last executing test programs: 6m22.936373253s ago: executing program 3 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) iopl(0x3) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100000067000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) writev(0xffffffffffffffff, 0x0, 0x0) 6m22.007286329s ago: executing program 3 (id=269): ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0xa5, 0x0, 'client0\x00', 0x7, "46d898bcd4c320e2", "136c7298a9a1f419f6cd7f9d5db1867f776a924c5adf1d324e861a0de7ea4162", 0x2, 0xa30}) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x38f9, 0x0) ioctl$sock_TIOCINQ(r5, 0x5760, 0x0) fcntl$setstatus(r4, 0x4, 0x400) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x8) connect$inet6(r6, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r6, 0x0, 0x0, 0x3b00, 0x0, 0x0) 6m21.075382624s ago: executing program 3 (id=270): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000180)) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000002c0)={0x60, 0x1, &(0x7f0000593000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffff3003, &(0x7f00000001c0)=[{0x10, 0xf, 0xc1}, {0x0, 0xdfd3, 0x8}, {0x10000, 0xdbe, 0x2}, {0x1, 0x1, 0x8}, {0xff, 0x48, 0x7}, {0x7ff, 0x9, 0x9}, {0x1, 0xb119}, {0x8, 0x2}, {0xff, 0x4, 0x6}, {0x1, 0x8, 0x6}], 0xa, 0xe2a, 0x1, 0xd, 0x68, 0x10}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000002fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="190000003f05aeb4"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000180)) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000002c0)={0x60, 0x1, &(0x7f0000593000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffff3003, &(0x7f00000001c0)=[{0x10, 0xf, 0xc1}, {0x0, 0xdfd3, 0x8}, {0x10000, 0xdbe, 0x2}, {0x1, 0x1, 0x8}, {0xff, 0x48, 0x7}, {0x7ff, 0x9, 0x9}, {0x1, 0xb119}, {0x8, 0x2}, {0xff, 0x4, 0x6}, {0x1, 0x8, 0x6}], 0xa, 0xe2a, 0x1, 0xd, 0x68, 0x10}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000002fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="190000003f05aeb4"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 6m20.69889909s ago: executing program 3 (id=271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x1042000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}]}, 0x1c}, 0x1, 0x0, 0x0, 0xeb5cf41713316147}, 0x80) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffc01}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_usb_connect(0x0, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) 6m19.233400912s ago: executing program 3 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x28}}, 0x4044890) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r9 = dup3(r7, r8, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r14, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c4603000701810000000000000003003e00f9ffffffd80100000000000040000000000000ff8a00000000000000320d00000500380004"], 0x120) close(r14) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0x0, r11, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x0, 0x7, r12, r13, 0x5, 0xfff}}}, 0x90) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180)) sendmsg$NFT_BATCH(r9, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 6m17.436200665s ago: executing program 3 (id=283): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="1b0000001d005f0214fffffffffffff8070000000d000000000007", 0x1b) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2c, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}}, 0x20000034) r8 = socket$nl_route(0x10, 0x3, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, 0xffffffffffffffff, 0xe) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001900150000000000030000000a0000000000000000000000200009"], 0x3c}], 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000500)={0x2, @sliced={0x8000, [0xfffe, 0x6, 0x2, 0x8, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x5, 0xe4, 0x7fff, 0x7, 0x9, 0x6, 0x5, 0xfffb, 0x4, 0xfffc, 0x204, 0x83, 0x5, 0x2, 0x4294, 0x7fff, 0x2, 0xeb91, 0x4, 0x8, 0x4, 0x5, 0x7, 0x4, 0x7f, 0xa62c, 0xe1d, 0xfffd, 0x8, 0xb, 0x5, 0x7, 0x6, 0xf, 0x8, 0x193, 0x9, 0x3, 0xfce4], 0x4}}) 6m2.148872775s ago: executing program 32 (id=283): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="1b0000001d005f0214fffffffffffff8070000000d000000000007", 0x1b) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2c, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}}, 0x20000034) r8 = socket$nl_route(0x10, 0x3, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, 0xffffffffffffffff, 0xe) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001900150000000000030000000a0000000000000000000000200009"], 0x3c}], 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000500)={0x2, @sliced={0x8000, [0xfffe, 0x6, 0x2, 0x8, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x5, 0xe4, 0x7fff, 0x7, 0x9, 0x6, 0x5, 0xfffb, 0x4, 0xfffc, 0x204, 0x83, 0x5, 0x2, 0x4294, 0x7fff, 0x2, 0xeb91, 0x4, 0x8, 0x4, 0x5, 0x7, 0x4, 0x7f, 0xa62c, 0xe1d, 0xfffd, 0x8, 0xb, 0x5, 0x7, 0x6, 0xf, 0x8, 0x193, 0x9, 0x3, 0xfce4], 0x4}}) 12.001959751s ago: executing program 5 (id=1500): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x280040, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000080)=0x982) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x88182, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$nl_generic(r5, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000000)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2f, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040048}, 0x4000) 10.770061372s ago: executing program 5 (id=1503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000b7080000000000007b8af4ff00000000bfa200000000000007020000f8fffffffd7815031b269fd2972a77ec18b703000008000000b70400010000000085000000030000006642423b00000000"], 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, 0x0) write$nci(r4, &(0x7f0000000380)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x80}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0xa, 0x6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r2, 0x147, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xffffffdf}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000140)={@broadcast, @local, @void, {@generic={0x6000}}}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000000000000080", 0x48}, {&(0x7f00000004c0)="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", 0xf02}], 0x2}, 0x4000) 10.528948145s ago: executing program 0 (id=1505): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc40) r0 = io_uring_setup(0x1b7f, 0x0) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f000000a2c0)={&(0x7f000000a100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007c80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0xbf, 0xffffffffffffffa4}, {0xa, 0xcece}, {0x8, 0x2}, {0x800, 0xffffffffe0000000}, {0xffffffffce1b73eb, 0x9}, {0x9}, {0xabb, 0x7}, {0xd19, 0xb68}, {0x589, 0x7f}, {0x401, 0xffffffff}, {0x1}, {0x80000000, 0x7f}, {0x0, 0xfffffffffffffff9}, {0x5, 0x80}, {0x1, 0x5}, {0x6, 0x2}, {0x4f7, 0x7f}, {0x5, 0x5}, {0x3, 0x4}, {0x9, 0xf}, {0x4, 0x2}, {0x3, 0x7224}, {0x7, 0xda5}, {0x1, 0x2}, {0x6, 0x1000}, {0xfffffffffffffc01, 0x6}, {0x101, 0x7}, {0x100, 0x4}, {0xe, 0x6}, {0x10000, 0x8000000000000001}, {0x1, 0x80000000}, {0x764, 0x200}, {0x3ff, 0x8}, {0x800, 0x4}, {0xffff, 0x100000000}, {0x1, 0x4}, {0x8001, 0x820f}, {0xcb, 0x4}, {0xffffffffffff8001, 0x4}, {0x200, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0xc7, 0xfff}, {0x2, 0x2}, {0x4, 0x7}, {0x80000001}, {0xfffffffffffffff7, 0x6}, {0x8, 0x2}, {0x2}, {0x1, 0x8000000000000000}, {0x6, 0x7fffffff}, {0x7fff, 0x9}, {0x0, 0x4ef}, {0x8ca, 0x7}, {0x8000000000000000, 0x1}, {0x200000000000000, 0x5}, {0xffffffff, 0x4}, {0x9, 0x5}, {0x4ba0, 0xc54b}, {0x6, 0x5}, {0x1, 0x400}, {0x8000000000000000, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0xfffffffffffffff8, 0x1}, {0x1, 0x2}, {0x2030000, 0xe3}, {0x8, 0x6}, {0x1, 0x177}, {0x3, 0xc}, {0x8, 0xf}, {0x2, 0x200}, {0x2, 0x80000000}, {0x9, 0x7fff}, {0x2, 0x1ff}, {0x2, 0x8}, {0x4, 0x5}, {0x4, 0xffffffff}, {0x1, 0x3}, {0x94, 0x2441}, {0x4010000000000000, 0x100000001}, {0x5, 0x5}, {0xd, 0x2}, {0x70d, 0x4}, {0x7fff, 0xfa20}, {0x100000001, 0x28c9}, {0x80, 0x3}, {0x6b6c, 0x19dd}, {0x7ff, 0xfff}, {0x8, 0x6}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x80000000}, {0x9, 0xb0}, {0x8, 0x40}, {0x1, 0xfdf}, {0x1, 0xe6a}, {0x2, 0x6435}, {0x7fff, 0x5}, {0xec, 0x100000000}, {0xffffffffffffe0c5, 0x9}, {0x4, 0x210}, {0x3, 0x6}, {0x9, 0x7ff}, {0x3, 0xc1}, {0x4}, {0x10000, 0x3}, {0x0, 0x2}, {0x100, 0x2}, {0x29b23aa3, 0xffffffff}, {0x7}, {0xb22, 0x97f6}, {0x3, 0x654}, {0x1, 0x2}, {0x74}, {0x8, 0x8000000000000001}, {0xe, 0xce0}, {0xfffffffffffffc01, 0x100000000}, {0x10000, 0x3}, {0x100000001, 0x1}, {0x400, 0x892}, {0x7, 0x7fffffff}, {0x2, 0x90ea}, {0x5, 0x49debf5a}, {0x8, 0x8}, {0x4, 0x7}, {0x6, 0x1ff}, {0x2, 0x1c2}, {0xdf9, 0x40}, {0x0, 0x8}, {0xfffffffffffffffe}, {0x4a1c, 0x7fffffffffffffff}, {0x6, 0xd4}, {0x4, 0x9}, {0x617, 0xffffffff80000000}, {0xe926, 0x7}, {0x39d, 0x60000000}, {0x9, 0x7}, {0x1ff, 0xffffffffffff8b2c}, {0x9, 0x9}, {0x6}, {0x881, 0x795}, {0x10000, 0x3}, {0x7, 0xfffffffffffffff7}, {}, {0xb5, 0x6}, {0x2, 0xe}, {0x87, 0x5}, {0x9, 0x2}, {}, {0x1, 0x1d95}, {0xffffffffffffff1e, 0x8000}, {0x1, 0x8}, {0x8001, 0x4}, {0x1, 0x6}, {0x401, 0x40}, {0xd7fa, 0xffffffffffffff01}, {0x7, 0x3}, {0xfffffffffffffffa, 0x242}, {0x0, 0x20fb}, {0x7, 0x7}, {0x1, 0xfffffffffffffffe}, {0xfffffffffffff000, 0x5}, {0xe}, {0xffffffffffffffff, 0x10000}, {0x6, 0x100000000}, {0x3ff}, {0x3, 0x5}, {0x5, 0xae3}, {0x6, 0x100000001}, {0x101, 0x6}, {0x5, 0x378c66fb}, {0x81, 0x1e0}, {0x9, 0x40}, {0x8, 0x6}, {0x5, 0x8}, {0xc4, 0x2}, {0xd6}, {0x81, 0x15f8}, {0x1ff, 0x8}, {0x7, 0x80000000}, {0x6, 0xfba}, {0x4, 0x9}, {0x7ff, 0x8000000000000001}, {0xf}, {0x8, 0x6}, {0x9, 0x611}, {0x5cf, 0x3ff}, {0x4, 0x5}, {0xb4, 0x6}, {0x4, 0x9dc170c}, {0x0, 0x5}, {0x5, 0x7}, {0xfffffffffffff800}, {0x4, 0x72}, {0x4, 0x7}, {0x8, 0x8db5}, {0x6, 0x3}, {0x5, 0xffffffffffffffff}, {0x9, 0x5}, {0x2, 0x4}, {0xffffffff, 0x80}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x429}, {0x6, 0x4}, {0xfff, 0xf63}, {0x7, 0x6d58996e}, {0xfffffffffffffffe, 0x8001}, {0xd052, 0x76}, {0x7fff, 0xe41}, {0x43e6, 0x8}, {0x101, 0xb}, {0x9, 0x6}, {0x10000, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x9}, {0x7fff, 0xfc}, {0x4, 0x9}, {0x8, 0x8000000000000001}, {0x4}, {0x4, 0x1}, {0x8, 0xd4fe451}, {0xff, 0x2}, {0x6}, {0x15a, 0x8}, {0x679873eb, 0xfffffffffffff8ed}, {0x1000000000, 0xffffffffffff54e9}, {0x34800, 0x1ff}, {0x8000, 0x6}, {0x4}, {0x5}, {0x4, 0x40}, {0xcae2, 0xfffffffffffffffa}, {0x400, 0xff}, {0x2, 0x3}, {0x5, 0x68}, {0x5, 0x8}, {0xfffffffffffffff7, 0x8}, {0x8, 0x3}, {0x9, 0x1581}, {0x40, 0x8557}, {0x8, 0x6}, {0x1, 0x7}, {0x9, 0x9}, {0x25, 0x9}, {0x1ff, 0xffffffffffffffff}, {0x32d, 0xffffffffffffffaa}, {0xad2a, 0xf95}, {0x2, 0xf}, {0xa, 0x2}, {0xb, 0xffffffffffffffff}, {0x8}, {0xffffffff, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 10.253017687s ago: executing program 0 (id=1507): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x280040, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000080)=0x982) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x88182, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$nl_generic(r5, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000000)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2f, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040048}, 0x4000) 9.113900226s ago: executing program 0 (id=1508): mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) socket$kcm(0x21, 0x2, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETS(r2, 0x40384708, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000d36e5fc97387020badd0f53d6afdc788f66a00e6f60d3ba927608c07118da22facf1777fa29cbc4d25923a83e762f06b283ee202ff43e8a718edf7fb3fa6e972032487e154df3a9ef94d218e598299d1c303a66dd3c8d35966ac0d912788", @ANYRES16=r4, @ANYBLOB="010000000000fddbdf252a0000000800030002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc1, &(0x7f0000000780)=""/193, 0x0, 0x0, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$video(0x0, 0x8, 0x109400) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="54c3b1e65bb5f3fed033ed466c932878d5377c20f277cee62a644955874245c298fe9667005f5acc214181770c8d956c5972146497f725630cf5572a1535a3bbbf8502ab1bee1d5151782d307faa5b4155e811cd4cbf6a7d51be0211c9f8de3ddf2a8d5466427eb3d5c1aab07f8cb266d85e7461d64a40707b0ed928a944ea5fc70e84fd15132deb5470b622dc6317c832b7", 0x92}, {&(0x7f0000000400)="3c22b3304f22e6801a45", 0xa}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="4d2cede08c887f5108bf60483f87f207eb50808b38489b36f6a56fb217e6cc44e6f14ace64ae6fa3bdf11ac3b14a324bf0a1312adf23017a399301430ca1d70b3bb2f7e8964cf4fa7f184609e2c7cc6203bd4b40ce86d4203f943b30c13fd6d937fee723216e3d7a347d0fa8fcb78f13f2771293083e568775a8a24b3c4163335b6b48b236d7a5b47f6e7588a06d1da970f9e9616cbd14ecb6f2fc55bf0bd8a36ecbece56e38d557983b2335d4b104d11cf677", 0xb3}, {&(0x7f0000000540)}], 0x2, &(0x7f0000000600)}}], 0x2, 0x1c800) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80004, 0x0) ioctl$PPPIOCATTACH(r9, 0x4004743d, &(0x7f0000000100)=0x1) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4c24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000000}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x185082, 0x0) 8.866596703s ago: executing program 1 (id=1511): r0 = io_uring_setup(0x3450, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 7.894276502s ago: executing program 1 (id=1515): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0, 0x0, 0x0, 0xffffffffffffff67}, 0xe07e872420dfefca) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = openat$vimc2(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000080)={0xa40964, 0x7ff}) 6.830595097s ago: executing program 1 (id=1518): pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) syz_io_uring_setup(0x26d4, &(0x7f0000000200)={0x0, 0x3953, 0x2, 0x1, 0x1dd, 0x0, r6}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r1, 0x5608) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a001b0c"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804) 5.520250633s ago: executing program 4 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x1c, r1, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x1c}}, 0x4000) 5.335048076s ago: executing program 4 (id=1522): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000440)={{0x0, 0x401}, 0x100, './file0\x00'}) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) shutdown(r4, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", 0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r3, r5, 0x0) 4.918570088s ago: executing program 2 (id=1524): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4.905827881s ago: executing program 5 (id=1525): r0 = io_uring_setup(0x3450, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 4.228096291s ago: executing program 2 (id=1526): r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4.046576628s ago: executing program 2 (id=1527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x14c, 0x2c, 0x2, 0x30bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x11c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS={0xe8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x47}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x41}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6f}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xccf5}]}]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x1}, @TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) connect$inet6(r1, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x6, 0x4, 0x8, 0x100000001, 0x4], 0x3, 0x0, 0x0, [{}, {}, {}]}, 0xa8) getsockopt$inet6_int(r0, 0x29, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0x4) r9 = epoll_create1(0x0) r10 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000036c0)=""/234, 0xea}, 0x1}], 0x1, 0x60010000, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000040)={0x2000001b}) r12 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r13 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r13, 0xc00464b4, &(0x7f0000000140)={r14}) 3.915304902s ago: executing program 5 (id=1528): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x1) r3 = openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3e, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000040)={0xe0002005}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019440)={{0x14}, [@NFT_MSG_DELRULE={0xdc, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x800}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x72, 0x7, 0x1, 0x0, "90b80b29f1499c932c72fcce53c6b4a2b48a372111b7753d89b6539465edae3e8f49badb421727235b827b1ea48901ff0f8bd5715eb5fea0b486137a53453f64b015c7b5b50a2162d7ea38ebef66ae666dcbe03b116d6b9dab95010c3f595152a328924f5699b523df86def5c354"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x900, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x164}}, 0x0) lseek(r3, 0xffffffff7effffff, 0x3) sendmsg$RDMA_NLDEV_CMD_GET(r3, 0x0, 0x20044041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0285629, &(0x7f0000000180)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 3.84410975s ago: executing program 0 (id=1529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES8], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000040)="538cbc91823e54fcae3bf0a80eb94a3b44e56929082f01d3940072bc4cb2751687cf16f2bad0b5ed3b1476d1d629a1ff30db03b1db54e34c701a1fbbca520f7201f9c888fd20fd27f8f6d4b9cf") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000180)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fchown(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000700)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000680)=""/4096, &(0x7f0000001680)=0x1000) 3.767439814s ago: executing program 2 (id=1530): mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="080000000400"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.316034805s ago: executing program 1 (id=1531): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='esdfs\x00', 0x1) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r4, 0xaeb, 0x1) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r5) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) 3.226982152s ago: executing program 2 (id=1532): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r0 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000000}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) 2.577393549s ago: executing program 5 (id=1533): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0) r2 = getpid() r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x120, 0x4}, [@IFLA_TXQLEN={0x8, 0xd, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r5, &(0x7f0000000400), 0x0, &(0x7f0000000580), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x11) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x11) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff00442f00fe8000000000000000000000bbfe8000000000000000000000000000aa0c2088be000000ff7d009900000086dd080088be007b40080022eb1900000223022309020000008000000300ebb4000000000000000100000000000000007a2d"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, &(0x7f0000000400)={&(0x7f0000000240)=[{0x1, 0x0, 0x4, 0x5, 0x8000000000000001, 0x9, 0xfffffffffffffffb, 0x80}, {0x2, 0x0, 0x401, 0x3, 0x52a, 0x3fd, 0xc, 0x9}], 0x2, 0x38, 0x1, 0x401}) (async) ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, &(0x7f0000000400)={&(0x7f0000000240)=[{0x1, 0x0, 0x4, 0x5, 0x8000000000000001, 0x9, 0xfffffffffffffffb, 0x80}, {0x2, 0x0, 0x401, 0x3, 0x52a, 0x3fd, 0xc, 0x9}], 0x2, 0x38, 0x1, 0x401}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r9) (async) r10 = dup(r9) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) (async) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.339783692s ago: executing program 1 (id=1534): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000440)={{0x0, 0x401}, 0x100, './file0\x00'}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) shutdown(r2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", 0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r1, r3, 0x0) 1.687879833s ago: executing program 4 (id=1535): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.659717926s ago: executing program 2 (id=1536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000000c0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.562337702s ago: executing program 5 (id=1537): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.503623516s ago: executing program 0 (id=1538): r0 = io_uring_setup(0x3450, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 1.49813648s ago: executing program 4 (id=1539): r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.476242625s ago: executing program 1 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) close(0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) close(0x3) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x4be}) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0xc000, 0x8}) 1.234383449s ago: executing program 4 (id=1541): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'ip_vti0\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$setperm(0x5, 0x0, 0x60091414) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x80) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r3) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r3}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="309c676c78ab8b1377447b100000004ec53d2cb7cac8f39dc0d950001c14a6099620b54e3ceb3880038e48cb7f7d6c86ac7b6ea183056d9675391dfb93da0000000000000000000000002ce018be2b86d0bc35806d60db2a81c9bcb03b9ba28e2194baa2604b14cf751aa27e7b5d89cd2348e6066d72dec6758509c36e6d906a20f63c8b7b170187f62e4d5e823863919cec6d5ef7d998a0c90876438515cd49be124306cf355a2a01361c277149292244bf9409b8c581199447a6771a84affcc6e29b6aff0abde7759ddaad9fc81fbe80d29f6b4be21ae2fde935f54e8004f9f6cb442e2184b27ba6a498b73236a2022ba967688d07498313e46ede5063b7a2904c1f3c6b125bcb29c530cada2351c985a59a590f3b4a0c0c"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r5 = io_uring_setup(0x3bc, &(0x7f0000000280)={0x0, 0xfffffffe, 0x2, 0x0, 0x345}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r6, 0x80047437, 0x10004000000006) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc416a550a5d88a8a, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'veth1_macvtap\x00', 0x600}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) io_uring_enter(r5, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 454.774µs ago: executing program 4 (id=1542): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8}, {0x1, 0x1}]}]}}, 0x0, 0x36, 0x0, 0x7}, 0x28) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7fffffff) syz_open_dev$ptys(0xc, 0x3, 0x0) unshare(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/time_for_children\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x2023) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1543): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000680)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) kernel console output (not intermixed with test programs): 440.379404][ T5801] usb 1-1: config 0 interface 184 has no altsetting 0 [ 440.406897][ T5801] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 440.433796][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.494562][ T5801] usb 1-1: Product: syz [ 440.500169][ T5801] usb 1-1: Manufacturer: syz [ 440.528989][ T5801] usb 1-1: SerialNumber: syz [ 440.543340][T10352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.547416][ T5801] usb 1-1: config 0 descriptor?? [ 440.630371][ T12] Bluetooth: Error in BCSP hdr checksum [ 440.653347][T10352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.754717][T10354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.901938][ T9043] Bluetooth: Error in BCSP hdr checksum [ 441.181700][ T12] Bluetooth: Error in BCSP hdr checksum [ 441.435354][ T5801] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 441.448089][ T9043] Bluetooth: Error in BCSP hdr checksum [ 441.465684][ T5801] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 441.713742][ T9043] Bluetooth: Error in BCSP hdr checksum [ 441.897513][T10371] binder: 10370:10371 unknown command 0 [ 441.923551][T10371] binder: 10370:10371 ioctl c0306201 2000000001c0 returned -22 [ 441.971483][ T52] Bluetooth: Error in BCSP hdr checksum [ 442.021392][T10375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.165157][ T30] audit: type=1400 audit(1779303036.075:680): avc: denied { write } for pid=10360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.250337][ T9043] Bluetooth: Error in BCSP hdr checksum [ 442.375394][T10378] binder: 10377:10378 ioctl c0306201 0 returned -14 [ 442.480426][ T30] audit: type=1400 audit(1779303036.385:681): avc: denied { write } for pid=10381 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.523967][ T52] Bluetooth: Error in BCSP hdr checksum [ 442.772614][ T9043] Bluetooth: Error in BCSP hdr checksum [ 442.936252][ T5801] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 442.990565][ T5801] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 443.030160][ T5801] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 443.030215][ T52] Bluetooth: Error in BCSP hdr checksum [ 443.062877][ T5801] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 443.099129][ T5801] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 443.145379][ T5801] usb 1-1: USB disconnect, device number 45 [ 443.290229][ T9043] Bluetooth: Error in BCSP hdr checksum [ 443.438898][ T30] audit: type=1400 audit(1779303037.345:682): avc: denied { write } for pid=10387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.505578][T10369] fuse: Unknown parameter 'user00000000000000000000' [ 443.550812][ T9043] Bluetooth: Error in BCSP hdr checksum [ 443.773307][ T30] audit: type=1400 audit(1779303037.675:683): avc: denied { write } for pid=10402 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.812001][ T1351] Bluetooth: Error in BCSP hdr checksum [ 444.020314][ T29] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 444.070868][ T52] Bluetooth: Error in BCSP hdr checksum [ 444.190644][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 444.202776][T10414] bridge0: port 1(syz_tun) entered blocking state [ 444.227862][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 444.251609][T10414] bridge0: port 1(syz_tun) entered disabled state [ 444.261185][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 444.308010][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.310033][T10414] syz_tun: entered allmulticast mode [ 444.343363][ T1351] Bluetooth: Error in BCSP hdr checksum [ 444.374920][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.403685][T10414] syz_tun: entered promiscuous mode [ 444.408731][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.425567][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.590655][ T5736] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 444.607410][ T52] Bluetooth: Error in BCSP hdr checksum [ 444.646835][T10428] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 444.670959][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.746777][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.770103][ T5736] usb 2-1: Using ep0 maxpacket: 8 [ 444.781258][ T5736] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 444.894328][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.914297][ T12] Bluetooth: Error in BCSP hdr checksum [ 444.926159][ T30] audit: type=1400 audit(1779303038.835:684): avc: denied { write } for pid=10410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.501800][ T5736] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.515749][ T52] Bluetooth: Error in BCSP hdr checksum [ 445.537240][ T5736] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.614128][ T5736] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.653806][ T5736] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.689594][ T5736] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 445.737749][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.770193][ T12] Bluetooth: Error in BCSP hdr checksum [ 445.902653][ T30] audit: type=1400 audit(1779303039.815:685): avc: denied { write } for pid=10438 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.985005][ T5736] usb 2-1: usb_control_msg returned -32 [ 446.005179][ T5736] usbtmc 2-1:16.0: can't read capabilities [ 446.030361][ T9043] Bluetooth: Error in BCSP hdr checksum [ 446.261417][T10445] binder: 10444:10445 unknown command 0 [ 446.280911][T10445] binder: 10444:10445 ioctl c0306201 2000000001c0 returned -22 [ 446.291580][ T9043] Bluetooth: Error in BCSP hdr checksum [ 446.306389][T10445] binder_alloc: 10444: binder_alloc_buf, no vma [ 446.323822][T10445] binder: 10444:10445 unknown command 0 [ 446.344541][T10445] binder: 10444:10445 ioctl c0306201 200000000480 returned -22 [ 446.468089][ T29] usb 5-1: usb_control_msg returned -71 [ 446.510289][ T29] usbtmc 5-1:16.0: can't read capabilities [ 446.547440][ T29] usb 5-1: USB disconnect, device number 53 [ 446.564602][ T1351] Bluetooth: Error in BCSP hdr checksum [ 446.599748][T10451] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 446.670637][T10451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.714982][T10451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.814348][T10459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.831220][ T1351] Bluetooth: Error in BCSP hdr checksum [ 446.877006][ T30] audit: type=1400 audit(1779303040.785:686): avc: denied { write } for pid=10440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.110784][ T12] Bluetooth: Error in BCSP hdr checksum [ 447.139485][T10468] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 447.191743][T10468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.307300][T10469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.391395][ T1351] Bluetooth: Error in BCSP hdr checksum [ 447.415469][T10468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.457321][ T30] audit: type=1400 audit(1779303041.265:687): avc: denied { write } for pid=10464 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.658774][ T1050] Bluetooth: Error in BCSP hdr checksum [ 447.910921][ T36] Bluetooth: Error in BCSP hdr checksum [ 448.216142][ T36] Bluetooth: Error in BCSP hdr checksum [ 448.563194][ T36] Bluetooth: Error in BCSP hdr checksum [ 448.676980][ T5801] usb 2-1: USB disconnect, device number 38 [ 448.735677][ T12] Bluetooth: Error in BCSP hdr checksum [ 448.990243][ T12] Bluetooth: Error in BCSP hdr checksum [ 449.250774][ T12] Bluetooth: Error in BCSP hdr checksum [ 449.510572][ T12] Bluetooth: Error in BCSP hdr checksum [ 449.728217][T10479] fuse: Unknown parameter 'user_i00000000000000000000' [ 449.748392][ T30] audit: type=1400 audit(1779303043.655:688): avc: denied { write } for pid=10477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.779987][ T52] Bluetooth: Error in BCSP hdr checksum [ 449.973403][ T30] audit: type=1400 audit(1779303043.885:689): avc: denied { write } for pid=10494 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.040208][ T9043] Bluetooth: Error in BCSP hdr checksum [ 450.309695][ T12] Bluetooth: Error in BCSP hdr checksum [ 450.602570][ T1050] Bluetooth: Error in BCSP hdr checksum [ 450.712040][T10509] netlink: 'syz.0.1138': attribute type 21 has an invalid length. [ 450.884121][ T9043] Bluetooth: Error in BCSP hdr checksum [ 451.081118][ T9043] Bluetooth: Error in BCSP hdr checksum [ 451.336688][T10518] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 451.349351][ T12] Bluetooth: Error in BCSP hdr checksum [ 451.560078][T10518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.600779][ T36] Bluetooth: Error in BCSP hdr checksum [ 451.621720][T10524] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 451.631336][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.649758][T10524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.713808][T10524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.726209][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.775185][T10524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.860369][ T1050] Bluetooth: Error in BCSP hdr checksum [ 452.441523][ T9043] Bluetooth: Error in BCSP hdr checksum [ 452.813398][ T7978] Bluetooth: hci0: command 0x2016 tx timeout [ 452.881806][ T1351] Bluetooth: Error in BCSP hdr checksum [ 453.143199][ T36] Bluetooth: Error in BCSP hdr checksum [ 453.391984][ T1050] Bluetooth: Error in BCSP hdr checksum [ 453.658881][ T9043] Bluetooth: Error in BCSP hdr checksum [ 453.665868][T10558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.886524][T10566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.912017][ T3319] Bluetooth: Error in BCSP hdr checksum [ 453.934971][T10569] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 453.955361][T10566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.999873][T10569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.016493][T10566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.041936][T10571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.115162][T10571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.170176][ T3319] Bluetooth: Error in BCSP hdr checksum [ 454.431548][ T36] Bluetooth: Error in BCSP hdr checksum [ 454.441113][T10574] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 454.452085][T10574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.513410][T10574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.669771][T10574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.692194][ T1050] Bluetooth: Error in BCSP hdr checksum [ 454.913570][ T7978] Bluetooth: hci0: command 0x2016 tx timeout [ 455.156803][ T1351] Bluetooth: Error in BCSP hdr checksum [ 455.422023][ T9043] Bluetooth: Error in BCSP hdr checksum [ 455.888251][ T3319] Bluetooth: Error in BCSP hdr checksum [ 455.923127][T10592] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 456.120210][ T9043] Bluetooth: Error in BCSP hdr checksum [ 456.351926][T10604] binder: 10601:10604 unknown command 0 [ 456.365661][T10608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.381729][ T9043] Bluetooth: Error in BCSP hdr checksum [ 456.390028][T10604] binder: 10601:10604 ioctl c0306201 2000000001c0 returned -22 [ 456.810349][ T3319] Bluetooth: Error in BCSP hdr checksum [ 457.063308][T10614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1175'. [ 457.486411][ T1050] Bluetooth: Error in BCSP hdr checksum [ 457.770359][ T36] Bluetooth: Error in BCSP hdr checksum [ 458.305842][ T9043] Bluetooth: Error in BCSP hdr checksum [ 458.420124][ T5801] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 458.550223][ T3319] Bluetooth: Error in BCSP hdr checksum [ 458.605919][ T7977] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 458.620140][ T5801] usb 3-1: Using ep0 maxpacket: 32 [ 458.661841][ T5801] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 458.708372][ T5801] usb 3-1: config 0 has no interface number 0 [ 458.741440][ T5801] usb 3-1: config 0 interface 184 has no altsetting 0 [ 458.767719][ T5801] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 458.778204][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1169'. [ 458.782294][T10638] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 458.794023][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.818130][ T1351] Bluetooth: Error in BCSP hdr checksum [ 458.866272][ T5801] usb 3-1: Product: syz [ 458.881997][ T5801] usb 3-1: Manufacturer: syz [ 458.892853][ T5801] usb 3-1: SerialNumber: syz [ 458.912818][ T5801] usb 3-1: config 0 descriptor?? [ 458.925801][T10642] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 458.936923][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.963960][T10644] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 458.979742][T10644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.998259][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.044295][T10644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.060327][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.070500][ T1351] Bluetooth: Error in BCSP hdr checksum [ 459.107544][T10644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.124354][T10646] usb usb7: usbfs: process 10646 (syz.5.1187) did not claim interface 0 before use [ 460.172864][ T13] Bluetooth: Error in BCSP hdr checksum [ 460.371464][ T36] Bluetooth: Error in BCSP hdr checksum [ 460.634782][ T1351] Bluetooth: Error in BCSP hdr checksum [ 460.634919][ T5729] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 460.652000][ T5801] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 460.670943][ T5801] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 460.720341][T10653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.870231][ T5729] usb 5-1: Using ep0 maxpacket: 32 [ 460.876967][ T5729] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 460.893934][ T5729] usb 5-1: config 0 has no interface number 0 [ 460.901986][ T13] Bluetooth: Error in BCSP hdr checksum [ 461.037011][ T5729] usb 5-1: config 0 interface 184 has no altsetting 0 [ 461.064595][ T5729] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 461.148038][T10665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1191'. [ 461.538796][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.547121][ T5729] usb 5-1: Product: syz [ 461.551382][ T5729] usb 5-1: Manufacturer: syz [ 461.556003][ T5729] usb 5-1: SerialNumber: syz [ 461.563848][ T3319] Bluetooth: Error in BCSP hdr checksum [ 461.564584][ T5729] usb 5-1: config 0 descriptor?? [ 461.819000][ T13] Bluetooth: Error in BCSP hdr checksum [ 462.308153][ T3319] Bluetooth: Error in BCSP hdr checksum [ 462.563574][ T3319] Bluetooth: Error in BCSP hdr checksum [ 462.581479][ T5801] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 462.607274][ T5801] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 462.637642][ T5801] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 462.663847][ T7977] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 462.685662][ T5801] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 462.725539][ T5801] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 462.790116][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 462.830139][ T12] Bluetooth: Error in BCSP hdr checksum [ 462.867008][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 463.314823][ T5801] usb 3-1: USB disconnect, device number 47 [ 463.344885][ T12] Bluetooth: Error in BCSP hdr checksum [ 463.722919][ T1050] Bluetooth: Error in BCSP hdr checksum [ 464.206143][ T36] Bluetooth: Error in BCSP hdr checksum [ 464.425890][ T12] Bluetooth: Error in BCSP hdr checksum [ 464.564676][ T30] audit: type=1400 audit(1779303058.445:690): avc: denied { write } for pid=10680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.606510][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 464.641486][ T5801] IPVS: starting estimator thread 0... [ 464.676957][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 464.679138][T10699] binder: 10693:10699 ioctl c0306201 0 returned -14 [ 464.699781][ T36] Bluetooth: Error in BCSP hdr checksum [ 464.713754][ T30] audit: type=1400 audit(1779303058.625:691): avc: denied { write } for pid=10705 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.720885][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 464.760523][T10703] IPVS: using max 44 ests per chain, 105600 per kthread [ 464.839342][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 464.857274][T10710] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 464.869236][T10710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.894237][ T5729] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 464.936068][T10710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.950445][ T12] Bluetooth: Error in BCSP hdr checksum [ 464.961898][ T5729] usb 5-1: USB disconnect, device number 54 [ 465.059371][T10710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.210643][ T36] Bluetooth: Error in BCSP hdr checksum [ 465.958916][ T36] Bluetooth: Error in BCSP hdr checksum [ 465.969347][ T30] audit: type=1400 audit(1779303059.845:692): avc: denied { write } for pid=10711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.158252][ T30] audit: type=1400 audit(1779303060.065:693): avc: denied { write } for pid=10727 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.253192][T10730] netlink: 'syz.1.1203': attribute type 21 has an invalid length. [ 466.619819][ T3319] Bluetooth: Error in BCSP hdr checksum [ 466.796943][ T30] audit: type=1400 audit(1779303060.695:694): avc: granted { setsecparam } for pid=10732 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 467.204762][ T1050] Bluetooth: Error in BCSP hdr checksum [ 467.263569][ T7977] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 467.361869][ T5714] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 467.390876][ T12] Bluetooth: Error in BCSP hdr checksum [ 467.603432][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.621630][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.638416][ T5714] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 467.647555][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.661704][ T12] Bluetooth: Error in BCSP hdr checksum [ 467.679878][ T5714] usb 3-1: config 0 descriptor?? [ 467.695739][ T5801] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 467.910082][ T5801] usb 5-1: Using ep0 maxpacket: 8 [ 467.922764][ T12] Bluetooth: Error in BCSP hdr checksum [ 467.928668][ T5801] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 467.969792][ T5801] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 467.995258][ T5801] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.019839][ T5801] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.047644][ T5801] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.096171][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.102444][ T5714] hid_parser_main: 879 callbacks suppressed [ 468.102462][ T5714] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 468.122068][ T29] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 468.130515][T10755] usb usb7: usbfs: process 10755 (syz.5.1212) did not claim interface 0 before use [ 468.165276][ T5714] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 468.180623][ T13] Bluetooth: Error in BCSP hdr checksum [ 468.188380][ T5714] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 468.217028][ T5714] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 468.234613][ T5714] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 468.264702][ T5714] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 468.290062][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 468.297594][ T29] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 468.321112][ T29] usb 1-1: config 0 has no interface number 0 [ 468.337780][ T29] usb 1-1: config 0 interface 184 has no altsetting 0 [ 468.358829][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 468.377231][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.403456][ T29] usb 1-1: Product: syz [ 468.414370][ T29] usb 1-1: Manufacturer: syz [ 468.424493][ T29] usb 1-1: SerialNumber: syz [ 468.443524][ T29] usb 1-1: config 0 descriptor?? [ 468.452466][ T13] Bluetooth: Error in BCSP hdr checksum [ 468.710228][ T13] Bluetooth: Error in BCSP hdr checksum [ 468.970259][ T13] Bluetooth: Error in BCSP hdr checksum [ 469.108215][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 469.155749][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.231087][ T13] Bluetooth: Error in BCSP hdr checksum [ 469.448720][ T30] audit: type=1400 audit(1779303063.355:695): avc: denied { write } for pid=10768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.500202][ T1351] Bluetooth: Error in BCSP hdr checksum [ 469.611323][ T5801] usb 5-1: usb_control_msg returned -71 [ 469.647707][ T5801] usbtmc 5-1:16.0: can't read capabilities [ 469.693781][ T5736] usb 3-1: USB disconnect, device number 48 [ 469.750892][ T36] Bluetooth: Error in BCSP hdr checksum [ 469.801716][ T5801] usb 5-1: USB disconnect, device number 55 [ 469.818077][ T30] audit: type=1400 audit(1779303063.715:696): avc: denied { write } for pid=10782 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.107728][T10789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1217'. [ 470.715664][T10792] netlink: 'syz.4.1216': attribute type 21 has an invalid length. [ 470.795317][ T7977] Bluetooth: hci1: connection err: -111 [ 471.073070][ T36] Bluetooth: Error in BCSP hdr checksum [ 471.278537][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1214'. [ 471.301025][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 471.323886][ T1351] Bluetooth: Error in BCSP hdr checksum [ 471.344293][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 471.391108][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 471.428709][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 471.542436][ T29] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 471.592991][ T36] Bluetooth: Error in BCSP hdr checksum [ 471.607165][ T29] usb 1-1: USB disconnect, device number 46 [ 471.850190][ T1351] Bluetooth: Error in BCSP hdr checksum [ 472.134004][ T36] Bluetooth: Error in BCSP hdr checksum [ 472.579393][ T1351] Bluetooth: Error in BCSP hdr checksum [ 472.643008][ T36] Bluetooth: Error in BCSP hdr checksum [ 472.670062][ T30] audit: type=1400 audit(1779303066.575:697): avc: denied { write } for pid=10798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.903357][ T13] Bluetooth: Error in BCSP hdr checksum [ 473.525186][ T30] audit: type=1400 audit(1779303067.435:698): avc: denied { write } for pid=10829 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.553554][ T3319] Bluetooth: Error in BCSP hdr checksum [ 474.168675][ T9043] Bluetooth: Error in BCSP hdr checksum [ 474.209260][ T30] audit: type=1400 audit(1779303068.115:699): avc: denied { shutdown } for pid=10795 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 474.375749][ T30] audit: type=1400 audit(1779303068.165:700): avc: denied { map } for pid=10795 comm="syz.4.1219" path="socket:[31173]" dev="sockfs" ino=31173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 474.411892][ T9043] Bluetooth: Error in BCSP hdr checksum [ 474.820356][ T30] audit: type=1400 audit(1779303068.175:701): avc: denied { prog_load } for pid=10839 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 474.840586][ T30] audit: type=1400 audit(1779303068.175:702): avc: denied { bpf } for pid=10839 comm="syz.2.1226" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 474.867231][ T12] Bluetooth: Error in BCSP hdr checksum [ 474.908746][ T30] audit: type=1400 audit(1779303068.395:703): avc: denied { create } for pid=10839 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 474.957716][T10847] binder: BINDER_SET_CONTEXT_MGR already set [ 474.978130][T10847] binder: 10846:10847 ioctl 4018620d 200000004a80 returned -16 [ 475.001704][ T30] audit: type=1400 audit(1779303068.815:704): avc: denied { map_create } for pid=10843 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 475.107792][ T13] Bluetooth: Error in BCSP hdr checksum [ 475.157026][ T30] audit: type=1400 audit(1779303068.855:705): avc: denied { read } for pid=10846 comm="syz.0.1229" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 475.280025][ T30] audit: type=1400 audit(1779303068.855:706): avc: denied { read open } for pid=10846 comm="syz.0.1229" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 475.352871][ T13] Bluetooth: Error in BCSP hdr checksum [ 475.405148][ T30] audit: type=1400 audit(1779303068.865:707): avc: denied { ioctl } for pid=10846 comm="syz.0.1229" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 475.450745][T10854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.480253][ T30] audit: type=1400 audit(1779303068.865:708): avc: denied { set_context_mgr } for pid=10846 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 475.500559][ T30] audit: type=1400 audit(1779303068.865:709): avc: denied { read } for pid=10846 comm="syz.0.1229" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 475.523625][ T30] audit: type=1400 audit(1779303068.865:710): avc: denied { open } for pid=10846 comm="syz.0.1229" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 475.554739][T10854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.616474][T10854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.626570][ T12] Bluetooth: Error in BCSP hdr checksum [ 475.880199][ T1351] Bluetooth: Error in BCSP hdr checksum [ 475.982004][T10848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1228'. [ 476.090282][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 476.140371][ T1351] Bluetooth: Error in BCSP hdr checksum [ 476.400338][ T36] Bluetooth: Error in BCSP hdr checksum [ 476.404104][T10865] usb usb7: usbfs: process 10865 (syz.4.1235) did not claim interface 0 before use [ 476.470784][T10867] netlink: 'syz.0.1234': attribute type 21 has an invalid length. [ 476.510919][ T7978] Bluetooth: hci0: connection err: -111 [ 476.808435][ T9043] Bluetooth: Error in BCSP hdr checksum [ 476.821342][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 476.834923][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 476.845014][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 476.857805][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 476.880816][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 476.917999][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.927325][ T36] Bluetooth: Error in BCSP hdr checksum [ 476.947264][ T9] usb 3-1: Product: syz [ 476.952369][ T9] usb 3-1: Manufacturer: syz [ 476.976805][ T9] usb 3-1: SerialNumber: syz [ 477.043304][ T9] usb 3-1: config 0 descriptor?? [ 477.180157][ T9043] Bluetooth: Error in BCSP hdr checksum [ 477.441296][ T36] Bluetooth: Error in BCSP hdr checksum [ 477.823631][ T9] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 477.836883][ T13] Bluetooth: Error in BCSP hdr checksum [ 477.883015][T10858] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 477.902786][ T9] usb 3-1: USB disconnect, device number 49 [ 477.961222][ T1050] Bluetooth: Error in BCSP hdr checksum [ 478.226695][ T1050] Bluetooth: Error in BCSP hdr checksum [ 478.665440][ T3319] Bluetooth: Error in BCSP hdr checksum [ 478.740653][ T3319] Bluetooth: Error in BCSP hdr checksum [ 478.788112][T10886] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1240'. [ 479.001378][ T1050] Bluetooth: Error in BCSP hdr checksum [ 479.143195][T10888] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 479.164862][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.238690][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.260311][ T1050] Bluetooth: Error in BCSP hdr checksum [ 479.308272][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.520363][ T1050] Bluetooth: Error in BCSP hdr checksum [ 479.780956][ T13] Bluetooth: Error in BCSP hdr checksum [ 479.959641][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 479.959658][ T30] audit: type=1400 audit(1779303073.865:920): avc: denied { read } for pid=10893 comm="syz.2.1243" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.024733][ T30] audit: type=1400 audit(1779303073.865:921): avc: denied { read open } for pid=10893 comm="syz.2.1243" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.051045][ T13] Bluetooth: Error in BCSP hdr checksum [ 480.068641][ T30] audit: type=1400 audit(1779303073.925:922): avc: denied { allowed } for pid=10892 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 480.125906][ T30] audit: type=1400 audit(1779303074.035:923): avc: denied { create } for pid=10892 comm="syz.0.1244" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 480.263401][ T30] audit: type=1400 audit(1779303074.115:924): avc: denied { ioctl } for pid=10893 comm="syz.2.1243" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.310287][ T1351] Bluetooth: Error in BCSP hdr checksum [ 480.492952][ T30] audit: type=1400 audit(1779303074.145:925): avc: denied { set_context_mgr } for pid=10893 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 480.528137][ T30] audit: type=1400 audit(1779303074.145:926): avc: denied { read } for pid=10893 comm="syz.2.1243" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.552417][ T30] audit: type=1400 audit(1779303074.145:927): avc: denied { open } for pid=10893 comm="syz.2.1243" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.582568][ T1050] Bluetooth: Error in BCSP hdr checksum [ 480.726325][ T30] audit: type=1400 audit(1779303074.145:928): avc: denied { map } for pid=10893 comm="syz.2.1243" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.752536][ T30] audit: type=1400 audit(1779303074.145:929): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.883467][ T1351] Bluetooth: Error in BCSP hdr checksum [ 481.385038][ T1351] Bluetooth: Error in BCSP hdr checksum [ 481.655109][ T1351] Bluetooth: Error in BCSP hdr checksum [ 481.788368][T10915] netlink: 'syz.5.1246': attribute type 21 has an invalid length. [ 481.855213][ T7978] Bluetooth: hci5: connection err: -111 [ 482.122496][ T13] Bluetooth: Error in BCSP hdr checksum [ 482.391543][ T36] Bluetooth: Error in BCSP hdr checksum [ 482.626801][ T3319] Bluetooth: Error in BCSP hdr checksum [ 482.668640][T10922] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 482.683546][T10922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.745706][T10922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.816607][T10922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.885154][ T1050] Bluetooth: Error in BCSP hdr checksum [ 482.946656][T10927] usb usb7: usbfs: process 10927 (syz.2.1253) did not claim interface 0 before use [ 483.140292][ T13] Bluetooth: Error in BCSP hdr checksum [ 483.400844][ T13] Bluetooth: Error in BCSP hdr checksum [ 483.668278][ T3319] Bluetooth: Error in BCSP hdr checksum [ 484.147170][ T12] Bluetooth: Error in BCSP hdr checksum [ 484.310258][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.318082][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.357427][T10932] bridge0: entered allmulticast mode [ 484.426922][ T12] Bluetooth: Error in BCSP hdr checksum [ 484.498200][T10932] bridge_slave_1: left allmulticast mode [ 484.584578][T10932] bridge_slave_1: left promiscuous mode [ 484.683312][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.686463][ T36] Bluetooth: Error in BCSP hdr checksum [ 484.780935][T10950] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 484.847702][T10932] bridge_slave_0: left allmulticast mode [ 484.872675][T10932] bridge_slave_0: left promiscuous mode [ 484.890762][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.910697][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.942661][ T12] Bluetooth: Error in BCSP hdr checksum [ 485.023199][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 485.023216][ T30] audit: type=1400 audit(1779303078.935:1132): avc: denied { create } for pid=10949 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.060004][ T30] audit: type=1400 audit(1779303078.935:1133): avc: denied { write } for pid=10949 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.064307][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.118955][ T30] audit: type=1400 audit(1779303078.935:1134): avc: denied { read } for pid=10949 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.169998][ T30] audit: type=1400 audit(1779303078.965:1135): avc: denied { ioctl } for pid=10956 comm="syz.2.1261" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.206759][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.216665][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 485.226060][ T52] Bluetooth: Error in BCSP hdr checksum [ 485.286716][T10954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1260'. [ 485.299270][ T30] audit: type=1400 audit(1779303078.975:1136): avc: denied { read } for pid=10949 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.362184][ T30] audit: type=1400 audit(1779303078.975:1137): avc: denied { write } for pid=10949 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.426149][ T30] audit: type=1400 audit(1779303079.055:1138): avc: denied { ioctl } for pid=10956 comm="syz.2.1261" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.472783][ T52] Bluetooth: Error in BCSP hdr checksum [ 485.509546][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.547081][ T30] audit: type=1400 audit(1779303079.115:1139): avc: denied { create } for pid=10949 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.577574][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.597884][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 485.613282][ T30] audit: type=1400 audit(1779303079.115:1140): avc: denied { write } for pid=10949 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.640040][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.668998][ T9] usb 3-1: config 0 descriptor?? [ 485.709418][ T30] audit: type=1400 audit(1779303079.115:1141): avc: denied { read } for pid=10949 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.863557][ T36] Bluetooth: Error in BCSP hdr checksum [ 485.991332][ T1050] Bluetooth: Error in BCSP hdr checksum [ 486.138228][T10807] syz.2.1221 (10807) used greatest stack depth: 17928 bytes left [ 486.175486][ T9] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 486.182951][ T9] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 486.250680][ T1050] Bluetooth: Error in BCSP hdr checksum [ 486.271511][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0007/input/input23 [ 486.411683][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.454728][ T9] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 486.473457][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.510309][ T3319] Bluetooth: Error in BCSP hdr checksum [ 486.550521][ T9] usb 3-1: USB disconnect, device number 50 [ 486.670977][T10975] fido_id[10975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 486.771538][ T3319] Bluetooth: Error in BCSP hdr checksum [ 487.030143][ T3319] Bluetooth: Error in BCSP hdr checksum [ 487.312387][ T3319] Bluetooth: Error in BCSP hdr checksum [ 487.570811][ T1050] Bluetooth: Error in BCSP hdr checksum [ 487.598599][T10992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.646861][ T7977] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 487.680159][ T5714] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 487.830336][ T1351] Bluetooth: Error in BCSP hdr checksum [ 487.836262][ T5714] usb 5-1: device descriptor read/64, error -71 [ 488.126914][ T3319] Bluetooth: Error in BCSP hdr checksum [ 488.270026][ T5714] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 488.380287][ T1050] Bluetooth: Error in BCSP hdr checksum [ 488.430532][ T5714] usb 5-1: device descriptor read/64, error -71 [ 488.570732][ T5714] usb usb5-port1: attempt power cycle [ 488.642981][ T3319] Bluetooth: Error in BCSP hdr checksum [ 488.940490][ T5714] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 489.345836][ T1351] Bluetooth: Error in BCSP hdr checksum [ 489.370867][ T5714] usb 5-1: device descriptor read/8, error -71 [ 489.580315][ T1351] Bluetooth: Error in BCSP hdr checksum [ 489.710204][ T5714] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 489.742917][ T5714] usb 5-1: device descriptor read/8, error -71 [ 489.844973][ T1351] Bluetooth: Error in BCSP hdr checksum [ 489.880407][ T5714] usb usb5-port1: unable to enumerate USB device [ 489.921228][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 490.085649][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 490.085660][ T30] audit: type=1400 audit(1779303083.995:1365): avc: denied { read write } for pid=5620 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.100222][ T1050] Bluetooth: Error in BCSP hdr checksum [ 490.132111][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 490.156022][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 490.180991][ T9] usb 1-1: config 0 has no interface number 0 [ 490.201365][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 490.222575][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 490.231924][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.256707][ T30] audit: type=1400 audit(1779303084.025:1366): avc: denied { read write open } for pid=5620 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.300373][ T30] audit: type=1400 audit(1779303084.025:1367): avc: denied { ioctl } for pid=5620 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.352632][ T9] usb 1-1: Product: syz [ 490.360508][ T9042] Bluetooth: Error in BCSP hdr checksum [ 490.370130][ T9] usb 1-1: Manufacturer: syz [ 490.386957][ T9] usb 1-1: SerialNumber: syz [ 490.421008][ T30] audit: type=1400 audit(1779303084.065:1368): avc: denied { ioctl } for pid=11015 comm="syz.0.1277" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.473120][ T9] usb 1-1: config 0 descriptor?? [ 490.528580][ T30] audit: type=1400 audit(1779303084.065:1369): avc: denied { ioctl } for pid=11015 comm="syz.0.1277" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.621468][ T9042] Bluetooth: Error in BCSP hdr checksum [ 490.666295][ T30] audit: type=1400 audit(1779303084.115:1370): avc: denied { create } for pid=11021 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 490.861953][ T30] audit: type=1400 audit(1779303084.135:1371): avc: denied { ioctl } for pid=11015 comm="syz.0.1277" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.881305][ T3319] Bluetooth: Error in BCSP hdr checksum [ 490.972218][ T30] audit: type=1400 audit(1779303084.165:1372): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.997169][ T5275] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.001103][T11035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.140639][ T3319] Bluetooth: Error in BCSP hdr checksum [ 491.607168][ T9042] Bluetooth: Error in BCSP hdr checksum [ 491.631242][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 491.717723][T11047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.733769][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 491.871966][ T1050] Bluetooth: Error in BCSP hdr checksum [ 492.385813][ T9042] Bluetooth: Error in BCSP hdr checksum [ 492.633044][ T9042] Bluetooth: Error in BCSP hdr checksum [ 492.890743][ T9042] Bluetooth: Error in BCSP hdr checksum [ 493.061636][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 493.556728][ T9042] Bluetooth: Error in BCSP hdr checksum [ 493.580882][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 493.647762][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 493.706846][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 493.791292][ T1351] Bluetooth: Error in BCSP hdr checksum [ 493.805693][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 493.907480][ T9] usb 1-1: USB disconnect, device number 47 [ 494.050694][ T1351] Bluetooth: Error in BCSP hdr checksum [ 494.310223][ T9042] Bluetooth: Error in BCSP hdr checksum [ 494.420285][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 494.486834][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1295'. [ 494.573181][ T12] Bluetooth: Error in BCSP hdr checksum [ 494.590315][ T9] usb 1-1: device descriptor read/64, error -71 [ 494.884579][ T12] Bluetooth: Error in BCSP hdr checksum [ 494.947322][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 495.094795][ T30] kauditd_printk_skb: 449 callbacks suppressed [ 495.094811][ T30] audit: type=1400 audit(1779303089.005:1794): avc: denied { read write open } for pid=5620 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.126696][ T9] usb 1-1: device descriptor read/64, error -71 [ 495.148648][ T1050] Bluetooth: Error in BCSP hdr checksum [ 495.207298][ T30] audit: type=1400 audit(1779303089.005:1795): avc: denied { ioctl } for pid=5620 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.250614][ T9] usb usb1-port1: attempt power cycle [ 495.338673][ T30] audit: type=1400 audit(1779303089.055:1796): avc: denied { search } for pid=11100 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.472672][ T9042] Bluetooth: Error in BCSP hdr checksum [ 495.494907][ T30] audit: type=1400 audit(1779303089.055:1797): avc: denied { search } for pid=11100 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.914507][ T30] audit: type=1400 audit(1779303089.055:1798): avc: denied { search } for pid=11100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.944497][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.954102][ T1050] Bluetooth: Error in BCSP hdr checksum [ 495.959746][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.970000][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 495.984174][ T30] audit: type=1400 audit(1779303089.055:1799): avc: denied { search } for pid=11100 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.041069][ T9] usb 1-1: device descriptor read/8, error -71 [ 496.132103][ T30] audit: type=1400 audit(1779303089.115:1800): avc: denied { search } for pid=11101 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.173155][ T1050] Bluetooth: Error in BCSP hdr checksum [ 496.249103][ T30] audit: type=1400 audit(1779303089.115:1801): avc: denied { read } for pid=11101 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.301435][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 496.353887][T11115] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.357449][ T30] audit: type=1400 audit(1779303089.115:1802): avc: denied { open } for pid=11101 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.392041][ T9] usb 1-1: device descriptor read/8, error -71 [ 496.430241][ T3319] Bluetooth: Error in BCSP hdr checksum [ 496.510404][ T9] usb usb1-port1: unable to enumerate USB device [ 496.690711][ T9043] Bluetooth: Error in BCSP hdr checksum [ 496.952333][ T1050] Bluetooth: Error in BCSP hdr checksum [ 496.961764][ T5749] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 497.160057][ T5749] usb 5-1: Using ep0 maxpacket: 32 [ 497.189437][ T5749] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 497.211990][ T9042] Bluetooth: Error in BCSP hdr checksum [ 497.230836][ T5749] usb 5-1: config 0 has no interface number 0 [ 497.370855][ T5749] usb 5-1: config 0 interface 184 has no altsetting 0 [ 497.376196][T11133] fuse: Unknown parameter '0x0000000000000004' [ 497.382542][ T5749] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.399982][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.420788][ T5749] usb 5-1: Product: syz [ 497.425042][ T5749] usb 5-1: Manufacturer: syz [ 497.429636][ T5749] usb 5-1: SerialNumber: syz [ 497.449174][ T5749] usb 5-1: config 0 descriptor?? [ 497.470209][ T3319] Bluetooth: Error in BCSP hdr checksum [ 497.558156][T11146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1305'. [ 497.731432][ T3319] Bluetooth: Error in BCSP hdr checksum [ 497.991784][ T9042] Bluetooth: Error in BCSP hdr checksum [ 498.168100][ T5749] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 498.212328][ T5749] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 498.252129][ T3319] Bluetooth: Error in BCSP hdr checksum [ 498.513545][ T3319] Bluetooth: Error in BCSP hdr checksum [ 498.713887][T11174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.770867][ T9042] Bluetooth: Error in BCSP hdr checksum [ 498.953820][ T5749] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 498.987836][ T5749] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 499.030956][ T9042] Bluetooth: Error in BCSP hdr checksum [ 499.058061][ T5749] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 499.080210][ T29] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 499.103079][ T5749] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 499.137786][ T5749] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 499.182176][ T5749] usb 5-1: USB disconnect, device number 60 [ 499.272558][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 499.290233][ T3319] Bluetooth: Error in BCSP hdr checksum [ 499.305867][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.331889][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 499.375141][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 499.414770][ T29] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 499.446669][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.468169][ T29] usb 3-1: Product: syz [ 499.482170][ T29] usb 3-1: Manufacturer: syz [ 499.494739][ T29] usb 3-1: SerialNumber: syz [ 499.523655][ T29] usb 3-1: config 0 descriptor?? [ 499.554461][ T9043] Bluetooth: Error in BCSP hdr checksum [ 499.610137][ T5736] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 499.780156][ T5736] usb 1-1: Using ep0 maxpacket: 16 [ 499.807890][ T5736] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.810475][ T3319] Bluetooth: Error in BCSP hdr checksum [ 499.859133][ T5736] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.870910][ T29] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 499.897274][ T5736] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 499.917841][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.054011][T11173] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1309'. [ 500.080281][ T9043] Bluetooth: Error in BCSP hdr checksum [ 500.090309][ T5749] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 500.115429][ T30] kauditd_printk_skb: 492 callbacks suppressed [ 500.115442][ T30] audit: type=1400 audit(1779303094.025:2287): avc: denied { ioctl } for pid=11197 comm="syz.4.1314" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.203689][ T30] audit: type=1400 audit(1779303094.025:2288): avc: denied { map_create } for pid=11166 comm="syz.1.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 500.280502][ T5749] usb 5-1: device descriptor read/64, error -71 [ 500.287066][ T30] audit: type=1400 audit(1779303094.045:2289): avc: denied { ioctl } for pid=11197 comm="syz.4.1314" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.336232][ T29] usb 3-1: USB disconnect, device number 51 [ 500.346593][ T3319] Bluetooth: Error in BCSP hdr checksum [ 500.354405][T11172] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 500.399381][ T30] audit: type=1400 audit(1779303094.095:2290): avc: denied { ioctl } for pid=11183 comm="syz.0.1312" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.432649][ T5736] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 500.455910][ T30] audit: type=1400 audit(1779303094.105:2291): avc: denied { search } for pid=11203 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.483637][ T30] audit: type=1400 audit(1779303094.105:2292): avc: denied { read } for pid=11203 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.507607][ T30] audit: type=1400 audit(1779303094.105:2293): avc: denied { open } for pid=11203 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.545870][ T30] audit: type=1400 audit(1779303094.105:2294): avc: denied { getattr } for pid=11203 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.577330][ T5749] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 500.591270][ T9043] Bluetooth: Error in BCSP hdr checksum [ 500.675066][ T30] audit: type=1400 audit(1779303094.115:2295): avc: denied { read write } for pid=11204 comm="syz.5.1316" name="radio3" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 500.730971][ T5749] usb 5-1: device descriptor read/64, error -71 [ 500.814419][ T30] audit: type=1400 audit(1779303094.115:2296): avc: denied { open } for pid=11204 comm="syz.5.1316" path="/dev/radio3" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 500.851304][ T3319] Bluetooth: Error in BCSP hdr checksum [ 500.863230][ T5749] usb usb5-port1: attempt power cycle [ 501.110774][ T3319] Bluetooth: Error in BCSP hdr checksum [ 501.220088][ T5749] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 501.270899][ T5749] usb 5-1: device descriptor read/8, error -71 [ 501.389661][T11165] syz.2.1310 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 501.425516][ T3319] Bluetooth: Error in BCSP hdr checksum [ 501.440185][T11165] CPU: 0 UID: 0 PID: 11165 Comm: syz.2.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.440215][T11165] Tainted: [L]=SOFTLOCKUP [ 501.440221][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.440231][T11165] Call Trace: [ 501.440237][T11165] [ 501.440243][T11165] dump_stack_lvl+0x100/0x190 [ 501.440276][T11165] dump_header+0xfb/0x606 [ 501.440296][T11165] oom_kill_process.cold+0xd/0x330 [ 501.440315][T11165] out_of_memory+0x340/0x14f0 [ 501.440346][T11165] ? __pfx_out_of_memory+0x10/0x10 [ 501.440377][T11165] mem_cgroup_out_of_memory+0xc6/0x130 [ 501.440402][T11165] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 501.440424][T11165] ? find_held_lock+0x2b/0x80 [ 501.440445][T11165] ? do_raw_spin_unlock+0x145/0x1e0 [ 501.440470][T11165] ? _raw_spin_unlock+0x28/0x50 [ 501.440493][T11165] try_charge_memcg+0x6e5/0xdf0 [ 501.440517][T11165] ? __pfx_try_charge_memcg+0x10/0x10 [ 501.440534][T11165] ? find_held_lock+0x2b/0x80 [ 501.440549][T11165] ? rcu_read_unlock+0x17/0x60 [ 501.440567][T11165] ? rcu_read_unlock+0x17/0x60 [ 501.440586][T11165] ? find_held_lock+0x2b/0x80 [ 501.440602][T11165] ? rcu_read_unlock+0x17/0x60 [ 501.440626][T11165] charge_memcg+0x19f/0x210 [ 501.440645][T11165] mem_cgroup_swapin_charge_folio+0xd2/0x2f0 [ 501.440671][T11165] __swap_cache_prepare_and_add+0x842/0xa20 [ 501.440696][T11165] ? alloc_pages_mpol+0x25a/0x540 [ 501.440720][T11165] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 501.440743][T11165] ? __pfx_swap_entry_swapped+0x10/0x10 [ 501.440767][T11165] swap_cache_alloc_folio+0x1cb/0x300 [ 501.440793][T11165] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 501.440825][T11165] swap_cluster_readahead+0x411/0x770 [ 501.440848][T11165] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 501.440870][T11165] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 501.440911][T11165] ? get_vma_policy+0x23d/0x3b0 [ 501.440931][T11165] swapin_readahead+0x160/0x12c0 [ 501.440963][T11165] ? __pfx_swapin_readahead+0x10/0x10 [ 501.440986][T11165] ? find_held_lock+0x2b/0x80 [ 501.441001][T11165] ? swap_table_get+0x103/0x2c0 [ 501.441028][T11165] ? swap_table_get+0x10d/0x2c0 [ 501.441051][T11165] ? swap_cache_get_folio+0x286/0x350 [ 501.441074][T11165] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 501.441096][T11165] ? __pfx_get_swap_device+0x10/0x10 [ 501.441118][T11165] ? do_swap_page+0x931/0x6180 [ 501.441140][T11165] do_swap_page+0x931/0x6180 [ 501.441175][T11165] ? __pfx_do_swap_page+0x10/0x10 [ 501.441198][T11165] ? __free_object+0x2a8/0x3f0 [ 501.441218][T11165] ? lockdep_hardirqs_on+0x78/0x100 [ 501.441244][T11165] ? rcu_is_watching+0x12/0xc0 [ 501.441273][T11165] ? __pte_offset_map+0x179/0x310 [ 501.441296][T11165] __handle_mm_fault+0x192f/0x2a00 [ 501.441325][T11165] ? reacquire_held_locks+0xce/0x1e0 [ 501.441346][T11165] ? __pfx___handle_mm_fault+0x10/0x10 [ 501.441373][T11165] ? lock_vma_under_rcu+0x17c/0x590 [ 501.441411][T11165] handle_mm_fault+0x36d/0xa20 [ 501.441439][T11165] do_user_addr_fault+0x5a3/0x12f0 [ 501.441469][T11165] exc_page_fault+0x6f/0xd0 [ 501.441492][T11165] asm_exc_page_fault+0x26/0x30 [ 501.441507][T11165] RIP: 0033:0x7f31fd757f83 [ 501.441523][T11165] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 501.441539][T11165] RSP: 002b:00007fffe4265770 EFLAGS: 00010246 [ 501.441552][T11165] RAX: 0000000000000000 RBX: 00005555754d1500 RCX: 0000000000000000 [ 501.441563][T11165] RDX: 00007fffe42657b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.441572][T11165] RBP: 00007f31fda17da0 R08: 0000000000000000 R09: 0000000000000000 [ 501.441582][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000007ae7b [ 501.441591][T11165] R13: 00007f31fda1609c R14: 000000000007a2f4 R15: 00007f31fda16090 [ 501.441616][T11165] [ 501.443210][T11165] memory: usage 307200kB, limit 307200kB, failcnt 2612 [ 501.520106][ T5749] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 501.582503][T11165] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 501.650802][ T1625] usb 1-1: reset high-speed USB device number 52 using dummy_hcd [ 501.685215][ T3319] Bluetooth: Error in BCSP hdr checksum [ 501.859554][T11219] netlink: 'syz.1.1318': attribute type 21 has an invalid length. [ 501.901808][T11165] kmem: usage 290464kB, limit 9007199254740988kB, failcnt 0 [ 501.913020][T11165] Memory cgroup stats for /syz2 [ 501.915581][ T5749] usb 5-1: device descriptor read/8, error -71 [ 501.927067][T11165] : [ 501.927188][T11165] cache 0 [ 501.938206][T11214] fuse: Unknown parameter '0x0000000000000004' [ 501.949773][T11165] rss 0 [ 501.954875][T11165] rss_huge 0 [ 501.967637][T11165] shmem 0 [ 501.974271][T11165] mapped_file 0 [ 501.984112][T11165] dirty 0 [ 501.991049][T11165] writeback 0 [ 501.998173][T11165] workingset_refault_anon 52 [ 502.009434][T11165] workingset_refault_file 313 [ 502.022788][T11165] swap 212992 [ 502.032307][T11165] swapcached 446464 [ 502.036549][T11165] pgpgin 502760 [ 502.036623][ T1351] Bluetooth: Error in BCSP hdr checksum [ 502.040111][T11165] pgpgout 503782 [ 502.040120][T11165] pgfault 261666 [ 502.040127][T11165] pgmajfault 40 [ 502.040133][T11165] inactive_anon 0 [ 502.040139][T11165] active_anon 20480 [ 502.040147][T11165] inactive_file 0 [ 502.067253][T11165] active_file 0 [ 502.070817][T11165] unevictable 0 [ 502.071590][ T5749] usb usb5-port1: unable to enumerate USB device [ 502.074320][T11165] hierarchical_memory_limit 314572800 [ 502.086138][T11165] hierarchical_memsw_limit 9223372036854771712 [ 502.092523][T11165] total_cache 0 [ 502.096021][T11165] total_rss 0 [ 502.099560][T11165] total_rss_huge 0 [ 502.103362][T11165] total_shmem 0 [ 502.106852][T11165] total_mapped_file 0 [ 502.111312][T11165] total_dirty 0 [ 502.114813][T11165] total_writeback 0 [ 502.118649][T11165] total_workingset_refault_anon 52 [ 502.124318][T11165] total_workingset_refault_file 313 [ 502.129614][T11165] total_swap 212992 [ 502.152004][T11165] total_swapcached 446464 [ 502.156425][T11165] total_pgpgin 505527 [ 502.160808][T11165] total_pgpgout 506549 [ 502.165011][T11165] total_pgfault 264435 [ 502.169114][T11165] total_pgmajfault 40 [ 502.173423][T11165] total_inactive_anon 0 [ 502.177648][T11165] total_active_anon 20480 [ 502.182085][T11165] total_inactive_file 0 [ 502.186271][T11165] total_active_file 0 [ 502.190316][T11165] total_unevictable 0 [ 502.194328][T11165] anon_cost 0 [ 502.197638][T11165] file_cost 0 [ 502.201177][T11165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1310,pid=11165,uid=0 [ 502.220176][T11165] Memory cgroup out of memory: Killed process 11165 (syz.2.1310) total-vm:104412kB, anon-rss:1240kB, file-rss:23624kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 502.242343][ T9042] Bluetooth: Error in BCSP hdr checksum [ 502.417539][T11224] overlayfs: failed to resolve './bus': -2 [ 502.500231][ T9042] Bluetooth: Error in BCSP hdr checksum [ 502.760197][ T9042] Bluetooth: Error in BCSP hdr checksum [ 502.857096][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 503.022541][ T9042] Bluetooth: Error in BCSP hdr checksum [ 503.296027][ T9042] Bluetooth: Error in BCSP hdr checksum [ 503.346283][ T29] usb 1-1: USB disconnect, device number 52 [ 503.543792][ T52] Bluetooth: Error in BCSP hdr checksum [ 503.800208][ T1351] Bluetooth: Error in BCSP hdr checksum [ 503.940042][ T29] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 504.060194][ T9042] Bluetooth: Error in BCSP hdr checksum [ 504.120315][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 504.142382][ T29] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 504.164644][ T29] usb 3-1: config 0 has no interface number 0 [ 504.180342][ T29] usb 3-1: config 0 interface 184 has no altsetting 0 [ 504.206280][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 504.326007][ T1351] Bluetooth: Error in BCSP hdr checksum [ 504.340569][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.380295][ T29] usb 3-1: Product: syz [ 504.408332][ T29] usb 3-1: Manufacturer: syz [ 504.427309][ T29] usb 3-1: SerialNumber: syz [ 504.454038][ T29] usb 3-1: config 0 descriptor?? [ 504.580494][ T52] Bluetooth: Error in BCSP hdr checksum [ 504.716674][T11258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.840386][ T9042] Bluetooth: Error in BCSP hdr checksum [ 504.999055][T11263] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 505.048063][T11263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.116663][ T1351] Bluetooth: Error in BCSP hdr checksum [ 505.148754][ T30] kauditd_printk_skb: 229 callbacks suppressed [ 505.148773][ T30] audit: type=1400 audit(1779303099.055:2523): avc: denied { ioctl } for pid=11243 comm="syz.2.1325" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.213783][T11264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.322945][T11263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.360897][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 505.426270][ T9042] Bluetooth: Error in BCSP hdr checksum [ 505.550479][ T30] audit: type=1400 audit(1779303099.115:2524): avc: denied { create } for pid=11260 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.685078][ T52] Bluetooth: Error in BCSP hdr checksum [ 505.755108][ T30] audit: type=1400 audit(1779303099.115:2525): avc: denied { write } for pid=11260 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.972470][ T30] audit: type=1400 audit(1779303099.115:2526): avc: denied { read } for pid=11260 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.069568][ T52] Bluetooth: Error in BCSP hdr checksum [ 506.210990][T11267] overlayfs: failed to resolve './bus': -2 [ 506.251020][T11265] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.277395][ T30] audit: type=1400 audit(1779303099.225:2528): avc: denied { create } for pid=11260 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.306696][ T52] Bluetooth: Error in BCSP hdr checksum [ 506.362917][T11265] audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64 [ 506.480520][T11265] audit: backlog limit exceeded [ 506.531697][T11265] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.544453][ T30] audit: type=1400 audit(1779303099.225:2529): avc: denied { read write } for pid=7121 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.621246][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 506.739170][ T1351] Bluetooth: Error in BCSP hdr checksum [ 506.870283][ T1351] Bluetooth: Error in BCSP hdr checksum [ 506.923826][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 506.980042][ T5729] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 507.031726][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 507.082175][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 507.131574][ T3319] Bluetooth: Error in BCSP hdr checksum [ 507.142980][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 507.153323][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 507.153377][ T5729] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 507.199075][ T29] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 507.253917][ T5729] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.266071][ T29] usb 3-1: USB disconnect, device number 52 [ 507.292796][ T5729] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.336625][ T5729] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.390230][ T3319] Bluetooth: Error in BCSP hdr checksum [ 507.396917][ T5729] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.447998][ T5729] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.478998][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.650687][ T52] Bluetooth: Error in BCSP hdr checksum [ 507.779998][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 508.577876][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.588725][ T5729] usb 1-1: usb_control_msg returned -32 [ 508.600597][ T12] Bluetooth: Error in BCSP hdr checksum [ 508.611472][ T5729] usbtmc 1-1:16.0: can't read capabilities [ 508.639708][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.712030][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.752585][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 508.774351][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 508.797594][ T9] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 508.808599][ T12] Bluetooth: Error in BCSP hdr checksum [ 508.831619][ T9] usb 6-1: config 179 has no interface number 0 [ 508.928509][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 509.308580][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 509.308622][ T36] Bluetooth: Error in BCSP hdr checksum [ 509.321933][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 509.349198][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.459827][T11326] overlayfs: failed to resolve './bus': -2 [ 509.562622][ T52] Bluetooth: Error in BCSP hdr checksum [ 509.585901][T11335] netlink: 'syz.2.1345': attribute type 2 has an invalid length. [ 509.821167][ T36] Bluetooth: Error in BCSP hdr checksum [ 510.081285][ T12] Bluetooth: Error in BCSP hdr checksum [ 510.340254][ T36] Bluetooth: Error in BCSP hdr checksum [ 510.361472][ T30] kauditd_printk_skb: 482 callbacks suppressed [ 510.361487][ T30] audit: type=1400 audit(1779303104.275:2931): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.393419][ T30] audit: type=1400 audit(1779303104.275:2932): avc: denied { open } for pid=5611 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.421073][ T30] audit: type=1400 audit(1779303104.275:2933): avc: denied { ioctl } for pid=5611 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.446909][ T30] audit: type=1400 audit(1779303104.305:2934): avc: denied { read write } for pid=11345 comm="syz.2.1348" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.460213][ T5749] usb 1-1: USB disconnect, device number 53 [ 510.478289][ T30] audit: type=1400 audit(1779303104.305:2935): avc: denied { open } for pid=11345 comm="syz.2.1348" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.508418][ T30] audit: type=1400 audit(1779303104.305:2936): avc: denied { ioctl } for pid=11345 comm="syz.2.1348" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.534004][T11348] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 510.568696][ T30] audit: type=1400 audit(1779303104.305:2937): avc: denied { ioctl } for pid=11345 comm="syz.2.1348" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.601859][ T12] Bluetooth: Error in BCSP hdr checksum [ 510.615753][ T30] audit: type=1400 audit(1779303104.385:2938): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.636375][T11350] binder: BINDER_SET_CONTEXT_MGR already set [ 510.644131][ T30] audit: type=1400 audit(1779303104.385:2939): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.670055][T11350] binder: 11349:11350 ioctl 4018620d 200000000200 returned -16 [ 510.680380][ T1625] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 510.690532][ T30] audit: type=1400 audit(1779303104.385:2940): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.732838][ T9] usb 6-1: USB disconnect, device number 13 [ 510.861472][ T12] Bluetooth: Error in BCSP hdr checksum [ 510.920256][ T1625] usb 3-1: Using ep0 maxpacket: 32 [ 511.620692][ T1050] Bluetooth: Error in BCSP hdr checksum [ 511.936477][ T1625] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 511.950753][ T9043] Bluetooth: Error in BCSP hdr checksum [ 512.101663][ T1625] usb 3-1: config 0 has no interface number 0 [ 512.108757][ T1625] usb 3-1: config 0 interface 184 has no altsetting 0 [ 512.127781][ T1625] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 512.137517][ T1625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.145772][ T1625] usb 3-1: Product: syz [ 512.150098][ T1625] usb 3-1: Manufacturer: syz [ 512.154817][ T1625] usb 3-1: SerialNumber: syz [ 512.170611][ T36] Bluetooth: Error in BCSP hdr checksum [ 512.210898][ T1625] usb 3-1: config 0 descriptor?? [ 512.316933][T11376] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 512.329455][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.393844][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.430472][ T3319] Bluetooth: Error in BCSP hdr checksum [ 512.456332][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.655829][T11370] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1356'. [ 512.691653][ T12] Bluetooth: Error in BCSP hdr checksum [ 512.700109][ T5749] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 512.872950][ T5749] usb 1-1: unable to get BOS descriptor or descriptor too short [ 512.891478][ T5749] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 512.916462][ T1625] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 512.931565][ T5749] usb 1-1: config 0 has no interface number 0 [ 512.949822][ T5749] usb 1-1: config 0 interface 30 has no altsetting 0 [ 512.950478][ T12] Bluetooth: Error in BCSP hdr checksum [ 512.991508][ T1625] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 513.017536][ T5749] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=47.86 [ 513.059846][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.096802][ T5749] usb 1-1: Product: syz [ 513.113530][ T5749] usb 1-1: Manufacturer: syz [ 513.134283][ T5749] usb 1-1: SerialNumber: syz [ 513.245283][ T1351] Bluetooth: Error in BCSP hdr checksum [ 513.275690][ T5749] usb 1-1: config 0 descriptor?? [ 513.676387][ T36] Bluetooth: Error in BCSP hdr checksum [ 513.894512][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 513.914068][T11406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.925295][ T12] Bluetooth: Error in BCSP hdr checksum [ 514.062931][ T5749] usb 1-1: USB disconnect, device number 54 [ 514.150808][ T1625] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 514.181457][ T1625] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 514.186570][ T12] Bluetooth: Error in BCSP hdr checksum [ 514.244952][ T1625] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 514.288123][ T1625] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 514.323452][ T1625] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 514.379115][ T1625] usb 3-1: USB disconnect, device number 53 [ 514.441964][ T1351] Bluetooth: Error in BCSP hdr checksum [ 514.700664][ T36] Bluetooth: Error in BCSP hdr checksum [ 514.746922][T11428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 514.858866][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'. [ 515.258516][ T13] Bluetooth: Error in BCSP hdr checksum [ 515.428745][ T30] kauditd_printk_skb: 396 callbacks suppressed [ 515.428758][ T30] audit: type=1400 audit(1779303109.335:3337): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 515.513856][ T12] Bluetooth: Error in BCSP hdr checksum [ 515.649557][ T30] audit: type=1400 audit(1779303109.335:3338): avc: denied { search } for pid=11435 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.725420][T11443] netlink: 'syz.4.1371': attribute type 21 has an invalid length. [ 516.064548][ T7977] Bluetooth: hci1: connection err: -111 [ 516.107263][ T36] Bluetooth: Error in BCSP hdr checksum [ 516.118804][ T30] audit: type=1400 audit(1779303109.335:3339): avc: denied { read } for pid=11435 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 516.161606][ T30] audit: type=1400 audit(1779303109.335:3340): avc: denied { open } for pid=11435 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 516.261221][ T30] audit: type=1400 audit(1779303109.365:3341): avc: denied { read write open } for pid=5610 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.342616][ T1351] Bluetooth: Error in BCSP hdr checksum [ 516.385339][ T30] audit: type=1400 audit(1779303109.365:3342): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 516.506601][ T30] audit: type=1400 audit(1779303109.375:3343): avc: denied { read } for pid=11437 comm="syz.0.1370" dev="nsfs" ino=4026532963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 516.562913][ T30] audit: type=1400 audit(1779303109.375:3344): avc: denied { read open } for pid=11437 comm="syz.0.1370" path="net:[4026532963]" dev="nsfs" ino=4026532963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 516.604190][ T36] Bluetooth: Error in BCSP hdr checksum [ 516.626982][ T30] audit: type=1400 audit(1779303109.375:3345): avc: denied { create } for pid=11437 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 516.656573][T11451] 9p: Bad value for 'rfdno' [ 516.696807][ T30] audit: type=1400 audit(1779303109.375:3346): avc: denied { bind } for pid=11437 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 516.853639][T11459] syzkaller1: entered promiscuous mode [ 516.860541][ T3319] Bluetooth: Error in BCSP hdr checksum [ 516.877904][T11459] syzkaller1: entered allmulticast mode [ 517.013955][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1375'. [ 517.122622][ T9043] Bluetooth: Error in BCSP hdr checksum [ 517.380175][ T3319] Bluetooth: Error in BCSP hdr checksum [ 517.837388][ T1351] Bluetooth: Error in BCSP hdr checksum [ 517.925824][ T7977] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 518.080187][ T1351] Bluetooth: Error in BCSP hdr checksum [ 518.346936][ T36] Bluetooth: Error in BCSP hdr checksum [ 518.791097][ T3319] Bluetooth: Error in BCSP hdr checksum [ 519.052796][ T1351] Bluetooth: Error in BCSP hdr checksum [ 519.076075][T11449] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1372'. [ 519.314245][ T3319] Bluetooth: Error in BCSP hdr checksum [ 519.569018][T11521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.580543][ T12] Bluetooth: Error in BCSP hdr checksum [ 519.675127][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1388'. [ 520.012560][T11521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.030281][ T9043] Bluetooth: Error in BCSP hdr checksum [ 520.074952][T11521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.091337][ T9043] Bluetooth: Error in BCSP hdr checksum [ 520.355651][ T9043] Bluetooth: Error in BCSP hdr checksum [ 520.432532][ T30] kauditd_printk_skb: 503 callbacks suppressed [ 520.432550][ T30] audit: type=1400 audit(1779303114.345:3812): avc: denied { read open } for pid=11536 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.444666][T11537] binder: 11535:11537 ioctl 4018620d 0 returned -22 [ 520.542570][ T30] audit: type=1400 audit(1779303114.345:3813): avc: denied { read } for pid=11535 comm="syz.5.1392" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 520.610213][ T3319] Bluetooth: Error in BCSP hdr checksum [ 520.672283][ T30] audit: type=1400 audit(1779303114.345:3814): avc: denied { read open } for pid=11535 comm="syz.5.1392" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 520.705540][ T5611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 520.728665][T11548] audit: audit_backlog=66 > audit_backlog_limit=64 [ 520.735373][ T5611] audit: audit_lost=56 audit_rate_limit=0 audit_backlog_limit=64 [ 520.745728][T11546] audit: audit_backlog=66 > audit_backlog_limit=64 [ 520.750748][T11548] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 520.757001][T11544] audit: audit_backlog=66 > audit_backlog_limit=64 [ 520.768016][T11544] audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 [ 520.870597][ T9043] Bluetooth: Error in BCSP hdr checksum [ 521.130286][ T9043] Bluetooth: Error in BCSP hdr checksum [ 521.390143][ T36] Bluetooth: Error in BCSP hdr checksum [ 521.512632][T11546] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1393'. [ 521.855464][ T3319] Bluetooth: Error in BCSP hdr checksum [ 521.910553][ T3319] Bluetooth: Error in BCSP hdr checksum [ 522.010565][ T7977] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 522.020033][ T7977] Bluetooth: hci2: Injecting HCI hardware error event [ 522.031196][ T7978] Bluetooth: hci2: hardware error 0x00 [ 522.172762][ T1351] Bluetooth: Error in BCSP hdr checksum [ 522.360430][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 522.430316][ T1351] Bluetooth: Error in BCSP hdr checksum [ 522.677958][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 522.690335][ T12] Bluetooth: Error in BCSP hdr checksum [ 522.905450][T11604] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1409'. [ 522.915643][T11604] netlink: 'syz.0.1409': attribute type 2 has an invalid length. [ 522.924858][T11604] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 522.932629][T11604] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 522.940384][T11604] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 523.174827][ T9043] Bluetooth: Error in BCSP hdr checksum [ 523.224218][ T1625] libceph: connect (1)[c::]:6789 error -101 [ 523.353523][ T1625] libceph: mon0 (1)[c::]:6789 connect error [ 523.489367][T11614] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 523.513910][T11614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.566241][T11604] ceph: No mds server is up or the cluster is laggy [ 523.590055][ T12] Bluetooth: Error in BCSP hdr checksum [ 523.632240][T11615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.665884][ T1625] libceph: connect (1)[c::]:6789 error -101 [ 523.789644][T11614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.827955][ T1625] libceph: mon0 (1)[c::]:6789 connect error [ 524.334224][ T9042] Bluetooth: Error in BCSP hdr checksum [ 524.357417][ T7978] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 524.612566][ T1351] Bluetooth: Error in BCSP hdr checksum [ 525.145954][ T13] Bluetooth: Error in BCSP hdr checksum [ 525.387782][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1416'. [ 525.402416][ T36] Bluetooth: Error in BCSP hdr checksum [ 525.467112][T11623] netlink: 'syz.1.1415': attribute type 21 has an invalid length. [ 525.490722][ T30] kauditd_printk_skb: 398 callbacks suppressed [ 525.490754][ T30] audit: type=1400 audit(1779303119.395:4186): avc: denied { prog_load } for pid=11618 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 525.786895][ T36] Bluetooth: Error in BCSP hdr checksum [ 525.854679][ T30] audit: type=1400 audit(1779303119.395:4187): avc: denied { bpf } for pid=11618 comm="syz.1.1415" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 525.937369][ T30] audit: type=1400 audit(1779303119.395:4188): avc: denied { write } for pid=11618 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 526.020689][ T9043] Bluetooth: Error in BCSP hdr checksum [ 526.022291][ T30] audit: type=1400 audit(1779303119.705:4189): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.056340][T11632] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1421'. [ 526.101609][ T30] audit: type=1400 audit(1779303119.705:4190): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.201092][ T30] audit: type=1400 audit(1779303119.705:4191): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.280869][ T36] Bluetooth: Error in BCSP hdr checksum [ 526.297677][ T30] audit: type=1400 audit(1779303119.725:4192): avc: denied { create } for pid=11624 comm="syz.5.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 526.381432][ T30] audit: type=1400 audit(1779303119.725:4193): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.464185][T11646] usb usb7: usbfs: process 11646 (syz.4.1425) did not claim interface 0 before use [ 526.497652][ T5610] audit: audit_backlog=65 > audit_backlog_limit=64 [ 526.507154][ T30] audit: type=1400 audit(1779303119.725:4194): avc: denied { read write open } for pid=5609 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.540751][ T9043] Bluetooth: Error in BCSP hdr checksum [ 526.803398][ T9043] Bluetooth: Error in BCSP hdr checksum [ 527.060794][ T9043] Bluetooth: Error in BCSP hdr checksum [ 527.129085][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 527.331910][ T9042] Bluetooth: Error in BCSP hdr checksum [ 527.491133][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 527.520299][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 527.934724][ T3319] Bluetooth: Error in BCSP hdr checksum [ 528.209779][ T9043] Bluetooth: Error in BCSP hdr checksum [ 528.430537][ T9042] Bluetooth: Error in BCSP hdr checksum [ 528.684112][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'. [ 528.809520][ T13] Bluetooth: Error in BCSP hdr checksum [ 529.062964][ T3319] Bluetooth: Error in BCSP hdr checksum [ 529.089345][T11679] binder: BINDER_SET_CONTEXT_MGR already set [ 529.130364][T11679] binder: 11674:11679 ioctl 4018620d 200000004a80 returned -16 [ 529.320877][ T12] Bluetooth: Error in BCSP hdr checksum [ 529.471335][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1440'. [ 529.590293][ T12] Bluetooth: Error in BCSP hdr checksum [ 529.779156][T11696] binder: BINDER_SET_CONTEXT_MGR already set [ 529.800170][T11696] binder: 11694:11696 ioctl 4018620d 200000004a80 returned -16 [ 529.850879][ T52] Bluetooth: Error in BCSP hdr checksum [ 530.110640][ T52] Bluetooth: Error in BCSP hdr checksum [ 530.370383][ T9042] Bluetooth: Error in BCSP hdr checksum [ 530.568552][ T30] kauditd_printk_skb: 290 callbacks suppressed [ 530.568569][ T30] audit: type=1400 audit(1779303124.405:4483): avc: denied { execmem } for pid=11707 comm="syz.1.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 530.594808][ T30] audit: type=1400 audit(1779303124.405:4484): avc: denied { bind } for pid=11710 comm="syz.0.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 530.638422][ T30] audit: type=1400 audit(1779303124.525:4485): avc: denied { read } for pid=11710 comm="syz.0.1447" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 530.663064][ T3319] Bluetooth: Error in BCSP hdr checksum [ 530.722458][T11715] netlink: 'syz.1.1446': attribute type 21 has an invalid length. [ 531.059179][ T30] audit: type=1400 audit(1779303124.525:4486): avc: denied { open } for pid=11710 comm="syz.0.1447" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 531.093059][ T13] Bluetooth: Error in BCSP hdr checksum [ 531.164029][ T30] audit: type=1400 audit(1779303124.525:4487): avc: denied { block_suspend } for pid=11710 comm="syz.0.1447" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.197109][ T30] audit: type=1400 audit(1779303124.525:4488): avc: denied { create } for pid=11710 comm="syz.0.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.232571][ T30] audit: type=1400 audit(1779303124.525:4489): avc: denied { write } for pid=11710 comm="syz.0.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.254325][ T30] audit: type=1400 audit(1779303124.525:4490): avc: denied { read } for pid=11710 comm="syz.0.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.289856][ T30] audit: type=1400 audit(1779303124.535:4491): avc: denied { write } for pid=11710 comm="syz.0.1447" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 531.320399][ T12] Bluetooth: Error in BCSP hdr checksum [ 531.351911][ T30] audit: type=1400 audit(1779303124.535:4492): avc: denied { open } for pid=11710 comm="syz.0.1447" path="/dev/cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 531.584361][ T3319] Bluetooth: Error in BCSP hdr checksum [ 531.782905][ T1625] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 531.840472][ T9042] Bluetooth: Error in BCSP hdr checksum [ 531.882365][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 531.950584][ T1625] usb 6-1: Using ep0 maxpacket: 16 [ 531.974632][ T1625] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 532.013745][ T1625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.035459][ T1625] usb 6-1: Product: syz [ 532.048056][ T1625] usb 6-1: Manufacturer: syz [ 532.060897][ T1625] usb 6-1: SerialNumber: syz [ 532.074352][ T1625] usb 6-1: config 0 descriptor?? [ 532.099082][ T1625] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 532.110281][ T9042] Bluetooth: Error in BCSP hdr checksum [ 532.200363][T11734] binder: BINDER_SET_CONTEXT_MGR already set [ 532.208726][T11734] binder: 11733:11734 ioctl 4018620d 200000004a80 returned -16 [ 532.381373][ T3319] Bluetooth: Error in BCSP hdr checksum [ 532.642005][ T3319] Bluetooth: Error in BCSP hdr checksum [ 532.976161][T11749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.064929][T11750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.140988][T11749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.099794][ T3319] Bluetooth: Error in BCSP hdr checksum [ 534.140128][ T1625] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 534.229420][T11754] binder: BINDER_SET_CONTEXT_MGR already set [ 534.248382][T11754] binder: 11753:11754 ioctl 4018620d 200000004a80 returned -16 [ 534.307649][ T1351] Bluetooth: Error in BCSP hdr checksum [ 535.263678][ T13] Bluetooth: Error in BCSP hdr checksum [ 535.400509][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.508008][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.523338][ T9043] Bluetooth: Error in BCSP hdr checksum [ 535.579658][ T1625] usb 6-1: USB disconnect, device number 14 [ 535.614722][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 535.614744][ T30] audit: type=1400 audit(1779303129.515:4673): avc: denied { create } for pid=11758 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 535.649069][T11763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.771520][ T52] Bluetooth: Error in BCSP hdr checksum [ 536.028596][ T30] audit: type=1400 audit(1779303129.515:4674): avc: denied { write } for pid=11758 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.052210][ T9042] Bluetooth: Error in BCSP hdr checksum [ 536.363090][ T9042] Bluetooth: Error in BCSP hdr checksum [ 536.388465][ T30] audit: type=1400 audit(1779303129.515:4675): avc: denied { read } for pid=11758 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.581039][ T1351] Bluetooth: Error in BCSP hdr checksum [ 536.787386][ T30] audit: type=1400 audit(1779303129.615:4676): avc: denied { create } for pid=11758 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 536.851449][T11765] binder: BINDER_SET_CONTEXT_MGR already set [ 536.858915][T11765] binder: 11764:11765 ioctl 4018620d 200000004a80 returned -16 [ 536.859121][ T3319] Bluetooth: Error in BCSP hdr checksum [ 536.945889][ T30] audit: type=1400 audit(1779303129.635:4677): avc: denied { create } for pid=11758 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 537.034062][ T30] audit: type=1400 audit(1779303129.645:4678): avc: denied { create } for pid=11758 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 537.099060][ T30] audit: type=1400 audit(1779303129.655:4679): avc: denied { setopt } for pid=11758 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 537.157639][ T30] audit: type=1400 audit(1779303129.665:4680): avc: denied { bind } for pid=11758 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 537.183258][T11769] usb usb7: usbfs: process 11769 (syz.5.1464) did not claim interface 0 before use [ 537.221606][ T9042] Bluetooth: Error in BCSP hdr checksum [ 537.274817][ T30] audit: type=1400 audit(1779303129.665:4681): avc: denied { name_bind } for pid=11758 comm="syz.1.1461" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 537.338921][ T30] audit: type=1400 audit(1779303129.665:4682): avc: denied { node_bind } for pid=11758 comm="syz.1.1461" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 537.434074][T11774] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 537.480820][ T3319] Bluetooth: Error in BCSP hdr checksum [ 537.521810][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.636420][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.727735][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.937939][ T9042] Bluetooth: Error in BCSP hdr checksum [ 538.052534][ T52] Bluetooth: Error in BCSP hdr checksum [ 538.288620][ T13] Bluetooth: Error in BCSP hdr checksum [ 538.846614][ T13] Bluetooth: Error in BCSP hdr checksum [ 539.058971][T11790] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 539.084484][ T9042] Bluetooth: Error in BCSP hdr checksum [ 539.107031][T11790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.198820][T11791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.277869][T11790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.464400][ T13] Bluetooth: Error in BCSP hdr checksum [ 539.601341][ T12] Bluetooth: Error in BCSP hdr checksum [ 539.887176][ T9042] Bluetooth: Error in BCSP hdr checksum [ 540.441538][T11797] netlink: 'syz.1.1471': attribute type 21 has an invalid length. [ 540.799231][ T3319] Bluetooth: Error in BCSP hdr checksum [ 540.842447][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 540.842463][ T30] audit: type=1400 audit(1779303134.755:4843): avc: denied { read } for pid=11796 comm="syz.0.1472" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 540.902650][T11800] binder: BINDER_SET_CONTEXT_MGR already set [ 540.915240][T11800] binder: 11796:11800 ioctl 4018620d 200000000040 returned -16 [ 540.926801][ T30] audit: type=1400 audit(1779303134.755:4844): avc: denied { read open } for pid=11796 comm="syz.0.1472" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 540.964968][T11803] binder: BINDER_SET_CONTEXT_MGR already set [ 540.972055][T11803] binder: 11802:11803 ioctl 4018620d 200000004a80 returned -16 [ 540.981927][ T30] audit: type=1400 audit(1779303134.795:4845): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.006393][ T30] audit: type=1400 audit(1779303134.795:4846): avc: denied { open } for pid=5611 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.035126][ T30] audit: type=1400 audit(1779303134.795:4847): avc: denied { ioctl } for pid=5611 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.061599][ T30] audit: type=1400 audit(1779303134.795:4848): avc: denied { ioctl } for pid=11796 comm="syz.0.1472" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 541.084405][ T9042] Bluetooth: Error in BCSP hdr checksum [ 541.114903][ T30] audit: type=1400 audit(1779303134.795:4849): avc: denied { set_context_mgr } for pid=11796 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 541.155542][ T30] audit: type=1400 audit(1779303134.795:4850): avc: denied { read } for pid=11796 comm="syz.0.1472" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 541.181835][ T30] audit: type=1400 audit(1779303134.795:4851): avc: denied { open } for pid=11796 comm="syz.0.1472" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 541.208687][T11808] binder: BINDER_SET_CONTEXT_MGR already set [ 541.215380][T11808] binder: 11806:11808 ioctl 4018620d 200000004a80 returned -16 [ 541.232336][ T30] audit: type=1400 audit(1779303134.805:4852): avc: denied { map } for pid=11796 comm="syz.0.1472" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 541.320553][ T1351] Bluetooth: Error in BCSP hdr checksum [ 541.414088][T11813] binder: 11812:11813 ioctl c0306201 0 returned -14 [ 541.591724][ T36] Bluetooth: Error in BCSP hdr checksum [ 542.097973][ T3319] Bluetooth: Error in BCSP hdr checksum [ 542.190912][ T36] Bluetooth: Error in BCSP hdr checksum [ 542.292383][T11826] FAULT_INJECTION: forcing a failure. [ 542.292383][T11826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.335815][T11826] CPU: 1 UID: 0 PID: 11826 Comm: syz.5.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.335845][T11826] Tainted: [L]=SOFTLOCKUP [ 542.335857][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 542.335868][T11826] Call Trace: [ 542.335873][T11826] [ 542.335881][T11826] dump_stack_lvl+0x100/0x190 [ 542.335908][T11826] should_fail_ex.cold+0x5/0xa [ 542.335933][T11826] _copy_to_iter+0x5a4/0x1720 [ 542.335965][T11826] ? __pfx__copy_to_iter+0x10/0x10 [ 542.335992][T11826] ? find_held_lock+0x2b/0x80 [ 542.336010][T11826] ? neigh_seq_stop+0x8c/0x120 [ 542.336029][T11826] ? neigh_seq_stop+0x8c/0x120 [ 542.336048][T11826] ? __local_bh_enable_ip+0x9e/0x120 [ 542.336078][T11826] seq_read_iter+0xdab/0x1270 [ 542.336111][T11826] seq_read+0x33b/0x4c0 [ 542.336131][T11826] ? __pfx_seq_read+0x10/0x10 [ 542.336152][T11826] ? __lock_acquire+0x4a5/0x2630 [ 542.336176][T11826] ? import_ubuf+0x1b6/0x220 [ 542.336202][T11826] ? selinux_file_permission+0x8f/0x6d0 [ 542.336229][T11826] ? __pfx_seq_read+0x10/0x10 [ 542.336249][T11826] proc_reg_read+0x240/0x330 [ 542.336274][T11826] ? __pfx_proc_reg_read+0x10/0x10 [ 542.336297][T11826] vfs_readv+0x5d8/0x8d0 [ 542.336321][T11826] ? __pfx_vfs_readv+0x10/0x10 [ 542.336338][T11826] ? find_held_lock+0x2b/0x80 [ 542.336368][T11826] ? __fget_files+0x21f/0x3d0 [ 542.336396][T11826] ? do_preadv+0x1ac/0x270 [ 542.336411][T11826] do_preadv+0x1ac/0x270 [ 542.336428][T11826] ? __pfx_do_preadv+0x10/0x10 [ 542.336447][T11826] ? rcu_is_watching+0x12/0xc0 [ 542.336476][T11826] do_syscall_64+0x10b/0xf80 [ 542.336499][T11826] ? clear_bhb_loop+0x40/0x90 [ 542.336520][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.336538][T11826] RIP: 0033:0x7f53e739ce59 [ 542.336554][T11826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.336572][T11826] RSP: 002b:00007f53e81c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 542.336590][T11826] RAX: ffffffffffffffda RBX: 00007f53e7615fa0 RCX: 00007f53e739ce59 [ 542.336602][T11826] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 542.336612][T11826] RBP: 00007f53e81c7090 R08: 0000000000000002 R09: 0000000000000000 [ 542.336623][T11826] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000001 [ 542.336633][T11826] R13: 00007f53e7616038 R14: 00007f53e7615fa0 R15: 00007fffa0022e28 [ 542.336661][T11826] [ 542.649793][ T12] Bluetooth: Error in BCSP hdr checksum [ 542.770919][ T12] Bluetooth: Error in BCSP hdr checksum [ 543.160230][ T9042] Bluetooth: Error in BCSP hdr checksum [ 543.280592][ T1351] Bluetooth: Error in BCSP hdr checksum [ 543.564631][T11842] netlink: 'syz.0.1488': attribute type 21 has an invalid length. [ 543.630502][ T7978] Bluetooth: hci0: connection err: -111 [ 543.917446][ T36] Bluetooth: Error in BCSP hdr checksum [ 544.053426][T11846] binder: 11845:11846 ioctl c0306201 0 returned -14 [ 544.170691][ T1351] Bluetooth: Error in BCSP hdr checksum [ 544.430268][ T13] Bluetooth: Error in BCSP hdr checksum [ 544.578130][T11857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 544.585055][T11857] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 544.595895][T11857] vhci_hcd vhci_hcd.0: Device attached [ 544.605798][T11861] vhci_hcd: connection closed [ 544.613284][ T36] vhci_hcd vhci_hcd.1: stop threads [ 544.655014][ T36] vhci_hcd vhci_hcd.1: release socket [ 544.677903][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 544.690227][ T13] Bluetooth: Error in BCSP hdr checksum [ 545.280153][ T9042] Bluetooth: Error in BCSP hdr checksum [ 545.301154][ T3319] Bluetooth: Error in BCSP hdr checksum [ 546.467364][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 546.467382][ T30] audit: type=1400 audit(1779303139.725:5108): avc: denied { read } for pid=11879 comm="syz.5.1500" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 546.557004][ T13] Bluetooth: Error in BCSP hdr checksum [ 546.618748][ T5801] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 546.650014][ T30] audit: type=1400 audit(1779303139.725:5109): avc: denied { open } for pid=11879 comm="syz.5.1500" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 546.696183][T11888] netlink: 840 bytes leftover after parsing attributes in process `syz.0.1502'. [ 546.720295][ T1351] Bluetooth: Error in BCSP hdr checksum [ 546.736603][ T30] audit: type=1400 audit(1779303139.875:5110): avc: denied { create } for pid=11879 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 546.812910][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 546.842178][ T5801] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 546.852581][ T30] audit: type=1400 audit(1779303139.885:5111): avc: denied { write } for pid=11879 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 546.885165][ T5801] usb 2-1: config 0 has no interface number 0 [ 546.915541][ T5801] usb 2-1: config 0 interface 184 has no altsetting 0 [ 546.933216][ T30] audit: type=1400 audit(1779303139.885:5112): avc: denied { read } for pid=11879 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 546.978942][ T30] audit: type=1400 audit(1779303140.375:5113): avc: denied { ioctl } for pid=11877 comm="syz.1.1499" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 547.005614][ T5801] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 547.017110][ T36] Bluetooth: Error in BCSP hdr checksum [ 547.058225][ T30] audit: type=1400 audit(1779303140.415:5114): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.134439][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.143466][ T30] audit: type=1400 audit(1779303140.415:5115): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.202816][ T30] audit: type=1400 audit(1779303140.415:5116): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.237477][ T5801] usb 2-1: Product: syz [ 548.192162][ T5801] usb 2-1: Manufacturer: syz [ 548.197769][ T36] Bluetooth: Error in BCSP hdr checksum [ 548.207104][ T5801] usb 2-1: SerialNumber: syz [ 548.222508][ T30] audit: type=1400 audit(1779303140.485:5117): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 548.272432][ T5801] usb 2-1: config 0 descriptor?? [ 548.420802][ T5801] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 548.450234][ T3319] Bluetooth: Error in BCSP hdr checksum [ 548.460735][ T5801] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 548.548892][ T5801] usb 2-1: USB disconnect, device number 39 [ 548.710758][ T9042] Bluetooth: Error in BCSP hdr checksum [ 549.141537][ T1351] Bluetooth: Error in BCSP hdr checksum [ 549.446551][ T52] Bluetooth: Error in BCSP hdr checksum [ 549.672649][T11922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.774440][T11923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.804957][ T52] Bluetooth: Error in BCSP hdr checksum [ 549.863140][T11923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.003915][ T52] Bluetooth: Error in BCSP hdr checksum [ 550.278077][ T9042] Bluetooth: Error in BCSP hdr checksum [ 550.534511][ T9042] Bluetooth: Error in BCSP hdr checksum [ 550.792914][ T1351] Bluetooth: Error in BCSP hdr checksum [ 551.011987][T11908] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1503'. [ 551.060911][ T9042] Bluetooth: Error in BCSP hdr checksum [ 551.163003][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 551.499411][ T9042] Bluetooth: Error in BCSP hdr checksum [ 551.530303][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 551.530316][ T30] audit: type=1400 audit(1779303145.015:5281): avc: denied { allowed } for pid=11929 comm="syz.1.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 551.580001][ T30] audit: type=1400 audit(1779303145.015:5282): avc: denied { sqpoll } for pid=11929 comm="syz.1.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 551.600779][ T30] audit: type=1400 audit(1779303145.015:5283): avc: denied { create } for pid=11929 comm="syz.1.1518" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 551.627169][ T30] audit: type=1400 audit(1779303145.045:5284): avc: denied { write } for pid=11929 comm="syz.1.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 551.652066][ T30] audit: type=1400 audit(1779303145.045:5285): avc: denied { nlmsg_write } for pid=11929 comm="syz.1.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 551.686339][ T30] audit: type=1400 audit(1779303145.055:5286): avc: denied { read write } for pid=11929 comm="syz.1.1518" name="nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.716213][T11936] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 551.733136][T11936] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 551.753574][ T3319] Bluetooth: Error in BCSP hdr checksum [ 551.756578][ T30] audit: type=1400 audit(1779303145.065:5287): avc: denied { open } for pid=11929 comm="syz.1.1518" path="/dev/nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.767489][T11936] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 551.828386][ T30] audit: type=1400 audit(1779303145.065:5288): avc: denied { ioctl } for pid=11929 comm="syz.1.1518" path="/dev/nbd1" dev="devtmpfs" ino=680 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.845648][T11941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1519'. [ 551.919072][ T30] audit: type=1400 audit(1779303145.475:5289): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.950989][T11936] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 552.024581][ T3319] Bluetooth: Error in BCSP hdr checksum [ 552.051223][ T30] audit: type=1400 audit(1779303145.475:5290): avc: denied { open } for pid=5611 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.290230][ T9042] Bluetooth: Error in BCSP hdr checksum [ 552.638334][ T3319] Bluetooth: Error in BCSP hdr checksum [ 553.084035][ T52] Bluetooth: Error in BCSP hdr checksum [ 553.350194][ T1351] Bluetooth: Error in BCSP hdr checksum [ 553.671974][ T1050] Bluetooth: Error in BCSP hdr checksum [ 554.016041][ T9042] Bluetooth: Error in BCSP hdr checksum [ 554.677577][ T3319] Bluetooth: Error in BCSP hdr checksum [ 555.553298][ T9042] Bluetooth: Error in BCSP hdr checksum [ 555.810460][ T52] Bluetooth: Error in BCSP hdr checksum [ 556.070279][ T9042] Bluetooth: Error in BCSP hdr checksum [ 556.590395][ T5749] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 556.603159][ T1351] Bluetooth: Error in BCSP hdr checksum [ 556.623047][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 556.623064][ T30] audit: type=1400 audit(1779303150.355:5508): avc: denied { ioctl } for pid=11998 comm="syz.1.1540" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 557.276945][ T3398] Bluetooth: Error in BCSP hdr checksum [ 557.333383][ T30] audit: type=1400 audit(1779303150.575:5509): avc: denied { ioctl } for pid=11998 comm="syz.1.1540" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 557.342068][ T5749] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 557.370225][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.376561][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.392650][ T5749] usb 2-1: config 0 has no interface number 0 [ 557.410004][ T5749] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 557.438178][ T5749] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 557.451075][ T1351] Bluetooth: Error in BCSP hdr checksum [ 557.495632][ T5749] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 557.519490][ T30] audit: type=1400 audit(1779303150.675:5510): avc: denied { create } for pid=12003 comm="syz.4.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 557.626573][ T5749] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 557.638802][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 557.647014][ T5749] usb 2-1: Product: syz [ 557.653624][ T5749] usb 2-1: SerialNumber: syz [ 557.666422][ T5749] usb 2-1: config 0 descriptor?? [ 557.680346][ T5749] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 557.706619][ T30] audit: type=1400 audit(1779303150.685:5511): avc: denied { write } for pid=12003 comm="syz.4.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 558.067066][ T3398] Bluetooth: Error in BCSP hdr checksum [ 558.068117][ T5749] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input24 [ 558.104050][ T5749] ------------[ cut here ]------------ [ 558.104114][ T5749] URB ffff88801eb02700 submitted while active [ 558.104125][ T5749] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: kworker/1:7/5749 [ 558.104165][ T5749] Modules linked in: [ 558.104210][ T5749] CPU: 1 UID: 0 PID: 5749 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.104235][ T5749] Tainted: [L]=SOFTLOCKUP [ 558.104243][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 558.104256][ T5749] Workqueue: usb_hub_wq hub_event [ 558.104284][ T5749] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 558.104308][ T5749] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 ad 69 b2 fa 48 8d 3d 46 71 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 558.104326][ T5749] RSP: 0018:ffffc9000475ee50 EFLAGS: 00010246 [ 558.104345][ T5749] RAX: 0000000000100000 RBX: ffff88801eb02700 RCX: ffffc9001ba27000 [ 558.104357][ T5749] RDX: 0000000000100000 RSI: ffff88801eb02700 RDI: ffffffff90e4b6a0 [ 558.104368][ T5749] RBP: ffff88802a4683c0 R08: 0000000000000000 R09: fffffbfff21afaca [ 558.104380][ T5749] R10: ffffc9000475eed8 R11: 0000000000000000 R12: ffff888036d788a0 [ 558.104391][ T5749] R13: ffff888036d78810 R14: ffff888036d78850 R15: ffff888032eb62e0 [ 558.104403][ T5749] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 558.104421][ T5749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.104434][ T5749] CR2: 0000200000003120 CR3: 000000007c10e000 CR4: 00000000003526f0 [ 558.104448][ T5749] Call Trace: [ 558.104456][ T5749] [ 558.104464][ T5749] ? lockdep_hardirqs_on+0x78/0x100 [ 558.104494][ T5749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.104520][ T5749] ? __pm_runtime_resume+0xc3/0x170 [ 558.104546][ T5749] cm109_input_open+0x273/0x420 [ 558.104573][ T5749] ? __pfx_cm109_input_open+0x10/0x10 [ 558.104600][ T5749] input_open_device+0x24c/0x3d0 [ 558.104625][ T5749] kbd_connect+0x124/0x180 [ 558.104652][ T5749] input_attach_handler.isra.0+0x177/0x1e0 [ 558.104691][ T5749] input_register_device.cold+0x139/0x375 [ 558.104725][ T5749] cm109_usb_probe+0x128d/0x17f0 [ 558.104766][ T5749] usb_probe_interface+0x303/0x8f0 [ 558.104790][ T5749] ? __pfx_usb_probe_interface+0x10/0x10 [ 558.104813][ T5749] really_probe+0x241/0xa60 [ 558.104838][ T5749] __driver_probe_device+0x22e/0x480 [ 558.104863][ T5749] driver_probe_device+0x4c/0x1b0 [ 558.104886][ T5749] __device_attach_driver+0x1df/0x340 [ 558.104909][ T5749] ? __pfx___device_attach_driver+0x10/0x10 [ 558.104928][ T5749] bus_for_each_drv+0x159/0x1e0 [ 558.104957][ T5749] ? __pfx_bus_for_each_drv+0x10/0x10 [ 558.104987][ T5749] ? lockdep_hardirqs_on+0x78/0x100 [ 558.105016][ T5749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.105046][ T5749] __device_attach+0x1e4/0x4d0 [ 558.105066][ T5749] ? __pfx___device_attach+0x10/0x10 [ 558.105087][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 558.105123][ T5749] device_initial_probe+0xaf/0xd0 [ 558.105146][ T5749] bus_probe_device+0x64/0x160 [ 558.105179][ T5749] device_add+0x1210/0x1950 [ 558.105204][ T5749] ? __pfx_device_add+0x10/0x10 [ 558.105239][ T5749] usb_set_configuration+0xd97/0x1c60 [ 558.105287][ T5749] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 558.105313][ T5749] usb_generic_driver_probe+0xa1/0xe0 [ 558.105340][ T5749] usb_probe_device+0xef/0x400 [ 558.105369][ T5749] ? __pfx_usb_probe_device+0x10/0x10 [ 558.105400][ T5749] really_probe+0x241/0xa60 [ 558.105425][ T5749] __driver_probe_device+0x22e/0x480 [ 558.105461][ T5749] ? usb_driver_applicable+0x1c7/0x220 [ 558.105484][ T5749] driver_probe_device+0x4c/0x1b0 [ 558.105507][ T5749] __device_attach_driver+0x1df/0x340 [ 558.105530][ T5749] ? __pfx___device_attach_driver+0x10/0x10 [ 558.105551][ T5749] bus_for_each_drv+0x159/0x1e0 [ 558.105580][ T5749] ? __pfx_bus_for_each_drv+0x10/0x10 [ 558.105609][ T5749] ? lockdep_hardirqs_on+0x78/0x100 [ 558.105636][ T5749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.105666][ T5749] __device_attach+0x1e4/0x4d0 [ 558.105694][ T5749] ? __pfx___device_attach+0x10/0x10 [ 558.105717][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 558.105752][ T5749] device_initial_probe+0xaf/0xd0 [ 558.105774][ T5749] bus_probe_device+0x64/0x160 [ 558.105807][ T5749] device_add+0x1210/0x1950 [ 558.105834][ T5749] ? __pfx_device_add+0x10/0x10 [ 558.105858][ T5749] ? add_device_randomness+0xb7/0xf0 [ 558.105898][ T5749] usb_new_device.cold+0x685/0x115c [ 558.105931][ T5749] ? do_raw_spin_lock+0x128/0x260 [ 558.105960][ T5749] ? __pfx_usb_new_device+0x10/0x10 [ 558.105992][ T5749] ? mark_held_locks+0x40/0x70 [ 558.106022][ T5749] hub_event+0x314d/0x4af0 [ 558.106077][ T5749] ? __pfx_hub_event+0x10/0x10 [ 558.106105][ T5749] ? assoc_array_destroy_subtree.part.0+0x20/0x4f0 [ 558.106140][ T5749] ? rcu_is_watching+0x12/0xc0 [ 558.106173][ T5749] process_one_work+0xa0e/0x1980 [ 558.106206][ T5749] ? __pfx_process_one_work+0x10/0x10 [ 558.106235][ T5749] ? __pfx_hub_event+0x10/0x10 [ 558.106261][ T5749] worker_thread+0x5ef/0xe50 [ 558.106290][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 558.106314][ T5749] ? kthread+0x13a/0x450 [ 558.106334][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 558.106355][ T5749] kthread+0x370/0x450 [ 558.106388][ T5749] ? __pfx_kthread+0x10/0x10 [ 558.106411][ T5749] ret_from_fork+0x72b/0xd50 [ 558.106436][ T5749] ? __pfx_ret_from_fork+0x10/0x10 [ 558.106462][ T5749] ? __switch_to+0x800/0x1100 [ 558.106488][ T5749] ? __pfx_kthread+0x10/0x10 [ 558.106512][ T5749] ret_from_fork_asm+0x1a/0x30 [ 558.106550][ T5749] [ 558.106560][ T5749] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 558.106575][ T5749] CPU: 1 UID: 0 PID: 5749 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.106599][ T5749] Tainted: [L]=SOFTLOCKUP [ 558.106606][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 558.106617][ T5749] Workqueue: usb_hub_wq hub_event [ 558.106643][ T5749] Call Trace: [ 558.106650][ T5749] [ 558.106656][ T5749] dump_stack_lvl+0x100/0x190 [ 558.106679][ T5749] vpanic+0x552/0x970 [ 558.106703][ T5749] ? __pfx_vpanic+0x10/0x10 [ 558.106729][ T5749] panic+0xd1/0xe0 [ 558.106748][ T5749] ? __pfx_panic+0x10/0x10 [ 558.106776][ T5749] check_panic_on_warn.cold+0x19/0x34 [ 558.106796][ T5749] ? usb_submit_urb+0x15fa/0x1910 [ 558.106816][ T5749] __warn.cold+0x191/0x328 [ 558.106837][ T5749] __report_bug+0x296/0x3d0 [ 558.106860][ T5749] ? usb_submit_urb+0x15fa/0x1910 [ 558.106882][ T5749] ? __pfx___report_bug+0x10/0x10 [ 558.106913][ T5749] ? preempt_schedule_common+0x42/0xc0 [ 558.106939][ T5749] ? preempt_schedule_thunk+0x16/0x30 [ 558.106961][ T5749] report_bug_entry+0xe1/0x290 [ 558.106986][ T5749] ? usb_submit_urb+0x15fd/0x1910 [ 558.107009][ T5749] handle_bug+0x1cd/0x2a0 [ 558.107026][ T5749] exc_invalid_op+0x17/0x50 [ 558.107044][ T5749] asm_exc_invalid_op+0x1a/0x20 [ 558.107063][ T5749] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 558.107087][ T5749] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 ad 69 b2 fa 48 8d 3d 46 71 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 558.107105][ T5749] RSP: 0018:ffffc9000475ee50 EFLAGS: 00010246 [ 558.107119][ T5749] RAX: 0000000000100000 RBX: ffff88801eb02700 RCX: ffffc9001ba27000 [ 558.107132][ T5749] RDX: 0000000000100000 RSI: ffff88801eb02700 RDI: ffffffff90e4b6a0 [ 558.107144][ T5749] RBP: ffff88802a4683c0 R08: 0000000000000000 R09: fffffbfff21afaca [ 558.107157][ T5749] R10: ffffc9000475eed8 R11: 0000000000000000 R12: ffff888036d788a0 [ 558.107169][ T5749] R13: ffff888036d78810 R14: ffff888036d78850 R15: ffff888032eb62e0 [ 558.107194][ T5749] ? lockdep_hardirqs_on+0x78/0x100 [ 558.107220][ T5749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.107244][ T5749] ? __pm_runtime_resume+0xc3/0x170 [ 558.107269][ T5749] cm109_input_open+0x273/0x420 [ 558.107297][ T5749] ? __pfx_cm109_input_open+0x10/0x10 [ 558.107323][ T5749] input_open_device+0x24c/0x3d0 [ 558.107348][ T5749] kbd_connect+0x124/0x180 [ 558.107372][ T5749] input_attach_handler.isra.0+0x177/0x1e0 [ 558.107401][ T5749] input_register_device.cold+0x139/0x375 [ 558.107430][ T5749] cm109_usb_probe+0x128d/0x17f0 [ 558.107466][ T5749] usb_probe_interface+0x303/0x8f0 [ 558.107487][ T5749] ? __pfx_usb_probe_interface+0x10/0x10 [ 558.107507][ T5749] really_probe+0x241/0xa60 [ 558.107529][ T5749] __driver_probe_device+0x22e/0x480 [ 558.107551][ T5749] driver_probe_device+0x4c/0x1b0 [ 558.107571][ T5749] __device_attach_driver+0x1df/0x340 [ 558.107592][ T5749] ? __pfx___device_attach_driver+0x10/0x10 [ 558.107610][ T5749] bus_for_each_drv+0x159/0x1e0 [ 558.107634][ T5749] ? __pfx_bus_for_each_drv+0x10/0x10 [ 558.107659][ T5749] ? lockdep_hardirqs_on+0x78/0x100 [ 558.107688][ T5749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.107716][ T5749] __device_attach+0x1e4/0x4d0 [ 558.107735][ T5749] ? __pfx___device_attach+0x10/0x10 [ 558.107753][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 558.107782][ T5749] device_initial_probe+0xaf/0xd0 [ 558.107801][ T5749] bus_probe_device+0x64/0x160 [ 558.107829][ T5749] device_add+0x1210/0x1950 [ 558.107853][ T5749] ? __pfx_device_add+0x10/0x10 [ 558.107882][ T5749] usb_set_configuration+0xd97/0x1c60 [ 558.107922][ T5749] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 558.107943][ T5749] usb_generic_driver_probe+0xa1/0xe0 [ 558.107965][ T5749] usb_probe_device+0xef/0x400 [ 558.107990][ T5749] ? __pfx_usb_probe_device+0x10/0x10 [ 558.108016][ T5749] really_probe+0x241/0xa60 [ 558.108035][ T5749] __driver_probe_device+0x22e/0x480 [ 558.108051][ T5749] ? usb_driver_applicable+0x1c7/0x220 [ 558.108071][ T5749] driver_probe_device+0x4c/0x1b0 [ 558.108089][ T5749] __device_attach_driver+0x1df/0x340 [ 558.108108][ T5749] ? __pfx___device_attach_driver+0x10/0x10 [ 558.108125][ T5749] bus_for_each_drv+0x159/0x1e0 [ 558.108148][ T5749] ? __pfx_bus_for_each_drv+0x10/0x10 [ 558.108172][ T5749] ? lockdep_hardirqs_on+0x78/0x100 [ 558.108196][ T5749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.108222][ T5749] __device_attach+0x1e4/0x4d0 [ 558.108242][ T5749] ? __pfx___device_attach+0x10/0x10 [ 558.108260][ T5749] ? do_raw_spin_unlock+0x145/0x1e0 [ 558.108288][ T5749] device_initial_probe+0xaf/0xd0 [ 558.108307][ T5749] bus_probe_device+0x64/0x160 [ 558.108333][ T5749] device_add+0x1210/0x1950 [ 558.108355][ T5749] ? __pfx_device_add+0x10/0x10 [ 558.108375][ T5749] ? add_device_randomness+0xb7/0xf0 [ 558.108409][ T5749] usb_new_device.cold+0x685/0x115c [ 558.108437][ T5749] ? do_raw_spin_lock+0x128/0x260 [ 558.108461][ T5749] ? __pfx_usb_new_device+0x10/0x10 [ 558.108486][ T5749] ? mark_held_locks+0x40/0x70 [ 558.108511][ T5749] hub_event+0x314d/0x4af0 [ 558.108558][ T5749] ? __pfx_hub_event+0x10/0x10 [ 558.108581][ T5749] ? assoc_array_destroy_subtree.part.0+0x20/0x4f0 [ 558.108613][ T5749] ? rcu_is_watching+0x12/0xc0 [ 558.108642][ T5749] process_one_work+0xa0e/0x1980 [ 558.108676][ T5749] ? __pfx_process_one_work+0x10/0x10 [ 558.108714][ T5749] ? __pfx_hub_event+0x10/0x10 [ 558.108740][ T5749] worker_thread+0x5ef/0xe50 [ 558.108770][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 558.108793][ T5749] ? kthread+0x13a/0x450 [ 558.108813][ T5749] ? __pfx_worker_thread+0x10/0x10 [ 558.108833][ T5749] kthread+0x370/0x450 [ 558.108853][ T5749] ? __pfx_kthread+0x10/0x10 [ 558.108875][ T5749] ret_from_fork+0x72b/0xd50 [ 558.108899][ T5749] ? __pfx_ret_from_fork+0x10/0x10 [ 558.108923][ T5749] ? __switch_to+0x800/0x1100 [ 558.108949][ T5749] ? __pfx_kthread+0x10/0x10 [ 558.108971][ T5749] ret_from_fork_asm+0x1a/0x30 [ 558.109010][ T5749] [ 558.109266][ T5749] Kernel Offset: disabled