last executing test programs: 17.07556839s ago: executing program 2 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf250200"], 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000080601020000000000fff400000000000500010007000000"], 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0x8000, 0x2) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xa2, 0x40, 0xd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x9}}}}}]}}]}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0x6e, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f008007357c3d45863d83e8b53d6ac737496df76df3e984d5fee2bd16b19fa0884c1d41c5e19019de81f33d205fb9195464a2bfbb7fc1b6679782c2a7f9be4ba60aee27c11fc8b63ac25cb2375778a584f23d2627565b6ba210c90582fac21b0eb92bc", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000140)=0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000540)}], 0x6}, 0x1) 13.92837675s ago: executing program 4 (id=777): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0x2e7) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpid() mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, &(0x7f0000000240)={[{@none}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0x2}, {0x2}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x400c084) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @local}, {0x306}, 0x0, {0x2, 0x4e22, @local}, 'ip6gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1000, 0x1}}}}]}, 0x44}}, 0x24008010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 12.625668961s ago: executing program 2 (id=780): socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000340), {[{{@arp={@loopback, @multicast1, 0xff0000ff, 0xff000000, 0x1, 0x3, {@mac=@local, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="cb09bae94d6f", {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x80, 0x7, 0x0, 0x7, 0x4, 0xfcc8, 'ip6_vti0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x186}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @remote, 0x8}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffff, 'system_u:object_r:usbtty_device_t:s0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x50}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200c4805}, 0x24000081) r4 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff3f7e, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc, 0x0, 0xfc, 0x9, 0x0, 0x401, 0xfffe, 0x0, 0x0, 0x40000045}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="92", 0x1}, {0x0}], 0x2}, 0x18041) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x120}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0x101041, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x59, 0x5, 0x5, 0x20, @private1, @empty, 0x80, 0x8, 0x30b0, 0xfffffff8}}) 11.387344705s ago: executing program 0 (id=782): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000280)="299c27249f0f83d06b21e37391a0dc47d914d5", 0x13, r1) keyctl$clear(0x7, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f00000009c0)=[@code={0x1, 0x5c, {"f30f5ceab8010000000f01c10fc73d04000000b805000000b9f96f00000f01c13e440f01c866baf80cb8de893f8bef66bafc0c66b8930066ef66653e660f65f266ba2000ec0f20230f0133"}}, @code={0x1, 0x63, {"0f20c035020000000f22c066b874000f00d0b805000000b9857b00000f01c1f0f71366baf80cb868997e82ef66bafc0ced440f01c966b846000f00d00fc7190f08b9f20b0000b802000000ba000000000f30"}}, @cpuid={0x2, 0x18, {0x10000, 0xffffffff}}, @uexit={0x0, 0x18}, @code={0x1, 0x58, {"3e0f01df0f090f788cf93f000000c74424001b010000c7442402ef000000ff1c24470fc7392e66440f38809703000000462b4559660f3881600067440f381cffc4e3b5786800a5"}}, @uexit={0x0, 0x18, 0x4fa}, @code={0x1, 0x60, {"67240b470f011ac441c5e9ec66baf80cb828eb9b8aef66bafc0cb8c4f62891efc4420da682fa7700002e0fc76d000f2318c74424002a000000c74424028a650000ff2c24660f6ec9b95b0a00000f32"}}, @code={0x1, 0x79, {"66b819000f00d8420f57565b66baa00066edf30f1bc8410f01dfb9240a0000b8db5241a5baff7c594f0f300f20d835200000000f22d8b90c0b0000b831000000ba000000000f30c4c1fa2d09c744240007000000c7442402f7000000c7442406000000000f011c24"}}, @cpuid={0x2, 0x18, {0x10, 0x2}}, @cpuid={0x2, 0x18, {0x3, 0xbf63}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x98, {"366536660f38809119000000c74424006c000000c7442402219b0000c7442406000000000f011424c48258f228b9800000c00f3235001000000f30b8010000000f01d9b9ec0a0000b83f920000ba000000000f3066bad104b800000000ef0fc76c6398c7442400fb000000c744240201000000ff1c2466baf80cb8b4f44284ef66bafc0cb0a7ee"}}], 0x318}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 11.386319043s ago: executing program 2 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf250200"], 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000080601020000000000fff400000000000500010007000000"], 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0x8000, 0x2) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xa2, 0x40, 0xd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x9}}}}}]}}]}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0x6e, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f008007357c3d45863d83e8b53d6ac737496df76df3e984d5fee2bd16b19fa0884c1d41c5e19019de81f33d205fb9195464a2bfbb7fc1b6679782c2a7f9be4ba60aee27c11fc8b63ac25cb2375778a584f23d2627565b6ba210c90582fac21b0eb92bc", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000540)}], 0x6}, 0x1) 11.170026022s ago: executing program 1 (id=785): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x1) preadv2(r2, &(0x7f0000000840)=[{&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/141, 0x8d}], 0x5, 0x3, 0xfffffffd, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581b402"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r1, 0xffffffffffffffff, 0x0) 10.422250696s ago: executing program 0 (id=786): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_io_uring_setup(0x5409, &(0x7f0000000200)={0x0, 0x88e1, 0x1000, 0x1, 0x365, 0x0, r0}, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400), &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9b, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2, 0xc4e2, 0x4, 0x348}, 0x0, 0x0) 10.400664793s ago: executing program 3 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x9}, {0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast2}}, r5, 0x99d}}, 0xffffff58) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) unshare(0x8010400) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r7) socket$inet6(0xa, 0x80003, 0x6) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r9 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x8000}) r11 = fcntl$dupfd(r10, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) 9.515433666s ago: executing program 0 (id=788): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x34, 0x0, 0x1}]}) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) shutdown(r0, 0xf58cea20f199b1f) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x422800, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 9.413731779s ago: executing program 4 (id=789): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0707051400c8"], 0xa) r0 = socket(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0xd, 0x0, 0xf9, 0x3, 0x0, 0x80, 0xc, 0xb, 0xd, 0x0, 0x7, 0x0, 0x6}, {0x3bd, 0xfff0, 0xfd, 0x9, 0x7, 0x0, 0x0, 0x4, 0x8, 0x6, 0x4, 0x6, 0xffffffffb534cef1}, {0x4, 0x2, 0x7, 0x7, 0x9, 0x9, 0x4, 0x63, 0x8, 0x4, 0xf8, 0x0, 0x10000}], 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x2, 0x3}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RENAMEAT={0x23, 0x16, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000f10000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001080008400000000114000000110001"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xc02b}]}}]}, 0x48}}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0xa1}}]}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) splice(r2, &(0x7f00000023c0)=0x80000000, r2, &(0x7f0000002400)=0x5, 0x7, 0x9) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000340)=0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r7, 0x7800, 0x7800, 0x4, 0x6, {{0x9, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0x80, 0x29, 0x0, @multicast2, @private=0xa010101, {[@generic={0x88, 0xd, "8efeb61379ce8f3d50c9c6"}, @noop]}}}}}) 9.358664527s ago: executing program 1 (id=790): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000)=0x1ff, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000500)={{0xe5b26f2b, 0xffffffff}, 0x100, './bus\x00'}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xa1) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) 7.480735813s ago: executing program 2 (id=791): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2e7) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpid() mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, &(0x7f0000000240)={[{@none}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0x2}, {0x2}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x400c084) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @local}, {0x306}, 0x0, {0x2, 0x4e22, @local}, 'ip6gretap0\x00'}) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1000, 0x1}}}}]}, 0x44}}, 0x24008010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.967698597s ago: executing program 4 (id=792): setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) shmget(0x1, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r1, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000f27ecbf2b2d30600000000000000000000000000000000200000000000000000000000000000000000000000000000000000000096c2220141eed0aa0d6557a8befd769f51c33c0df8c76dcb4e479257a5b83472e22a5076a821c66ecaf662723abb2082b3f34504dfd31248fd689c83eeb1bb11ecbd1fdea48bef24154b441034e2a5a22e8b3fbb364cc0"]) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c59b, 0x0, 0x1, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x14}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x80, "be92f2e314c97364629f9ef7c6f7a53f"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x40004) recvmmsg(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x0, 0x3938700}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x100}]}}]}, 0x3c}}, 0x4000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xea8643a92eb67ed, 0x11, 0xffffffffffffffff, 0x240000) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000061f00000000000000000000000000009d6b510ac1c5", @ANYRESHEX=r5, @ANYBLOB="0000000000008000280012800a00010076786c616e00", @ANYRES32=r1, @ANYRES32=r4, @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24}, 0x408d0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x1, 0x1000, 0xf, 0x1ff, 0x9]}, &(0x7f0000000040)=0xe) 6.432447488s ago: executing program 3 (id=793): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x22, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) 6.386535552s ago: executing program 4 (id=794): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) fcntl$dupfd(r2, 0x406, r1) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 1\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.33173185s ago: executing program 0 (id=795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fanotify_init(0x20, 0x101000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket(0x5, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_nanosleep(0x9, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xc7) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) 6.31148605s ago: executing program 3 (id=796): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r4, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e200000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000001000000006c00020002000000ac1414aa00000000000000"], 0xfc}}, 0x0) r7 = syz_io_uring_setup(0x47c1, &(0x7f00000005c0)={0x0, 0xce1a, 0x0, 0x3, 0x389}, &(0x7f0000000000), &(0x7f0000000100)) r8 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x78ae, 0x400, 0x2, 0x286, 0x0, r7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r11 = socket(0x200000000000011, 0xa, 0x1) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r11, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.203442795s ago: executing program 1 (id=797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fanotify_init(0x20, 0x101000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r2 = socket(0x5, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_nanosleep(0x9, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xc7) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) 5.186871016s ago: executing program 3 (id=798): fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setgroups(0xefff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x76, 0x101301) unshare(0x22020600) unshare(0x18010080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03030000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c00038018000380140001006261746164765f736c6176655f31000014000000110001"], 0x70}}, 0x24040880) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480), 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x39020, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000003c0)=0x2) 5.054906612s ago: executing program 0 (id=799): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0x2e7) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpid() mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, &(0x7f0000000240)={[{@none}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0x2}, {0x2}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x400c084) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @local}, {0x306}, 0x0, {0x2, 0x4e22, @local}, 'ip6gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1000, 0x1}}}}]}, 0x44}}, 0x24008010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3.622872753s ago: executing program 1 (id=800): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000)=0x1ff, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000500)={{0xe5b26f2b, 0xffffffff}, 0x100, './bus\x00'}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xa1) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) 3.492719908s ago: executing program 3 (id=801): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r4, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e200000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000001000000006c00020002000000ac1414aa00000000000000"], 0xfc}}, 0x0) r7 = syz_io_uring_setup(0x47c1, &(0x7f00000005c0)={0x0, 0xce1a, 0x0, 0x3, 0x389}, &(0x7f0000000000), &(0x7f0000000100)) r8 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x78ae, 0x400, 0x2, 0x286, 0x0, r7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r11 = socket(0x200000000000011, 0xa, 0x1) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r11, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.301172777s ago: executing program 4 (id=802): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) (async) r5 = gettid() syz_open_procfs$namespace(r5, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r3}) (async) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7ff, 0x40) mmap$snddsp_status(&(0x7f00003a5000/0x1000)=nil, 0x1000, 0x2000003, 0x11, r6, 0x82000000) (async) r7 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) recvfrom$unix(r7, &(0x7f0000000040)=""/30, 0x1e, 0x22, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x5, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) (async) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000000)={0x10000, 0x1000}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.07083634s ago: executing program 2 (id=803): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) r4 = syz_io_uring_setup(0x6da6, &(0x7f0000000480)={0x0, 0xe53b, 0x10100, 0x0, 0x2c0}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) eventfd2(0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/51, 0xfffffffffffffede}, {&(0x7f0000000040)=""/25}], 0x1, 0xfffffffc, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES16], 0x118) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x0, &(0x7f0000000000)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r7, @ANYRES32=r10, @ANYRESDEC=r9], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 2.000572346s ago: executing program 4 (id=804): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r10, &(0x7f0000000380)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) splice(r3, 0x0, r4, 0x0, 0x400000008000f28, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x8001, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010004031401"], 0x100}}, 0x0) 621.444764ms ago: executing program 1 (id=805): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xc3ff}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (fail_nth: 1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 479.414613ms ago: executing program 2 (id=806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400000212c71c000905a42e7fbb00000009058202"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_genetlink_get_family_id$nfc(0x0, r7) (async) r12 = syz_genetlink_get_family_id$nfc(0x0, r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f00000002c0), 0x6, 0x408401) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x6, 0x408401) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x6cc936f4ca9350ba, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000e5) 437.70846ms ago: executing program 3 (id=807): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000140)='^', 0x1}]) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x7, 0x2, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 418.000784ms ago: executing program 1 (id=808): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000)=0x1ff, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000500)={{0xe5b26f2b, 0xffffffff}, 0x100, './bus\x00'}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xa1) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) 0s ago: executing program 0 (id=809): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): T30] audit: type=1400 audit(1750176074.004:1052): avc: denied { shutdown } for pid=7253 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.591549][ T10] usb 1-1: config 0 descriptor?? [ 209.600582][ T24] usb 2-1: device descriptor read/64, error -71 [ 209.714463][ T24] usb usb2-port1: attempt power cycle [ 209.865089][ T974] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.959697][ T7260] cgroup: Need name or subsystem set [ 210.095196][ T7259] sctp: [Deprecated]: syz.3.356 (pid 7259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.095196][ T7259] Use struct sctp_sack_info instead [ 210.212216][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 210.296729][ T30] audit: type=1400 audit(1750176074.654:1053): avc: denied { write } for pid=7253 comm="syz.3.356" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.296735][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 210.296777][ T30] audit: type=1400 audit(1750176074.684:1054): avc: denied { read write } for pid=7255 comm="syz.2.357" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 210.320765][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 210.363543][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 210.376747][ T24] usb 2-1: device descriptor read/8, error -71 [ 210.403938][ T30] audit: type=1400 audit(1750176074.684:1055): avc: denied { open } for pid=7255 comm="syz.2.357" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 210.404325][ T974] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 210.451428][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 210.539551][ T10] usb 1-1: USB disconnect, device number 6 [ 210.547443][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 210.692683][ T974] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 210.703789][ T974] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 210.832914][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 210.840438][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.861876][ T974] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 210.939118][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 211.290425][ T3164] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 211.410409][ T974] gspca_sn9c2028: read1 error -110 [ 211.420656][ T974] gspca_sn9c2028: read1 error -32 [ 211.425942][ T974] gspca_sn9c2028: read1 error -32 [ 211.440438][ T974] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -32 [ 211.462778][ T3164] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.490477][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 211.538644][ T3164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.548988][ T3164] usb 3-1: Product: syz [ 211.557538][ T3164] usb 3-1: Manufacturer: syz [ 211.567780][ T3164] usb 3-1: SerialNumber: syz [ 211.624687][ T3164] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.229813][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.247948][ T30] audit: type=1400 audit(1750176076.134:1056): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 212.296374][ T42] usb 5-1: USB disconnect, device number 13 [ 212.388064][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 212.530601][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 212.611812][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 212.670228][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.680074][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.694657][ T7268] 9pnet_fd: Insufficient options for proto=fd [ 212.716197][ T30] audit: type=1400 audit(1750176077.144:1057): avc: denied { mounton } for pid=7265 comm="syz.2.359" path="/67/file0" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.860447][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 212.945243][ T7282] tmpfs: Bad value for 'mpol' [ 213.294183][ T3164] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 213.330524][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 213.340837][ T24] ath9k_htc: Failed to initialize the device [ 213.379491][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 213.452845][ T3164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.477643][ T3164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.493015][ T3164] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 213.508133][ T3164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.527483][ T3164] usb 5-1: config 0 descriptor?? [ 213.570777][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 213.792932][ T10] usb 3-1: USB disconnect, device number 5 [ 214.221641][ T30] audit: type=1326 audit(1750176078.674:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 215.393882][ T30] audit: type=1326 audit(1750176078.704:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 215.679625][ T30] audit: type=1326 audit(1750176078.704:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 215.932251][ T30] audit: type=1326 audit(1750176078.704:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 216.032736][ T30] audit: type=1326 audit(1750176078.704:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 216.106090][ T30] audit: type=1326 audit(1750176078.704:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 216.153834][ T30] audit: type=1326 audit(1750176078.704:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 216.316734][ T30] audit: type=1326 audit(1750176078.714:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 216.359514][ T30] audit: type=1326 audit(1750176078.714:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 216.384260][ T30] audit: type=1326 audit(1750176078.714:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 216.965939][ T3164] usbhid 5-1:0.0: can't add hid device: -71 [ 216.972078][ T3164] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 216.989995][ T3164] usb 5-1: USB disconnect, device number 14 [ 217.021294][ T5888] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 217.182290][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.195694][ T7330] tmpfs: Bad value for 'mpol' [ 217.200997][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.211435][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.224644][ T5888] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.233761][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.244158][ T5888] usb 3-1: config 0 descriptor?? [ 217.543329][ T7331] cgroup: Need name or subsystem set [ 217.857900][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 217.867713][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 217.879635][ T5888] usb 3-1: USB disconnect, device number 6 [ 217.889093][ T7333] syzkaller0: entered promiscuous mode [ 217.929448][ T7333] syzkaller0: entered allmulticast mode [ 218.168570][ T7342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.223967][ T7342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.829805][ T7335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.237723][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 219.237740][ T30] audit: type=1400 audit(1750176083.684:1098): avc: denied { write } for pid=7346 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 220.219718][ T30] audit: type=1326 audit(1750176084.664:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965d8e929 code=0x7fc00000 [ 220.532904][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.388'. [ 221.421033][ T30] audit: type=1400 audit(1750176085.874:1100): avc: denied { create } for pid=7373 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.796983][ T5888] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 221.958825][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 221.966892][ T3164] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 222.004716][ T30] audit: type=1400 audit(1750176086.434:1101): avc: denied { listen } for pid=7373 comm="syz.2.390" lport=57218 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.074055][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.106689][ T30] audit: type=1400 audit(1750176086.534:1102): avc: denied { accept } for pid=7373 comm="syz.2.390" lport=57218 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.178142][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 222.205101][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.214263][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 222.226205][ T3164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.250932][ T24] usb 2-1: config index 0 descriptor too short (expected 54802, got 18) [ 222.259337][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.274917][ T3164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.349966][ T3164] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.364290][ T5888] usb 4-1: config 0 descriptor?? [ 222.369773][ T3164] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.381097][ T5888] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 222.389002][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 222.400207][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.417393][ T3164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.426054][ T24] usb 2-1: Product: syz [ 222.430244][ T24] usb 2-1: Manufacturer: syz [ 222.452587][ T24] usb 2-1: SerialNumber: syz [ 222.458869][ T3164] usb 1-1: config 0 descriptor?? [ 222.490804][ T24] usb 2-1: config 0 descriptor?? [ 222.501621][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 222.524284][ T24] usb 2-1: setting power ON [ 222.529271][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 222.600002][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.638923][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 222.910338][ T7394] cgroup: Need name or subsystem set [ 223.130786][ T3164] usbhid 1-1:0.0: can't add hid device: -71 [ 223.167870][ T7393] cgroup: Need name or subsystem set [ 223.872005][ T30] audit: type=1400 audit(1750176088.324:1103): avc: denied { append } for pid=7377 comm="syz.1.391" name="i2c-1" dev="devtmpfs" ino=2854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.876020][ T24] usb 2-1: media controller created [ 223.900453][ T3164] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 223.997519][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.006100][ T3164] usb 1-1: USB disconnect, device number 7 [ 224.028799][ T24] usb 2-1: selecting invalid altsetting 6 [ 224.034874][ T24] usb 2-1: digital interface selection failed (-22) [ 224.041554][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 224.054778][ T24] usb 2-1: setting power OFF [ 224.059881][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 224.067440][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 224.079358][ T24] (NULL device *): no alternate interface [ 224.113665][ T30] audit: type=1400 audit(1750176088.554:1104): avc: denied { sys_module } for pid=7371 comm="syz.3.389" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 224.203587][ T30] audit: type=1400 audit(1750176088.654:1105): avc: denied { read write } for pid=7377 comm="syz.1.391" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.328549][ T30] audit: type=1400 audit(1750176088.654:1106): avc: denied { open } for pid=7377 comm="syz.1.391" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.563532][ T3164] usb 4-1: USB disconnect, device number 11 [ 224.831829][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 225.041686][ T974] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 225.052095][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.064754][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 225.088144][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.107573][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.130969][ T10] usb 5-1: config 0 descriptor?? [ 225.166889][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 225.181629][ T974] usb 1-1: device descriptor read/64, error -71 [ 225.266676][ T7417] syzkaller0: entered promiscuous mode [ 225.276619][ T7417] syzkaller0: entered allmulticast mode [ 225.370386][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.399740][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.431451][ T974] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 225.534903][ T7424] cgroup: Need name or subsystem set [ 225.779421][ T974] usb 1-1: device descriptor read/64, error -71 [ 225.890792][ T974] usb usb1-port1: attempt power cycle [ 226.110891][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.234047][ T974] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.261063][ T974] usb 1-1: device descriptor read/8, error -71 [ 226.501242][ T974] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 226.531700][ T974] usb 1-1: device descriptor read/8, error -71 [ 226.642857][ T974] usb usb1-port1: unable to enumerate USB device [ 226.672749][ T974] usb 5-1: USB disconnect, device number 15 [ 226.819342][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.403'. [ 228.901624][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.951007][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.106854][ T7455] Bluetooth: Invalid byte 00 after esc byte [ 229.187602][ T30] audit: type=1400 audit(1750176093.634:1107): avc: denied { create } for pid=7461 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.221166][ T3164] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.282757][ T7466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.295433][ T7466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.316518][ T7465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.380688][ T3164] usb 5-1: Using ep0 maxpacket: 32 [ 229.431865][ T3164] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 229.447132][ T3164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.516546][ T3164] usb 5-1: Product: syz [ 229.537149][ T3164] usb 5-1: Manufacturer: syz [ 229.560215][ T3164] usb 5-1: SerialNumber: syz [ 229.622070][ T3164] usb 5-1: config 0 descriptor?? [ 229.756566][ T3164] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 229.801575][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.843428][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.974504][ T7473] cgroup: Need name or subsystem set [ 230.492893][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.530097][ T30] audit: type=1326 audit(1750176094.964:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 230.580212][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.753337][ T7482] 9pnet_fd: Insufficient options for proto=fd [ 231.097559][ T3164] gspca_stk1135: reg_w 0x0 err -110 [ 231.170380][ T5142] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 231.582969][ T3164] gspca_stk1135: serial bus timeout: status=0x00 [ 231.589356][ T3164] gspca_stk1135: Sensor write failed [ 231.595552][ T3164] gspca_stk1135: serial bus timeout: status=0x00 [ 231.601968][ T3164] gspca_stk1135: Sensor write failed [ 231.607301][ T3164] gspca_stk1135: serial bus timeout: status=0x00 [ 231.614170][ T3164] gspca_stk1135: Sensor read failed [ 231.619417][ T3164] gspca_stk1135: serial bus timeout: status=0x00 [ 231.625001][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.625796][ T3164] gspca_stk1135: Sensor read failed [ 231.641292][ T3164] gspca_stk1135: Detected sensor type unknown (0x0) [ 231.762740][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.813712][ T3164] gspca_stk1135: serial bus timeout: status=0x00 [ 231.934303][ T7489] 9pnet_fd: Insufficient options for proto=fd [ 232.070845][ T30] audit: type=1326 audit(1750176094.964:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.099847][ T30] audit: type=1326 audit(1750176094.974:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.123567][ T30] audit: type=1326 audit(1750176095.074:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.148242][ T30] audit: type=1326 audit(1750176095.074:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.171892][ T30] audit: type=1326 audit(1750176095.094:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.182467][ T3164] gspca_stk1135: Sensor read failed [ 232.195258][ T30] audit: type=1326 audit(1750176095.094:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.311343][ T3164] gspca_stk1135: serial bus timeout: status=0x00 [ 232.318793][ T7494] fuse: Bad value for 'fd' [ 232.329334][ T3164] gspca_stk1135: Sensor read failed [ 232.349941][ T3164] gspca_stk1135: serial bus timeout: status=0x00 [ 232.371709][ T30] audit: type=1326 audit(1750176095.094:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.373639][ T3164] gspca_stk1135: Sensor write failed [ 232.444929][ T3164] gspca_stk1135: serial bus timeout: status=0x00 [ 232.457460][ T30] audit: type=1326 audit(1750176095.104:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.460360][ T3164] gspca_stk1135: Sensor write failed [ 232.507978][ T30] audit: type=1326 audit(1750176095.104:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 232.597673][ T3164] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 232.748024][ T7505] fuse: Bad value for 'fd' [ 233.067938][ T7511] 9pnet_fd: Insufficient options for proto=fd [ 234.082600][ T5888] usb 5-1: USB disconnect, device number 16 [ 234.476502][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'. [ 234.645204][ T7525] 9pnet_fd: Insufficient options for proto=fd [ 236.590822][ T7532] netlink: 'syz.1.430': attribute type 2 has an invalid length. [ 236.605149][ T7532] batman_adv: batadv0: Interface deactivated: dummy0 [ 236.646619][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 236.646633][ T30] audit: type=1400 audit(1750176101.054:1262): avc: denied { read write } for pid=7531 comm="syz.1.430" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 236.702858][ T7528] netlink: 'syz.3.429': attribute type 15 has an invalid length. [ 236.710693][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 236.743036][ T30] audit: type=1400 audit(1750176101.054:1263): avc: denied { open } for pid=7531 comm="syz.1.430" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 236.795794][ T7532] batman_adv: batadv0: Removing interface: dummy0 [ 236.984771][ T7542] 9pnet_fd: Insufficient options for proto=fd [ 236.992524][ T30] audit: type=1326 audit(1750176101.424:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965d8e929 code=0x7ffc0000 [ 237.004928][ T7545] fuse: Bad value for 'fd' [ 237.102752][ T30] audit: type=1326 audit(1750176101.424:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965d8e929 code=0x7ffc0000 [ 237.282331][ T30] audit: type=1326 audit(1750176101.424:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8965d8e929 code=0x7ffc0000 [ 237.306238][ T30] audit: type=1326 audit(1750176101.424:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965d8e929 code=0x7ffc0000 [ 237.329991][ T30] audit: type=1326 audit(1750176101.424:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965d8e929 code=0x7ffc0000 [ 238.205723][ T30] audit: type=1326 audit(1750176101.424:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8965d8e929 code=0x7ffc0000 [ 238.348492][ T2985] Bluetooth: (null): Invalid header checksum [ 238.355230][ T2985] Bluetooth: (null): Invalid header checksum [ 238.362045][ T2985] Bluetooth: (null): Invalid header checksum [ 238.368118][ T2985] Bluetooth: (null): Invalid header checksum [ 238.375230][ T2985] Bluetooth: (null): Invalid header checksum [ 238.381411][ T2985] Bluetooth: (null): Invalid header checksum [ 238.387438][ T2985] Bluetooth: (null): Invalid header checksum [ 238.809410][ T7563] netlink: 68 bytes leftover after parsing attributes in process `syz.1.437'. [ 238.886047][ T7564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.436'. [ 239.191510][ T30] audit: type=1326 audit(1750176101.424:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965d8e929 code=0x7ffc0000 [ 239.222539][ T7555] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 239.370147][ T7560] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 239.655066][ T30] audit: type=1326 audit(1750176101.424:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8965d8e929 code=0x7ffc0000 [ 239.844380][ T7574] netlink: 44 bytes leftover after parsing attributes in process `syz.1.442'. [ 239.862795][ T7571] overlayfs: missing 'workdir' [ 239.952035][ T7574] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.180490][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 240.515496][ T7574] netlink: 56 bytes leftover after parsing attributes in process `syz.1.442'. [ 240.860532][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 241.601462][ T7594] net_ratelimit: 10 callbacks suppressed [ 241.601475][ T7594] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 241.623785][ T10] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 241.633075][ T10] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 241.642642][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 241.651927][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.679368][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 241.795100][ T7594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.804771][ T7594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.893442][ T10] gspca_sn9c2028: read1 error -71 [ 241.902466][ T10] gspca_sn9c2028: read1 error -71 [ 241.920488][ T10] gspca_sn9c2028: read1 error -71 [ 241.932825][ T10] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 241.990569][ T10] usb 4-1: USB disconnect, device number 12 [ 242.235369][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 242.235381][ T30] audit: type=1326 audit(1750176106.674:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 242.674435][ T30] audit: type=1326 audit(1750176106.674:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 243.055901][ T30] audit: type=1326 audit(1750176106.674:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 243.079756][ T30] audit: type=1326 audit(1750176106.674:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 243.110400][ T30] audit: type=1326 audit(1750176106.674:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 243.133973][ T30] audit: type=1326 audit(1750176106.674:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 243.157401][ T30] audit: type=1326 audit(1750176106.674:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 243.185269][ T30] audit: type=1326 audit(1750176106.674:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 243.849806][ T30] audit: type=1326 audit(1750176106.674:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 243.873622][ T30] audit: type=1326 audit(1750176106.674:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 244.078925][ T7612] FAULT_INJECTION: forcing a failure. [ 244.078925][ T7612] name failslab, interval 1, probability 0, space 0, times 1 [ 244.091771][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.0.451 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 244.091798][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.091808][ T7612] Call Trace: [ 244.091814][ T7612] [ 244.091821][ T7612] dump_stack_lvl+0x16c/0x1f0 [ 244.091855][ T7612] should_fail_ex+0x512/0x640 [ 244.091878][ T7612] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 244.091905][ T7612] should_failslab+0xc2/0x120 [ 244.091930][ T7612] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 244.091954][ T7612] ? getname_flags.part.0+0x4c/0x550 [ 244.091976][ T7612] getname_flags.part.0+0x4c/0x550 [ 244.091994][ T7612] ? getname_flags.part.0+0x2/0x550 [ 244.092015][ T7612] getname_flags+0x93/0xf0 [ 244.092037][ T7612] do_sys_openat2+0xb8/0x1d0 [ 244.092053][ T7612] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.092079][ T7612] __do_sys_openat2+0x1c0/0x2d0 [ 244.092096][ T7612] ? __pfx___do_sys_openat2+0x10/0x10 [ 244.092112][ T7612] ? ksys_write+0x1ac/0x250 [ 244.092143][ T7612] do_syscall_64+0xcd/0x4c0 [ 244.092171][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.092189][ T7612] RIP: 0033:0x7fc66158e929 [ 244.092204][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.092222][ T7612] RSP: 002b:00007fc65f3b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 244.092239][ T7612] RAX: ffffffffffffffda RBX: 00007fc6617b6160 RCX: 00007fc66158e929 [ 244.092252][ T7612] RDX: 0000200000000080 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 244.092263][ T7612] RBP: 00007fc65f3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 244.092274][ T7612] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 244.092285][ T7612] R13: 0000000000000000 R14: 00007fc6617b6160 R15: 00007ffdcf7b5218 [ 244.092315][ T7612] [ 245.280544][ T5888] kernel read not supported for file /input/event2 (pid: 5888 comm: kworker/1:4) [ 246.010352][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 246.189033][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.197965][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 246.210047][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 246.230144][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.246231][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.273575][ T5888] usb 4-1: config 0 descriptor?? [ 246.330955][ T5888] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 246.380594][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 246.400210][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 246.411409][ T10] usb 3-1: config 0 has no interface number 0 [ 246.423824][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.440485][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 246.450677][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 246.460004][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.469756][ T10] usb 3-1: Product: syz [ 246.475282][ T10] usb 3-1: Manufacturer: syz [ 246.480580][ T10] usb 3-1: SerialNumber: syz [ 246.488912][ T10] usb 3-1: config 0 descriptor?? [ 246.666949][ T7658] cgroup: Need name or subsystem set [ 246.782798][ T10] appletouch 3-1:0.85: Failed to read mode from device. [ 246.808809][ T10] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 246.984009][ T10] usb 4-1: USB disconnect, device number 13 [ 247.106179][ T5888] kernel read not supported for file /input/event2 (pid: 5888 comm: kworker/1:4) [ 247.128802][ T974] usb 3-1: USB disconnect, device number 7 [ 249.315005][ T7686] syz.4.471 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 249.468596][ T7694] tmpfs: Unknown parameter 'cta' [ 249.587258][ T7695] input: syz0 as /devices/virtual/input/input27 [ 249.758731][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 249.889022][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 249.904028][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 250.881492][ T7713] 9pnet_fd: Insufficient options for proto=fd [ 252.690533][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 252.690555][ T30] audit: type=1326 audit(1750176115.204:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 253.400132][ T30] audit: type=1326 audit(1750176115.204:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 253.589452][ T30] audit: type=1326 audit(1750176115.204:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 254.073284][ T30] audit: type=1326 audit(1750176115.214:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 254.097020][ T30] audit: type=1326 audit(1750176115.214:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 254.138145][ T30] audit: type=1326 audit(1750176115.214:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 254.312226][ T30] audit: type=1326 audit(1750176115.214:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 254.336154][ T30] audit: type=1326 audit(1750176115.234:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 254.371319][ T30] audit: type=1326 audit(1750176115.234:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 254.394626][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.903421][ T30] audit: type=1326 audit(1750176115.234:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7706 comm="syz.3.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 255.267030][ T5888] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 255.510896][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.517539][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.817156][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.485'. [ 256.370536][ T5888] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 256.383782][ T5888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 256.395306][ T5888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.407887][ T5888] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.824013][ T5888] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 256.850506][ T5888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 256.871106][ T5888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.897081][ T5888] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.935370][ T5888] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 256.967084][ T5888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 257.500512][ T5888] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.510536][ T5888] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.552968][ T5888] usb 4-1: string descriptor 0 read error: -71 [ 257.577783][ T5888] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 257.605960][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.634123][ T5888] usb 4-1: can't set config #168, error -71 [ 257.663635][ T5888] usb 4-1: USB disconnect, device number 14 [ 258.359764][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 258.359782][ T30] audit: type=1400 audit(1750176122.804:1410): avc: denied { read } for pid=7760 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 258.456333][ T30] audit: type=1400 audit(1750176122.904:1411): avc: denied { write } for pid=7764 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.630484][ T30] audit: type=1400 audit(1750176122.934:1412): avc: denied { setopt } for pid=7764 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.852832][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 259.373591][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.383308][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.117423][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.643874][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.658315][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.344732][ T7805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.852955][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 266.221332][ T7817] netlink: 'syz.2.506': attribute type 15 has an invalid length. [ 266.230300][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 266.634665][ T7826] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 266.782183][ T30] audit: type=1326 audit(1750176131.234:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 266.805503][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.209868][ T7834] 9pnet_fd: Insufficient options for proto=fd [ 267.898925][ T30] audit: type=1326 audit(1750176131.234:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 267.922191][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.929018][ T30] audit: type=1326 audit(1750176131.234:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 267.952324][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.958686][ T30] audit: type=1326 audit(1750176131.234:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 267.982162][ T30] audit: type=1326 audit(1750176131.234:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 268.005519][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.011655][ T30] audit: type=1326 audit(1750176131.234:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 268.034917][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.041434][ T30] audit: type=1326 audit(1750176131.234:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 268.065282][ T30] audit: type=1326 audit(1750176131.234:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 268.088567][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.094722][ T30] audit: type=1326 audit(1750176131.234:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 268.117991][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.124540][ T30] audit: type=1326 audit(1750176131.234:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 268.263256][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 269.167776][ T7826] batman_adv: batadv0: Interface deactivated: dummy0 [ 269.360690][ T7826] batman_adv: batadv0: Removing interface: dummy0 [ 269.906036][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.374473][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.386212][ T7875] netlink: 'syz.4.520': attribute type 10 has an invalid length. [ 271.506926][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.569585][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.578599][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.682457][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.689641][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.697938][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.705103][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.806807][ T7875] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 271.879144][ T7878] bridge_slave_1: left allmulticast mode [ 271.890733][ T7878] bridge_slave_1: left promiscuous mode [ 271.993502][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.012041][ T7878] bridge_slave_0: left allmulticast mode [ 272.809170][ T7878] bridge_slave_0: left promiscuous mode [ 272.816552][ T7878] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.974370][ T7878] bond0: (slave bridge0): Releasing backup interface [ 273.102061][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 273.102083][ T30] audit: type=1326 audit(1750176137.554:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 273.417958][ T30] audit: type=1326 audit(1750176137.584:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 273.797637][ T30] audit: type=1326 audit(1750176137.584:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 273.820903][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.153881][ T30] audit: type=1326 audit(1750176137.594:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 274.177403][ T30] audit: type=1326 audit(1750176137.594:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 274.201346][ T30] audit: type=1326 audit(1750176137.604:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 274.225108][ T30] audit: type=1326 audit(1750176137.604:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 274.248627][ T30] audit: type=1326 audit(1750176137.604:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 274.272592][ T30] audit: type=1326 audit(1750176137.604:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 274.456812][ T30] audit: type=1326 audit(1750176137.604:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 274.863085][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 276.581270][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 276.900441][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 277.758360][ T7948] input: syz1 as /devices/virtual/input/input28 [ 277.767965][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.535'. [ 277.800025][ T7948] input: failed to attach handler leds to device input28, error: -6 [ 278.108112][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 278.150444][ T7957] netlink: 68 bytes leftover after parsing attributes in process `syz.3.538'. [ 278.404164][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 278.527058][ T7953] ceph: No mds server is up or the cluster is laggy [ 278.977033][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 278.977045][ T30] audit: type=1400 audit(1750176143.424:1544): avc: denied { read open } for pid=7972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.221922][ T30] audit: type=1400 audit(1750176143.494:1545): avc: denied { getattr } for pid=7972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.230405][ T30] audit: type=1326 audit(1750176144.664:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 280.380473][ T30] audit: type=1326 audit(1750176144.664:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 280.458702][ T30] audit: type=1326 audit(1750176144.664:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 280.482515][ T30] audit: type=1326 audit(1750176144.664:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 280.506338][ T30] audit: type=1326 audit(1750176144.664:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 280.530070][ T30] audit: type=1326 audit(1750176144.664:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 281.290499][ T30] audit: type=1326 audit(1750176144.664:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 281.320508][ T30] audit: type=1326 audit(1750176144.674:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7fc00000 [ 282.503569][ T8011] fuse: Bad value for 'fd' [ 282.679566][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 282.842501][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.853047][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.121910][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.130744][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.147299][ T8012] 9pnet_fd: Insufficient options for proto=fd [ 283.211856][ T5890] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 283.568283][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.618846][ T8022] 9pnet_fd: Insufficient options for proto=fd [ 283.693851][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 285.053169][ T5890] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 285.066491][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.075078][ T5890] usb 5-1: Product: syz [ 285.079653][ T5890] usb 5-1: Manufacturer: syz [ 285.085101][ T5890] usb 5-1: SerialNumber: syz [ 285.102805][ T5890] usb 5-1: config 0 descriptor?? [ 285.114424][ T5890] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 285.133642][ T5890] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 285.327026][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 285.327044][ T30] audit: type=1400 audit(1750176149.774:1671): avc: denied { setopt } for pid=8010 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.369752][ T10] usb 5-1: USB disconnect, device number 17 [ 285.470330][ T30] audit: type=1400 audit(1750176149.894:1672): avc: denied { ioctl } for pid=8035 comm="syz.3.554" path="socket:[14606]" dev="sockfs" ino=14606 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 286.860493][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'. [ 286.942337][ T974] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 287.307132][ T8060] fuse: Unknown parameter 'use00000000000000000000' [ 287.511883][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.624084][ T30] audit: type=1400 audit(1750176152.064:1673): avc: denied { create } for pid=8062 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.655637][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.687405][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.258328][ T8067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.562'. [ 288.275845][ T974] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 288.282898][ T30] audit: type=1400 audit(1750176152.124:1674): avc: denied { ioctl } for pid=8062 comm="syz.1.561" path="socket:[14641]" dev="sockfs" ino=14641 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 288.309365][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.316196][ T30] audit: type=1400 audit(1750176152.134:1675): avc: denied { read write } for pid=8062 comm="syz.1.561" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.339583][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.345720][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.346609][ T30] audit: type=1400 audit(1750176152.134:1676): avc: denied { open } for pid=8062 comm="syz.1.561" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.358759][ T8067] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 288.376877][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.385463][ T30] audit: type=1400 audit(1750176152.134:1677): avc: denied { ioctl } for pid=8062 comm="syz.1.561" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.393016][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.481458][ T974] usb 3-1: config 0 descriptor?? [ 288.500320][ T30] audit: type=1326 audit(1750176152.904:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 288.523647][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.560304][ T30] audit: type=1326 audit(1750176152.904:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 288.598380][ T30] audit: type=1326 audit(1750176152.904:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 289.945557][ T8076] syz.3.565 (8076) used greatest stack depth: 20984 bytes left [ 290.510539][ T3164] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 290.766982][ T3164] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 290.888240][ T3164] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 291.063770][ T3164] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 291.178201][ T3164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.225675][ T974] usb 3-1: can't set config #0, error -71 [ 291.511600][ T3164] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 292.400277][ T974] usb 3-1: USB disconnect, device number 8 [ 292.525607][ T3164] gspca_sn9c2028: read1 error -110 [ 292.537665][ T3164] gspca_sn9c2028: read1 error -71 [ 292.543147][ T3164] gspca_sn9c2028: read1 error -71 [ 292.548521][ T3164] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -71 [ 293.451577][ T3164] usb 1-1: USB disconnect, device number 12 [ 294.566726][ T8102] fuse: Unknown parameter 'use00000000000000000000' [ 295.184126][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 295.752130][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 295.752160][ T30] audit: type=1400 audit(1750176160.094:1706): avc: denied { execute } for pid=8117 comm="syz.2.577" path="/111/file0" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 296.454214][ T30] audit: type=1400 audit(1750176160.894:1707): avc: denied { write } for pid=8126 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 296.570346][ T5890] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 296.744590][ T5890] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 296.762573][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.790309][ T5890] usb 1-1: Product: syz [ 296.794519][ T5890] usb 1-1: Manufacturer: syz [ 296.799109][ T5890] usb 1-1: SerialNumber: syz [ 296.832540][ T5890] usb 1-1: config 0 descriptor?? [ 296.862387][ T5890] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 297.059530][ T5890] gspca_sunplus: reg_r err -32 [ 299.530337][ T42] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 299.672523][ T3164] usb 1-1: USB disconnect, device number 13 [ 299.843915][ T42] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 299.883825][ T42] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 300.597380][ T42] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 300.607561][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.156337][ T42] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 301.344026][ T42] gspca_sn9c2028: read1 error -71 [ 301.351097][ T42] gspca_sn9c2028: read1 error -71 [ 301.369975][ T42] gspca_sn9c2028: read1 error -71 [ 301.383812][ T42] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 301.429202][ T42] usb 4-1: USB disconnect, device number 15 [ 301.493604][ T30] audit: type=1400 audit(1750176165.944:1708): avc: denied { mount } for pid=8178 comm="syz.2.593" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 301.570326][ T30] audit: type=1400 audit(1750176165.954:1709): avc: denied { mounton } for pid=8178 comm="syz.2.593" path="/115/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 301.757228][ T5890] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 301.965475][ T5888] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 301.970667][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 302.007551][ T5890] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.032961][ T5890] usb 3-1: config 0 has no interface number 0 [ 302.061692][ T5890] usb 3-1: config 0 interface 1 has no altsetting 0 [ 302.100299][ T5890] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 302.109879][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.129872][ T5890] usb 3-1: Product: syz [ 302.140157][ T5890] usb 3-1: Manufacturer: syz [ 302.160713][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.189553][ T5890] usb 3-1: SerialNumber: syz [ 302.191828][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.206759][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.222547][ T5888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.227049][ T5890] usb 3-1: config 0 descriptor?? [ 302.238356][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.260520][ T5888] usb 1-1: config 0 descriptor?? [ 302.280953][ T8192] fuse: Unknown parameter 'user_i00000000000000000000' [ 302.738174][ T5890] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 302.889439][ T8199] cgroup: Need name or subsystem set [ 303.116651][ T5890] usb 3-1: USB disconnect, device number 9 [ 305.495562][ T30] audit: type=1400 audit(1750176169.874:1710): avc: denied { create } for pid=8218 comm="syz.3.605" name="#41" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 306.330467][ T5874] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 306.506902][ T30] audit: type=1400 audit(1750176169.874:1711): avc: denied { link } for pid=8218 comm="syz.3.605" name="#41" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 306.619177][ T30] audit: type=1400 audit(1750176169.884:1712): avc: denied { rename } for pid=8218 comm="syz.3.605" name="#42" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 306.672843][ T5874] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 306.719687][ T5874] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 306.731061][ T30] audit: type=1400 audit(1750176169.974:1713): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 306.754987][ T5874] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 306.766049][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.775413][ T30] audit: type=1400 audit(1750176171.214:1714): avc: denied { map } for pid=8225 comm="syz.2.608" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 306.801810][ T30] audit: type=1400 audit(1750176171.214:1715): avc: denied { write execute } for pid=8225 comm="syz.2.608" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 306.841976][ T5874] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 306.876395][ T30] audit: type=1400 audit(1750176171.314:1716): avc: denied { create } for pid=8227 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.948790][ T30] audit: type=1400 audit(1750176171.314:1717): avc: denied { bind } for pid=8227 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.968826][ T30] audit: type=1400 audit(1750176171.314:1718): avc: denied { listen } for pid=8227 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.007108][ T30] audit: type=1400 audit(1750176171.314:1719): avc: denied { connect } for pid=8227 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.272576][ T5874] gspca_sn9c2028: read1 error -71 [ 307.333134][ T5874] gspca_sn9c2028: read1 error -71 [ 307.340366][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 307.343925][ T5874] gspca_sn9c2028: read1 error -71 [ 307.353526][ T5874] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 307.363030][ T30] audit: type=1400 audit(1750176171.324:1720): avc: denied { accept } for pid=8227 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.386203][ T5888] usbhid 1-1:0.0: can't add hid device: -32 [ 307.386348][ T5874] usb 4-1: USB disconnect, device number 16 [ 307.407820][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 307.568022][ T42] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 307.588592][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.598436][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.606896][ T42] usb 5-1: Product: syz [ 307.646001][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.658741][ T42] usb 5-1: Manufacturer: syz [ 307.667383][ T42] usb 5-1: SerialNumber: syz [ 307.700821][ T42] usb 5-1: config 0 descriptor?? [ 307.733873][ T42] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 308.231904][ T42] gspca_sunplus: reg_r err -32 [ 308.548694][ T8252] warning: `syz.3.615' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 309.041570][ T5888] usb 1-1: USB disconnect, device number 14 [ 309.177507][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 309.541119][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.549712][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.628055][ T8258] Bluetooth: MGMT ver 1.23 [ 309.652870][ T8258] fuse: Bad value for 'group_id' [ 309.660983][ T8258] fuse: Bad value for 'group_id' [ 309.790919][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.799449][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.814999][ T8255] 9pnet_fd: Insufficient options for proto=fd [ 310.026859][ T8267] netlink: 'syz.3.619': attribute type 27 has an invalid length. [ 310.158581][ T5890] usb 5-1: USB disconnect, device number 18 [ 311.179339][ T8277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7942 sclass=netlink_route_socket pid=8277 comm=syz.3.622 [ 312.110410][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 312.331900][ T10] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 312.915751][ T10] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 312.925205][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 312.934349][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.975604][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 313.211450][ T10] gspca_sn9c2028: read1 error -71 [ 313.222110][ T10] gspca_sn9c2028: read1 error -71 [ 313.237021][ T10] gspca_sn9c2028: read1 error -71 [ 313.249482][ T10] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71 [ 313.269048][ T10] usb 5-1: USB disconnect, device number 19 [ 313.943256][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.962612][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.450872][ T8319] netlink: 68 bytes leftover after parsing attributes in process `syz.4.633'. [ 314.715739][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 314.723233][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 314.921756][ T8316] ceph: No mds server is up or the cluster is laggy [ 315.158244][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 315.158266][ T30] audit: type=1326 audit(1750176179.604:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 316.832764][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 316.848541][ T30] audit: type=1326 audit(1750176179.634:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 316.938013][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.947251][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.960310][ T30] audit: type=1326 audit(1750176179.634:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 316.984127][ T30] audit: type=1326 audit(1750176179.644:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 317.137170][ T30] audit: type=1326 audit(1750176179.644:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 317.204776][ T30] audit: type=1326 audit(1750176179.644:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 317.259175][ T30] audit: type=1326 audit(1750176179.644:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 317.349426][ T30] audit: type=1326 audit(1750176179.644:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 317.398882][ T30] audit: type=1326 audit(1750176179.644:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 317.496646][ T30] audit: type=1326 audit(1750176179.644:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 317.533077][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 317.860322][ T3164] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 318.504604][ T5874] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 318.654970][ T3164] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.675302][ T3164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.683621][ T3164] usb 5-1: Product: syz [ 318.687914][ T3164] usb 5-1: Manufacturer: syz [ 318.692904][ T3164] usb 5-1: SerialNumber: syz [ 318.816858][ T5874] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 318.819818][ T3164] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.840751][ T5905] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 318.985171][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.645'. [ 319.242461][ T5874] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 319.260666][ T5874] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 319.316979][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.387628][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.719269][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.116694][ T5874] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 320.295196][ T5905] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 320.553557][ T5905] ath9k_htc: Failed to initialize the device [ 320.667796][ T5874] gspca_sn9c2028: read1 error -110 [ 320.673705][ T5874] gspca_sn9c2028: read1 error -32 [ 320.681096][ T5874] gspca_sn9c2028: read1 error -71 [ 321.224482][ T5874] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -71 [ 321.288001][ T5874] usb 3-1: USB disconnect, device number 10 [ 321.374379][ T5905] usb 5-1: ath9k_htc: USB layer deinitialized [ 321.443898][ T5888] usb 5-1: USB disconnect, device number 20 [ 321.663497][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 321.663513][ T30] audit: type=1326 audit(1750176186.114:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 321.847235][ T8373] 9pnet_fd: Insufficient options for proto=fd [ 323.925515][ T30] audit: type=1326 audit(1750176186.154:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 323.948991][ T30] audit: type=1326 audit(1750176186.154:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 323.973230][ T30] audit: type=1326 audit(1750176186.154:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 323.996935][ T30] audit: type=1326 audit(1750176186.154:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 324.021070][ T30] audit: type=1326 audit(1750176186.164:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 324.554457][ T30] audit: type=1326 audit(1750176186.164:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 324.588393][ T30] audit: type=1326 audit(1750176186.164:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 324.613106][ T30] audit: type=1326 audit(1750176186.184:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 324.636728][ T30] audit: type=1326 audit(1750176186.184:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9415d8e929 code=0x7ffc0000 [ 325.782846][ T3164] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 325.847617][ T8397] tc_dump_action: action bad kind [ 325.960453][ T3164] usb 4-1: Using ep0 maxpacket: 8 [ 326.302336][ T3164] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 326.326444][ T3164] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 326.352937][ T3164] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.366415][ T3164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.403261][ T3164] usb 4-1: Product: ᐄ [ 326.429349][ T3164] usb 4-1: Manufacturer: 倆熳᛹ג㼂흦髅㑳잩䅢燘锬䧿珌刘㝢抗镱榤玆욈ቐ薽뀔驿왧ﵳ鰍䟧ᖛﱾቷ옃骍䶗ﳤ絲孢娌菴ᓕ쪒롯鲅ѹ雴錔Ổ紮繸訉՚潊４ꪡ㈐勊濛羒퓸돘学鞬鮖ꢍ縤⅚芾ཧ╭縿㒽윏큐覦◽갨㒪䓙뿢㊞灓촻᳭ [ 326.957568][ T3164] usb 4-1: SerialNumber:   [ 327.046727][ T8425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.099652][ T8425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.124875][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.320331][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 327.352029][ T3164] cdc_ncm 4-1:1.0: bind() failure [ 327.471952][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.482685][ T10] usb 5-1: config 0 has no interfaces? [ 327.488200][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 327.516473][ T3164] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 327.525450][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.536337][ T3164] cdc_ncm 4-1:1.1: bind() failure [ 327.553840][ T3164] usb 4-1: USB disconnect, device number 17 [ 328.368762][ T10] usb 5-1: config 0 descriptor?? [ 329.244109][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 329.244129][ T30] audit: type=1400 audit(1750176193.684:1910): avc: denied { write } for pid=8427 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 330.423392][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 330.445901][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.456337][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.676581][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.686926][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.718433][ T8463] 9pnet_fd: Insufficient options for proto=fd [ 331.226975][ T42] usb 5-1: USB disconnect, device number 21 [ 332.353873][ T30] audit: type=1400 audit(1750176196.754:1911): avc: denied { bind } for pid=8482 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.960388][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 333.190550][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 333.194995][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805609fc00: rx timeout, send abort [ 333.199194][ T9] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 333.212568][ T30] audit: type=1400 audit(1750176197.654:1912): avc: denied { read } for pid=5174 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 333.238239][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 333.246209][ T9] usb 3-1: config 0 has no interface number 0 [ 333.259043][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 333.268288][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.279112][ T30] audit: type=1400 audit(1750176197.654:1913): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.301107][ T9] usb 3-1: Product: syz [ 333.308980][ T9] usb 3-1: Manufacturer: syz [ 333.314447][ T9] usb 3-1: SerialNumber: syz [ 333.322283][ T30] audit: type=1400 audit(1750176197.654:1914): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.322314][ T8510] netlink: 92 bytes leftover after parsing attributes in process `syz.4.673'. [ 333.343916][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.350034][ T30] audit: type=1400 audit(1750176197.654:1915): avc: denied { add_name } for pid=5174 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.381063][ T9] usb 3-1: config 0 descriptor?? [ 333.415088][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 333.431675][ T30] audit: type=1400 audit(1750176197.654:1916): avc: denied { create } for pid=5174 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.442063][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 333.453026][ T30] audit: type=1400 audit(1750176197.654:1917): avc: denied { append open } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.501233][ T10] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 333.523158][ T30] audit: type=1400 audit(1750176197.654:1918): avc: denied { getattr } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.524577][ T10] usb 1-1: config 0 has no interface number 0 [ 333.705026][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805609fc00: abort rx timeout. Force session deactivation [ 334.316938][ T9] libceph: connect (1)[c::]:6789 error -101 [ 334.325647][ T36] usb 3-1: Failed to submit usb control message: -71 [ 334.325912][ T42] usb 3-1: USB disconnect, device number 11 [ 334.355312][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 334.375987][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 334.385869][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.394668][ T36] usb 3-1: unable to send the bmi data to the device: -71 [ 334.410311][ T10] usb 1-1: Product: syz [ 334.414528][ T10] usb 1-1: Manufacturer: syz [ 334.429586][ T10] usb 1-1: SerialNumber: syz [ 334.429720][ T36] usb 3-1: unable to get target info from device [ 334.441692][ T10] usb 1-1: config 0 descriptor?? [ 334.451094][ T8521] ceph: No mds server is up or the cluster is laggy [ 334.516813][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 334.763366][ T36] usb 3-1: could not get target info (-71) [ 334.769288][ T36] usb 3-1: could not probe fw (-71) [ 334.875426][ T10] usb 1-1: USB disconnect, device number 15 [ 334.912688][ T49] usb 1-1: Failed to submit usb control message: -71 [ 334.929385][ T49] usb 1-1: unable to send the bmi data to the device: -71 [ 334.968064][ T49] usb 1-1: unable to get target info from device [ 334.996218][ T49] usb 1-1: could not get target info (-71) [ 335.013548][ T49] usb 1-1: could not probe fw (-71) [ 336.143760][ T30] audit: type=1326 audit(1750176199.614:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 336.167424][ T30] audit: type=1326 audit(1750176199.614:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 336.191708][ T30] audit: type=1326 audit(1750176199.614:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 336.215590][ T30] audit: type=1326 audit(1750176199.614:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 336.239304][ T30] audit: type=1326 audit(1750176199.614:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 336.276205][ T30] audit: type=1326 audit(1750176199.624:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 336.424835][ T30] audit: type=1326 audit(1750176199.624:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 336.650581][ T30] audit: type=1326 audit(1750176199.624:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 337.679597][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 337.736868][ T30] audit: type=1326 audit(1750176199.624:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 337.958181][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 338.652178][ T5888] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.692938][ T30] audit: type=1326 audit(1750176199.624:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 338.778538][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.938141][ T5888] usb 3-1: Product: syz [ 338.999688][ T5888] usb 3-1: Manufacturer: syz [ 339.038086][ T5888] usb 3-1: SerialNumber: syz [ 339.299286][ T5888] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 339.367400][ T5905] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 339.567529][ T8570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.686'. [ 339.722865][ T8574] tmpfs: Bad value for 'mpol' [ 340.139289][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.148076][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.163966][ T8557] 9pnet_fd: Insufficient options for proto=fd [ 340.460381][ T5905] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 340.479934][ T5905] ath9k_htc: Failed to initialize the device [ 341.015530][ T5905] usb 3-1: ath9k_htc: USB layer deinitialized [ 341.385332][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.691'. [ 341.707524][ T9] usb 3-1: USB disconnect, device number 12 [ 341.730407][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 341.833513][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 341.833530][ T30] audit: type=1400 audit(1750176206.284:1951): avc: denied { create } for pid=8605 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.560386][ T30] audit: type=1400 audit(1750176206.524:1952): avc: denied { create } for pid=8601 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 342.922887][ T30] audit: type=1400 audit(1750176206.554:1953): avc: denied { create } for pid=8601 comm="syz.3.693" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.945453][ T30] audit: type=1400 audit(1750176206.984:1954): avc: denied { ioctl } for pid=8605 comm="syz.1.694" path="socket:[16594]" dev="sockfs" ino=16594 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.995936][ T30] audit: type=1400 audit(1750176207.054:1955): avc: denied { bind } for pid=8605 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 343.082434][ T30] audit: type=1400 audit(1750176207.324:1956): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 343.360295][ T5905] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 343.530386][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 343.539385][ T5905] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 343.560416][ T5905] usb 1-1: config 0 has no interface number 0 [ 343.599868][ T5905] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 343.626816][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.647986][ T8633] netlink: 92 bytes leftover after parsing attributes in process `syz.4.697'. [ 343.664093][ T5905] usb 1-1: Product: syz [ 343.669264][ T5905] usb 1-1: Manufacturer: syz [ 343.682774][ T30] audit: type=1400 audit(1750176208.134:1957): avc: denied { append } for pid=8625 comm="syz.2.699" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.737416][ T5905] usb 1-1: SerialNumber: syz [ 343.751082][ T5905] usb 1-1: config 0 descriptor?? [ 343.773339][ T5905] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 343.990415][ T8469] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 344.010050][ T9] usb 1-1: USB disconnect, device number 16 [ 344.017730][ T3486] usb 1-1: Failed to submit usb control message: -71 [ 344.024735][ T3486] usb 1-1: unable to send the bmi data to the device: -71 [ 344.038627][ T3486] usb 1-1: unable to get target info from device [ 344.049580][ T3486] usb 1-1: could not get target info (-71) [ 344.066094][ T3486] usb 1-1: could not probe fw (-71) [ 344.160376][ T8469] usb 3-1: Using ep0 maxpacket: 8 [ 344.173100][ T8469] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 344.191092][ T8469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.199148][ T8469] usb 3-1: Product: syz [ 344.206177][ T8469] usb 3-1: Manufacturer: syz [ 344.211101][ T8469] usb 3-1: SerialNumber: syz [ 344.218134][ T8469] usb 3-1: config 0 descriptor?? [ 344.792822][ T8469] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 345.047821][ T30] audit: type=1400 audit(1750176209.494:1958): avc: denied { read write } for pid=8652 comm="syz.1.704" name="sg0" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 345.060400][ T8653] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 345.060400][ T8653] program syz.1.704 not setting count and/or reply_len properly [ 345.072822][ T30] audit: type=1400 audit(1750176209.494:1959): avc: denied { open } for pid=8652 comm="syz.1.704" path="/dev/sg0" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 345.173161][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 345.274630][ T30] audit: type=1400 audit(1750176209.494:1960): avc: denied { ioctl } for pid=8652 comm="syz.1.704" path="/dev/sg0" dev="devtmpfs" ino=745 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 345.606944][ T8469] gspca_sunplus: reg_w_riv err -110 [ 345.645419][ T8469] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 346.203035][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 346.509196][ T5905] usb 3-1: USB disconnect, device number 13 [ 346.655045][ T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 346.672467][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.700466][ T42] usb 4-1: Product: syz [ 346.710755][ T42] usb 4-1: Manufacturer: syz [ 346.725175][ T42] usb 4-1: SerialNumber: syz [ 346.728426][ T8666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.754900][ T42] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 346.769325][ T8469] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 346.845815][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.889679][ T8669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.906565][ T8665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.920177][ T8669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.939590][ T8668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.149415][ T8675] netlink: 92 bytes leftover after parsing attributes in process `syz.2.710'. [ 347.180498][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.189455][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.201861][ T8651] 9pnet_fd: Insufficient options for proto=fd [ 347.741597][ T8689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.715'. [ 347.836813][ T8689] tmpfs: Bad value for 'mpol' [ 347.849913][ T30] audit: type=1400 audit(1750176212.294:1961): avc: denied { create } for pid=8690 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 347.867313][ T8469] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 347.877797][ T8469] ath9k_htc: Failed to initialize the device [ 347.909462][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 347.911594][ T8469] usb 4-1: ath9k_htc: USB layer deinitialized [ 348.414062][ T10] usb 4-1: USB disconnect, device number 18 [ 348.779322][ T30] audit: type=1400 audit(1750176213.224:1962): avc: denied { create } for pid=8705 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 348.849885][ T30] audit: type=1400 audit(1750176213.254:1963): avc: denied { ioctl } for pid=8705 comm="syz.0.722" path="socket:[16975]" dev="sockfs" ino=16975 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 348.947435][ T8712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.988209][ T8712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.062416][ T8711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.170402][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 350.259782][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.306920][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.373113][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 350.689932][ T8469] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 350.861048][ T8738] cgroup: Need name or subsystem set [ 350.900519][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 350.928575][ T10] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 350.991614][ T8469] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 351.095722][ T10] usb 4-1: config 1 has no interface number 0 [ 351.105818][ T8469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.127033][ T8469] usb 3-1: Product: syz [ 351.132523][ T8469] usb 3-1: Manufacturer: syz [ 351.138442][ T8469] usb 3-1: SerialNumber: syz [ 351.167261][ T8469] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 351.167389][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 351.195946][ T42] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 351.236128][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 351.254091][ T10] usb 4-1: config 1 interface 105 has no altsetting 0 [ 351.277904][ T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 351.595158][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.605264][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.613936][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.624541][ T8734] 9pnet_fd: Insufficient options for proto=fd [ 351.645022][ T10] usb 4-1: Product: syz [ 351.649960][ T10] usb 4-1: Manufacturer: syz [ 351.665661][ T10] usb 4-1: SerialNumber: syz [ 351.740888][ T8726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.750362][ T8726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 352.235410][ T8726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 352.243377][ T8726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 352.522649][ T42] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 352.536217][ T42] ath9k_htc: Failed to initialize the device [ 352.569706][ T42] usb 3-1: ath9k_htc: USB layer deinitialized [ 352.716750][ T8756] binder: BINDER_SET_CONTEXT_MGR already set [ 352.722970][ T8756] binder: 8755:8756 ioctl 4018620d 200000000040 returned -16 [ 353.051339][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.735'. [ 353.477705][ T5861] usb 3-1: USB disconnect, device number 14 [ 353.506140][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 353.532733][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 353.656316][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 353.786322][ T8769] overlayfs: failed to resolve './file0': -2 [ 353.848340][ T10] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 353.884608][ T10] usb 4-1: USB disconnect, device number 19 [ 353.900011][ T10] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 354.812030][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 354.888540][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 354.905295][ T30] audit: type=1400 audit(1750176219.334:1964): avc: denied { create } for pid=8777 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 354.957957][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 354.993707][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.039193][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.074026][ T8779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.197730][ T5861] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 355.668141][ T8791] binder: 8790:8791 ioctl c0306201 2000000001c0 returned -14 [ 355.781722][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.821098][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.853383][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.893952][ T5861] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.920398][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.939136][ T5861] usb 5-1: config 0 descriptor?? [ 356.111868][ T8802] netlink: 'syz.2.743': attribute type 15 has an invalid length. [ 356.119827][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.743'. [ 356.473564][ T8803] cgroup: Need name or subsystem set [ 356.802885][ T5861] usbhid 5-1:0.0: can't add hid device: -71 [ 356.828782][ T5861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 356.847460][ T5861] usb 5-1: USB disconnect, device number 22 [ 356.912956][ T8807] fuse: Unknown parameter '0x0000000000000004' [ 357.006527][ T8813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.746'. [ 357.097972][ T8813] tmpfs: Bad value for 'mpol' [ 358.274914][ T8821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7942 sclass=netlink_route_socket pid=8821 comm=syz.0.747 [ 358.612507][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7942 sclass=netlink_route_socket pid=8831 comm=syz.3.750 [ 359.317530][ T8851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.813311][ T8855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.871525][ T8849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.209053][ T30] audit: type=1326 audit(1750176224.654:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 360.863367][ T30] audit: type=1326 audit(1750176224.684:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 360.990375][ T30] audit: type=1326 audit(1750176224.684:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 361.018133][ T30] audit: type=1326 audit(1750176224.684:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 361.042213][ T30] audit: type=1326 audit(1750176224.684:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 361.172907][ T30] audit: type=1326 audit(1750176224.684:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 361.223891][ T30] audit: type=1326 audit(1750176224.684:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 361.311762][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 361.650439][ T5905] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 361.880415][ T30] audit: type=1326 audit(1750176224.684:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 362.400963][ T30] audit: type=1326 audit(1750176224.694:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 362.427691][ T30] audit: type=1326 audit(1750176224.694:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 362.452948][ T5905] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 362.483529][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.498912][ T5905] usb 4-1: Product: syz [ 362.532424][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 362.533026][ T5905] usb 4-1: Manufacturer: syz [ 362.573473][ T5905] usb 4-1: SerialNumber: syz [ 362.635642][ T8884] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 362.782434][ T5905] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 362.801731][ T8469] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 362.811179][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.922362][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.934502][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.970413][ T974] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 362.999086][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.018570][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.061535][ T10] usb 1-1: config 0 descriptor?? [ 363.160416][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 363.169797][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.193767][ T974] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 363.219614][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.254785][ T974] usb 5-1: config 0 descriptor?? [ 363.277137][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.285992][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.333982][ T8897] cgroup: Need name or subsystem set [ 363.532057][ T974] usbhid 5-1:0.0: can't add hid device: -22 [ 363.754313][ T974] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 363.781475][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 363.804085][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 363.834136][ T10] usb 1-1: USB disconnect, device number 17 [ 364.052029][ T8469] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 364.069850][ T8469] ath9k_htc: Failed to initialize the device [ 364.890880][ T5888] usb 4-1: USB disconnect, device number 20 [ 364.920404][ T5888] usb 4-1: ath9k_htc: USB layer deinitialized [ 366.090067][ T8884] syz.4.760 (8884) used greatest stack depth: 19800 bytes left [ 366.117999][ T8469] usb 5-1: USB disconnect, device number 23 [ 366.138828][ T8917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7942 sclass=netlink_route_socket pid=8917 comm=syz.3.765 [ 369.377636][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 369.427413][ T5905] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 370.086636][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 370.086659][ T30] audit: type=1400 audit(1750176234.154:1993): avc: denied { connect } for pid=8929 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 370.115210][ T8469] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 370.421272][ T5905] usb 1-1: device descriptor read/64, error -71 [ 370.555612][ T8469] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 370.565556][ T8469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.707761][ T8469] usb 3-1: Product: syz [ 370.729725][ T8469] usb 3-1: Manufacturer: syz [ 370.745190][ T8469] usb 3-1: SerialNumber: syz [ 371.247150][ T8469] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 371.267526][ T42] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 372.188805][ T8931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.199725][ T8931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.793357][ T8964] FAULT_INJECTION: forcing a failure. [ 372.793357][ T8964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.811573][ T8964] CPU: 0 UID: 0 PID: 8964 Comm: syz.1.776 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 372.811593][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.811599][ T8964] Call Trace: [ 372.811603][ T8964] [ 372.811608][ T8964] dump_stack_lvl+0x16c/0x1f0 [ 372.811632][ T8964] should_fail_ex+0x512/0x640 [ 372.811658][ T8964] _copy_from_user+0x2e/0xd0 [ 372.811683][ T8964] keyctl_dh_compute+0xaa/0x140 [ 372.811709][ T8964] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 372.811737][ T8964] ? ksys_write+0x1ac/0x250 [ 372.811751][ T8964] ? __pfx_ksys_write+0x10/0x10 [ 372.811767][ T8964] __do_sys_keyctl+0x4df/0x590 [ 372.811784][ T8964] do_syscall_64+0xcd/0x4c0 [ 372.811804][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.811821][ T8964] RIP: 0033:0x7f901518e929 [ 372.811834][ T8964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.811850][ T8964] RSP: 002b:00007f9015fbb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 372.811866][ T8964] RAX: ffffffffffffffda RBX: 00007f90153b5fa0 RCX: 00007f901518e929 [ 372.811876][ T8964] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 372.811886][ T8964] RBP: 00007f9015fbb090 R08: 0000200000000180 R09: 0000000000000000 [ 372.811895][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.811904][ T8964] R13: 0000000000000000 R14: 00007f90153b5fa0 R15: 00007ffe52a69678 [ 372.811917][ T8964] [ 373.293730][ T8975] tmpfs: Bad value for 'mpol' [ 373.656782][ T8469] usb 3-1: USB disconnect, device number 15 [ 373.667826][ T42] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 373.684842][ T42] ath9k_htc: Failed to initialize the device [ 373.699086][ T8469] usb 3-1: ath9k_htc: USB layer deinitialized [ 374.279789][ T3164] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 374.400102][ T8983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.781'. [ 374.802879][ T3164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.856324][ T30] audit: type=1400 audit(1750176239.304:1994): avc: denied { write } for pid=8988 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 374.879872][ T8989] netlink: 'syz.0.782': attribute type 39 has an invalid length. [ 374.964952][ T3164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.974850][ T3164] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 374.987963][ T3164] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 374.998434][ T3164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.083043][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 375.489924][ T8992] syz.0.782: attempt to access beyond end of device [ 375.489924][ T8992] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 375.492266][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.512282][ T8992] XFS (nbd0): SB validate failed with error -5. [ 375.541267][ T3164] usb 5-1: config 0 descriptor?? [ 375.598348][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.742518][ T42] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 375.876127][ T9008] cgroup: Need name or subsystem set [ 376.088531][ T3164] usbhid 5-1:0.0: can't add hid device: -71 [ 376.112620][ T3164] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 376.153463][ T3164] usb 5-1: USB disconnect, device number 24 [ 376.275456][ T42] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.285343][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.293686][ T42] usb 3-1: Product: syz [ 376.298015][ T42] usb 3-1: Manufacturer: syz [ 376.303006][ T42] usb 3-1: SerialNumber: syz [ 376.315230][ T42] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 376.331493][ T5888] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.779540][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.789081][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.808563][ T5818] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 376.818557][ T30] audit: type=1400 audit(1750176241.254:1995): avc: denied { ioctl } for pid=9014 comm="syz.4.789" path="socket:[18072]" dev="sockfs" ino=18072 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 376.851681][ T30] audit: type=1400 audit(1750176241.304:1996): avc: denied { read } for pid=9012 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.971712][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.972500][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.769336][ T5888] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 377.769534][ T5888] ath9k_htc: Failed to initialize the device [ 378.500727][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.500811][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.921169][ T42] usb 3-1: USB disconnect, device number 16 [ 378.925633][ T42] usb 3-1: ath9k_htc: USB layer deinitialized [ 379.504069][ T9030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7942 sclass=netlink_route_socket pid=9030 comm=syz.4.792 [ 379.680489][ T42] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 379.833620][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.030305][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 380.231432][ T30] audit: type=1326 audit(1750176244.404:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 380.258124][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 380.271792][ T42] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.284677][ T30] audit: type=1326 audit(1750176244.404:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 380.535488][ T9046] netlink: 68 bytes leftover after parsing attributes in process `syz.3.796'. [ 380.779362][ T30] audit: type=1326 audit(1750176244.404:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 380.827119][ T9043] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 380.828242][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.849212][ T30] audit: type=1326 audit(1750176244.414:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 380.918289][ T42] usb 3-1: config 0 descriptor?? [ 380.957700][ T30] audit: type=1326 audit(1750176244.414:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 380.959551][ T42] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 380.994063][ T30] audit: type=1326 audit(1750176244.424:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 381.023444][ T30] audit: type=1326 audit(1750176244.424:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 381.046739][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.058184][ T30] audit: type=1326 audit(1750176244.424:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66158e929 code=0x7ffc0000 [ 381.058307][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.309987][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 381.717186][ T9054] cgroup: Need name or subsystem set [ 381.891400][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 381.891420][ T30] audit: type=1326 audit(1750176246.344:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 382.295958][ T30] audit: type=1326 audit(1750176246.374:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 382.425152][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.435110][ T10] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 382.444216][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.485375][ T30] audit: type=1326 audit(1750176246.374:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 382.529492][ T30] audit: type=1326 audit(1750176246.374:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 382.557981][ T10] usb 5-1: config 0 descriptor?? [ 382.733722][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.744008][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.654038][ T30] audit: type=1326 audit(1750176246.374:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 383.659227][ T5888] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 383.678063][ T30] audit: type=1326 audit(1750176246.484:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 383.708664][ T30] audit: type=1326 audit(1750176246.484:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 383.730325][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 383.780403][ T30] audit: type=1326 audit(1750176246.484:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 383.781952][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 383.803842][ T30] audit: type=1326 audit(1750176246.494:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 383.803893][ T30] audit: type=1326 audit(1750176246.494:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901518e929 code=0x7ffc0000 [ 383.984121][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.995338][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.010347][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.046347][ T5890] usb 3-1: USB disconnect, device number 17 [ 384.055738][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 384.065843][ T5888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.104744][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.128575][ T10] usb 5-1: USB disconnect, device number 25 [ 384.140870][ T9076] mmap: syz.2.803 (9076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 384.155465][ T3164] libceph: connect (1)[c::]:6789 error -101 [ 384.165927][ T3164] libceph: mon0 (1)[c::]:6789 connect error [ 384.174924][ T5888] usb 1-1: config 0 descriptor?? [ 384.210334][ T9081] Cannot find del_set index 2 as target [ 384.245066][ T9083] netlink: 68 bytes leftover after parsing attributes in process `syz.3.801'. [ 384.869410][ T9077] ceph: No mds server is up or the cluster is laggy [ 384.901430][ T9087] cgroup: Need name or subsystem set [ 384.914243][ T8469] libceph: connect (1)[c::]:6789 error -101 [ 384.969553][ T8469] libceph: mon0 (1)[c::]:6789 connect error [ 385.250051][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 385.275524][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 385.297754][ T5888] usb 1-1: USB disconnect, device number 20 [ 385.859326][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.869081][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.870258][ T5888] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 385.877750][ T9100] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 385.877750][ T9100] program syz.3.807 not setting count and/or reply_len properly [ 386.691031][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 386.749848][ T31] Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 [ 386.824231][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.883492][ T31] task:kworker/1:0 state:D stack:21656 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 387.060160][ T31] Workqueue: usb_hub_wq hub_event [ 387.095136][ T31] Call Trace: [ 387.114857][ T31] [ 387.145089][ T31] __schedule+0x116a/0x5de0 [ 387.245390][ T31] ? __lock_acquire+0x622/0x1c90 [ 387.313228][ T31] ? __pfx___schedule+0x10/0x10 [ 387.612940][ T31] ? find_held_lock+0x2b/0x80 [ 387.639227][ T31] ? schedule+0x2d7/0x3a0 [ 387.650046][ T31] schedule+0xe7/0x3a0 [ 387.658713][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 387.658724][ T30] audit: type=1400 audit(1750176252.104:2066): avc: denied { setopt } for pid=9094 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.686559][ T31] schedule_timeout+0x257/0x290 [ 387.691939][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 387.697372][ T31] ? mark_held_locks+0x49/0x80 [ 387.703735][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.708958][ T31] __wait_for_common+0x2fc/0x4e0 [ 387.715275][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 387.722891][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 387.728380][ T31] ? __pfx_device_del+0x10/0x10 [ 387.733496][ T31] ? kobject_put+0xab/0x5a0 [ 387.738003][ T31] i2c_del_adapter+0x546/0x6f0 [ 387.743065][ T31] ? usb_free_stream_buffers.isra.0+0x1b8/0x2b0 [ 387.749326][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 387.754750][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.759646][ T31] ? kfree+0x24f/0x4d0 [ 387.763840][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 387.768689][ T31] dvb_usb_device_exit+0x334/0x580 [ 387.773860][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 387.779646][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 387.781844][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 387.785162][ T31] cxusb_probe+0x1c9/0x7d0 [ 387.804229][ T31] ? mark_held_locks+0x49/0x80 [ 387.810737][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 387.815713][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.819594][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 387.822044][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 387.837298][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 387.838698][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 387.849596][ T5888] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 387.862865][ T31] usb_probe_interface+0x303/0x9c0 [ 387.864900][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.868078][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 387.876139][ T5888] usb 3-1: Product: syz [ 387.882178][ T31] really_probe+0x241/0xa90 [ 387.888138][ T5888] usb 3-1: Manufacturer: syz [ 387.890843][ T31] __driver_probe_device+0x1de/0x440 [ 387.895099][ T5888] usb 3-1: SerialNumber: syz [ 387.900713][ T5888] usb 3-1: config 0 descriptor?? [ 387.905368][ T31] driver_probe_device+0x4c/0x1b0 [ 387.914775][ T9092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 387.915442][ T31] __device_attach_driver+0x1df/0x310 [ 387.926662][ T5888] option 3-1:0.0: GSM modem (1-port) converter detected [ 387.927716][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 387.940833][ T31] bus_for_each_drv+0x159/0x1e0 [ 387.945859][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 387.954950][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.960633][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 387.966519][ T31] __device_attach+0x1e4/0x4b0 [ 387.972655][ T31] ? __pfx___device_attach+0x10/0x10 [ 387.977948][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 387.983244][ T31] bus_probe_device+0x17f/0x1c0 [ 387.988274][ T31] device_add+0x1148/0x1a70 [ 387.992920][ T31] ? __pfx_device_add+0x10/0x10 [ 387.997863][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 388.003346][ T31] usb_set_configuration+0x1187/0x1e20 [ 388.008869][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 388.014972][ T31] usb_generic_driver_probe+0xb1/0x110 [ 388.020799][ T31] usb_probe_device+0xef/0x3e0 [ 388.025571][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 388.030975][ T31] really_probe+0x241/0xa90 [ 388.035557][ T31] __driver_probe_device+0x1de/0x440 [ 388.040925][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 388.046457][ T31] driver_probe_device+0x4c/0x1b0 [ 388.052185][ T31] __device_attach_driver+0x1df/0x310 [ 388.057554][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 388.064754][ T31] bus_for_each_drv+0x159/0x1e0 [ 388.069670][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 388.075822][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 388.081128][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 388.087060][ T31] __device_attach+0x1e4/0x4b0 [ 388.091900][ T31] ? __pfx___device_attach+0x10/0x10 [ 388.097260][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 388.102617][ T31] bus_probe_device+0x17f/0x1c0 [ 388.107626][ T31] device_add+0x1148/0x1a70 [ 388.112280][ T31] ? __pfx_device_add+0x10/0x10 [ 388.117151][ T31] ? add_device_randomness+0xb7/0xf0 [ 388.122652][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 388.128564][ T31] usb_new_device+0xd07/0x1a20 [ 388.133644][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 388.138755][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 388.144129][ T31] ? mark_held_locks+0x49/0x80 [ 388.149265][ T31] hub_event+0x2eb7/0x4fa0 [ 388.155822][ T31] ? __pfx_hub_event+0x10/0x10 [ 388.160720][ T31] ? rcu_is_watching+0x12/0xc0 [ 388.165923][ T31] ? process_one_work+0x8a6/0x1b70 [ 388.171257][ T31] process_one_work+0x9cc/0x1b70 [ 388.176288][ T31] ? __pfx_process_one_work+0x10/0x10 [ 388.187068][ T31] ? assign_work+0x1a0/0x250 [ 388.196163][ T31] worker_thread+0x6c8/0xf10 [ 388.201229][ T31] ? __pfx_worker_thread+0x10/0x10 [ 388.206453][ T31] kthread+0x3c2/0x780 [ 388.212108][ T31] ? __pfx_kthread+0x10/0x10 [ 388.216747][ T31] ? rcu_is_watching+0x12/0xc0 [ 388.221785][ T31] ? __pfx_kthread+0x10/0x10 [ 388.226391][ T31] ret_from_fork+0x5d4/0x6f0 [ 388.231194][ T31] ? __pfx_kthread+0x10/0x10 [ 388.235796][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.240924][ T31] [ 388.244092][ T31] [ 388.244092][ T31] Showing all locks held in the system: [ 388.252000][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 388.257413][ T31] #0: ffff8880b843bc98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 388.267490][ T31] 5 locks held by kworker/1:0/24: [ 388.272563][ T31] #0: ffff888143adf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.283387][ T31] #1: ffffc900001e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.295283][ T31] #2: ffff8881447e5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 388.304260][ T31] #3: ffff8880621cf198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 388.313563][ T31] #4: ffff8880313da160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 388.322848][ T31] 1 lock held by khungtaskd/31: [ 388.327708][ T31] #0: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 388.337632][ T31] 3 locks held by kworker/u8:9/3486: [ 388.342970][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 388.354333][ T31] #1: ffffc9000d1b7d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 388.365149][ T31] #2: ffffffff9034d228 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 388.374440][ T31] 2 locks held by getty/5573: [ 388.379123][ T31] #0: ffff888032c650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 388.388979][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 388.399144][ T31] 4 locks held by udevd/5827: [ 388.403863][ T31] #0: ffff888077296d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 388.412818][ T31] #1: ffff8880322f8c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 388.422284][ T31] #2: ffff88807f090b48 (kn->active#18){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 388.431817][ T31] #3: ffff8880621cf198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 388.441172][ T31] 1 lock held by syz-executor/5830: [ 388.446365][ T31] #0: ffffffff8e5cfe78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 388.456466][ T31] 2 locks held by syz.2.806/9091: [ 388.461606][ T31] #0: ffffffff9034d228 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 388.470719][ T31] #1: ffffffff8e5cfe78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 388.480828][ T31] [ 388.483172][ T31] ============================================= [ 388.483172][ T31] [ 388.492121][ T31] NMI backtrace for cpu 0 [ 388.492139][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 388.492160][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.492172][ T31] Call Trace: [ 388.492179][ T31] [ 388.492187][ T31] dump_stack_lvl+0x116/0x1f0 [ 388.492220][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 388.492240][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 388.492266][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.492292][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 388.492313][ T31] watchdog+0xf70/0x12c0 [ 388.492337][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.492355][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 388.492380][ T31] ? __kthread_parkme+0x19e/0x250 [ 388.492407][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.492425][ T31] kthread+0x3c2/0x780 [ 388.492442][ T31] ? __pfx_kthread+0x10/0x10 [ 388.492459][ T31] ? rcu_is_watching+0x12/0xc0 [ 388.492482][ T31] ? __pfx_kthread+0x10/0x10 [ 388.492499][ T31] ret_from_fork+0x5d4/0x6f0 [ 388.492525][ T31] ? __pfx_kthread+0x10/0x10 [ 388.492541][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.492571][ T31] [ 388.492578][ T31] Sending NMI from CPU 0 to CPUs 1: [ 388.618676][ C1] NMI backtrace for cpu 1 [ 388.618691][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 388.618708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.618716][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 388.618741][ C1] Code: 6b 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 f0 29 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 388.618754][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 388.618766][ C1] RAX: 0000000001f580cf RBX: 0000000000000001 RCX: ffffffff8b801c19 [ 388.618776][ C1] RDX: 0000000000000000 RSI: ffffffff8de19da0 RDI: ffffffff8c1579e0 [ 388.618784][ C1] RBP: ffffed1003c5b488 R08: 0000000000000001 R09: ffffed10170a6645 [ 388.618793][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 388.618802][ C1] R13: ffff88801e2da440 R14: ffffffff90a81550 R15: 0000000000000000 [ 388.618810][ C1] FS: 0000000000000000(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 388.618824][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.618833][ C1] CR2: 00007f9015380ab8 CR3: 0000000078027000 CR4: 00000000003526f0 [ 388.618842][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.618851][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.618859][ C1] Call Trace: [ 388.618864][ C1] [ 388.618868][ C1] default_idle+0x13/0x20 [ 388.618881][ C1] default_idle_call+0x6d/0xb0 [ 388.618894][ C1] do_idle+0x391/0x510 [ 388.618913][ C1] ? __pfx_do_idle+0x10/0x10 [ 388.618929][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 388.618948][ C1] cpu_startup_entry+0x4f/0x60 [ 388.618964][ C1] start_secondary+0x21d/0x2b0 [ 388.618982][ C1] ? __pfx_start_secondary+0x10/0x10 [ 388.619000][ C1] common_startup_64+0x13e/0x148 [ 388.619017][ C1] [ 388.814429][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 388.821318][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 388.833121][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.843164][ T31] Call Trace: [ 388.846443][ T31] [ 388.849380][ T31] dump_stack_lvl+0x3d/0x1f0 [ 388.853974][ T31] panic+0x71c/0x800 [ 388.857866][ T31] ? __pfx_panic+0x10/0x10 [ 388.862275][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 388.867637][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.873607][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 388.878970][ T31] ? watchdog+0xdda/0x12c0 [ 388.883378][ T31] ? watchdog+0xdcd/0x12c0 [ 388.887784][ T31] watchdog+0xdeb/0x12c0 [ 388.892015][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.896677][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 388.901868][ T31] ? __kthread_parkme+0x19e/0x250 [ 388.906882][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.911545][ T31] kthread+0x3c2/0x780 [ 388.915600][ T31] ? __pfx_kthread+0x10/0x10 [ 388.920175][ T31] ? rcu_is_watching+0x12/0xc0 [ 388.924933][ T31] ? __pfx_kthread+0x10/0x10 [ 388.929508][ T31] ret_from_fork+0x5d4/0x6f0 [ 388.934090][ T31] ? __pfx_kthread+0x10/0x10 [ 388.938665][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.943436][ T31] [ 388.946639][ T31] Kernel Offset: disabled [ 388.950969][ T31] Rebooting in 86400 seconds..