261.189623][ T5898] usb 1-1: SerialNumber: syz [ 261.260938][ T4000] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 261.357084][ T4000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.405989][ T4000] usb 3-1: Product: syz [ 261.428961][ T4000] usb 3-1: Manufacturer: syz [ 261.444658][ T4000] usb 3-1: SerialNumber: syz [ 261.484270][ T4000] usb 3-1: config 0 descriptor?? [ 261.490713][ T8015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 261.659907][ T4000] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 261.675485][ T30] audit: type=1400 audit(1746903222.743:515): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 261.695676][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.773440][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'. [ 261.782433][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'. [ 262.116932][ T4000] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 262.758198][ T4000] usb 3-1: USB disconnect, device number 18 [ 262.940350][ T5898] usb 1-1: USB disconnect, device number 17 [ 262.956884][ T4000] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 263.008296][ T30] audit: type=1400 audit(1746903224.073:516): avc: denied { connect } for pid=8048 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.027942][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.158434][ T4000] cyberjack 3-1:0.69: device disconnected [ 263.249327][ T8053] syz2: rxe_newlink: already configured on lo [ 263.510966][ T8053] netlink: 'syz.4.544': attribute type 1 has an invalid length. [ 263.518693][ T8053] netlink: 224 bytes leftover after parsing attributes in process `syz.4.544'. [ 263.625374][ T8055] loop9: detected capacity change from 0 to 7 [ 263.691081][ T8051] hfs: can't find a HFS filesystem on dev nullb0 [ 263.697236][ T30] audit: type=1400 audit(1746903224.543:517): avc: denied { write } for pid=8048 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.697840][ T8055] Dev loop9: unable to read RDB block 7 [ 263.724065][ T8055] loop9: unable to read partition table [ 263.729857][ T8055] loop9: partition table beyond EOD, truncated [ 263.736060][ T8055] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 264.617862][ T8059] input: syz1 as /devices/virtual/input/input12 [ 264.809108][ T30] audit: type=1400 audit(1746903225.873:518): avc: denied { bind } for pid=8063 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 264.828137][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.504878][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 265.755287][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.900233][ T30] audit: type=1400 audit(1746903225.873:519): avc: denied { setopt } for pid=8063 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.923350][ T30] audit: type=1400 audit(1746903225.913:520): avc: denied { accept } for pid=8063 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.942904][ T30] audit: type=1400 audit(1746903225.913:521): avc: denied { write } for pid=8063 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 266.097056][ T30] audit: type=1400 audit(1746903225.913:522): avc: denied { read } for pid=8063 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 266.453331][ T30] audit: type=1400 audit(1746903226.123:523): avc: denied { setopt } for pid=8066 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.475335][ T30] audit: type=1400 audit(1746903226.133:524): avc: denied { map } for pid=8066 comm="syz.5.551" path="socket:[17936]" dev="sockfs" ino=17936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.486285][ T4000] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 267.650837][ T4000] usb 3-1: Using ep0 maxpacket: 32 [ 267.805687][ T8103] hfs: can't find a HFS filesystem on dev nullb0 [ 267.829709][ T4000] usb 3-1: config index 0 descriptor too short (expected 19739, got 27) [ 267.941599][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 267.941613][ T30] audit: type=1400 audit(1746903229.003:527): avc: denied { setopt } for pid=8095 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.010443][ T4000] usb 3-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 268.044458][ T4000] usb 3-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 268.082464][ T4000] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 268.122546][ T4000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.174321][ T4000] usb 3-1: Product: syz [ 268.181366][ T30] audit: type=1400 audit(1746903229.253:528): avc: denied { create } for pid=8113 comm="syz.5.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 268.183714][ T4000] usb 3-1: Manufacturer: syz [ 268.428753][ T8120] netlink: 'syz.4.563': attribute type 3 has an invalid length. [ 268.474478][ T4000] usb 3-1: SerialNumber: syz [ 268.584882][ T30] audit: type=1400 audit(1746903229.273:529): avc: denied { setopt } for pid=8113 comm="syz.5.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 268.606577][ T30] audit: type=1400 audit(1746903229.273:530): avc: denied { ioctl } for pid=8113 comm="syz.5.566" path="socket:[18086]" dev="sockfs" ino=18086 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 268.764525][ T5816] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 269.347065][ T5816] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.356635][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.421139][ T5816] usb 6-1: Product: syz [ 269.426675][ T5816] usb 6-1: Manufacturer: syz [ 269.498535][ T5816] usb 6-1: SerialNumber: syz [ 269.550149][ T47] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 269.948496][ T5816] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.287396][ T4000] usb 3-1: USB disconnect, device number 19 [ 270.341970][ T47] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.388934][ T30] audit: type=1400 audit(1746903231.433:531): avc: denied { firmware_load } for pid=5866 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 270.416905][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.436491][ T47] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.457064][ T5866] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.476255][ T47] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.487757][ T47] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.496074][ T47] usb 2-1: Product: syz [ 270.501553][ T47] usb 2-1: Manufacturer: syz [ 270.523863][ T30] audit: type=1400 audit(1746903231.573:532): avc: denied { write } for pid=8139 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 270.588709][ T47] cdc_wdm 2-1:1.0: skipping garbage [ 270.594184][ T47] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 270.610813][ T5898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 270.899276][ T4000] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 271.120252][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 271.135034][ T5898] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 271.146204][ T5898] usb 1-1: config 0 has no interface number 0 [ 271.157910][ T5898] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 271.173204][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.186702][ T5898] usb 1-1: Product: syz [ 271.193527][ T5898] usb 1-1: Manufacturer: syz [ 271.198403][ T5898] usb 1-1: SerialNumber: syz [ 271.219825][ T5898] usb 1-1: config 0 descriptor?? [ 271.236192][ T5898] hub 1-1:0.89: bad descriptor, ignoring hub [ 271.243445][ T5898] hub 1-1:0.89: probe with driver hub failed with error -5 [ 271.255372][ T5898] option 1-1:0.89: GSM modem (1-port) converter detected [ 271.269080][ T5898] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 271.632973][ T6129] block nbd2: Possible stuck request ffff888026215080: control (read@0,4096B). Runtime 120 seconds [ 272.004782][ T5866] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 272.047953][ T5866] ath9k_htc: Failed to initialize the device [ 272.242443][ T5898] usb 2-1: USB disconnect, device number 13 [ 272.941826][ T5816] usb 6-1: USB disconnect, device number 3 [ 273.056205][ T5816] usb 6-1: ath9k_htc: USB layer deinitialized [ 273.063168][ T4000] usb 3-1: Using ep0 maxpacket: 16 [ 273.084842][ T4000] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 273.248574][ T4000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.274656][ T4000] usb 3-1: Product: syz [ 273.285906][ T4000] usb 3-1: Manufacturer: syz [ 273.302290][ T4000] usb 3-1: SerialNumber: syz [ 273.322316][ T4000] usb 3-1: config 0 descriptor?? [ 273.333228][ T4000] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 273.878209][ T4000] pwc: Warning: more than 1 configuration available. [ 273.887998][ T4000] pwc: Failed to set LED on/off time (-71) [ 273.896134][ T4000] pwc: send_video_command error -71 [ 273.914429][ T4000] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 273.924495][ T4000] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 274.012949][ T4000] usb 3-1: USB disconnect, device number 20 [ 274.041876][ T5866] usb 1-1: USB disconnect, device number 18 [ 274.110133][ T8165] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 274.158838][ T5866] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 274.656976][ T5866] option 1-1:0.89: device disconnected [ 275.665792][ T8165] usb 5-1: Using ep0 maxpacket: 32 [ 275.688553][ T8165] usb 5-1: config index 0 descriptor too short (expected 19739, got 27) [ 275.736449][ T8165] usb 5-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 275.867485][ T8165] usb 5-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 275.890816][ T8165] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 275.899887][ T8165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.107494][ T8165] usb 5-1: Product: syz [ 276.116587][ T8165] usb 5-1: Manufacturer: syz [ 276.124272][ T8165] usb 5-1: SerialNumber: syz [ 276.534006][ T5866] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 276.589888][ T8165] usb 5-1: can't set config #239, error -71 [ 276.598925][ T8165] usb 5-1: USB disconnect, device number 19 [ 276.730334][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 276.746478][ T5866] usb 1-1: config index 0 descriptor too short (expected 19739, got 27) [ 276.757521][ T5866] usb 1-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 276.780748][ T5866] usb 1-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 276.821983][ T5866] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 276.882566][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.905689][ T5866] usb 1-1: Product: syz [ 276.915007][ T5866] usb 1-1: Manufacturer: syz [ 276.989050][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 276.998058][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 277.411915][ T5866] usb 1-1: SerialNumber: syz [ 277.465159][ T5866] usb 1-1: can't set config #239, error -71 [ 277.499245][ T30] audit: type=1400 audit(1746903238.543:533): avc: denied { create } for pid=8211 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.570510][ T5866] usb 1-1: USB disconnect, device number 19 [ 277.580283][ T30] audit: type=1400 audit(1746903238.593:534): avc: denied { connect } for pid=8211 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.609415][ T30] audit: type=1400 audit(1746903238.603:535): avc: denied { bind } for pid=8211 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.645879][ T30] audit: type=1400 audit(1746903238.633:536): avc: denied { listen } for pid=8211 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.902937][ T79] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.930360][ T8165] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 278.062980][ T79] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.100317][ T8165] usb 2-1: device descriptor read/64, error -71 [ 278.169959][ T79] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.305835][ T79] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.426664][ T8165] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 278.920424][ T8165] usb 2-1: device descriptor read/64, error -71 [ 279.005120][ T30] audit: type=1400 audit(1746903240.073:537): avc: denied { read } for pid=8240 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 279.028235][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.111809][ T30] audit: type=1400 audit(1746903240.153:538): avc: denied { open } for pid=8240 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 279.111961][ T8165] usb usb2-port1: attempt power cycle [ 279.162370][ T5125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.174239][ T5125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.220260][ T5125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.239852][ T5125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.250398][ T5125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.266851][ T30] audit: type=1400 audit(1746903240.333:539): avc: denied { mounton } for pid=8240 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 279.288210][ T8240] lo speed is unknown, defaulting to 1000 [ 279.339907][ T79] bridge_slave_1: left allmulticast mode [ 279.371395][ T79] bridge_slave_1: left promiscuous mode [ 279.394845][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.571591][ T8165] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 279.578392][ T79] bridge_slave_0: left allmulticast mode [ 279.645724][ T8165] usb 2-1: device descriptor read/8, error -71 [ 279.666738][ T79] bridge_slave_0: left promiscuous mode [ 279.782615][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.887816][ T30] audit: type=1400 audit(1746903240.943:540): avc: denied { read } for pid=8254 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.910792][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.949558][ T8165] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 279.978423][ T30] audit: type=1400 audit(1746903240.943:541): avc: denied { open } for pid=8254 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.025712][ T8165] usb 2-1: device descriptor read/8, error -71 [ 280.053889][ T30] audit: type=1400 audit(1746903240.943:542): avc: denied { getattr } for pid=8254 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.079122][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.145625][ T8165] usb usb2-port1: unable to enumerate USB device [ 280.170171][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 280.352231][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 280.374102][ T9] usb 1-1: config index 0 descriptor too short (expected 19739, got 27) [ 280.382919][ T9] usb 1-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 280.393674][ T9] usb 1-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 280.405576][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 280.414898][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.423313][ T9] usb 1-1: Product: syz [ 280.427824][ T9] usb 1-1: Manufacturer: syz [ 280.432689][ T9] usb 1-1: SerialNumber: syz [ 281.051780][ T9] usb 1-1: USB disconnect, device number 20 [ 281.321946][ T5814] Bluetooth: hci5: command tx timeout [ 281.605159][ T8290] netlink: 'syz.1.606': attribute type 3 has an invalid length. [ 282.703833][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 282.712682][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 282.970724][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.995341][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.136402][ T79] bond0 (unregistering): Released all slaves [ 283.411800][ T5814] Bluetooth: hci5: command tx timeout [ 283.501959][ T8283] tipc: Enabling of bearer rejected, failed to enable media [ 283.564684][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 283.564698][ T30] audit: type=1400 audit(1746903244.633:550): avc: denied { setopt } for pid=8306 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.589990][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.727315][ T30] audit: type=1400 audit(1746903244.683:551): avc: denied { execute } for pid=8306 comm="syz.1.614" path="/137/pids.events" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 285.095729][ T8320] overlayfs: failed to resolve './file0': -2 [ 285.420470][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 285.492356][ T5814] Bluetooth: hci5: command tx timeout [ 285.883991][ T8328] 9pnet_virtio: no channels available for device ./cgroup [ 286.170630][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 286.185928][ T24] usb 3-1: config index 0 descriptor too short (expected 19739, got 27) [ 286.223506][ T24] usb 3-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 286.240011][ T24] usb 3-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 286.292109][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 286.336793][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.430166][ T24] usb 3-1: Product: syz [ 286.445416][ T24] usb 3-1: Manufacturer: syz [ 286.461605][ T8340] Invalid logical block size (8210) [ 286.468653][ T24] usb 3-1: SerialNumber: syz [ 286.723060][ T24] usb 3-1: USB disconnect, device number 21 [ 287.344359][ T8240] chnl_net:caif_netlink_parms(): no params data found [ 287.561151][ T5814] Bluetooth: hci5: command tx timeout [ 287.734759][ T30] audit: type=1400 audit(1746903248.803:552): avc: denied { read } for pid=8364 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.361336][ T30] audit: type=1400 audit(1746903249.433:553): avc: denied { ioctl } for pid=8364 comm="syz.4.627" path="socket:[19565]" dev="sockfs" ino=19565 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.875790][ T8374] batman_adv: batadv0: Adding interface: dummy0 [ 288.900180][ T8374] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.431615][ T8374] batman_adv: batadv0: Interface activated: dummy0 [ 289.514450][ T30] audit: type=1400 audit(1746903250.573:554): avc: denied { create } for pid=8346 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 289.735678][ T79] hsr_slave_0: left promiscuous mode [ 289.780274][ T79] hsr_slave_1: left promiscuous mode [ 289.795968][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.820923][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.832862][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.850709][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.924737][ T79] veth1_macvtap: left promiscuous mode [ 289.940294][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 289.952795][ T79] veth0_macvtap: left promiscuous mode [ 289.968464][ T79] veth1_vlan: left promiscuous mode [ 289.977149][ T79] veth0_vlan: left promiscuous mode [ 290.099573][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 290.109600][ T5868] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 290.123639][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.139623][ T10] usb 5-1: Product: syz [ 290.143979][ T10] usb 5-1: Manufacturer: syz [ 290.149192][ T10] usb 5-1: SerialNumber: syz [ 290.203697][ T10] usb 5-1: config 0 descriptor?? [ 290.571792][ T30] audit: type=1800 audit(1746903251.633:555): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.630" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 290.616786][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.639622][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.657269][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.858621][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 292.664407][ T5868] usb 3-1: config 1 has no interface number 0 [ 292.670713][ T5868] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.681826][ T5868] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 292.702706][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.712011][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.720159][ T5868] usb 3-1: Product: syz [ 292.724388][ T5868] usb 3-1: Manufacturer: syz [ 292.729040][ T5868] usb 3-1: SerialNumber: syz [ 292.745841][ T10] usb-storage 5-1:0.0: USB Mass Storage device detected [ 292.832779][ T10] usb 5-1: USB disconnect, device number 20 [ 292.845290][ T79] team0 (unregistering): Port device team_slave_1 removed [ 292.871769][ T5868] cdc_ncm 3-1:1.1: bind() failure [ 292.886695][ T5868] usb 3-1: USB disconnect, device number 22 [ 293.011248][ T79] team0 (unregistering): Port device team_slave_0 removed [ 293.593022][ T30] audit: type=1400 audit(1746903254.583:556): avc: denied { mount } for pid=8414 comm="syz.2.635" name="/" dev="ramfs" ino=18707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 293.918589][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 294.058301][ T8420] overlayfs: failed to resolve './file0': -2 [ 294.421667][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.445945][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.475160][ T8240] bridge_slave_0: entered allmulticast mode [ 294.500887][ T8240] bridge_slave_0: entered promiscuous mode [ 294.549091][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.631179][ T8432] hfs: can't find a HFS filesystem on dev nullb0 [ 294.633797][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 294.647285][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.662852][ T8240] bridge_slave_1: entered allmulticast mode [ 294.950378][ T8240] bridge_slave_1: entered promiscuous mode [ 294.990161][ T5868] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 295.144657][ T30] audit: type=1400 audit(1746903256.213:557): avc: denied { create } for pid=8434 comm="syz.1.641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.189315][ T30] audit: type=1400 audit(1746903256.243:558): avc: denied { mounton } for pid=8434 comm="syz.1.641" path="/143/file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.217139][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.220358][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 295.278797][ T5868] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 295.287546][ T30] audit: type=1400 audit(1746903256.243:559): avc: denied { mount } for pid=8434 comm="syz.1.641" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 295.309267][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.311860][ T5868] usb 5-1: config 0 has no interface number 0 [ 295.319112][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.338460][ T5868] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 295.360236][ T5868] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 295.407723][ T30] audit: type=1400 audit(1746903256.243:560): avc: denied { read } for pid=8434 comm="syz.1.641" name="file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.435309][ T5868] usb 5-1: New USB device found, idVendor=0b95, idProduct=372a, bcdDevice=f7.f4 [ 295.479998][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.494693][ T30] audit: type=1400 audit(1746903256.243:561): avc: denied { watch watch_reads } for pid=8434 comm="syz.1.641" path="/143/file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.518033][ T5868] usb 5-1: Product: syz [ 295.531106][ T5868] usb 5-1: Manufacturer: syz [ 295.542294][ T5868] usb 5-1: SerialNumber: syz [ 295.570611][ T5868] usb 5-1: config 0 descriptor?? [ 295.573363][ T8240] team0: Port device team_slave_0 added [ 295.576172][ T8427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 295.588558][ T8427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 295.612953][ T30] audit: type=1400 audit(1746903256.403:562): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.672026][ T8240] team0: Port device team_slave_1 added [ 295.940160][ T5868] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 296.024489][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.041732][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.201902][ T8240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.471249][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.512503][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.561786][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 296.585646][ T5868] usb 2-1: config index 0 descriptor too short (expected 19739, got 27) [ 296.606381][ T8240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.621222][ T5868] usb 2-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 296.640121][ T8443] mmap: syz.2.643 (8443): VmData 25841664 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 296.693131][ T5868] usb 2-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 296.739702][ T5868] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 296.794326][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.827857][ T5868] usb 2-1: Product: syz [ 296.884111][ T5868] usb 2-1: Manufacturer: syz [ 296.893853][ T8469] hfs: can't find a HFS filesystem on dev nullb0 [ 297.170150][ T5868] usb 2-1: SerialNumber: syz [ 297.360287][ T8240] hsr_slave_0: entered promiscuous mode [ 297.376822][ T8240] hsr_slave_1: entered promiscuous mode [ 297.390699][ T8240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.398740][ T8240] Cannot create hsr debugfs directory [ 297.687831][ T5866] usb 5-1: USB disconnect, device number 21 [ 298.221182][ T5816] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 298.547677][ T8493] --map-set only usable from mangle table [ 298.650304][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 298.870740][ T5896] usb 3-1: device descriptor read/64, error -71 [ 298.875486][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 298.896249][ T5816] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 298.907682][ T5816] usb 1-1: config 179 has no interface number 0 [ 298.915267][ T5816] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 298.927428][ T5816] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 298.939012][ T5816] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 298.950889][ T5816] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 298.965295][ T5816] usb 1-1: config 179 interface 65 has no altsetting 0 [ 298.972920][ T5816] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 298.983540][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.024516][ T8475] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 299.179104][ T5896] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 299.187817][ T5868] usb 2-1: USB disconnect, device number 18 [ 299.341392][ T5896] usb 3-1: device descriptor read/64, error -71 [ 299.433524][ T8511] netlink: 64 bytes leftover after parsing attributes in process `syz.4.659'. [ 299.452411][ T8511] nbd: must specify at least one socket [ 299.483412][ T5896] usb usb3-port1: attempt power cycle [ 299.564347][ T5868] usb 1-1: USB disconnect, device number 21 [ 299.850274][ T5896] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 299.873837][ T30] audit: type=1400 audit(1746903260.943:563): avc: denied { read write } for pid=8522 comm="syz.4.662" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 299.903991][ T30] audit: type=1400 audit(1746903260.943:564): avc: denied { open } for pid=8522 comm="syz.4.662" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 299.909698][ T5896] usb 3-1: device descriptor read/8, error -71 [ 300.067725][ T8524] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 300.075803][ T5868] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 300.156033][ T30] audit: type=1400 audit(1746903261.103:565): avc: denied { bind } for pid=8522 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 300.338284][ T30] audit: type=1400 audit(1746903261.133:566): avc: denied { listen } for pid=8522 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 300.376817][ T5896] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 300.422498][ T5868] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 300.471934][ T5896] usb 3-1: device descriptor read/8, error -71 [ 300.537550][ T5868] usb 1-1: too many endpoints for config 0 interface 0 altsetting 125: 45, using maximum allowed: 30 [ 300.630537][ T5896] usb usb3-port1: unable to enumerate USB device [ 300.656867][ T5868] usb 1-1: config 0 interface 0 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 300.779050][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.844281][ T5868] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 300.939434][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.217197][ T5868] usb 1-1: config 0 descriptor?? [ 301.455063][ T8240] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.664495][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.677506][ T8240] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.690729][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.782531][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.831616][ T8240] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.885091][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.937160][ T8240] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.075397][ T8521] overlayfs: missing 'lowerdir' [ 302.106714][ T30] audit: type=1400 audit(1746903263.173:567): avc: denied { bind } for pid=8520 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.213133][ T6129] block nbd2: Possible stuck request ffff888026215080: control (read@0,4096B). Runtime 150 seconds [ 302.602130][ T30] audit: type=1400 audit(1746903263.673:568): avc: denied { listen } for pid=8520 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.608789][ T5868] usb 1-1: string descriptor 0 read error: -71 [ 302.666529][ T5868] usb 1-1: USB disconnect, device number 22 [ 302.895548][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.931396][ T8240] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.070224][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.077355][ T6422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.091962][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.099042][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.938859][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 304.612980][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 304.621827][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 304.769274][ T8240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.073181][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 305.556443][ T8591] FAULT_INJECTION: forcing a failure. [ 305.556443][ T8591] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 305.748364][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.2.675 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 305.748393][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.748409][ T8591] Call Trace: [ 305.748416][ T8591] [ 305.748427][ T8591] dump_stack_lvl+0x16c/0x1f0 [ 305.748456][ T8591] should_fail_ex+0x512/0x640 [ 305.748483][ T8591] _copy_to_user+0x32/0xd0 [ 305.748511][ T8591] simple_read_from_buffer+0xcb/0x170 [ 305.748539][ T8591] proc_fail_nth_read+0x197/0x270 [ 305.748565][ T8591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.748593][ T8591] ? rw_verify_area+0xcf/0x680 [ 305.748620][ T8591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.748645][ T8591] vfs_read+0x1de/0xc70 [ 305.748674][ T8591] ? __pfx___mutex_lock+0x10/0x10 [ 305.748696][ T8591] ? __pfx_vfs_read+0x10/0x10 [ 305.748727][ T8591] ? __fget_files+0x20e/0x3c0 [ 305.748762][ T8591] ksys_read+0x12a/0x240 [ 305.748785][ T8591] ? __pfx_ksys_read+0x10/0x10 [ 305.748807][ T8591] ? rcu_is_watching+0x12/0xc0 [ 305.748837][ T8591] do_syscall_64+0xcd/0x260 [ 305.748862][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.748883][ T8591] RIP: 0033:0x7f881758d37c [ 305.748899][ T8591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 305.748917][ T8591] RSP: 002b:00007f8818404030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.748934][ T8591] RAX: ffffffffffffffda RBX: 00007f88177b5fa0 RCX: 00007f881758d37c [ 305.748947][ T8591] RDX: 000000000000000f RSI: 00007f88184040a0 RDI: 0000000000000005 [ 305.748957][ T8591] RBP: 00007f8818404090 R08: 0000000000000000 R09: 0000000000000000 [ 305.748968][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.748979][ T8591] R13: 0000000000000000 R14: 00007f88177b5fa0 R15: 00007fff300d3e18 [ 305.749006][ T8591] [ 305.935474][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.253729][ T8240] veth0_vlan: entered promiscuous mode [ 308.397896][ T8240] veth1_vlan: entered promiscuous mode [ 308.428423][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 308.437459][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 308.522862][ T8240] veth0_macvtap: entered promiscuous mode [ 308.589380][ T8240] veth1_macvtap: entered promiscuous mode [ 308.741205][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.790235][ T8648] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 308.874271][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.027958][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.143969][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.230442][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.281781][ T8652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.438486][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.616664][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.628680][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.639806][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.670958][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.745389][ T8655] netlink: 'syz.1.691': attribute type 3 has an invalid length. [ 309.777652][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.842551][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.910345][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.921661][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.932149][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.942243][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.958317][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.970963][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.993390][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.018898][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.042018][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.050766][ T30] audit: type=1400 audit(1746903271.123:569): avc: denied { read write } for pid=8665 comm="syz.0.693" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 310.062087][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.103733][ T8240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.116321][ T8240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.126518][ T8240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.135452][ T8240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.166610][ T30] audit: type=1400 audit(1746903271.183:570): avc: denied { open } for pid=8665 comm="syz.0.693" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 311.825695][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.885366][ T8693] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 311.894184][ T8693] VFS: Can't find a romfs filesystem on dev nullb0. [ 311.894184][ T8693] [ 311.904273][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.173049][ T8697] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 312.315128][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.494910][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.533366][ T30] audit: type=1400 audit(1746903273.473:571): avc: denied { read } for pid=8702 comm="syz.4.701" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 313.395595][ T30] audit: type=1400 audit(1746903273.473:572): avc: denied { open } for pid=8702 comm="syz.4.701" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 313.419211][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.795867][ T8715] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 313.970190][ T30] audit: type=1400 audit(1746903273.483:573): avc: denied { read } for pid=8702 comm="syz.4.701" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.057465][ T30] audit: type=1400 audit(1746903274.753:574): avc: denied { ioctl } for pid=8713 comm="syz.2.702" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 314.085766][ T8722] Illegal XDP return value 4294967274 on prog (id 189) dev N/A, expect packet loss! [ 314.172980][ T8715] lo speed is unknown, defaulting to 1000 [ 314.224682][ T30] audit: type=1400 audit(1746903274.853:575): avc: denied { mac_admin } for pid=8713 comm="syz.2.702" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 314.383497][ T30] audit: type=1400 audit(1746903274.883:576): avc: denied { relabelto } for pid=8713 comm="syz.2.702" name="130" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 314.408882][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.416630][ T8165] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 314.466678][ T30] audit: type=1400 audit(1746903274.883:577): avc: denied { associate } for pid=8713 comm="syz.2.702" name="130" dev="tmpfs" ino=678 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex" [ 314.567054][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 314.576928][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 314.586818][ T8739] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 314.594495][ T8739] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 314.616731][ T8722] C: renamed from lo (while UP) [ 314.671236][ T8165] usb 5-1: device descriptor read/64, error -71 [ 314.678486][ T8722] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 314.826153][ T8722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11599 sclass=netlink_route_socket pid=8722 comm=syz.0.704 [ 314.951893][ T8165] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 314.986153][ T30] audit: type=1400 audit(1746903276.053:578): avc: denied { map } for pid=8721 comm="syz.0.704" path="socket:[20796]" dev="sockfs" ino=20796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.202187][ T8165] usb 5-1: device descriptor read/64, error -71 [ 315.356179][ T8165] usb usb5-port1: attempt power cycle [ 315.378727][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.567426][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.752840][ T8165] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 315.808798][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.822681][ T8165] usb 5-1: device descriptor read/8, error -71 [ 315.834846][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 315.957225][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.076865][ T8165] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 316.121589][ T8165] usb 5-1: device descriptor read/8, error -71 [ 316.179806][ T30] audit: type=1400 audit(1746903277.243:579): avc: denied { write } for pid=5819 comm="syz-executor" name="130" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 316.250604][ T8165] usb usb5-port1: unable to enumerate USB device [ 316.287156][ T30] audit: type=1400 audit(1746903277.243:580): avc: denied { remove_name } for pid=5819 comm="syz-executor" name="binderfs" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 316.420318][ T30] audit: type=1400 audit(1746903277.243:581): avc: denied { rmdir } for pid=5819 comm="syz-executor" name="130" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 316.924775][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.977303][ T13] bridge_slave_1: left allmulticast mode [ 317.025749][ T13] bridge_slave_1: left promiscuous mode [ 317.062301][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.085436][ T8787] Invalid logical block size (8210) [ 317.109625][ T13] bridge_slave_0: left allmulticast mode [ 317.192189][ T13] bridge_slave_0: left promiscuous mode [ 317.199026][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.217819][ T5125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.228654][ T5125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.239092][ T5125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.248960][ T5125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.258185][ T5125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.772683][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.789397][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.800960][ T13] bond0 (unregistering): Released all slaves [ 319.037489][ T8789] lo speed is unknown, defaulting to 1000 [ 319.431189][ T5125] Bluetooth: hci5: command tx timeout [ 321.494255][ T5125] Bluetooth: hci5: command tx timeout [ 321.525811][ T30] audit: type=1326 audit(1746903281.594:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4646185927 code=0x7ffc0000 [ 321.569091][ T8853] Cannot find add_set index 0 as target [ 322.748014][ T30] audit: type=1326 audit(1746903281.594:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f464612ab39 code=0x7ffc0000 [ 322.983655][ T8863] netlink: 44 bytes leftover after parsing attributes in process `syz.1.723'. [ 323.225352][ T30] audit: type=1326 audit(1746903281.594:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4646185927 code=0x7ffc0000 [ 323.330852][ T30] audit: type=1326 audit(1746903281.594:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f464612ab39 code=0x7ffc0000 [ 323.448783][ T30] audit: type=1326 audit(1746903281.594:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4646185927 code=0x7ffc0000 [ 323.561657][ T5125] Bluetooth: hci5: command tx timeout [ 323.626934][ T30] audit: type=1326 audit(1746903281.594:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f464612ab39 code=0x7ffc0000 [ 323.668002][ T8870] netlink: 48 bytes leftover after parsing attributes in process `syz.1.726'. [ 323.691469][ T30] audit: type=1326 audit(1746903281.594:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4646185927 code=0x7ffc0000 [ 324.174866][ T30] audit: type=1326 audit(1746903281.594:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f464612ab39 code=0x7ffc0000 [ 324.216040][ T30] audit: type=1326 audit(1746903281.594:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464618e969 code=0x7ffc0000 [ 324.292221][ T30] audit: type=1326 audit(1746903281.594:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4646185927 code=0x7ffc0000 [ 324.322649][ T5125] block nbd3: Receive control failed (result -104) [ 324.672213][ T13] hsr_slave_0: left promiscuous mode [ 324.678240][ T13] hsr_slave_1: left promiscuous mode [ 324.690603][ T5868] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 324.880511][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 325.026633][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.035580][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.053669][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.063732][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.071786][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.087420][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.146352][ T13] veth1_macvtap: left promiscuous mode [ 325.156693][ T8892] Cannot find add_set index 0 as target [ 325.222199][ T13] veth0_macvtap: left promiscuous mode [ 325.283037][ T13] veth1_vlan: left promiscuous mode [ 325.344825][ T13] veth0_vlan: left promiscuous mode [ 325.480223][ T971] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 325.487976][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.501597][ T5868] usb 1-1: New USB device found, idVendor=0400, idProduct=07da, bcdDevice= 0.00 [ 325.510979][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.530684][ T5868] usb 1-1: config 0 descriptor?? [ 325.641670][ T5125] Bluetooth: hci5: command tx timeout [ 325.674681][ T971] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.754043][ T971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.897131][ T971] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.052055][ T971] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 326.066318][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 326.085618][ T971] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 326.093799][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 326.103098][ T971] usb 5-1: Product: syz [ 326.109809][ T5868] usb 1-1: USB disconnect, device number 23 [ 326.116937][ T971] usb 5-1: Manufacturer: syz [ 326.231066][ T8905] hfs: can't find a HFS filesystem on dev nullb0 [ 326.271172][ T971] cdc_wdm 5-1:1.0: skipping garbage [ 326.278181][ T971] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 327.897731][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 327.906582][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 328.184729][ T47] usb 5-1: USB disconnect, device number 26 [ 328.425431][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 328.425446][ T30] audit: type=1400 audit(1746903289.494:648): avc: denied { create } for pid=8922 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.775038][ T30] audit: type=1400 audit(1746903289.754:649): avc: denied { connect } for pid=8922 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.805383][ T30] audit: type=1400 audit(1746903289.814:650): avc: denied { read } for pid=8922 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 329.421290][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 329.587187][ T8932] block device autoloading is deprecated and will be removed. [ 329.787568][ T8943] input: syz1 as /devices/virtual/input/input14 [ 330.659216][ T8955] hfs: can't find a HFS filesystem on dev nullb0 [ 330.901489][ T5866] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 331.963463][ T5866] usb 3-1: config 0 has too many interfaces: 138, using maximum allowed: 32 [ 331.980195][ T5866] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 138 [ 331.998682][ T5866] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=a9.c8 [ 332.056304][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.069825][ T5866] usb 3-1: Product: syz [ 332.080646][ T13] team0 (unregistering): Port device team_slave_1 removed [ 332.091644][ T5866] usb 3-1: Manufacturer: syz [ 332.096446][ T5866] usb 3-1: SerialNumber: syz [ 332.328350][ T5866] usb 3-1: config 0 descriptor?? [ 332.400466][ T6129] block nbd2: Possible stuck request ffff888026215080: control (read@0,4096B). Runtime 180 seconds [ 332.458989][ T13] team0 (unregistering): Port device team_slave_0 removed [ 332.741293][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 332.750211][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 334.089703][ T8789] chnl_net:caif_netlink_parms(): no params data found [ 334.192976][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 334.201939][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 334.580335][ T5868] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 334.809999][ T5868] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 334.824526][ T5868] usb 5-1: config 0 has no interface number 0 [ 334.831035][ T5868] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 334.832396][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.845723][ T5868] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.850677][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.863907][ T5868] usb 5-1: config 0 interface 113 has no altsetting 0 [ 334.869556][ T8789] bridge_slave_0: entered allmulticast mode [ 334.887339][ T5868] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 334.896934][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.906258][ T8789] bridge_slave_0: entered promiscuous mode [ 334.915466][ T5868] usb 5-1: Product: syz [ 334.919664][ T5868] usb 5-1: Manufacturer: syz [ 334.951089][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.968327][ T5868] usb 5-1: SerialNumber: syz [ 334.974130][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.989470][ T8789] bridge_slave_1: entered allmulticast mode [ 335.008620][ T8789] bridge_slave_1: entered promiscuous mode [ 335.019862][ T5868] usb 5-1: config 0 descriptor?? [ 335.057150][ C0] usb 5-1: NFC: Urb failure (status -71) [ 335.080306][ T5868] usb 5-1: NFC: Unable to get FW version [ 335.089913][ T5868] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 335.116936][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.161256][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.229820][ T8789] team0: Port device team_slave_0 added [ 335.245010][ T8789] team0: Port device team_slave_1 added [ 335.315809][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.340211][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.391626][ T8789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.408725][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.417141][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.450171][ T8789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.470233][ T5868] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 335.524239][ T30] audit: type=1400 audit(1746903296.594:651): avc: denied { ioctl } for pid=8996 comm="syz.0.762" path="socket:[22066]" dev="sockfs" ino=22066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 335.531247][ T8789] hsr_slave_0: entered promiscuous mode [ 335.532190][ T8789] hsr_slave_1: entered promiscuous mode [ 335.532787][ T8789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.532842][ T8789] Cannot create hsr debugfs directory [ 335.572983][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.623839][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 335.637560][ T5868] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 335.646164][ T5868] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 335.656576][ T5868] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 335.676492][ T5868] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 335.690207][ T5868] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 335.709262][ T5868] usb 2-1: config 0 has no interface number 0 [ 335.721123][ T5868] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 335.750150][ T5868] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 335.760288][ T5868] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.770226][ T5868] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.784966][ T5868] usb 2-1: config 0 interface 125 has no altsetting 0 [ 335.792632][ T5868] usb 2-1: config 0 interface 125 has no altsetting 2 [ 335.811344][ T5868] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 335.824101][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.833444][ T5868] usb 2-1: Product: syz [ 335.837674][ T5868] usb 2-1: Manufacturer: syz [ 335.846315][ T5868] usb 2-1: SerialNumber: syz [ 335.870796][ T5868] usb 2-1: config 0 descriptor?? [ 335.896232][ T5868] usb 2-1: selecting invalid altsetting 2 [ 336.118278][ T30] audit: type=1400 audit(1746903297.184:652): avc: denied { create } for pid=9000 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 336.150392][ C0] usb 2-1: async_complete: urb error -71 [ 336.156169][ C0] usb 2-1: async_complete: urb error -71 [ 336.158262][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 336.161890][ C0] usb 2-1: async_complete: urb error -71 [ 336.161960][ C0] usb 2-1: async_complete: urb error -71 [ 336.182333][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.188757][ T5868] get_1284_register: usb error -71 [ 336.194028][ T5868] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 336.207376][ T5868] usb 2-1: USB disconnect, device number 19 [ 336.250384][ T8789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 336.268269][ T8789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 336.307990][ T8789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 336.331242][ T8789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 336.335637][ T9014] overlayfs: failed to resolve './file0': -2 [ 336.789300][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.847123][ T8789] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.861204][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.868370][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.895844][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.903035][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.366973][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 337.376077][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 338.045305][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.100869][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 339.482449][ T8789] veth0_vlan: entered promiscuous mode [ 339.496927][ T8789] veth1_vlan: entered promiscuous mode [ 339.576318][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 339.892989][ T8789] veth0_macvtap: entered promiscuous mode [ 339.913187][ T8789] veth1_macvtap: entered promiscuous mode [ 339.947601][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.959218][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.969606][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.980665][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.993390][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.004311][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.014814][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.025423][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.035237][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.053699][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.076215][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.098663][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.118901][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.295849][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.309668][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.320763][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.334046][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.367777][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.381313][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.148590][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.169926][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.212331][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.225145][ T8789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.235168][ T8789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.266416][ T8789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.431995][ T8789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.597788][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 341.606706][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 342.140795][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.148642][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.187124][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.224638][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.315654][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 342.332288][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 342.346172][ T9082] netlink: 'syz.1.782': attribute type 3 has an invalid length. [ 342.353930][ T9082] netlink: 'syz.1.782': attribute type 1 has an invalid length. [ 343.241132][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 343.542029][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.550831][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 343.559839][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.575189][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.584333][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.592518][ T10] usb 1-1: Product: syz [ 343.596738][ T10] usb 1-1: Manufacturer: syz [ 343.612221][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 343.618684][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 343.728961][ T30] audit: type=1400 audit(1746903304.794:653): avc: denied { setopt } for pid=9095 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 344.120813][ T1136] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.180033][ T1136] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.277340][ T1136] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.374479][ T1136] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.770570][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 344.938669][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.948422][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.959244][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.971821][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 344.975090][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.985938][ T24] usb 2-1: config index 0 descriptor too short (expected 19739, got 27) [ 344.994847][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.031994][ T24] usb 2-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 345.044469][ T9104] lo speed is unknown, defaulting to 1000 [ 345.059495][ T1136] bridge_slave_1: left allmulticast mode [ 345.067155][ T24] usb 2-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 345.078201][ T1136] bridge_slave_1: left promiscuous mode [ 345.086181][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.097550][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 345.113703][ T1136] bridge_slave_0: left allmulticast mode [ 345.119435][ T1136] bridge_slave_0: left promiscuous mode [ 345.129394][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.140537][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.142533][ T24] usb 2-1: Product: syz [ 345.152445][ T24] usb 2-1: Manufacturer: syz [ 345.157094][ T24] usb 2-1: SerialNumber: syz [ 345.505896][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.517157][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.527629][ T1136] bond0 (unregistering): Released all slaves [ 345.855677][ T8165] usb 1-1: USB disconnect, device number 24 [ 345.914797][ T9104] chnl_net:caif_netlink_parms(): no params data found [ 345.944179][ T9111] fuse: Bad value for 'group_id' [ 345.949221][ T9111] fuse: Bad value for 'group_id' [ 346.478474][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.492421][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.506084][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.515834][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.524972][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.808309][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.815820][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.823244][ T9104] bridge_slave_0: entered allmulticast mode [ 346.887112][ T9104] bridge_slave_0: entered promiscuous mode [ 346.919759][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.942856][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.994247][ T9104] bridge_slave_1: entered allmulticast mode [ 347.004066][ T9104] bridge_slave_1: entered promiscuous mode [ 347.063360][ T1136] hsr_slave_0: left promiscuous mode [ 347.069500][ T1136] hsr_slave_1: left promiscuous mode [ 347.079859][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.087901][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.101539][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.109016][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.144454][ T1136] veth1_macvtap: left promiscuous mode [ 347.150281][ T5125] Bluetooth: hci5: command tx timeout [ 347.162143][ T1136] veth0_macvtap: left promiscuous mode [ 347.169308][ T1136] veth1_vlan: left promiscuous mode [ 347.178208][ T1136] veth0_vlan: left promiscuous mode [ 347.717897][ T24] usb 2-1: USB disconnect, device number 20 [ 348.621400][ T5125] Bluetooth: hci6: command tx timeout [ 348.958372][ T30] audit: type=1400 audit(1746903310.024:654): avc: denied { setopt } for pid=9130 comm="syz.1.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.200741][ T5125] Bluetooth: hci5: command tx timeout [ 349.898257][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 349.908138][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 349.931635][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 349.953093][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 349.971836][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 350.075651][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 350.118739][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 350.496443][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.534484][ T9114] lo speed is unknown, defaulting to 1000 [ 350.538617][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.680270][ T5814] Bluetooth: hci6: command tx timeout [ 350.741941][ T9104] team0: Port device team_slave_0 added [ 350.779809][ T9104] team0: Port device team_slave_1 added [ 350.893099][ T9139] lo speed is unknown, defaulting to 1000 [ 350.894983][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.929167][ T9159] overlayfs: overlapping lowerdir path [ 350.933958][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.960498][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.980347][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.993892][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.001807][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.027688][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.044667][ T30] audit: type=1400 audit(1746903312.074:655): avc: denied { mount } for pid=9158 comm="syz.0.801" name="/" dev="overlay" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 351.066985][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.498465][ T5814] Bluetooth: hci5: command tx timeout [ 351.733069][ T9165] input: syz1 as /devices/virtual/input/input16 [ 351.885922][ T9104] hsr_slave_0: entered promiscuous mode [ 351.895600][ T9104] hsr_slave_1: entered promiscuous mode [ 351.902459][ T9104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.910129][ T9104] Cannot create hsr debugfs directory [ 352.041828][ T5814] Bluetooth: hci7: command tx timeout [ 352.129966][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.806'. [ 352.139262][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 352.767105][ T5814] Bluetooth: hci6: command tx timeout [ 353.571846][ T5125] Bluetooth: hci5: command tx timeout [ 353.875822][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 354.050663][ T31] INFO: task syz.3.336:7268 blocked for more than 143 seconds. [ 354.123357][ T30] audit: type=1400 audit(1746903315.194:656): avc: denied { write } for pid=5798 comm="syz-executor" path="pipe:[4589]" dev="pipefs" ino=4589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 354.315745][ T5125] Bluetooth: hci7: command tx timeout [ 354.340836][ T31] Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 [ 354.348750][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.370858][ T31] task:syz.3.336 state:D stack:26168 pid:7268 tgid:7266 ppid:5822 task_flags:0x400140 flags:0x00004004 [ 354.383588][ T31] Call Trace: [ 354.386952][ T31] [ 354.410558][ T31] __schedule+0x116f/0x5de0 [ 354.417922][ T31] ? register_lock_class+0x41/0x4c0 [ 354.423307][ T31] ? __pfx___schedule+0x10/0x10 [ 354.428277][ T31] ? find_held_lock+0x2b/0x80 [ 354.433122][ T31] ? schedule+0x2d7/0x3a0 [ 354.437529][ T31] schedule+0xe7/0x3a0 [ 354.441996][ T31] schedule_preempt_disabled+0x13/0x30 [ 354.447651][ T31] __mutex_lock+0x6c7/0xb90 [ 354.479191][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 354.490136][ T31] ? sync_bdevs+0xfd/0x360 [ 354.494602][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 354.510197][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 354.515527][ T31] ? iput+0xd3/0x880 [ 354.519437][ T31] ? sync_bdevs+0xfd/0x360 [ 354.540076][ T31] sync_bdevs+0xfd/0x360 [ 354.544367][ T31] ksys_sync+0xb2/0x150 [ 354.550140][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 354.554930][ T31] ? syscall_user_dispatch+0x78/0x140 [ 354.561545][ T31] ? syscall_trace_enter+0x5e/0x260 [ 354.566759][ T31] __do_sys_sync+0xe/0x20 [ 354.571096][ T31] do_syscall_64+0xcd/0x260 [ 354.575585][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.581496][ T31] RIP: 0033:0x7fbae5f8e969 [ 354.585907][ T31] RSP: 002b:00007fbae6df9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 354.594327][ T31] RAX: ffffffffffffffda RBX: 00007fbae61b5fa0 RCX: 00007fbae5f8e969 [ 354.605100][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.613196][ T31] RBP: 00007fbae61b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 354.623695][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.631730][ T31] R13: 0000000000000000 R14: 00007fbae61b5fa0 R15: 00007ffd580338e8 [ 354.639736][ T31] [ 354.642953][ T31] [ 354.642953][ T31] Showing all locks held in the system: [ 354.778702][ T31] 1 lock held by ksoftirqd/0/15: [ 354.810477][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 354.832097][ T31] 1 lock held by khungtaskd/31: [ 354.836954][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 354.846987][ T31] 3 locks held by kworker/u8:8/4271: [ 354.850215][ T5125] Bluetooth: hci6: command tx timeout [ 354.852378][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 354.869796][ T31] #1: ffffc9000e697d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 354.880295][ T31] #2: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 354.889430][ T31] 2 locks held by getty/5581: [ 354.894861][ T31] #0: ffff88814e2690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 354.904624][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 354.914759][ T31] 1 lock held by udevd/6117: [ 354.919336][ T31] #0: ffff88802618b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 354.930246][ T31] 2 locks held by kworker/u8:10/6419: [ 354.935625][ T31] 2 locks held by kworker/u8:12/6421: [ 354.941029][ T31] 1 lock held by syz.3.336/7268: [ 354.945958][ T31] #0: ffff88802618b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 354.955808][ T31] 1 lock held by syz.2.749/8954: [ 354.961001][ T31] #0: ffff88802618b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 354.970448][ T31] 1 lock held by syz.2.749/8956: [ 354.975394][ T31] #0: ffff88802618b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 354.985214][ T31] 8 locks held by syz-executor/9104: [ 354.990817][ T31] #0: ffff888033566420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 354.999850][ T31] #1: ffff88805ccb9088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 355.009596][ T31] #2: ffff88814533bb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 355.020706][ T31] #3: ffffffff8f6c73c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 355.031013][ T31] #4: ffff8880613470e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 355.041793][ T31] #5: ffff888061345250 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 355.052793][ T31] #6: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xfc/0x5d0 [ 355.061732][ T31] #7: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 355.072014][ T31] 1 lock held by syz-executor/9114: [ 355.077212][ T31] #0: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 355.086945][ T31] 1 lock held by syz-executor/9139: [ 355.092140][ T31] #0: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 355.102836][ T31] 1 lock held by syz.0.811/9199: [ 355.107786][ T31] #0: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 355.117314][ T31] [ 355.119708][ T31] ============================================= [ 355.119708][ T31] [ 355.128373][ T31] NMI backtrace for cpu 1 [ 355.128387][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 355.128408][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.128417][ T31] Call Trace: [ 355.128423][ T31] [ 355.128429][ T31] dump_stack_lvl+0x116/0x1f0 [ 355.128455][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 355.128473][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 355.128496][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 355.128515][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 355.128536][ T31] watchdog+0xf70/0x12c0 [ 355.128560][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.128575][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.128600][ T31] ? __kthread_parkme+0x19e/0x250 [ 355.128626][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.128643][ T31] kthread+0x3c2/0x780 [ 355.128661][ T31] ? __pfx_kthread+0x10/0x10 [ 355.128676][ T31] ? __pfx_kthread+0x10/0x10 [ 355.128691][ T31] ? __pfx_kthread+0x10/0x10 [ 355.128706][ T31] ? __pfx_kthread+0x10/0x10 [ 355.128722][ T31] ? rcu_is_watching+0x12/0xc0 [ 355.128743][ T31] ? __pfx_kthread+0x10/0x10 [ 355.128760][ T31] ret_from_fork+0x45/0x80 [ 355.128777][ T31] ? __pfx_kthread+0x10/0x10 [ 355.128793][ T31] ret_from_fork_asm+0x1a/0x30 [ 355.128832][ T31] [ 355.128839][ T31] Sending NMI from CPU 1 to CPUs 0: [ 355.270185][ C0] NMI backtrace for cpu 0 [ 355.270200][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 355.270222][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.270233][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 355.270260][ C0] Code: 35 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 2a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 355.270277][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 355.270291][ C0] RAX: 0000000000ebdb4f RBX: 0000000000000000 RCX: ffffffff8b6cc419 [ 355.270302][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe13ef RDI: ffffffff8bf482e0 [ 355.270313][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 355.270325][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 355.270336][ C0] R13: ffffffff8e097740 R14: ffffffff9084f010 R15: 0000000000000000 [ 355.270347][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 355.270363][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.270374][ C0] CR2: 00005584e23e1b48 CR3: 000000004e870000 CR4: 00000000003526f0 [ 355.270385][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.270395][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.270406][ C0] Call Trace: [ 355.270413][ C0] [ 355.270418][ C0] default_idle+0x13/0x20 [ 355.270443][ C0] default_idle_call+0x6d/0xb0 [ 355.270468][ C0] do_idle+0x391/0x510 [ 355.270491][ C0] ? __pfx_do_idle+0x10/0x10 [ 355.270512][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 355.270539][ C0] cpu_startup_entry+0x4f/0x60 [ 355.270560][ C0] rest_init+0x16b/0x2b0 [ 355.270574][ C0] ? acpi_subsystem_init+0x133/0x180 [ 355.270595][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 355.270620][ C0] start_kernel+0x3e9/0x4d0 [ 355.270645][ C0] x86_64_start_reservations+0x18/0x30 [ 355.270668][ C0] x86_64_start_kernel+0xb0/0xc0 [ 355.270692][ C0] common_startup_64+0x13e/0x148 [ 355.270719][ C0] [ 355.506814][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 355.513694][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 355.525499][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.535557][ T31] Call Trace: [ 355.538835][ T31] [ 355.541768][ T31] dump_stack_lvl+0x3d/0x1f0 [ 355.546367][ T31] panic+0x71c/0x800 [ 355.550270][ T31] ? __pfx_panic+0x10/0x10 [ 355.554691][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 355.560061][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 355.566040][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 355.571412][ T31] ? watchdog+0xdda/0x12c0 [ 355.575827][ T31] ? watchdog+0xdcd/0x12c0 [ 355.580252][ T31] watchdog+0xdeb/0x12c0 [ 355.584495][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.589166][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.594368][ T31] ? __kthread_parkme+0x19e/0x250 [ 355.599401][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.604074][ T31] kthread+0x3c2/0x780 [ 355.608122][ T31] ? __pfx_kthread+0x10/0x10 [ 355.612687][ T31] ? __pfx_kthread+0x10/0x10 [ 355.617250][ T31] ? __pfx_kthread+0x10/0x10 [ 355.621812][ T31] ? __pfx_kthread+0x10/0x10 [ 355.626377][ T31] ? rcu_is_watching+0x12/0xc0 [ 355.631127][ T31] ? __pfx_kthread+0x10/0x10 [ 355.635705][ T31] ret_from_fork+0x45/0x80 [ 355.640101][ T31] ? __pfx_kthread+0x10/0x10 [ 355.644678][ T31] ret_from_fork_asm+0x1a/0x30 [ 355.649439][ T31] [ 355.652646][ T31] Kernel Offset: disabled [ 355.656950][ T31] Rebooting in 86400 seconds..