last executing test programs: 17.529123239s ago: executing program 0 (id=1179): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[], 0x110}}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001553f89408060ab9d625d1203358b6460b535aec38a4edff9c73645e7697bcf019eb8c33463fc130a70a655aafdc4d45697629401f9ffffff44b6bdf9446ce7c5c5df3016973ea38d029238adb75ce2912a6d"], 0x7c}, 0x1, 0x0, 0x0, 0x64000000}, 0x0) 17.373929003s ago: executing program 0 (id=1182): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) 17.222963651s ago: executing program 0 (id=1183): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000001400)={0x8, {"e59fe52ff15838a5d84418aa21feb3660fc0ccfaf0a27a181493673ca2082b568209f22f4a4430406de74c933f7cb36d400b7bb77185c811071870b403725e1add80fda64d69d652acd043870de9ec6178122990582ac8f799c0ab45e7d53f2b8d5ec4d0b6a05ecad7b0af29b037feb40c0a9a991e24fada227f31fd4aaffd96e8b7153d60caa3770730901419f6ab30154f8bef015893bd56c5b74e38fd5f5527a8a694554948dcf1945adf5ed70cfd725279968e23e43e5ebf6880663de061f63fb2c448e7353908782b206153519097f1f7b4800162603038da4e5c080c06eae9933bd2e56265bf0f9ac46f4446b07d11ee03d3981c06e95fafe58a51889ce545aeeef90d8371bf81df88217630fdb2b45fd29daecdb51009bf46323e80c23fdab043e8098ebf0a59228e5629b900003a1ac57ab675baac8b6190af91a9a6d94c16d21bae3bae8ffc8aa2cdf672be3266525c4afacedc7dceb4d94039d61d5e6feadaf19567802d73f9cfdefacc37e36ca12984e34bc0bb6297d23a08547d7e80a51dab0a13526c76d41c3206bde17fb503a816ed26808a4961e001a8626a41d8d5a667f6dd2b70e2994b217025156d15c5191eca7c989ff8f7d8b8d13f37dedff2bb4fa12f66df8196af9f94c3a1634a50749a4ec37e1ca5a3721819c8b356469d72d597684a6c12be538c8eb53b187fff7fd184f31ef55a9aae4f07c2e98f900e9d838505b8daeb979d36a989b915cbfcd32c731d7fc63a47d25504f5f828e09ff2052f7d04ad992eb7a855fff9c22a99af94ed094546f728a605bb897495db4d1aaa7d719beccf214b89fa257b915362150bd666858ff0a09a9b1136575e189544b4829fa7219678d5d8f49fe6de2b69da7c6cae7b1494b09bd809514f40d69beb6eb523b8a808f6d64eed759589fa3717a2731c1a6adc2ad88e90209b617c5c5012ed40d250cdd16fc9ee0ada7c6a692ed12fed76ec1c288121619cb27431e57cb97d9553494e21a80fb6864b42787810e04a7b51e5107fe05f9d2bab597987b13f3ec6caaeacbabc69c449dd03e2369ecb6955be102360f651ece3dde4bf1454c81a60e4b24f39f8865b04353b09279dc067c36477426bfedb170b80f9c80c0c1daeac25f8f15aa826a6958dea20951ff3678fae3d87e78bc0b45ceae256656b94f653c854e1bc97ea4c6c078583df20b2c6835afa9cb4ab9c12970ac03f425c238f4725076e78c111cc0ee90cbdea33f38138b0b0e1ddab1459b6dfc08e6e52e30b2bb8d5362307c5919de0895b9b16a1e36fd0440999a567f8934ee29fcc53c5de21ac16f57ef8cf014e5301b4d9a64ae0cabea105a711a8a00b684966455bc338b01ae9e5ec067ced997f1e155b6a5f053d51b6e0205cb0643404cbe796031bf39ce7c8ba2db1e61d7eab615c219e9e65be50140f8dbb64cc2e8bb6d9889d95a895c6a1a96f8267760250f2a9d8321f44b3ffddaa27f1cac592e3142ec4773ef0cda2e60ef20b929fb86eca493ca75be02cc8cb9b6472c2ee5aebd387926ab65cb1fcc0fbdb741976f0746ae1d537f087144823ef8f0b9ead35fb98942162a5b87e5e45923aeb5526cbadd6bd126fd0400f0d5f4e40cec606c436c9abafef627086e549df98850013527909593d033fec5171b0fddd28c24e0533bcd6754593127f5c9f655522a08d7325a245b5d8292b64b19db6901a090559ac6b97f88e29ea88eb541adb80054786e994b341c1c772b4c4af9a80c410cd3cda56ba01ca1f83bde559acb76f4a26fabdfe03fe3996380d07c3f393bc4106b9e028bdad338bde380f1ee57e56a96fa7abf61f0759cd821e81e3ca2a91e303297682d82692afb498fc4eff5237a85011d55b8c3ea4c2ba41b3b365ee51a8be4a12e751fb7ce621abda758657ce360ccb5ecd09265dd30c1bc11f21f22c60fd53d4337e369d52506cc7985ce81667a3e27104c031e2c9681cf6a0b090150260a6c475e3c92f1d7c6607ffb9f766745c93ae565ecaa357f21fc36d316a58395dfe35cf6fc5d2f993b5a6526d94c8752e568ab79cf7280c176c7af85411f23537973465e4a2d86871506b1f1578a1e618ee656a56cbeb10619a38cc31c5efd9bc264778020624cdf32b89fbd2a14555aeaec635f1d0a2ad8f5401eff2511e68de75dc5dcb57c417b8e524fd42ec62bd905aba940264f714559cd914c6f726f7b5d7f0123b7bcb927d9d0866cfd0a77f7c83488cde428597ed064edc6e5b039cdc55ddbdf2b05a985fa10a6de116d46e276aab6e09f09ae1a472c0e90242bc9a6598813756a7bb0669d2bc6b8fa35aa2624e467e0cb155e105504971c04eb2dcfa86f79fc93870d2970b020492bb23b4bbce710eb28b2410494532a3642cb954cf476736e9c881ff08eedfbf48a584ce2ad16816a5a7b5590edcd895e2783375aa2aee1ed8ff9ce08b75b20c323f661800e46ef277537218777fb0b960e43fa8ab4fb71019462e5c9647e41865b7c6022c3530a1b50545111e65db86d8fb63945ae16b9caa3764b52debf3674415f1acdc03172212a480ef7c6982db8d5cf568163dc5528d908ee29c41f1f3ef46fd6e7e9e6ca453fd423e46414ca2e794e074bc56d9028ea8620955d25ffb93dea629969a53e1bc2b4792a66765fd009d57db270792691b3d7b7919b391a66859eb2b41108ea03eaf743d25eab5869621875dcbd9d11fa49e600a7a019e49c4f7f603edcfe284de6dfa2a144abf68f3e364e1ffcdb6c20a2e7145bc23bbb8fb3363c6202d15715c479c8d1aca0e00b174068122ff05e74d42f906c6d674357ef9e0d6581b2eae50bbc905fd8216639c4841c7bfc55a52bba770ef7f7f7f6ab0c7599b3b5aa616dbbd9d217b5ab41582bef0230161059f6687ffd9c6c4b7481ba17092ebe5990793d3447c22a7e44778364a29431168fcc4eb0cf13fe78998542f430e567ca71c1e79a0ef7cd50e23b9de20b995c5176eaa78cb3569cf3d1f442de98f23828bcbd33156f15d57c1524cb247849f73f71f388043ff77cb64a8e9635ae735e29c95ce1351d115f3c8579d8e51a1033223ca1c0a42f1db2d5185573da003e11366af612a364e10c8de0da5c794d258cb8cd434380659cb1eb8a07ec7528b4bab3cbfb2a41016b87c0de090bc16c95ea1646c18174d0660d7359ea40b1668cf697d1198a224ff571048348331d5da5c50baf8e6c08d60110087a81ebffdfc9531d30ddedfb8ba34b122e3966a1c28e3a2908fde5cbca60f5b19fcbb068d1bf56978ab461ce10eb59f5a9ac14e161bbdd904720630b3cff1d4b31687de4f4b0eb203e05036048471efa1e97c94d7ee5d0e8cc1634cd5373761ed73da7fe14defc566cc74f089ea9a4556161ba7c244718e1f360338e683dd51be05683e5e2387b7950ac3b96fbf68f9a6f205dfcb7125fb3529255cf5ee1207e6b79e9afdcf406fd777c75e48883328d0381938b25c5abb16f458c4338b2070c372ec4bf12b6cacac48ff7bcaacc0311bb93ed6a37992de1457fc2e1d29ca49237517e6e310daec42a31c8c5572f0165ecbbf2b69e242a18821b0f9ad9f01f5590c2c7a34c2aa3ed49865e1eaa2abd0687a8c83a1fcca4bf3de3c4f2575ddef691d17fa303c56f914ecd67bead6711e5ccb7129d4d893a2246f36ec88542dcf35b1510737505fc8a50e106905be88c1258303f05a51b0d52f13480324687e006d5191eb777032cba2e2aff565cd5474ca50af528e72b78b3aad2a0a96b20947b4092bc199363bb368a235f0b45af5d0abafa7f191fb2148ed22edcc1853a2c64b72c4202ba095bf54929457de82ef9294b1587047146603c7d5dfe687ea25aeb691e2e2c3102533cf919e64cce4c8437a427825d9041c98bed95c2e73e36b4eff331d92a1c1046887e742fdb65ead5e7e31a0419cb6095f2f4bf6a850ea4be747bd67df03ffd4c04d8d8e371308d16c3ab6c06371e642de0eeda7060ba6824c66ddf2eaad64d5e5c38eddba652c0424814baea6bc00d6882a5719970ce968133f79b82d5e5709687d81bff1e46f15bb3046b1d8b0560f5cc53b3fe476e39e417b5a3425d3f0bcccfe13b6d89303c53aa77dacabe83276bfe7974c27a0ace936837fef09ed50c0cea6f7872e7c9de3bd17a6deded820158afe765538d10490f9541c9f48db0e8ff9364b317a8d7ba078fd82d4b194061f760c4358fb245373787c2ff7af8762bc28483864fe1d8a220c3293e3a1e82b4f84575748346e8f9d3802e33c1e18dee3e70ae3d49158993f613c123b044a405c0138c7571a747ebdf5e6b259717ab5eebbbc89060d9ca9af7f73682e2b51f04ac6ebb93a3a8013839b19fbe8db1cafbde558a1cbbc5e07d5a07631271560c54ab9f59d7b1f5e81b95a9772620c727b2b406b6cf8a2b9bde215b2406f123a8ad13e2b28c0938a4a50ff5ddb171a533cdab159908733c3b233c4b659499e43ebebec08540dcac56a7faf11189b08765af3fe6f01929ded8eed0bde68a9c3e281f2e53ddde41083a96d186e69ae162e38e9bb990fdf5af759c5b67c570cf99a8ce3bf0c7f4e56e20c7c0ec98f6e4b21c7d1c259bb38bec878c83dc92c8285213eeef7d67243fab126d2d7155d557dd824dfb7268d48fc8e646048e7aad5ce1a3a27d10af7afece4fa5f8bd4013366a4df00b094cc1f359c641152a73e23a086e0b9b6919b708df7c2576511554af13c77241a578a1e061f4856fede9121c1e039487bbeb4cf3f9fc955d5d393c4c9d6642dd2a0389b327e0bdf388b38b4fec27cdb5b8b6115498d05a42ad31a2073110e4b1fccb95fd39c5bb68bb61d3f8901951be89e009692da45fe9aa2a844f70218d0af7be60e73f6c98e01fbbfbf58094de21e5689999e8755a12d859796071becea7067fdcec88098659d5f20425e6d3e94aff7d9f4563d969b4110b17de0e95658e1d2c258e259a747238b763a577d9886b95aa6e3d96bb1af4bbdb83570d5e20c94ef5ea1bf9894e4ea7ef33c2e9eedafde2d7cc519011f5eb46586f2b1dca9335e1c3b713d6885725c0ea8b3c86cc3560cf4ecc843890fdd8e829eeeaa03430901eff5998d181ace8af9f4f7331d8bfb7b719fbf8d96bd8059e21ab039a0c421525e934527d9de2a92e70e970e093266669af85310b13b01c6eae4a92eb4b13797e5926fb2f23c841792014572635bd537d806f4dfe620f7cf879ef95c38be7a74896abdf49aafe574cbc9bda4bc4cd1c64cf7066df5b02426735dcc32d3358d4d8a4f2c525c6a6a536df4a9d092ed2b169827915812d198c279773a959b47efed3f7f0db808715a519a5a4fc0cbd5426135e08c1d4cd957583c277eb0b17197f6baec44d06758bd8eb4667c18f1c8c74a72d36e246905ad53532c096a6687a948ee0dd7bd73c7d5db0c717f8c3dbf6840dd6b915349e4933cec7cf3d58f3e86b0c82cab90bc514da6ba04230fe8f13ae07432f04ab4ebf2e3e74f72cf57fc422208ba9c4ef1f60567ca73c7952b490d802a223869ff931b753bee09e3fa32b92def74c28da8050d85300f6d67c832552067744aa1966dddf282e987762cc2f70c13283d1ed561a860d9958139392859a95cbeef85b9088f929408ea1f72ffe7298479d5e8af5e275c8faeaf9019afa099b95700943d6d8d67badfde0cf7cff7fb2db4c85c4ee0b8003b2ab72f8deed512e8fd070bfcfade5151d99c84be47445383e7dbda5218fc8088fe938fed80548bcb25098542254a6e9704dc382e48409beebd00", 0x1000}}, 0x1006) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x8000) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) 15.09976757s ago: executing program 0 (id=1192): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 15.070702246s ago: executing program 0 (id=1193): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0xc000) 8.828460474s ago: executing program 1 (id=1228): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x7ffffffffffffd9, 0x80) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) poll(0x0, 0x0, 0xffffffff) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d17, &(0x7f0000000280)) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 8.728391733s ago: executing program 0 (id=1230): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) 8.429509106s ago: executing program 32 (id=1230): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) 8.262072787s ago: executing program 4 (id=1234): ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000100)={0x5, "446f04a5e2d3a79b5fbce4e9912adc1b91cba7da7c209a01bdd184a4d5f2cb97"}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 7.56009659s ago: executing program 4 (id=1235): socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000033c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x13c0, 0x325, 0x378, 0x13c0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0x110, 0x52020000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x400000000007, &(0x7f0000006680)) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002100)}, 0x0) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000001300)=[{0x0}], 0x1}, 0x9cdc2384016b48f8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b06, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.330997987s ago: executing program 2 (id=1237): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x23, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12, @void, @value}, 0x94) unshare(0x64000600) 6.096369933s ago: executing program 2 (id=1239): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x728, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x684, 0x1, [@m_pedit={0x138, 0xf, 0x0, 0x0, {{0xa}, {0x58, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x54, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xb5, 0x6, "bbdc7ea2da2f1eb1e211a264c1510a6d45c3d9f83a5b31d041daa0a2ba32360f7963c6518304d51cb8159b189ea4796aed972a1f24f3488457816a5772fe1659eac694a4896619f83d78466bf1c020fd88c498cf5fcafe1fc89b595619543b05218676c47fa7419bcaf00519257e82529b579c6d59b4dbafb81f0063d1a329edc678fb1bd2d60b94aa3dd9efee9b8178337cea9fd88ad28eefed7797ada46cce1b668a3372f753fb838a6e0047d7f7cad9"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x18c, 0xf, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3, 0xffffffffffffffff, 0x0, 0xa5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x21f2, 0x6, 0x4, 0x3, 0xfffffff7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x2, 0x5, 0xfffffff7, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x7, 0x5, 0x5, 0x2578f8ad}}]}, {0xd7, 0x6, "5823eda814ba6da4388af3389b43f64512c1b5728dca979fe00cb822ed8334ad6a0779fb147172a0af87adf7426983319b4e38ffa746541fd3e63334372ed5177e0b1bc3953e837139d9d9d2c5a8b9bce229b684cf35650eba6fb1464cbdf81b91d9960758a46978bc4286947c420eb57e49b4c0cc9826af5d396ff6489503181ce27d151aa1405808fe9a9c8a7f657d30062fb4a481f5d90752722a1cb4795040c1d8498d545e5b08bea2c2f9dd4945c663995aa301ddb09cf30244a9a559158cd80e35667833e272c7672640efd86165d636"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x10c, 0x9, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @random="161730b0971e"}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_TYPE={0x6, 0x5, 0xa9}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x0, 0x7ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}]}, {0x7f, 0x6, "849ab03ef33e907aaae1c4def68f6dfbe2f51fc17c7613a73dd46b8a61fda1710e6d0beef814732870191959eb759380ac8f33fd76f4e267e5852970b35b4db64694feccd0e91c9644004142883d67801f6142438945b3741812ef8b99c5d14c7fa27fe560ce8d33cf0affd220a7f6815f1f468c7fdd6cbcf15334"}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_ct={0x144, 0x8, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_ACTION={0x6, 0x3, 0x25}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xed, 0x6, "132a931e2cdc5ea55f1b2f7b3742ec7d5a879a0e6be8c3810dc16af219d2dfc3b4a37267af5b82cabc9a5785475e6461de16fb0dcca7ec07feb9b500ffe74d8116a630331bb9849ac4f2db245e222e9821606616e491255943968ca2e06d9eaa6c19a5b2c210cc00fa54ca65f79879d0b4f68ad78b5583639d775ce4ca9dbc73b3af790bfe420152af57246756a8948542351c8799f837423869d3e1dd38747a93152dbf62530d22c536c892783a20ff511d5a974b5ae7995c74e0b6899bcf57124a9e3374900e4b346e0c36fd80ed736c6c05c6819075cb26d51db9b6d3ed767418afb712db9da1d5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x16c, 0x1, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7, 0x5, 0x6, 0x6}, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x4, 0x5, 0x0, 0x2}, @multicast1, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb0eb, 0x2040000, 0x3, 0xc32, 0x5}, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x12}, 0xff000000}}]}, {0xcc, 0x6, "890c1899a1209207b1ae0f7f204193a697ffcc7a48db9ffd256afeb3e2479ee36304c010b0cb19cedbc33050f7723f8dadbd02f09412b355fa2572c440aa5630bdfdd1077ac567b53264c2158de39850fb9beab661be9e1786617eabecf67968f428a29ad51b274bdfaded33101bfa6169090ae6f797609197700ef260c0beb9c4812372890606563b8ac429521c3a3a31066acc2b5bcb38d5685a37902894781c89c09f6ac7e22a873820481b6a0d0f08a3dea3c2496bf1cabf1c4c201be0bb028a33e032ab19b7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x728}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(0x0, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x0, r3}]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.972813192s ago: executing program 4 (id=1240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xcc) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) writev(0xffffffffffffffff, &(0x7f0000001a80), 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x1) connect$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @none, 0x6}, 0xa) close(r1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000001a00)}], 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 5.243650398s ago: executing program 4 (id=1242): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1, "5605a5a5572a529a5700000000000800000000000000000000000000008000"}) syz_io_uring_setup(0x9a, &(0x7f0000000640)={0x0, 0x2556, 0x1000, 0x3, 0x109}, &(0x7f00000006c0), &(0x7f0000000280)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000040)={&(0x7f0000000340)=""/72, 0x48}) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) 5.183992802s ago: executing program 2 (id=1243): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) userfaultfd(0x80001) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 5.085781441s ago: executing program 1 (id=1244): ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000100)={0x5, "446f04a5e2d3a79b5fbce4e9912adc1b91cba7da7c209a01bdd184a4d5f2cb97"}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 4.967729655s ago: executing program 3 (id=1245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000002010101000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x2a, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb020018000000000000000000000000001e00020000000200"], 0x0, 0x1a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.773216077s ago: executing program 2 (id=1246): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$audio1(0xffffff9c, &(0x7f00000001c0), 0x129500, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r2 = syz_io_uring_setup(0x23c, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000200)='0', 0x1) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r8, 0x0, 0x0, 0x4) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) init_module(0x0, 0x78, &(0x7f0000000240)='\x00') syz_io_uring_submit(0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4.125352714s ago: executing program 4 (id=1247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES8=r0, @ANYRES64=r0, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x9, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a, @void, @value}, 0x94) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x3, 0x7ffc1ffb}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000080)) r6 = eventfd(0x37d) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6, 0xd}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0xbb5, 0x2, 0x0, 0x0, @msi={0x9, 0x70000000, 0x25cee92e, 0xffffe51d}}]}) 3.954501542s ago: executing program 3 (id=1248): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x20000000001005, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0xa, 0x3, 0x4) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xa4513f2520f6a866, 0x0) r4 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000280)=""/213, 0xd5, 0x40000100, &(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x160, 0x0) 2.664771676s ago: executing program 4 (id=1249): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x23, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12, @void, @value}, 0x94) unshare(0x64000600) 2.547612534s ago: executing program 3 (id=1250): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 2.456552757s ago: executing program 3 (id=1251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xcc) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) writev(0xffffffffffffffff, &(0x7f0000001a80), 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x1) connect$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @none, 0x6}, 0xa) close(r1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000001a00)}], 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0) 2.437429525s ago: executing program 2 (id=1252): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) socket$packet(0x11, 0x2, 0x300) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x3, "ee0700000000000000000200"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x4d7, &(0x7f0000000200)={0x0, 0x7a7b, 0x10000, 0x3, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.400809265s ago: executing program 3 (id=1253): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x7ffffffffffffd9, 0x80) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x40000000003}, {0xffffffff}}, 0x0) poll(0x0, 0x0, 0xffffffff) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d17, &(0x7f0000000280)) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.96319468s ago: executing program 2 (id=1254): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000001400)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x8000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r7], 0x2c}}, 0x0) 1.796187975s ago: executing program 1 (id=1255): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) userfaultfd(0x80001) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 1.155995403s ago: executing program 1 (id=1256): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1, "5605a5a5572a529a5700000000000800000000000000000000000000008000"}) syz_io_uring_setup(0x9a, &(0x7f0000000640)={0x0, 0x2556, 0x1000, 0x3, 0x109}, &(0x7f00000006c0), &(0x7f0000000280)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000040)={&(0x7f0000000340)=""/72, 0x48}) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) 781.884093ms ago: executing program 3 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000002010101000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x2a, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb020018000000000000000000000000001e00020000000200"], 0x0, 0x1a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 561.250931ms ago: executing program 1 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000640)="967e92889d81a1c3d392955f9b57", 0xe, 0x480d0, &(0x7f0000000080)={0x11, 0x11, r3, 0x1, 0x5, 0x6, @random="e20764f8183a"}, 0x14) 0s ago: executing program 1 (id=1259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x728, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x684, 0x1, [@m_pedit={0x138, 0xf, 0x0, 0x0, {{0xa}, {0x58, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x54, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xb5, 0x6, "bbdc7ea2da2f1eb1e211a264c1510a6d45c3d9f83a5b31d041daa0a2ba32360f7963c6518304d51cb8159b189ea4796aed972a1f24f3488457816a5772fe1659eac694a4896619f83d78466bf1c020fd88c498cf5fcafe1fc89b595619543b05218676c47fa7419bcaf00519257e82529b579c6d59b4dbafb81f0063d1a329edc678fb1bd2d60b94aa3dd9efee9b8178337cea9fd88ad28eefed7797ada46cce1b668a3372f753fb838a6e0047d7f7cad9"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x18c, 0xf, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3, 0xffffffffffffffff, 0x0, 0xa5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x21f2, 0x6, 0x4, 0x3, 0xfffffff7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x2, 0x5, 0xfffffff7, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x7, 0x5, 0x5, 0x2578f8ad}}]}, {0xd7, 0x6, "5823eda814ba6da4388af3389b43f64512c1b5728dca979fe00cb822ed8334ad6a0779fb147172a0af87adf7426983319b4e38ffa746541fd3e63334372ed5177e0b1bc3953e837139d9d9d2c5a8b9bce229b684cf35650eba6fb1464cbdf81b91d9960758a46978bc4286947c420eb57e49b4c0cc9826af5d396ff6489503181ce27d151aa1405808fe9a9c8a7f657d30062fb4a481f5d90752722a1cb4795040c1d8498d545e5b08bea2c2f9dd4945c663995aa301ddb09cf30244a9a559158cd80e35667833e272c7672640efd86165d636"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x10c, 0x9, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @random="161730b0971e"}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_TYPE={0x6, 0x5, 0xa9}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x0, 0x7ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}]}, {0x7f, 0x6, "849ab03ef33e907aaae1c4def68f6dfbe2f51fc17c7613a73dd46b8a61fda1710e6d0beef814732870191959eb759380ac8f33fd76f4e267e5852970b35b4db64694feccd0e91c9644004142883d67801f6142438945b3741812ef8b99c5d14c7fa27fe560ce8d33cf0affd220a7f6815f1f468c7fdd6cbcf15334"}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_ct={0x144, 0x8, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_ACTION={0x6, 0x3, 0x25}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xed, 0x6, "132a931e2cdc5ea55f1b2f7b3742ec7d5a879a0e6be8c3810dc16af219d2dfc3b4a37267af5b82cabc9a5785475e6461de16fb0dcca7ec07feb9b500ffe74d8116a630331bb9849ac4f2db245e222e9821606616e491255943968ca2e06d9eaa6c19a5b2c210cc00fa54ca65f79879d0b4f68ad78b5583639d775ce4ca9dbc73b3af790bfe420152af57246756a8948542351c8799f837423869d3e1dd38747a93152dbf62530d22c536c892783a20ff511d5a974b5ae7995c74e0b6899bcf57124a9e3374900e4b346e0c36fd80ed736c6c05c6819075cb26d51db9b6d3ed767418afb712db9da1d5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x16c, 0x1, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7, 0x5, 0x6, 0x6}, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x4, 0x5, 0x0, 0x2}, @multicast1, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb0eb, 0x2040000, 0x3, 0xc32, 0x5}, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x12}, 0xff000000}}]}, {0xcc, 0x6, "890c1899a1209207b1ae0f7f204193a697ffcc7a48db9ffd256afeb3e2479ee36304c010b0cb19cedbc33050f7723f8dadbd02f09412b355fa2572c440aa5630bdfdd1077ac567b53264c2158de39850fb9beab661be9e1786617eabecf67968f428a29ad51b274bdfaded33101bfa6169090ae6f797609197700ef260c0beb9c4812372890606563b8ac429521c3a3a31066acc2b5bcb38d5685a37902894781c89c09f6ac7e22a873820481b6a0d0f08a3dea3c2496bf1cabf1c4c201be0bb028a33e032ab19b7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x728}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(0x0, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x0, r3}]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): 29081.935:400): avc: denied { read } for pid=8063 comm="syz.3.576" name="cec3" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.685132][ T30] audit: type=1400 audit(1744829081.945:401): avc: denied { open } for pid=8063 comm="syz.3.576" path="/dev/cec3" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.021598][ T30] audit: type=1400 audit(1744829081.945:402): avc: denied { ioctl } for pid=8063 comm="syz.3.576" path="/dev/cec3" dev="devtmpfs" ino=963 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.195800][ T8091] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 206.607495][ T8091] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 206.869269][ T8098] input: syz1 as /devices/virtual/input/input6 [ 207.299305][ T30] audit: type=1400 audit(1744829083.565:403): avc: denied { write } for pid=8094 comm="syz.4.586" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.545361][ T30] audit: type=1400 audit(1744829085.245:404): avc: denied { write } for pid=8112 comm="syz.4.590" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 209.206954][ T5915] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.351030][ T5915] usb 5-1: device descriptor read/64, error -71 [ 209.610993][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 209.761016][ T5915] usb 5-1: device descriptor read/64, error -71 [ 209.928919][ T5915] usb usb5-port1: attempt power cycle [ 210.790996][ T5915] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 210.840104][ T5915] usb 5-1: device descriptor read/8, error -71 [ 211.161169][ T81] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 211.602722][ T81] usb 2-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 211.636055][ T81] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.085766][ T5915] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.185176][ T81] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 212.194384][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.249239][ T81] usb 2-1: config 0 descriptor?? [ 212.260329][ T8163] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.605'. [ 212.384410][ T5915] usb 5-1: device not accepting address 14, error -71 [ 212.788659][ T5915] usb usb5-port1: unable to enumerate USB device [ 212.812470][ T81] ath6kl: Failed to submit usb control message: -71 [ 212.830562][ T81] ath6kl: unable to send the bmi data to the device: -71 [ 212.848956][ T81] ath6kl: Unable to send get target info: -71 [ 212.867527][ T81] ath6kl: Failed to init ath6kl core: -71 [ 212.883760][ T81] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 212.928776][ T81] usb 2-1: USB disconnect, device number 5 [ 213.895441][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 214.030638][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 214.631917][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 215.179289][ T30] audit: type=1400 audit(1744829091.655:405): avc: denied { shutdown } for pid=8199 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.461380][ T30] audit: type=1400 audit(1744829092.165:406): avc: denied { create } for pid=8206 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 215.651993][ T5877] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.683703][ T5877] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 215.922029][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.142039][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.151178][ T5877] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.172476][ T5877] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.190760][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.191074][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 216.198968][ T5877] usb 2-1: Product: syz [ 216.210167][ T5877] usb 2-1: Manufacturer: syz [ 216.220570][ T5872] usb 3-1: config 0 has no interfaces? [ 216.231959][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.232337][ T5877] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 216.244972][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.487621][ T5872] usb 3-1: SerialNumber: syz [ 216.495299][ T5872] usb 3-1: config 0 descriptor?? [ 216.817442][ T8222] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 216.865647][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.618'. [ 216.879772][ T30] audit: type=1400 audit(1744829093.585:407): avc: denied { write } for pid=8206 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 216.907173][ T8208] Bluetooth: MGMT ver 1.23 [ 216.912758][ T8208] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 216.930330][ T8208] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 216.938457][ T8208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.618'. [ 217.016750][ T30] audit: type=1400 audit(1744829093.605:408): avc: denied { nlmsg_read } for pid=8206 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 217.031056][ T5872] usb 3-1: USB disconnect, device number 5 [ 217.193435][ T30] audit: type=1400 audit(1744829093.615:409): avc: denied { bind } for pid=8206 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.318886][ T8228] random: crng reseeded on system resumption [ 217.856901][ T8242] befs: (nullb0): No write support. Marking filesystem read-only [ 217.865865][ T8242] befs: (nullb0): invalid magic header [ 218.299670][ T5877] usb 2-1: USB disconnect, device number 6 [ 218.693642][ T1202] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 218.870983][ T1202] usb 3-1: Using ep0 maxpacket: 8 [ 219.191989][ T1202] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.200331][ T1202] usb 3-1: config 0 has no interface number 0 [ 219.218329][ T1202] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.290780][ T1202] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.334260][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.374428][ T1202] usb 3-1: config 0 descriptor?? [ 219.493211][ T1202] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 221.311017][ T1202] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.514707][ T910] usb 3-1: USB disconnect, device number 6 [ 221.652646][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.706509][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.761898][ T1202] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 221.820956][ T1202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.846278][ T1202] usb 1-1: config 0 descriptor?? [ 221.911645][ T8310] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.649'. [ 222.117145][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.149531][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.637909][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 222.673621][ T8300] dummy0: entered promiscuous mode [ 222.721834][ T8300] macvtap2: entered promiscuous mode [ 222.727489][ T8300] macvtap2: entered allmulticast mode [ 222.755865][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 222.802031][ T8300] dummy0: entered allmulticast mode [ 223.071265][ T1202] usbhid 1-1:0.0: can't add hid device: -71 [ 223.077278][ T1202] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 223.110226][ T1202] usb 1-1: USB disconnect, device number 9 [ 224.027425][ T8339] IPv6: NLM_F_REPLACE set, but no existing node found! [ 224.476473][ T8353] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 224.498441][ T910] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 225.424473][ T910] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.764018][ T910] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.779540][ T910] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.813887][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.899568][ T5915] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 225.942200][ T8342] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.955501][ T910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.082336][ T5915] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.115482][ T5915] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 226.146113][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.191231][ T5915] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.257848][ T910] usb 4-1: USB disconnect, device number 8 [ 226.273436][ T5915] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.304207][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.346691][ T5915] usb 5-1: Product: syz [ 226.361327][ T5915] usb 5-1: Manufacturer: syz [ 226.382356][ T5915] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 226.572004][ T6462] udevd[6462]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.472786][ T1202] usb 5-1: USB disconnect, device number 15 [ 231.309773][ T8443] netlink: 96 bytes leftover after parsing attributes in process `syz.4.686'. [ 231.338131][ T8440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.349387][ T30] audit: type=1400 audit(1744829108.045:410): avc: denied { mount } for pid=8437 comm="syz.1.684" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 233.981021][ T8440] syz.1.684 (8440): drop_caches: 2 [ 234.284356][ T8472] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.696'. [ 234.411411][ T30] audit: type=1400 audit(1744829111.115:411): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 235.117619][ T8489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.153418][ T30] audit: type=1400 audit(1744829111.865:412): avc: denied { ioctl } for pid=8488 comm="syz.1.700" path="socket:[18454]" dev="sockfs" ino=18454 ioctlcmd=0x534c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.202998][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.700'. [ 235.423217][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 236.097052][ T61] Bluetooth: hci5: Frame reassembly failed (-84) [ 236.176235][ T30] audit: type=1400 audit(1744829112.865:413): avc: denied { create } for pid=8508 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 236.414622][ T8517] netlink: 68 bytes leftover after parsing attributes in process `syz.0.709'. [ 238.096179][ T8541] overlayfs: failed to resolve './file0': -2 [ 238.103218][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 238.110985][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 241.439160][ T8575] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 242.030934][ T81] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 242.109136][ T8594] capability: warning: `syz.2.726' uses 32-bit capabilities (legacy support in use) [ 242.188329][ T81] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.205425][ T81] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.221897][ T30] audit: type=1400 audit(1744829118.925:414): avc: denied { mount } for pid=8593 comm="syz.2.726" name="/" dev="rpc_pipefs" ino=18563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 242.276845][ T30] audit: type=1400 audit(1744829118.935:415): avc: denied { setopt } for pid=8593 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.321240][ T81] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.351080][ T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.364749][ T8590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.375351][ T81] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.562703][ T8602] loop6: detected capacity change from 0 to 524287999 [ 242.673853][ C1] blk_print_req_error: 24 callbacks suppressed [ 242.673871][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.689229][ C1] buffer_io_error: 24 callbacks suppressed [ 242.689237][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.709548][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.718688][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.729488][ T81] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 242.803074][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.812291][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.821632][ T5915] usb 1-1: USB disconnect, device number 10 [ 242.838114][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.847289][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.861029][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.870210][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.886436][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.895630][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.902380][ T81] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 242.911732][ T81] usb 4-1: config 0 has no interface number 0 [ 242.919115][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.919697][ T81] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=c8.a9 [ 242.928381][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.931964][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.954348][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.962269][ T8602] ldm_validate_partition_table(): Disk read failed. [ 242.969336][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.970899][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.986433][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.000995][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.010143][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.052082][ T8602] Dev loop6: unable to read RDB block 0 [ 243.065335][ T81] usb 4-1: Product: syz [ 243.065907][ T8602] loop6: unable to read partition table [ 243.069577][ T81] usb 4-1: Manufacturer: syz [ 243.082326][ T81] usb 4-1: SerialNumber: syz [ 243.100770][ T81] usb 4-1: config 0 descriptor?? [ 243.106696][ T8602] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 243.135300][ T30] audit: type=1400 audit(1744829119.825:416): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 243.175702][ T5197] ldm_validate_partition_table(): Disk read failed. [ 243.193753][ T5197] Dev loop6: unable to read RDB block 0 [ 243.201745][ T5197] loop6: unable to read partition table [ 243.341405][ T81] ath6kl: Failed to submit usb control message: -71 [ 243.348191][ T81] ath6kl: unable to send the bmi data to the device: -71 [ 243.359445][ T81] ath6kl: Unable to send get target info: -71 [ 243.416975][ T81] ath6kl: Failed to init ath6kl core: -71 [ 243.431759][ T81] ath6kl_usb 4-1:0.12: probe with driver ath6kl_usb failed with error -71 [ 243.463871][ T81] usb 4-1: USB disconnect, device number 9 [ 243.915871][ T61] Bluetooth: hci5: Frame reassembly failed (-84) [ 243.963100][ T8633] netlink: 'syz.3.739': attribute type 12 has an invalid length. [ 244.470792][ T30] audit: type=1400 audit(1744829121.155:417): avc: denied { create } for pid=8638 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.636930][ T30] audit: type=1400 audit(1744829121.155:418): avc: denied { setopt } for pid=8638 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.592813][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 245.957693][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 246.422171][ T8659] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 246.432245][ T8659] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 247.109686][ T8667] input: syz1 as /devices/virtual/input/input7 [ 247.499432][ T8657] loop6: detected capacity change from 0 to 524287999 [ 247.536613][ T8657] ldm_validate_partition_table(): Disk read failed. [ 247.544490][ T8657] Dev loop6: unable to read RDB block 0 [ 247.550541][ T8657] loop6: unable to read partition table [ 247.558690][ T8657] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 247.650141][ T30] audit: type=1400 audit(1744829124.355:419): avc: denied { write } for pid=8671 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.865874][ T81] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 248.042483][ T81] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.514939][ T81] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 248.551112][ T81] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.576825][ T81] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 248.609634][ T81] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 248.643197][ T81] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.670948][ T81] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.695491][ T81] usb 5-1: Product: syz [ 248.709027][ T81] usb 5-1: Manufacturer: syz [ 248.749466][ T81] cdc_wdm 5-1:1.0: skipping garbage [ 248.805097][ T81] cdc_wdm 5-1:1.0: skipping garbage [ 248.811759][ T81] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 248.821739][ T81] cdc_wdm 5-1:1.0: Unknown control protocol [ 248.823259][ T8684] netlink: 'syz.0.754': attribute type 12 has an invalid length. [ 249.512501][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 249.593887][ T8696] syz.2.757: attempt to access beyond end of device [ 249.593887][ T8696] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 249.607551][ T8696] syz.2.757: attempt to access beyond end of device [ 249.607551][ T8696] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 249.620685][ T8696] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 249.631786][ T8696] syz.2.757: attempt to access beyond end of device [ 249.631786][ T8696] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 249.645573][ T8696] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 249.655193][ T8696] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 249.662993][ T8696] UDF-fs: Scanning with blocksize 512 failed [ 249.671424][ T8696] syz.2.757: attempt to access beyond end of device [ 249.671424][ T8696] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 249.684720][ T8696] syz.2.757: attempt to access beyond end of device [ 249.684720][ T8696] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 249.760686][ T8696] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 249.774660][ T8696] syz.2.757: attempt to access beyond end of device [ 249.774660][ T8696] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 249.788675][ T8696] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 249.798495][ T8696] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 249.806398][ T8696] UDF-fs: Scanning with blocksize 1024 failed [ 249.814257][ T8696] syz.2.757: attempt to access beyond end of device [ 249.814257][ T8696] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 249.828907][ T8696] syz.2.757: attempt to access beyond end of device [ 249.828907][ T8696] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 249.842469][ T8696] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 249.854413][ T8696] syz.2.757: attempt to access beyond end of device [ 249.854413][ T8696] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 249.867671][ T8696] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 249.877256][ T8696] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 249.885063][ T8696] UDF-fs: Scanning with blocksize 2048 failed [ 249.895249][ T8696] syz.2.757: attempt to access beyond end of device [ 249.895249][ T8696] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 249.908460][ T8668] netlink: 256 bytes leftover after parsing attributes in process `syz.4.748'. [ 249.922380][ T8696] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 249.942229][ T8696] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 249.955055][ T8696] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 249.965285][ T8696] UDF-fs: Scanning with blocksize 4096 failed [ 249.971559][ T8696] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 249.990589][ T9] usb 5-1: USB disconnect, device number 16 [ 250.364701][ T8704] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.350966][ T5915] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 251.425302][ T8716] input: syz1 as /devices/virtual/input/input8 [ 251.972787][ T5915] usb 4-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 251.998883][ T8710] IPVS: Error connecting to the multicast addr [ 252.047028][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.079973][ T5915] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 252.105820][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.196778][ T5915] usb 4-1: config 0 descriptor?? [ 252.318335][ T8704] syz.0.759 (8704): drop_caches: 2 [ 252.509836][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 252.781738][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.791587][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.541950][ T5915] ath6kl: Failed to submit usb control message: -110 [ 253.549073][ T5915] ath6kl: unable to send the bmi data to the device: -110 [ 253.557930][ T5915] ath6kl: Unable to send get target info: -110 [ 253.569633][ T5915] ath6kl: Failed to init ath6kl core: -110 [ 253.586041][ T5915] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 253.604520][ T910] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 253.664866][ T5874] usb 4-1: USB disconnect, device number 10 [ 253.912479][ T910] usb 3-1: Using ep0 maxpacket: 16 [ 253.924785][ T910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 254.443850][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 254.464123][ T910] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 254.489339][ T910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.508766][ T910] usb 3-1: Product: syz [ 254.521198][ T910] usb 3-1: Manufacturer: syz [ 254.530284][ T8746] netlink: 'syz.3.769': attribute type 12 has an invalid length. [ 254.538273][ T910] usb 3-1: SerialNumber: syz [ 254.612613][ T910] usb 3-1: config 0 descriptor?? [ 254.650540][ T30] audit: type=1400 audit(1744829131.345:420): avc: denied { mount } for pid=8741 comm="syz.0.768" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 254.806625][ T8751] sg_write: data in/out 11010100/1 bytes for SCSI command 0x26-- guessing data in; [ 254.806625][ T8751] program syz.1.770 not setting count and/or reply_len properly [ 254.843188][ T30] audit: type=1400 audit(1744829131.545:421): avc: denied { read } for pid=8731 comm="syz.2.765" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 254.843563][ T30] audit: type=1400 audit(1744829131.545:422): avc: denied { open } for pid=8731 comm="syz.2.765" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 254.843835][ T30] audit: type=1400 audit(1744829131.555:423): avc: denied { ioctl } for pid=8731 comm="syz.2.765" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 254.941288][ T910] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 254.942030][ T910] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 255.304869][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.317992][ T30] audit: type=1400 audit(1744829132.025:424): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.491654][ T5874] usb 3-1: USB disconnect, device number 7 [ 255.711095][ T8760] netlink: 'syz.4.772': attribute type 4 has an invalid length. [ 255.720920][ T8760] netlink: 'syz.4.772': attribute type 4 has an invalid length. [ 256.340938][ T30] audit: type=1400 audit(1744829133.045:425): avc: denied { setopt } for pid=8769 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 257.291560][ T8783] overlayfs: failed to resolve './file0': -2 [ 257.641607][ T5874] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 257.956634][ T5874] usb 3-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 257.989087][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.286624][ T5874] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 258.346649][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.397008][ T5874] usb 3-1: config 0 descriptor?? [ 258.550644][ T8795] netlink: 'syz.4.783': attribute type 12 has an invalid length. [ 258.629113][ T8781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.637792][ T8781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.660396][ T5874] ath6kl: Failed to submit usb control message: -71 [ 258.736733][ T5874] ath6kl: unable to send the bmi data to the device: -71 [ 258.885504][ T5874] ath6kl: Unable to send get target info: -71 [ 259.075393][ T5874] ath6kl: Failed to init ath6kl core: -71 [ 259.222751][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 259.243573][ T5874] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 259.398666][ T5874] usb 3-1: USB disconnect, device number 8 [ 259.495932][ T8812] netlink: 'syz.3.788': attribute type 4 has an invalid length. [ 259.568740][ T8813] netlink: 'syz.3.788': attribute type 4 has an invalid length. [ 260.016868][ T30] audit: type=1400 audit(1744829136.725:426): avc: denied { listen } for pid=8804 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.689168][ T8806] team0 (unregistering): Port device team_slave_0 removed [ 260.732647][ T8806] team0 (unregistering): Port device team_slave_1 removed [ 261.717359][ T8836] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 261.746201][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.794'. [ 261.790178][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 261.798703][ T30] audit: type=1400 audit(1744829138.495:427): avc: denied { ioctl } for pid=8838 comm="syz.2.795" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 262.161028][ T5877] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 262.351967][ T5877] usb 3-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 262.362923][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.382321][ T5877] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 262.400380][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.417016][ T5877] usb 3-1: config 0 descriptor?? [ 262.634094][ T8843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.644668][ T8843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.844443][ T5877] ath6kl: Failed to submit usb control message: -71 [ 262.856330][ T5877] ath6kl: unable to send the bmi data to the device: -71 [ 262.863643][ T5877] ath6kl: Unable to send get target info: -71 [ 262.884021][ T5877] ath6kl: Failed to init ath6kl core: -71 [ 262.890096][ T5877] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 263.015451][ T5877] usb 3-1: USB disconnect, device number 9 [ 263.411760][ T8864] netlink: 'syz.0.803': attribute type 4 has an invalid length. [ 263.486110][ T8865] netlink: 'syz.0.803': attribute type 4 has an invalid length. [ 266.030261][ T8893] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 267.481266][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 267.754516][ T30] audit: type=1400 audit(1744829144.455:428): avc: denied { setopt } for pid=8902 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.012562][ T8921] befs: (nullb0): No write support. Marking filesystem read-only [ 268.042717][ T8921] befs: (nullb0): invalid magic header [ 269.963882][ T8945] loop6: detected capacity change from 0 to 524287999 [ 269.972135][ C0] blk_print_req_error: 41 callbacks suppressed [ 269.972145][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.987393][ C0] buffer_io_error: 41 callbacks suppressed [ 269.987400][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.001182][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.010268][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.018197][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.027330][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.036399][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.045538][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.121580][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.130749][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.139287][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.148434][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.157294][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.166473][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.180920][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.190056][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.203064][ T8945] ldm_validate_partition_table(): Disk read failed. [ 270.210939][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.220101][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.245478][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.254650][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.275377][ T8945] Dev loop6: unable to read RDB block 0 [ 270.462284][ T8945] loop6: unable to read partition table [ 270.468034][ T8945] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 270.604551][ T5197] ldm_validate_partition_table(): Disk read failed. [ 270.612927][ T5197] Dev loop6: unable to read RDB block 0 [ 270.633150][ T5197] loop6: unable to read partition table [ 271.601161][ T30] audit: type=1400 audit(1744829148.035:429): avc: denied { read write } for pid=8955 comm="syz.0.826" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 271.820359][ T30] audit: type=1400 audit(1744829148.035:430): avc: denied { open } for pid=8955 comm="syz.0.826" path="/152/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 271.968790][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 273.243001][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 273.280171][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 273.307522][ T30] audit: type=1400 audit(1744829150.015:431): avc: denied { setopt } for pid=8999 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 273.972337][ T9006] netlink: 'syz.2.843': attribute type 4 has an invalid length. [ 274.000332][ T9006] netlink: 'syz.2.843': attribute type 4 has an invalid length. [ 274.434302][ T30] audit: type=1400 audit(1744829150.755:432): avc: denied { read } for pid=8994 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.656871][ T9036] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 275.866139][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.856'. [ 275.955438][ T9042] netlink: 'syz.0.855': attribute type 4 has an invalid length. [ 276.029380][ T9043] netlink: 'syz.0.855': attribute type 4 has an invalid length. [ 276.117874][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 277.018301][ T30] audit: type=1400 audit(1744829153.725:433): avc: denied { read } for pid=9051 comm="syz.0.859" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 278.206059][ T9068] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 278.347633][ T9068] bond1: entered promiscuous mode [ 278.353143][ T9068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.196036][ T9090] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 280.258359][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 280.984903][ T61] Bluetooth: hci5: Frame reassembly failed (-84) [ 282.722624][ T9145] overlayfs: failed to resolve './file1': -2 [ 283.064418][ T5838] Bluetooth: hci5: command 0x1003 tx timeout [ 283.076019][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 284.193921][ T9165] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 285.581199][ T9190] capability: warning: `syz.3.897' uses deprecated v2 capabilities in a way that may be insecure [ 286.563172][ T9209] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 287.627391][ T9235] random: crng reseeded on system resumption [ 288.351159][ T1142] Bluetooth: hci5: Frame reassembly failed (-84) [ 288.903913][ T30] audit: type=1400 audit(1744829165.605:434): avc: denied { name_bind } for pid=9246 comm="syz.4.909" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 289.019589][ T9258] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 289.582080][ T30] audit: type=1326 audit(1744829166.225:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 289.859100][ T30] audit: type=1326 audit(1744829166.225:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 289.861212][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 289.891126][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 289.900173][ T9258] syz.1.911 (9258): drop_caches: 2 [ 289.920397][ T30] audit: type=1326 audit(1744829166.225:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 290.203454][ T30] audit: type=1326 audit(1744829166.225:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 290.291005][ T30] audit: type=1326 audit(1744829166.225:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 290.454690][ T30] audit: type=1326 audit(1744829166.225:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 290.510329][ T30] audit: type=1326 audit(1744829166.225:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 290.537807][ T30] audit: type=1326 audit(1744829166.225:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 290.562642][ T30] audit: type=1326 audit(1744829166.225:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b4a58e169 code=0x7ffc0000 [ 290.679820][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'. [ 292.045943][ T9293] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 292.276649][ T9301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 292.301774][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 292.846356][ T9304] netlink: 'syz.2.923': attribute type 2 has an invalid length. [ 292.857000][ T9304] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.923'. [ 293.104454][ T9316] input: syz1 as /devices/virtual/input/input12 [ 294.365225][ T9344] random: crng reseeded on system resumption [ 294.454897][ T9318] sctp: [Deprecated]: syz.2.927 (pid 9318) Use of int in max_burst socket option. [ 294.454897][ T9318] Use struct sctp_assoc_value instead [ 294.485639][ T9350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.933'. [ 294.677766][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'. [ 294.686844][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 295.170073][ T9370] netlink: 'syz.1.931': attribute type 4 has an invalid length. [ 295.211870][ T5872] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 295.604891][ T5872] usb 5-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 295.615386][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.636348][ T9373] netlink: 'syz.1.931': attribute type 4 has an invalid length. [ 295.684630][ T5872] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 295.789592][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.833840][ T5872] usb 5-1: config 0 descriptor?? [ 296.138843][ T5872] ath6kl: Failed to submit usb control message: -71 [ 296.151467][ T5872] ath6kl: unable to send the bmi data to the device: -71 [ 296.159456][ T5872] ath6kl: Unable to send get target info: -71 [ 296.287018][ T5872] ath6kl: Failed to init ath6kl core: -71 [ 296.296939][ T5872] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 296.309443][ T5872] usb 5-1: USB disconnect, device number 17 [ 296.678623][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.944'. [ 297.178674][ T9402] overlayfs: failed to resolve './file0': -2 [ 298.280914][ T5877] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 298.542325][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 298.570161][ T5877] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 298.588388][ T5877] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 298.703685][ T5877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 298.728872][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 298.754561][ T5877] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 298.776732][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 298.831107][ T5877] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 298.850339][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.895057][ T5877] usb 1-1: config 0 descriptor?? [ 299.112305][ T5877] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 299.126674][ T5877] usb 1-1: USB disconnect, device number 11 [ 299.181732][ T5877] usblp0: removed [ 299.436511][ T9436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.956'. [ 299.660916][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 299.668657][ T5877] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 299.844752][ T9441] fuse: Bad value for 'fd' [ 299.855077][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 299.855088][ T30] audit: type=1400 audit(1744829176.545:465): avc: denied { create } for pid=9440 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 299.882282][ T9] usb 4-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 299.892714][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 299.935308][ T5877] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 299.953768][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.977084][ T5877] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 299.992317][ T30] audit: type=1400 audit(1744829176.685:466): avc: denied { ioctl } for pid=9440 comm="syz.1.958" path="socket:[20812]" dev="sockfs" ino=20812 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 300.001088][ T5877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 300.028134][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 300.054008][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.093968][ T9] usb 4-1: config 0 descriptor?? [ 300.112853][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.158486][ T5877] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 300.170230][ T30] audit: type=1400 audit(1744829176.745:467): avc: denied { setopt } for pid=9440 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 300.189240][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 300.210952][ T5877] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 300.227499][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.237778][ T30] audit: type=1400 audit(1744829176.755:468): avc: denied { write } for pid=9440 comm="syz.1.958" path="socket:[21630]" dev="sockfs" ino=21630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 300.267317][ T5877] usb 1-1: config 0 descriptor?? [ 300.334840][ T9] ath6kl: Failed to submit usb control message: -71 [ 300.354593][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 300.378991][ T9] ath6kl: Unable to send get target info: -71 [ 300.488040][ T5877] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 300.521510][ T9] ath6kl: Failed to init ath6kl core: -71 [ 300.527644][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 300.675144][ T9] usb 4-1: USB disconnect, device number 11 [ 300.706758][ T30] audit: type=1400 audit(1744829177.405:469): avc: denied { read write } for pid=9406 comm="syz.0.946" name="lp0" dev="devtmpfs" ino=2915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 300.730217][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.813465][ T30] audit: type=1400 audit(1744829177.405:470): avc: denied { open } for pid=9406 comm="syz.0.946" path="/dev/usb/lp0" dev="devtmpfs" ino=2915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 300.954946][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.971203][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.506925][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.526705][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'. [ 301.630470][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.652332][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.789724][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.809676][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.907369][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.918957][ T9] usb 1-1: USB disconnect, device number 12 [ 301.929927][ T9] usblp0: removed [ 302.031041][ T5915] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 302.205034][ T5915] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.432943][ T5915] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 302.476304][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.487296][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 302.514572][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 302.561941][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 302.639670][ T5915] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.676242][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.712510][ T5915] usb 2-1: Product: syz [ 302.716901][ T5915] usb 2-1: Manufacturer: syz [ 302.734988][ T5915] cdc_wdm 2-1:1.0: skipping garbage [ 302.746195][ T5915] cdc_wdm 2-1:1.0: skipping garbage [ 302.753110][ T5915] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 302.776823][ T30] audit: type=1400 audit(1744829179.485:471): avc: denied { getopt } for pid=9478 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.796746][ T30] audit: type=1400 audit(1744829179.485:472): avc: denied { write } for pid=9478 comm="syz.0.967" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 302.921289][ T30] audit: type=1400 audit(1744829179.485:473): avc: denied { ioctl } for pid=9478 comm="syz.0.967" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.814800][ T9495] loop6: detected capacity change from 0 to 524287999 [ 303.968296][ C0] blk_print_req_error: 24 callbacks suppressed [ 303.968316][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.983712][ C0] buffer_io_error: 24 callbacks suppressed [ 303.983728][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.010330][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.019593][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.032439][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.032471][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.038017][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.038050][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.044206][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.044235][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.049386][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.049416][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.050876][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.127767][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.140284][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.149450][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.157587][ T9495] ldm_validate_partition_table(): Disk read failed. [ 304.164892][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.174047][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.174632][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.191348][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.201797][ T9495] Dev loop6: unable to read RDB block 0 [ 304.209969][ T9495] loop6: unable to read partition table [ 304.216621][ T9495] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 304.234258][ T5197] ldm_validate_partition_table(): Disk read failed. [ 304.255853][ T5197] Dev loop6: unable to read RDB block 0 [ 304.267406][ T5197] loop6: unable to read partition table [ 304.291276][ T81] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 304.452595][ T81] usb 3-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 304.523763][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.537753][ T81] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 304.549154][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.022810][ T5872] usb 2-1: USB disconnect, device number 7 [ 305.037854][ T81] usb 3-1: config 0 descriptor?? [ 305.398012][ T81] ath6kl: Failed to submit usb control message: -71 [ 305.408569][ T9534] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 305.415735][ T81] ath6kl: unable to send the bmi data to the device: -71 [ 305.415757][ T81] ath6kl: Unable to send get target info: -71 [ 305.416350][ T81] ath6kl: Failed to init ath6kl core: -71 [ 305.423021][ T5877] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 305.443350][ T81] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 305.460710][ T81] usb 3-1: USB disconnect, device number 10 [ 305.715504][ T5877] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.724569][ T5877] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.740179][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.750233][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.750967][ T5948] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 305.761792][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.808855][ T5877] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.818702][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.827005][ T5877] usb 4-1: Product: syz [ 305.834228][ T5877] usb 4-1: Manufacturer: syz [ 305.853139][ T5877] cdc_wdm 4-1:1.0: skipping garbage [ 305.864931][ T5877] cdc_wdm 4-1:1.0: skipping garbage [ 305.878214][ T5877] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 305.889075][ T5877] cdc_wdm 4-1:1.0: Unknown control protocol [ 305.923500][ T5948] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.957100][ T5948] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 305.987919][ T5948] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.015960][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.255683][ T9538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.291033][ T5948] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.808867][ T9562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9562 comm=syz.0.984 [ 306.835765][ T5948] usb 2-1: USB disconnect, device number 8 [ 306.982064][ T9527] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 306.989775][ T9527] netlink: 208 bytes leftover after parsing attributes in process `syz.3.975'. [ 307.069859][ T81] usb 4-1: USB disconnect, device number 12 [ 307.193158][ T6462] udevd[6462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.559220][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 308.412075][ T9609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9609 comm=syz.3.995 [ 308.540999][ T5877] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 308.639382][ T9612] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 308.886986][ T81] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 308.965870][ T9618] overlayfs: failed to resolve './file0': -2 [ 308.983923][ T5877] usb 1-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 308.996586][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.009728][ T5877] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 309.019047][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.029467][ T5877] usb 1-1: config 0 descriptor?? [ 309.051022][ T81] usb 3-1: Using ep0 maxpacket: 16 [ 309.057562][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.067761][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 309.080756][ T81] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 309.089921][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.101555][ T81] usb 3-1: config 0 descriptor?? [ 309.111788][ T81] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 309.151026][ T5872] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 309.248870][ T5877] ath6kl: Failed to submit usb control message: -71 [ 309.257016][ T5877] ath6kl: unable to send the bmi data to the device: -71 [ 309.266930][ T5877] ath6kl: Unable to send get target info: -71 [ 309.274594][ T5877] ath6kl: Failed to init ath6kl core: -71 [ 309.284933][ T5877] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 309.299983][ T5877] usb 1-1: USB disconnect, device number 13 [ 309.311095][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 309.339952][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 309.392890][ T5872] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 309.408924][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 309.417960][ T5872] usb 2-1: Product: syz [ 309.422466][ T5872] usb 2-1: Manufacturer: syz [ 309.427074][ T5872] usb 2-1: SerialNumber: syz [ 309.435761][ T5872] usb 2-1: config 0 descriptor?? [ 309.453383][ T9617] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 309.581014][ T81] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 309.677228][ T9617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.686779][ T9617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.732767][ T81] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 309.741579][ T81] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 309.751908][ T81] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 309.761081][ T81] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 309.785947][ T81] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 309.806698][ T81] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 309.936511][ T81] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 309.964643][ T81] usb 5-1: Product: syz [ 309.969475][ T81] usb 5-1: Manufacturer: syz [ 310.042895][ T9636] random: crng reseeded on system resumption [ 310.125065][ T5948] usb 2-1: USB disconnect, device number 9 [ 310.132910][ T81] cdc_wdm 5-1:1.0: skipping garbage [ 310.141860][ T81] cdc_wdm 5-1:1.0: skipping garbage [ 310.152587][ T81] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 310.158529][ T81] cdc_wdm 5-1:1.0: Unknown control protocol [ 310.756787][ T30] audit: type=1400 audit(1744829187.465:474): avc: denied { name_bind } for pid=9644 comm="syz.3.1006" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 311.215249][ T9654] input: syz1 as /devices/virtual/input/input15 [ 311.719483][ T5877] usb 3-1: USB disconnect, device number 11 [ 311.846481][ T9655] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 311.872092][ T9655] netlink: 208 bytes leftover after parsing attributes in process `syz.4.999'. [ 311.928454][ T9659] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 312.726787][ T9672] overlayfs: missing 'lowerdir' [ 313.047947][ T9681] overlayfs: failed to resolve './file0': -2 [ 313.066638][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 313.214556][ T81] usb 5-1: USB disconnect, device number 18 [ 313.262387][ T5872] usb 2-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 313.363508][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.928227][ T5872] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 314.087353][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.131553][ T5872] usb 2-1: config 0 descriptor?? [ 314.360361][ T5872] ath6kl: Failed to submit usb control message: -71 [ 314.367253][ T5872] ath6kl: unable to send the bmi data to the device: -71 [ 314.374352][ T5872] ath6kl: Unable to send get target info: -71 [ 314.383340][ T5872] ath6kl: Failed to init ath6kl core: -71 [ 314.409883][ T5872] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 314.471132][ T5877] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 314.631065][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 314.670983][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 314.672524][ T5872] usb 2-1: USB disconnect, device number 10 [ 314.707294][ T5877] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 314.723533][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 314.753278][ T5877] usb 5-1: Product: syz [ 314.757494][ T5877] usb 5-1: Manufacturer: syz [ 314.783136][ T5877] usb 5-1: SerialNumber: syz [ 314.804085][ T5877] usb 5-1: config 0 descriptor?? [ 314.819305][ T9700] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 314.824640][ T9707] overlayfs: missing 'lowerdir' [ 314.855377][ T9704] loop6: detected capacity change from 0 to 524287999 [ 314.863405][ C0] blk_print_req_error: 24 callbacks suppressed [ 314.863421][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.878816][ C0] buffer_io_error: 24 callbacks suppressed [ 314.878830][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.908828][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.918039][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.070047][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.079238][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.081459][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.087666][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.103218][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.104564][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.758236][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.767503][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.776221][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.785394][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.793487][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.802688][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.811079][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 315.816768][ T9704] ldm_validate_partition_table(): Disk read failed. [ 315.819489][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.834544][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.842820][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.852031][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.870007][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.879226][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.908011][ T9704] Dev loop6: unable to read RDB block 0 [ 315.932824][ T9704] loop6: unable to read partition table [ 315.946992][ T9704] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 316.109885][ T5915] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.119678][ T5915] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 316.143048][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.261441][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 316.273204][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 316.295840][ T5872] usb 5-1: USB disconnect, device number 19 [ 316.314677][ T5915] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.333352][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.358922][ T5915] usb 4-1: Product: syz [ 316.376038][ T5915] usb 4-1: Manufacturer: syz [ 316.537711][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 316.548388][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 316.555760][ T9735] random: crng reseeded on system resumption [ 316.744666][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.050295][ T5915] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 317.056346][ T5915] cdc_wdm 4-1:1.0: Unknown control protocol [ 317.084349][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 318.035639][ T9714] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 318.050984][ T9714] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1028'. [ 318.142076][ T9757] overlayfs: failed to resolve './file0': -2 [ 318.166849][ T5877] usb 4-1: USB disconnect, device number 13 [ 318.376723][ T9765] overlayfs: missing 'workdir' [ 319.187689][ T9783] loop6: detected capacity change from 0 to 524287999 [ 319.493982][ T9783] ldm_validate_partition_table(): Disk read failed. [ 319.511942][ T9783] Dev loop6: unable to read RDB block 0 [ 319.527313][ T9783] loop6: unable to read partition table [ 319.561944][ T9783] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 320.570958][ T5877] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 320.639678][ T9812] overlayfs: missing 'workdir' [ 320.671323][ T30] audit: type=1400 audit(1744829197.365:475): avc: denied { write } for pid=9805 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.781030][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 320.793148][ T5877] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 320.845730][ T5877] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 320.866425][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 320.886956][ T5877] usb 3-1: Product: syz [ 320.894523][ T5877] usb 3-1: Manufacturer: syz [ 320.899636][ T5877] usb 3-1: SerialNumber: syz [ 321.432477][ T5877] usb 3-1: config 0 descriptor?? [ 321.438095][ T9804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.443937][ T9821] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 321.455847][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 321.673875][ T9804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.765727][ T9830] netlink: 'syz.4.1052': attribute type 4 has an invalid length. [ 321.906481][ T9831] netlink: 'syz.4.1052': attribute type 4 has an invalid length. [ 322.161227][ T9804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.865969][ T1202] usb 3-1: USB disconnect, device number 12 [ 323.782962][ T9876] overlayfs: missing 'workdir' [ 323.848389][ T9872] loop6: detected capacity change from 0 to 524287999 [ 323.870776][ C0] blk_print_req_error: 24 callbacks suppressed [ 323.870795][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.886235][ C0] buffer_io_error: 24 callbacks suppressed [ 323.886247][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.910073][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.919304][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.936122][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.945405][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.960052][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.969284][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.001450][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.010666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.019726][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.028987][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.038711][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.047920][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.104959][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.114201][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.122535][ T9872] ldm_validate_partition_table(): Disk read failed. [ 324.129386][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.138597][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.229030][ T9889] netlink: 'syz.0.1062': attribute type 12 has an invalid length. [ 324.268512][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.277728][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.341736][ T9872] Dev loop6: unable to read RDB block 0 [ 324.409413][ T9872] loop6: unable to read partition table [ 324.459724][ T9872] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 324.538293][ T5197] ldm_validate_partition_table(): Disk read failed. [ 324.555054][ T5197] Dev loop6: unable to read RDB block 0 [ 324.569546][ T5197] loop6: unable to read partition table [ 324.661576][ T30] audit: type=1326 audit(1744829201.365:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.311014][ T30] audit: type=1326 audit(1744829201.365:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.370925][ T30] audit: type=1326 audit(1744829201.405:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.403464][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 325.432280][ T30] audit: type=1326 audit(1744829201.405:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.456452][ T30] audit: type=1326 audit(1744829201.405:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.532276][ T30] audit: type=1326 audit(1744829201.405:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.556300][ T30] audit: type=1326 audit(1744829201.405:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.580123][ T30] audit: type=1326 audit(1744829201.405:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.620354][ T30] audit: type=1326 audit(1744829201.405:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f92ccd8e169 code=0x7ffc0000 [ 325.715626][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 325.715646][ T30] audit: type=1400 audit(1744829202.415:495): avc: denied { shutdown } for pid=9907 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 326.428797][ T9921] netlink: 'syz.0.1071': attribute type 2 has an invalid length. [ 326.498403][ T9921] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.1071'. [ 326.827053][ T9927] input: syz1 as /devices/virtual/input/input16 [ 328.246390][ T9931] loop6: detected capacity change from 0 to 524287999 [ 328.256702][ T9948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.277248][ T9931] ldm_validate_partition_table(): Disk read failed. [ 328.379920][ T9931] Dev loop6: unable to read RDB block 0 [ 328.404083][ T9931] loop6: unable to read partition table [ 328.420149][ T9931] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 331.514674][T10006] loop6: detected capacity change from 0 to 524287999 [ 331.522004][ C0] blk_print_req_error: 41 callbacks suppressed [ 331.522020][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.537325][ C0] buffer_io_error: 41 callbacks suppressed [ 331.537339][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.552404][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.561599][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.575518][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.584730][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.607221][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.616395][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.642923][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.652134][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.660861][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.670032][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.742395][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.751616][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.764715][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.773901][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.781859][T10006] ldm_validate_partition_table(): Disk read failed. [ 331.788685][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.797897][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.810983][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.820120][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.253183][T10006] Dev loop6: unable to read RDB block 0 [ 332.265660][T10006] loop6: unable to read partition table [ 332.398945][T10006] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 332.450923][ T5197] ldm_validate_partition_table(): Disk read failed. [ 332.531470][ T5197] Dev loop6: unable to read RDB block 0 [ 332.543770][ T5197] loop6: unable to read partition table [ 333.563148][T10034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1107'. [ 333.724979][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 333.971636][ T5915] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 333.984380][ T30] audit: type=1400 audit(1744829210.675:496): avc: denied { append } for pid=10048 comm="syz.0.1113" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 334.007673][ T30] audit: type=1400 audit(1744829210.675:497): avc: denied { write } for pid=10048 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 334.132337][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.149562][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.351176][ T5915] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 334.364901][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.429796][ T5915] usb 5-1: config 0 descriptor?? [ 334.680335][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.719140][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.763833][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 334.797069][T10061] loop6: detected capacity change from 0 to 524287999 [ 334.814715][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 334.824438][T10061] ldm_validate_partition_table(): Disk read failed. [ 334.831593][T10061] Dev loop6: unable to read RDB block 0 [ 334.837743][T10061] loop6: unable to read partition table [ 334.843570][T10061] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 334.904434][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 334.910466][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 334.928210][ T5915] usb 5-1: USB disconnect, device number 20 [ 335.990511][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 337.393443][T10101] befs: (nullb0): No write support. Marking filesystem read-only [ 337.402609][T10101] befs: (nullb0): invalid magic header [ 337.788840][ T30] audit: type=1400 audit(1744829214.495:498): avc: denied { read write } for pid=10106 comm="syz.4.1130" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 337.813084][ T30] audit: type=1400 audit(1744829214.495:499): avc: denied { open } for pid=10106 comm="syz.4.1130" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 337.951050][T10111] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.987424][ T30] audit: type=1400 audit(1744829214.625:500): avc: denied { append } for pid=10100 comm="syz.3.1131" name="v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.017071][ T30] audit: type=1400 audit(1744829214.655:501): avc: denied { write } for pid=10100 comm="syz.3.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 338.108571][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.263064][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.294107][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.297555][T10107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.370786][T10110] loop6: detected capacity change from 0 to 524287999 [ 338.409492][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.429048][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.437275][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.445355][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.456320][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.458799][ C0] blk_print_req_error: 41 callbacks suppressed [ 338.458814][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.464616][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.470294][ C0] buffer_io_error: 41 callbacks suppressed [ 338.470306][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.479948][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.534724][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.543935][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.554169][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.563381][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.639335][ T81] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 338.649827][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.652033][ T30] audit: type=1400 audit(1744829215.325:502): avc: denied { write } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.658991][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.688272][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.696327][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.704398][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.712585][T10107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.713565][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.724053][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.741443][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.750578][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.789989][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.799193][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.810153][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.819309][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.827248][T10110] ldm_validate_partition_table(): Disk read failed. [ 338.834841][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.844010][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.852368][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.863347][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.876694][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 338.879346][T10125] netlink: 'syz.2.1135': attribute type 4 has an invalid length. [ 338.885911][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 338.901853][ T81] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 338.911707][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.911758][T10110] Dev loop6: unable to read RDB block 0 [ 338.919449][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 338.955745][T10110] loop6: unable to read partition table [ 338.970238][ T30] audit: type=1400 audit(1744829215.325:503): avc: denied { remove_name } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.974685][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.011393][T10126] netlink: 'syz.2.1135': attribute type 4 has an invalid length. [ 339.021509][T10110] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 339.036848][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.042327][T10107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.046162][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.081412][ T81] usb 2-1: config 0 descriptor?? [ 339.106688][ T30] audit: type=1400 audit(1744829215.325:504): avc: denied { add_name } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.121160][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.184557][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.212857][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.213196][T10107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.240013][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.269669][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.301557][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.320598][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.327523][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.355200][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.365457][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.476154][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.486267][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.488641][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.495529][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.721696][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 339.778524][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 339.917722][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.932905][ T81] usbhid 2-1:0.0: can't add hid device: -71 [ 339.941738][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.949705][ T81] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 339.964653][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 339.972814][T10107] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.987372][ T81] usb 2-1: USB disconnect, device number 11 [ 339.993535][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.007691][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.022950][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.035267][T10107] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.049257][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.062420][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.064186][T10107] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.070360][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.088423][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.097218][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.105457][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.113448][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.129109][T10107] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.138705][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 340.153549][ T5874] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.346282][T10140] pim6reg: entered allmulticast mode [ 340.396611][T10140] pim6reg: left allmulticast mode [ 340.660523][T10145] syzkaller0: entered promiscuous mode [ 340.666853][T10145] syzkaller0: entered allmulticast mode [ 341.125131][ T30] audit: type=1400 audit(1744829217.485:505): avc: denied { name_connect } for pid=10143 comm="syz.4.1143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 341.276235][T10159] netlink: 'syz.0.1147': attribute type 12 has an invalid length. [ 341.905438][ T30] audit: type=1326 audit(1744829218.215:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 342.056666][ T30] audit: type=1326 audit(1744829218.215:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 342.087064][ T30] audit: type=1326 audit(1744829218.225:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 342.115263][ T30] audit: type=1326 audit(1744829218.225:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 342.141523][ T30] audit: type=1326 audit(1744829218.225:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 342.639087][ T30] audit: type=1326 audit(1744829218.225:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 342.662579][ T30] audit: type=1326 audit(1744829218.225:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 342.702172][ T30] audit: type=1326 audit(1744829218.225:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.3.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 342.991931][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.000675][T10178] netlink: 'syz.4.1153': attribute type 4 has an invalid length. [ 343.010950][T10178] netlink: 'syz.4.1153': attribute type 4 has an invalid length. [ 343.071045][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.078867][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.088860][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.116414][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.154014][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.178985][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.205311][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.221823][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.237561][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.257253][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.288927][T10181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.306139][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.324408][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 343.352583][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 343.363649][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.372242][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.380004][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.410995][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.441007][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.450928][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.469993][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.497992][T10181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.511610][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.521452][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.541185][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.552795][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.560588][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.585991][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.600024][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.609562][T10181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.620396][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.628538][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.647256][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.655316][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.670623][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.747600][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.767057][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.781237][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.789768][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.798051][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.806242][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.814200][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.822062][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.829900][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.838129][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.845941][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.853916][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 343.865517][T10181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.878738][ T5948] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 344.223110][T10181] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.520805][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 344.552737][T10181] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.553864][ T30] audit: type=1326 audit(1744829220.855:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.567991][T10181] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.641209][ T30] audit: type=1326 audit(1744829220.855:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.664975][ T30] audit: type=1326 audit(1744829220.855:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.669609][T10181] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.688492][ T30] audit: type=1326 audit(1744829220.855:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.688533][ T30] audit: type=1326 audit(1744829220.855:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.688568][ T30] audit: type=1326 audit(1744829220.855:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.688604][ T30] audit: type=1326 audit(1744829220.865:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.688638][ T30] audit: type=1326 audit(1744829220.865:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.688673][ T30] audit: type=1326 audit(1744829220.865:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 344.688709][ T30] audit: type=1326 audit(1744829220.865:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 345.728297][ T3440] Bluetooth: hci5: Frame reassembly failed (-84) [ 345.824118][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 346.002408][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.020697][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.020722][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 346.041912][T10244] random: crng reseeded on system resumption [ 346.101011][ T5915] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 346.119150][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.398557][ T5915] usb 3-1: config 0 descriptor?? [ 346.625379][T10237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.641262][T10237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.654218][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 346.664067][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 346.688838][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 346.718837][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 346.748551][ T5915] usb 3-1: USB disconnect, device number 13 [ 346.881941][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 346.893077][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 346.901789][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 346.909722][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 346.921603][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 346.929466][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.364558][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.372786][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.384972][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.393200][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.401224][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.409087][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.417414][T10258] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.429973][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.440933][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.454619][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.475903][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.492944][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.507980][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.517656][T10258] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.524056][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.547616][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.560934][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.571387][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.579404][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.587943][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.609632][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.624633][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.708627][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.719644][T10258] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.734148][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.746973][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.754873][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.765467][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 347.784774][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 347.798368][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 347.854842][T10267] befs: (nullb0): No write support. Marking filesystem read-only [ 347.863782][T10267] befs: (nullb0): invalid magic header [ 348.191998][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.200738][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.238126][T10258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.250787][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.262647][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.270482][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.306125][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.323552][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.333035][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.340870][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.348753][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.370191][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.390222][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 348.448869][T10258] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.492526][ T5904] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 348.502516][ T1202] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 348.519140][T10258] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.627137][T10258] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.782549][ T1202] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.782787][T10258] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.801893][ T1202] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 348.864899][T10282] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 349.026283][ T1202] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.044149][ T1202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.074389][T10271] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 349.099599][ T1202] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.339401][ T1202] usb 5-1: USB disconnect, device number 21 [ 349.471041][ T5877] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 349.664277][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.677359][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.688645][ T5877] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 349.708786][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.736389][ T5877] usb 2-1: config 0 descriptor?? [ 349.889301][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 349.889329][ T30] audit: type=1326 audit(1744829226.545:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 349.974689][T10288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.036055][T10288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.076340][ T30] audit: type=1326 audit(1744829226.545:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.147533][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1194'. [ 350.204935][ T30] audit: type=1326 audit(1744829226.555:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.228238][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.234774][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 350.244880][ T30] audit: type=1326 audit(1744829226.555:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.268928][ T30] audit: type=1326 audit(1744829226.555:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.292317][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.305331][T10300] random: crng reseeded on system resumption [ 350.400039][ T30] audit: type=1326 audit(1744829226.555:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.423788][ T30] audit: type=1326 audit(1744829226.555:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.447144][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.453432][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 350.459436][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 350.469564][ T30] audit: type=1326 audit(1744829226.555:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.492966][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.500391][ T5877] usb 2-1: USB disconnect, device number 12 [ 350.541036][ T30] audit: type=1326 audit(1744829226.555:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.564424][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.607529][ T30] audit: type=1326 audit(1744829226.555:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deab8e169 code=0x7ffc0000 [ 350.631023][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.816207][T10303] netlink: 'syz.4.1198': attribute type 4 has an invalid length. [ 350.828365][T10303] netlink: 'syz.4.1198': attribute type 4 has an invalid length. [ 351.712577][T10322] evm: overlay not supported [ 352.470967][ T5874] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 352.543038][T10337] random: crng reseeded on system resumption [ 352.990997][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 353.018458][T10340] syz.3.1212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 353.141109][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 353.150709][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 353.165651][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 353.178835][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 353.196526][ T9] usb 5-1: Product: syz [ 353.200718][ T9] usb 5-1: Manufacturer: syz [ 353.205680][ T9] usb 5-1: SerialNumber: syz [ 353.222250][ T9] usb 5-1: config 0 descriptor?? [ 353.230384][T10333] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 353.261358][T10344] input: syz1 as /devices/virtual/input/input18 [ 353.281743][ T5874] usb 2-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 353.292334][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.305926][ T5874] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 353.315628][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.338138][T10347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1215'. [ 353.347839][T10347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1215'. [ 353.409652][ T5874] usb 2-1: config 0 descriptor?? [ 353.446122][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.460776][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.744554][ T5874] ath6kl: Failed to submit usb control message: -71 [ 353.756118][ T5874] ath6kl: unable to send the bmi data to the device: -71 [ 353.763653][ T5874] ath6kl: Unable to send get target info: -71 [ 353.771610][ T5874] ath6kl: Failed to init ath6kl core: -71 [ 353.782829][ T5874] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 354.268472][ T5874] usb 2-1: USB disconnect, device number 13 [ 354.684606][ T5877] usb 5-1: USB disconnect, device number 22 [ 354.907908][T10378] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 355.472095][ T61] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.674567][ T61] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.485452][ T61] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.673976][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.691052][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.699537][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.713719][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.722929][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.748341][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.761229][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.775078][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.780626][ T61] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.803749][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.818454][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.860583][T10425] overlayfs: failed to resolve './file0': -2 [ 357.003719][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 357.003733][ T30] audit: type=1400 audit(1744829233.695:613): avc: denied { mounton } for pid=10419 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 357.242931][T10432] random: crng reseeded on system resumption [ 358.712843][T10451] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 358.782872][T10451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1241'. [ 359.038478][T10419] chnl_net:caif_netlink_parms(): no params data found [ 359.141008][ T5838] Bluetooth: hci0: command tx timeout [ 359.211223][T10459] syz.4.1242 (10459): drop_caches: 2 [ 359.439036][ T5873] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 359.497548][ T61] bridge_slave_1: left allmulticast mode [ 359.531371][ T61] bridge_slave_1: left promiscuous mode [ 359.621374][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.672722][ T5873] usb 2-1: device descriptor read/64, error -71 [ 359.726198][T10459] syz.4.1242 (10459): drop_caches: 2 [ 359.740350][ T61] bridge_slave_0: left allmulticast mode [ 359.751573][ T61] bridge_slave_0: left promiscuous mode [ 359.758134][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.030366][ T5873] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 360.321224][ T30] audit: type=1326 audit(1744829236.845:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.509861][ T30] audit: type=1326 audit(1744829236.855:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.533291][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.551404][ T5873] usb 2-1: device descriptor read/64, error -71 [ 360.553876][ T30] audit: type=1326 audit(1744829236.855:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.582083][ T30] audit: type=1326 audit(1744829236.855:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.629649][ T30] audit: type=1326 audit(1744829236.855:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.656987][ T30] audit: type=1326 audit(1744829236.855:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.685097][ T30] audit: type=1326 audit(1744829236.855:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.719954][ T30] audit: type=1326 audit(1744829236.855:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.723312][ T5873] usb usb2-port1: attempt power cycle [ 360.751485][ T30] audit: type=1326 audit(1744829236.855:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cf758e169 code=0x7ffc0000 [ 360.865082][T10485] random: crng reseeded on system resumption [ 361.241602][ T5838] Bluetooth: hci0: command 0x041b tx timeout [ 361.324084][ T5873] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 361.338257][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.354599][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.364376][ T5873] usb 2-1: device descriptor read/8, error -71 [ 361.378243][ T61] bond0 (unregistering): Released all slaves [ 361.422260][T10476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.481560][T10476] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 361.566184][ T61] IPVS: stopping master sync thread 6372 ... [ 361.611017][ T5873] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 361.641387][ T5873] usb 2-1: device descriptor read/8, error -71 [ 361.766141][ T5873] usb usb2-port1: unable to enumerate USB device [ 362.077061][T10419] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.114885][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.122190][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.130761][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.142964][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.169741][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.172706][T10419] bridge_slave_0: entered allmulticast mode [ 362.204215][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.222277][T10419] bridge_slave_0: entered promiscuous mode [ 362.228483][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.244389][T10419] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.307844][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.314965][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.314990][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.315007][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.315025][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.315042][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.315060][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.488558][T10511] overlayfs: failed to resolve './file0': -2 [ 362.836776][T10419] bridge_slave_1: entered allmulticast mode [ 362.844673][T10419] bridge_slave_1: entered promiscuous mode [ 362.895937][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.921893][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.930656][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.941304][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.949980][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.959799][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.972822][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.980653][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.990767][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 362.998778][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.009407][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.038195][T10514] syz.1.1256 (10514): drop_caches: 2 [ 363.044102][T10514] syz.1.1256 (10514): drop_caches: 2 [ 363.072482][T10505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.078541][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.157540][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.177855][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.187947][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.208176][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.228568][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.248177][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.277657][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.304139][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.312996][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.320761][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.328636][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.339881][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.347712][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.376154][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.402875][T10505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.422725][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.437149][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.446083][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.466660][T10419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.487921][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.935624][T10419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.945575][ T9] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 363.955287][ T9] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.018245][ T61] hsr_slave_0: left promiscuous mode [ 364.031069][ T61] hsr_slave_1: left promiscuous mode [ 364.038433][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.049066][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.108093][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.117339][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.164648][ T61] [ 364.167040][ T61] ============================================ [ 364.173199][ T61] WARNING: possible recursive locking detected [ 364.179345][ T61] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 364.186437][ T61] -------------------------------------------- [ 364.192565][ T61] kworker/u8:4/61 is trying to acquire lock: [ 364.198531][ T61] ffff8880132f8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0xa2/0x260 [ 364.208534][ T61] [ 364.208534][ T61] but task is already holding lock: [ 364.215873][ T61] ffff8880132f8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x14a1/0x25a0 [ 364.227527][ T61] and the lock comparison function returns 0: [ 364.233569][ T61] [ 364.233569][ T61] other info that might help us debug this: [ 364.241602][ T61] Possible unsafe locking scenario: [ 364.241602][ T61] [ 364.249037][ T61] CPU0 [ 364.252307][ T61] ---- [ 364.255562][ T61] lock(&dev_instance_lock_key#3); [ 364.260743][ T61] lock(&dev_instance_lock_key#3); [ 364.265924][ T61] [ 364.265924][ T61] *** DEADLOCK *** [ 364.265924][ T61] [ 364.274066][ T61] May be due to missing lock nesting notation [ 364.274066][ T61] [ 364.282375][ T61] 5 locks held by kworker/u8:4/61: [ 364.287459][ T61] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 364.297788][ T61] #1: ffffc9000213fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 364.307682][ T61] #2: ffffffff90116c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 364.316971][ T61] #3: ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 364.326952][ T61] #4: ffff8880132f8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x14a1/0x25a0 [ 364.339023][ T61] [ 364.339023][ T61] stack backtrace: [ 364.344891][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 364.344908][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.344919][ T61] Workqueue: netns cleanup_net [ 364.344938][ T61] Call Trace: [ 364.344942][ T61] [ 364.344947][ T61] dump_stack_lvl+0x116/0x1f0 [ 364.344966][ T61] print_deadlock_bug+0x1e9/0x240 [ 364.344986][ T61] __lock_acquire+0xff7/0x1ba0 [ 364.345001][ T61] lock_acquire+0x179/0x350 [ 364.345012][ T61] ? dev_set_allmulti+0xa2/0x260 [ 364.345031][ T61] ? __pfx___might_resched+0x10/0x10 [ 364.345051][ T61] __mutex_lock+0x199/0xb90 [ 364.345068][ T61] ? dev_set_allmulti+0xa2/0x260 [ 364.345086][ T61] ? __hw_addr_del_entry+0x106/0x390 [ 364.345103][ T61] ? dev_set_allmulti+0xa2/0x260 [ 364.345120][ T61] ? __pfx___mutex_lock+0x10/0x10 [ 364.345138][ T61] ? lock_acquire+0x154/0x350 [ 364.345151][ T61] ? dev_set_allmulti+0xa2/0x260 [ 364.345172][ T61] ? dev_mc_unsync+0x180/0x1d0 [ 364.345183][ T61] dev_set_allmulti+0xa2/0x260 [ 364.345200][ T61] macvlan_stop+0x362/0x4d0 [ 364.345217][ T61] ? __pfx_macvlan_stop+0x10/0x10 [ 364.345232][ T61] __dev_close_many+0x298/0x770 [ 364.345251][ T61] ? __pfx___dev_close_many+0x10/0x10 [ 364.345269][ T61] ? unregister_netdevice_many_notify+0x14a1/0x25a0 [ 364.345288][ T61] dev_close_many+0x233/0x630 [ 364.345307][ T61] ? __pfx_dev_close_many+0x10/0x10 [ 364.345327][ T61] unregister_netdevice_many_notify+0x384/0x25a0 [ 364.345346][ T61] ? lockdep_hardirqs_on+0x7c/0x110 [ 364.345361][ T61] ? batadv_tt_local_event+0x455/0x7f0 [ 364.345375][ T61] ? __local_bh_enable_ip+0xa4/0x120 [ 364.345392][ T61] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 364.345412][ T61] ? unregister_netdevice_queue+0x22e/0x3f0 [ 364.345429][ T61] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 364.345446][ T61] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 364.345467][ T61] default_device_exit_batch+0x853/0xaf0 [ 364.345486][ T61] ? __pfx_default_device_exit_batch+0x10/0x10 [ 364.345504][ T61] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 364.345518][ T61] ? __pfx___might_resched+0x10/0x10 [ 364.345535][ T61] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 364.345553][ T61] ? __pfx_default_device_exit_batch+0x10/0x10 [ 364.345571][ T61] ops_exit_list+0x128/0x180 [ 364.345587][ T61] cleanup_net+0x5c1/0xb30 [ 364.345604][ T61] ? __pfx_cleanup_net+0x10/0x10 [ 364.345622][ T61] ? rcu_is_watching+0x12/0xc0 [ 364.345639][ T61] process_one_work+0x9cc/0x1b70 [ 364.345655][ T61] ? __pfx_process_one_work+0x10/0x10 [ 364.345671][ T61] ? assign_work+0x1a0/0x250 [ 364.345684][ T61] worker_thread+0x6c8/0xf10 [ 364.345700][ T61] ? __kthread_parkme+0x19e/0x250 [ 364.345718][ T61] ? __pfx_worker_thread+0x10/0x10 [ 364.345732][ T61] kthread+0x3c2/0x780 [ 364.345744][ T61] ? __pfx_kthread+0x10/0x10 [ 364.345755][ T61] ? __pfx_kthread+0x10/0x10 [ 364.345767][ T61] ? __pfx_kthread+0x10/0x10 [ 364.345778][ T61] ? __pfx_kthread+0x10/0x10 [ 364.345790][ T61] ? rcu_is_watching+0x12/0xc0 [ 364.345805][ T61] ? __pfx_kthread+0x10/0x10 [ 364.345817][ T61] ret_from_fork+0x45/0x80 [ 364.345830][ T61] ? __pfx_kthread+0x10/0x10 [ 364.345842][ T61] ret_from_fork_asm+0x1a/0x30 [ 364.345865][ T61] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)