last executing test programs: 1m27.044046216s ago: executing program 0 (id=1129): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m26.681289066s ago: executing program 2 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m25.981725584s ago: executing program 0 (id=1134): r0 = socket$key(0xf, 0x3, 0x2) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0xee01, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) 1m25.767966715s ago: executing program 2 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getdents(r6, &(0x7f0000000000)=""/42, 0x2a) ioctl$TIOCGSID(r6, 0x5429, 0x0) 1m24.258810922s ago: executing program 0 (id=1138): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x1000, 0xfff, 0xf}}) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x16c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}]}}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x7, 0x4, 0x0, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x7f, 0x1, 0x5, 0xcfc, 0x5}}, {0xe, 0x2, [0x14f4, 0x3571, 0x3, 0xa685, 0x1]}}, {{0x1c, 0x1, {0x3b, 0xb, 0xa1, 0x3, 0x2, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0xfe4, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x3, 0x8, 0x7706, 0x0, 0x2, 0xd, 0xa}}, {0x18, 0x2, [0x5, 0x8, 0x4, 0xff7f, 0x9, 0x7, 0xd2a, 0x0, 0x2, 0x8]}}, {{0x1c, 0x1, {0x80, 0x83, 0x4, 0x1, 0x0, 0xeb, 0x445, 0x5}}, {0xe, 0x2, [0x1ff, 0x1, 0x51, 0x5, 0x8]}}, {{0x1c, 0x1, {0x6, 0x8, 0x1, 0x3, 0x1, 0x7, 0x0, 0x7}}, {0x12, 0x2, [0xa, 0x42b, 0x9, 0x5, 0x5, 0x40, 0xa]}}, {{0x1c, 0x1, {0x1, 0xe, 0x800, 0x7623, 0x2, 0xfffffc00, 0x401, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x16c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f00000001c0)=0x1080, 0x4) 1m22.661446784s ago: executing program 0 (id=1141): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0xa8}}, 0x0) 1m22.212020929s ago: executing program 0 (id=1143): r0 = socket$key(0xf, 0x3, 0x2) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0xee01, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) 1m22.209618984s ago: executing program 2 (id=1144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x8, 0x0, @tid=r0}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) 1m21.763717619s ago: executing program 3 (id=1145): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) 1m21.694986488s ago: executing program 1 (id=1146): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') 1m21.559276466s ago: executing program 4 (id=1147): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') 1m20.635995486s ago: executing program 1 (id=1148): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x101, 0x1) getdents64(r2, &(0x7f0000000000)=""/48, 0x30) getdents(r2, &(0x7f00000005c0)=""/203, 0xcb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x308a, &(0x7f0000000640)={0x0, 0xbf2f, 0x800, 0x103fc, 0x13c}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) 1m18.91107242s ago: executing program 2 (id=1149): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)}, 0x40000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='timer_expire_entry\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0xa8780b, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000023af02, 0x0) r3 = syz_io_uring_setup(0x17ec, &(0x7f0000000800)={0x0, 0x4391f, 0x800, 0x1, 0x2c0}, &(0x7f0000000640)=0x0, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xc, &(0x7f0000000800)=ANY=[@ANYRESDEC=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='selinux_audited\x00', r5}, 0x18) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r5, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x800008, &(0x7f0000001d80)=ANY=[@ANYRES8=r3, @ANYRESOCT=r1, @ANYBLOB="099cbccca9122db0c3a37a13a9b28f43988aa92bce3e5a3bd791afbaa0ee02e359730b00020000000000000a46753739ea96956da81721f74b2b092f3a1bc902f1d0b5bde60ab5f6ee040c939433a74d0de1755584c7851b7a32b82f4b2c30001110f35a94e583e34a252b45af8772f21a3b1cd7684fa9599926f60fd992297decbe89dfdb25b1df47b2d880f5e1f336ba5ee8f3b15a3564f59d3e7b7a8d738922c58e47c4117bbd0b249e694639d3e8", @ANYRESHEX=r6, @ANYRES8=r3]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x10, 0x15, r0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@rc, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/83, 0x53}, {&(0x7f0000001c80)=""/235, 0xeb}, {&(0x7f0000001a80)=""/106, 0x6a}, {&(0x7f0000000280)=""/40, 0x28}], 0x6, &(0x7f0000001b80)=""/195, 0xc3}, 0x0, 0x40, 0x0, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 1m15.319588278s ago: executing program 4 (id=1150): openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0100020064010100"/17], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) 1m14.806112081s ago: executing program 3 (id=1151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TIOCGSID(r6, 0x5429, 0x0) 1m13.993595954s ago: executing program 0 (id=1152): socket(0x23, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000140)=0x9, 0x0, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 1m11.853595173s ago: executing program 1 (id=1153): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0xa8}}, 0x0) 1m10.048547257s ago: executing program 2 (id=1154): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x1000, 0xfff, 0xf}}) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x16c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}]}}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x7, 0x4, 0x0, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x7f, 0x1, 0x5, 0xcfc, 0x5}}, {0xe, 0x2, [0x14f4, 0x3571, 0x3, 0xa685, 0x1]}}, {{0x1c, 0x1, {0x3b, 0xb, 0xa1, 0x3, 0x2, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0xfe4, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x3, 0x8, 0x7706, 0x0, 0x2, 0xd, 0xa}}, {0x18, 0x2, [0x5, 0x8, 0x4, 0xff7f, 0x9, 0x7, 0xd2a, 0x0, 0x2, 0x8]}}, {{0x1c, 0x1, {0x80, 0x83, 0x4, 0x1, 0x0, 0xeb, 0x445, 0x5}}, {0xe, 0x2, [0x1ff, 0x1, 0x51, 0x5, 0x8]}}, {{0x1c, 0x1, {0x6, 0x8, 0x1, 0x3, 0x1, 0x7, 0x0, 0x7}}, {0x12, 0x2, [0xa, 0x42b, 0x9, 0x5, 0x5, 0x40, 0xa]}}, {{0x1c, 0x1, {0x1, 0xe, 0x800, 0x7623, 0x2, 0xfffffc00, 0x401, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x16c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f00000001c0)=0x1080, 0x4) 1m10.047992969s ago: executing program 3 (id=1155): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010011a80100005800400058008000000000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e"], 0x270}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x96a, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x0, 0x10, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m7.502984799s ago: executing program 3 (id=1156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 1m7.502298247s ago: executing program 4 (id=1157): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m7.099990475s ago: executing program 1 (id=1158): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') 1m4.417567375s ago: executing program 4 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x8, 0x0, @tid=r0}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) 1m4.264760464s ago: executing program 1 (id=1160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}}], 0x2, 0x0, 0x0) fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) 1m1.073671837s ago: executing program 2 (id=1161): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat$null(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x2, 0x103) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m1.073091177s ago: executing program 3 (id=1162): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) 1m0.558770669s ago: executing program 1 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x80480, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_emit_ethernet(0x19, &(0x7f0000000080)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x9900, {0x2, 0x0, 0xfb}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r7, r8+60000000}) 44.550098772s ago: executing program 32 (id=1152): socket(0x23, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000140)=0x9, 0x0, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 37.140940193s ago: executing program 3 (id=1165): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0xc00, 0x0, 0xffffffffffffffff}) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x6, @none, 0x0, 0x2}, 0xe) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x64, 0x0, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x1f4, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000004}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}]}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ba56e78794a3691e1b65e4f9ee62ae7c51a6205504a87b6973dcd624510087667b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "a9d4ad104629b7a3b655847cd697017438d52a390d00e272c42bdfa7064136a8f1b88fc0a7ceb580ea1c1b74d6d7bcc5057f7b61755e2af93858f3c82a7c8da4b58ce8f955902035274431d0aa9211"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "ec5a1fbf82f374bba80e5ae742edecf1dd7ff8f147"}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000140)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x7f, "14679d6fb3fbdf5fc9b60a3e9e9f181738c599f822ef6d104525844cad986d28", 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x13, r5, 0xf121e000) 37.139581562s ago: executing program 4 (id=1166): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}}], 0x2, 0x0, 0x0) fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) 29.221530598s ago: executing program 33 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x80480, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_emit_ethernet(0x19, &(0x7f0000000080)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x9900, {0x2, 0x0, 0xfb}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r7, r8+60000000}) 25.185532598s ago: executing program 34 (id=1161): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat$null(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x2, 0x103) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 17.401403626s ago: executing program 4 (id=1169): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r0, 0x551, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) write$P9_RSTATu(r2, 0x0, 0x21e) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r6 = syz_open_pts(r5, 0x101) dup3(r6, r5, 0x0) syz_io_uring_setup(0x88c, &(0x7f0000001440)={0x0, 0xaee2, 0x80, 0x2, 0xbffffffc, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r8, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x6, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffdfff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x2000006, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x0, 0x5c, 0x8, 0x7f, 0xd1, 0xf2b, 0x1, 0x806, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x9, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x3ff, 0xffff7ff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x1, 0x8, 0x8, 0x0, 0x40d, 0x2, 0x9, 0x5, 0x9, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xa2d1, 0x1, 0x200, 0x10000000, 0xfffffff9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x6, 0xffffffff, 0x7f, 0x8, 0x6, 0x3, 0xc, 0x9, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc7, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x9, 0x5, 0x3, 0x2, 0x3, 0x1000002, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x4002, 0x1f85, 0x9, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0x6], [0x27b, 0x40000005, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x6, 0x7fffffff, 0x400e00e, 0xfffffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x404, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x9, 0x9, 0x4, 0x2, 0x2, 0xc, 0x27, 0x400, 0x70, 0x2, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x4, 0x10001, 0xf2, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0) shutdown(r8, 0x1) 11.181237317s ago: executing program 35 (id=1165): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0xc00, 0x0, 0xffffffffffffffff}) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x6, @none, 0x0, 0x2}, 0xe) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x64, 0x0, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x1f4, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000004}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}]}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ba56e78794a3691e1b65e4f9ee62ae7c51a6205504a87b6973dcd624510087667b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "a9d4ad104629b7a3b655847cd697017438d52a390d00e272c42bdfa7064136a8f1b88fc0a7ceb580ea1c1b74d6d7bcc5057f7b61755e2af93858f3c82a7c8da4b58ce8f955902035274431d0aa9211"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "ec5a1fbf82f374bba80e5ae742edecf1dd7ff8f147"}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000140)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x7f, "14679d6fb3fbdf5fc9b60a3e9e9f181738c599f822ef6d104525844cad986d28", 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x13, r5, 0xf121e000) 0s ago: executing program 36 (id=1169): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r0, 0x551, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) write$P9_RSTATu(r2, 0x0, 0x21e) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r6 = syz_open_pts(r5, 0x101) dup3(r6, r5, 0x0) syz_io_uring_setup(0x88c, &(0x7f0000001440)={0x0, 0xaee2, 0x80, 0x2, 0xbffffffc, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r8, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x6, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffdfff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x2000006, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x0, 0x5c, 0x8, 0x7f, 0xd1, 0xf2b, 0x1, 0x806, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x9, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x3ff, 0xffff7ff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x1, 0x8, 0x8, 0x0, 0x40d, 0x2, 0x9, 0x5, 0x9, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xa2d1, 0x1, 0x200, 0x10000000, 0xfffffff9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x6, 0xffffffff, 0x7f, 0x8, 0x6, 0x3, 0xc, 0x9, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc7, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x9, 0x5, 0x3, 0x2, 0x3, 0x1000002, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x4002, 0x1f85, 0x9, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0x6], [0x27b, 0x40000005, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x6, 0x7fffffff, 0x400e00e, 0xfffffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x404, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x9, 0x9, 0x4, 0x2, 0x2, 0xc, 0x27, 0x400, 0x70, 0x2, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x4, 0x10001, 0xf2, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0) shutdown(r8, 0x1) kernel console output (not intermixed with test programs): 71709][ T5910] usb 1-1: config 0 descriptor?? [ 78.359144][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 78.371064][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 78.701932][ T5910] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 79.642448][ T5910] usb 1-1: USB disconnect, device number 2 [ 79.735408][ T6135] fido_id[6135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 79.887465][ T6153] syz.3.60 uses obsolete (PF_INET,SOCK_PACKET) [ 80.416694][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 80.428367][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 80.561592][ T5910] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 80.993916][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.023350][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 81.063895][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.089905][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 81.126536][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.150055][ T5910] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.187465][ T5910] usb 4-1: Manufacturer: syz [ 81.244854][ T5910] usb 4-1: config 0 descriptor?? [ 81.310540][ T9] cfg80211: failed to load regulatory.db [ 81.520772][ T5910] rc_core: IR keymap rc-hauppauge not found [ 81.527791][ T5910] Registered IR keymap rc-empty [ 81.544945][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.621298][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.643305][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 81.665226][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 81.695239][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.721127][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.760960][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.780822][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.800815][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.822688][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.913320][ T6193] serio: Serial port ptm0 [ 82.781679][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 82.800769][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 82.824289][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 82.876017][ T5910] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.002434][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 83.002451][ T30] audit: type=1400 audit(1756137032.677:214): avc: denied { connect } for pid=6196 comm="syz.2.74" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.003987][ T5910] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 83.110677][ T30] audit: type=1400 audit(1756137032.727:215): avc: denied { write } for pid=6196 comm="syz.2.74" path="socket:[9171]" dev="sockfs" ino=9171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.166483][ T5910] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 83.396583][ T5910] usb 4-1: USB disconnect, device number 2 [ 83.519154][ T6205] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.77'. [ 83.650710][ T30] audit: type=1400 audit(1756137033.317:216): avc: denied { read } for pid=6212 comm="syz.1.80" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.835990][ T30] audit: type=1400 audit(1756137033.317:217): avc: denied { open } for pid=6212 comm="syz.1.80" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.061051][ T43] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 84.362943][ T43] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 84.380929][ T43] usb 2-1: config 0 has no interface number 0 [ 84.387092][ T43] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 84.400221][ T30] audit: type=1400 audit(1756137034.077:218): avc: denied { read write } for pid=6226 comm="syz.0.85" name="mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 84.437524][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.451443][ T30] audit: type=1400 audit(1756137034.077:219): avc: denied { open } for pid=6226 comm="syz.0.85" path="/dev/input/mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 84.522071][ T43] usb 2-1: config 0 descriptor?? [ 84.570920][ T5910] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.772028][ T5910] usb 5-1: no configurations [ 84.776660][ T5910] usb 5-1: can't read configurations, error -22 [ 84.911774][ T5910] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.984916][ T30] audit: type=1400 audit(1756137034.667:220): avc: denied { write } for pid=6212 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.081089][ T9] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x7 [ 85.110841][ T9] hid-generic 00A0:0008:0003.0002: item fetching failed at offset 14/15 [ 85.120247][ T30] audit: type=1400 audit(1756137034.667:221): avc: denied { ioctl } for pid=6212 comm="syz.1.80" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.182447][ T5910] usb 5-1: no configurations [ 85.187568][ T9] hid-generic 00A0:0008:0003.0002: probe with driver hid-generic failed with error -22 [ 85.210819][ T5910] usb 5-1: can't read configurations, error -22 [ 85.217530][ T5910] usb usb5-port1: attempt power cycle [ 85.224614][ T30] audit: type=1400 audit(1756137034.727:222): avc: denied { read write } for pid=6212 comm="syz.1.80" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.256200][ T30] audit: type=1400 audit(1756137034.727:223): avc: denied { open } for pid=6212 comm="syz.1.80" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.031770][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.075640][ T5910] usb 5-1: no configurations [ 86.084564][ T5910] usb 5-1: can't read configurations, error -22 [ 86.324004][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.412952][ T5910] usb 5-1: no configurations [ 86.418359][ T5910] usb 5-1: can't read configurations, error -22 [ 86.438678][ T5910] usb usb5-port1: unable to enumerate USB device [ 86.644122][ T6250] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.90'. [ 87.730187][ T43] usbhid 2-1:0.64: can't add hid device: -71 [ 87.759302][ T43] usbhid 2-1:0.64: probe with driver usbhid failed with error -71 [ 87.819276][ T43] usb 2-1: USB disconnect, device number 2 [ 88.278680][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 88.278695][ T30] audit: type=1400 audit(1756137037.957:225): avc: denied { name_bind } for pid=6266 comm="syz.3.96" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 88.993525][ T6280] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.101'. [ 89.030724][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.149843][ T6284] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.102'. [ 89.372161][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.385495][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.416485][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 89.459227][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 89.476401][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 89.486191][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.497429][ T9] usb 1-1: Product: syz [ 89.501940][ T9] usb 1-1: Manufacturer: syz [ 89.506645][ T9] usb 1-1: SerialNumber: syz [ 89.517255][ T9] usb 1-1: config 0 descriptor?? [ 89.532471][ T5910] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.395153][ T5910] usb 5-1: no configurations [ 90.399805][ T5910] usb 5-1: can't read configurations, error -22 [ 90.430390][ T9] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 90.481450][ T9] usb 1-1: USB disconnect, device number 3 [ 90.601015][ T5910] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.655466][ T6308] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.113'. [ 90.735100][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 90.809497][ T5910] usb 5-1: no configurations [ 90.873757][ T5910] usb 5-1: can't read configurations, error -22 [ 90.915230][ T5910] usb usb5-port1: attempt power cycle [ 91.340806][ T5910] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.390405][ T5910] usb 5-1: no configurations [ 91.396612][ T5910] usb 5-1: can't read configurations, error -22 [ 91.522397][ T30] audit: type=1400 audit(1756137041.187:226): avc: denied { connect } for pid=6323 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.921002][ T5910] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 91.996020][ T5910] usb 5-1: no configurations [ 92.008734][ T30] audit: type=1400 audit(1756137041.730:227): avc: denied { mounton } for pid=6332 comm="syz.3.120" path="/25/file1" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.054876][ T5910] usb 5-1: can't read configurations, error -22 [ 92.093521][ T5910] usb usb5-port1: unable to enumerate USB device [ 92.093814][ T30] audit: type=1400 audit(1756137041.830:228): avc: denied { read } for pid=6337 comm="syz.3.122" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.266834][ T30] audit: type=1400 audit(1756137041.830:229): avc: denied { open } for pid=6337 comm="syz.3.122" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.324089][ T6343] binder: 6337:6343 ioctl 40046205 0 returned -22 [ 92.503782][ T30] audit: type=1400 audit(1756137042.050:230): avc: denied { ioctl } for pid=6337 comm="syz.3.122" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.038719][ T6355] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.126'. [ 93.610896][ T5956] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.772201][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 93.786986][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.799576][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 93.814359][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 93.835487][ T5956] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 93.847503][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.860910][ T976] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 93.875200][ T5956] usb 4-1: Product: syz [ 93.879393][ T5956] usb 4-1: Manufacturer: syz [ 93.920763][ T5956] usb 4-1: SerialNumber: syz [ 93.928551][ T5956] usb 4-1: config 0 descriptor?? [ 94.037033][ T976] usb 5-1: no configurations [ 94.062386][ T976] usb 5-1: can't read configurations, error -22 [ 94.221962][ T976] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 94.326806][ T5956] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 94.349799][ T5956] usb 4-1: USB disconnect, device number 3 [ 94.406544][ T976] usb 5-1: no configurations [ 94.415291][ T976] usb 5-1: can't read configurations, error -22 [ 94.433165][ T976] usb usb5-port1: attempt power cycle [ 94.571416][ T6389] netlink: 104 bytes leftover after parsing attributes in process `syz.0.138'. [ 94.597802][ T6392] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.140'. [ 95.301481][ T976] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 95.378094][ T976] usb 5-1: no configurations [ 95.382993][ T976] usb 5-1: can't read configurations, error -22 [ 95.569215][ T976] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 95.662018][ T976] usb 5-1: no configurations [ 95.684555][ T976] usb 5-1: can't read configurations, error -22 [ 95.723259][ T976] usb usb5-port1: unable to enumerate USB device [ 95.741362][ T30] audit: type=1400 audit(1756137045.460:231): avc: denied { create } for pid=6402 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.843877][ T30] audit: type=1400 audit(1756137045.470:232): avc: denied { ioctl } for pid=6402 comm="syz.2.143" path="socket:[9974]" dev="sockfs" ino=9974 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.895979][ T30] audit: type=1400 audit(1756137045.470:233): avc: denied { write } for pid=6402 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.280813][ T30] audit: type=1400 audit(1756137046.010:234): avc: denied { sys_module } for pid=6416 comm="syz.2.150" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.115764][ T6455] No control pipe specified [ 100.216277][ T6471] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.167'. [ 101.020870][ T92] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.250980][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 101.490873][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.520053][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.629361][ T92] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 101.728020][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.768115][ T92] usb 2-1: config 0 descriptor?? [ 102.342563][ T92] usbhid 2-1:0.0: can't add hid device: -71 [ 102.348627][ T92] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 102.362413][ T92] usb 2-1: USB disconnect, device number 3 [ 102.846965][ T30] audit: type=1400 audit(1756137052.580:235): avc: denied { search } for pid=6513 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.423333][ T30] audit: type=1400 audit(1756137052.610:236): avc: denied { search } for pid=6513 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.527666][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 103.550349][ T30] audit: type=1400 audit(1756137052.610:237): avc: denied { search } for pid=6513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.826571][ T30] audit: type=1400 audit(1756137052.610:238): avc: denied { search } for pid=6513 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.050837][ T30] audit: type=1400 audit(1756137052.960:239): avc: denied { read open } for pid=6516 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.140361][ T30] audit: type=1400 audit(1756137052.960:240): avc: denied { getattr } for pid=6516 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.216884][ T30] audit: type=1400 audit(1756137052.960:241): avc: denied { getattr } for pid=6516 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.259954][ T6544] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.185'. [ 104.265851][ T30] audit: type=1400 audit(1756137053.260:242): avc: denied { nlmsg_write } for pid=6521 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.299922][ T30] audit: type=1400 audit(1756137053.280:243): avc: denied { read } for pid=6524 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.625542][ T30] audit: type=1400 audit(1756137053.280:244): avc: denied { open } for pid=6524 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.167182][ T6561] mmap: syz.2.191 (6561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.929561][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 109.586308][ T6623] netlink: 112 bytes leftover after parsing attributes in process `syz.2.207'. [ 109.966972][ T6638] vivid-002: ================= START STATUS ================= [ 109.974804][ T6638] vivid-002: Radio HW Seek Mode: Bounded [ 109.981326][ T6638] vivid-002: Radio Programmable HW Seek: false [ 109.987711][ T6638] vivid-002: RDS Rx I/O Mode: Block I/O [ 109.993605][ T6638] vivid-002: Generate RBDS Instead of RDS: false [ 110.000109][ T6638] vivid-002: RDS Reception: true [ 110.005434][ T6638] vivid-002: RDS Program Type: 0 inactive [ 110.011531][ T6638] vivid-002: RDS PS Name: inactive [ 110.017634][ T6638] vivid-002: RDS Radio Text: inactive [ 110.023492][ T6638] vivid-002: RDS Traffic Announcement: false inactive [ 110.030392][ T6638] vivid-002: RDS Traffic Program: false inactive [ 110.036917][ T6638] vivid-002: RDS Music: false inactive [ 110.042580][ T6638] vivid-002: ================== END STATUS ================== [ 111.831831][ T6677] netlink: 112 bytes leftover after parsing attributes in process `syz.0.224'. [ 111.852030][ T5903] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 111.885628][ T6686] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.225'. [ 112.073164][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.478441][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 112.520207][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.533475][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 112.560184][ T5903] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.581179][ T5903] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.595417][ T5903] usb 2-1: Manufacturer: syz [ 112.654357][ T5903] usb 2-1: config 0 descriptor?? [ 113.011239][ T5903] rc_core: IR keymap rc-hauppauge not found [ 113.017185][ T5903] Registered IR keymap rc-empty [ 113.047829][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 113.103479][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 113.705313][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 113.705344][ T30] audit: type=1400 audit(1756137063.200:252): avc: denied { kexec_image_load } for pid=6739 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 114.091184][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 114.175690][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 114.186028][ T30] audit: type=1400 audit(1756137063.900:253): avc: denied { bind } for pid=6748 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.254853][ T30] audit: type=1400 audit(1756137063.910:254): avc: denied { name_bind } for pid=6748 comm="syz.3.241" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.529364][ T30] audit: type=1400 audit(1756137063.910:255): avc: denied { node_bind } for pid=6748 comm="syz.3.241" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 114.530533][ T6761] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.243'. [ 114.584735][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.611491][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.653428][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.681728][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.710810][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.742744][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.820849][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.841685][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.914642][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.032209][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.492968][ T5903] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.682217][ T6784] fuse: Bad value for 'fd' [ 116.115288][ T5903] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 116.217741][ T5903] usb 2-1: USB disconnect, device number 4 [ 116.275169][ T30] audit: type=1400 audit(1756137066.010:256): avc: denied { read write } for pid=6790 comm="syz.1.251" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.433230][ T30] audit: type=1400 audit(1756137066.010:257): avc: denied { open } for pid=6790 comm="syz.1.251" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 116.691443][ T6796] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 117.141863][ T6796] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 117.155248][ T6796] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 117.442408][ T30] audit: type=1400 audit(1756137066.890:258): avc: denied { firmware_load } for pid=6790 comm="syz.1.251" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 117.664781][ T30] audit: type=1400 audit(1756137066.960:259): avc: denied { getopt } for pid=6790 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.789811][ T30] audit: type=1400 audit(1756137068.510:260): avc: denied { create } for pid=6847 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.169213][ T30] audit: type=1400 audit(1756137068.510:261): avc: denied { bind } for pid=6847 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.360714][ T30] audit: type=1400 audit(1756137068.520:262): avc: denied { write } for pid=6847 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.024239][ T30] audit: type=1400 audit(1756137068.930:263): avc: denied { shutdown } for pid=6854 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.044181][ T30] audit: type=1400 audit(1756137069.010:264): avc: denied { write } for pid=6854 comm="syz.0.264" lport=59165 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 120.106237][ T30] audit: type=1400 audit(1756137069.010:265): avc: denied { getopt } for pid=6854 comm="syz.0.264" lport=59165 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 120.153312][ T6869] QAT: failed to copy from user cfg_data. [ 120.925204][ T5903] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 120.938110][ T30] audit: type=1400 audit(1756137069.750:266): avc: denied { watch watch_reads } for pid=6864 comm="syz.3.268" path="/54" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 121.037523][ T30] audit: type=1400 audit(1756137069.790:267): avc: denied { write } for pid=6864 comm="syz.3.268" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.082867][ T30] audit: type=1400 audit(1756137069.880:268): avc: denied { wake_alarm } for pid=6864 comm="syz.3.268" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.161772][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.178202][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 121.193701][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.203756][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 121.221701][ T5903] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 121.236000][ T5903] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.244955][ T5903] usb 2-1: Manufacturer: syz [ 121.256695][ T5903] usb 2-1: config 0 descriptor?? [ 121.540305][ T976] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.654269][ T5903] rc_core: IR keymap rc-hauppauge not found [ 121.660209][ T5903] Registered IR keymap rc-empty [ 121.665273][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.680863][ T976] usb 4-1: device descriptor read/64, error -71 [ 121.701289][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.721935][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 121.734812][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 121.749887][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.770992][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.791618][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.810759][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.830763][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.850762][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.870747][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.890800][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.911474][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.920698][ T976] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.931124][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.950739][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.976016][ T5903] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 121.985247][ T5903] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 122.013573][ T5903] usb 2-1: USB disconnect, device number 5 [ 122.179235][ T976] usb 4-1: device descriptor read/64, error -71 [ 122.299873][ T30] audit: type=1400 audit(1756137072.030:269): avc: denied { name_connect } for pid=6891 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 122.322874][ T976] usb usb4-port1: attempt power cycle [ 122.703216][ T976] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.743425][ T976] usb 4-1: device descriptor read/8, error -71 [ 123.001128][ T5903] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.020684][ T976] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.061599][ T976] usb 4-1: device descriptor read/8, error -71 [ 123.113416][ T6911] QAT: failed to copy from user cfg_data. [ 123.196387][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.245973][ T5903] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.419535][ T5903] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.500041][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.620505][ T5903] usb 2-1: config 0 descriptor?? [ 123.806420][ T976] usb usb4-port1: unable to enumerate USB device [ 124.180902][ T6919] fuse: Bad value for 'fd' [ 125.899292][ T5903] usb 2-1: USB disconnect, device number 6 [ 127.180907][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 127.885128][ T5903] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.918500][ T6983] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 127.927191][ T6983] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 127.935914][ T6983] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 127.982089][ T6986] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.310'. [ 128.262405][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.343673][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 128.363952][ T5903] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.433172][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.550598][ T5903] usb 4-1: config 0 descriptor?? [ 128.568572][ T5903] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 130.523583][ T7030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 130.541946][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.325'. [ 130.562052][ T7030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 130.681240][ T7030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 130.833540][ T5956] usb 4-1: USB disconnect, device number 8 [ 131.238091][ T30] audit: type=1400 audit(1756137080.970:270): avc: denied { accept } for pid=7029 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 131.607528][ T30] audit: type=1400 audit(1756137081.340:271): avc: denied { set_context_mgr } for pid=7029 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.742801][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 131.783860][ T30] audit: type=1326 audit(1756137081.520:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 131.848367][ T30] audit: type=1326 audit(1756137081.550:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 132.465879][ T30] audit: type=1326 audit(1756137081.550:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 132.489913][ T30] audit: type=1326 audit(1756137081.550:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 132.516556][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.523003][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.545620][ T30] audit: type=1326 audit(1756137081.550:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 132.705511][ T30] audit: type=1326 audit(1756137081.560:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 133.681215][ T30] audit: type=1326 audit(1756137081.560:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 133.704486][ T30] audit: type=1326 audit(1756137081.560:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 134.655500][ T7079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.341'. [ 134.664864][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 134.674411][ T7079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.341'. [ 134.731070][ T7080] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 134.739730][ T7080] VFS: Can't find a romfs filesystem on dev nullb0. [ 134.739730][ T7080] [ 135.096247][ T7079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.341'. [ 135.106625][ T7083] loop7: detected capacity change from 0 to 16384 [ 135.140800][ T5910] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 135.318782][ T7090] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 135.327386][ T7090] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 135.335964][ T7090] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 135.352498][ T5910] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.371104][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 135.439814][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.555062][ T5910] usb 5-1: config 0 descriptor?? [ 136.504900][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.355'. [ 137.243813][ T7135] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 137.252648][ T7135] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 137.261364][ T7135] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 137.621959][ T5910] usb 5-1: USB disconnect, device number 14 [ 140.415606][ T5903] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.851548][ T5903] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.852876][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 140.860746][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 140.962103][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.997282][ T5903] usb 1-1: config 0 descriptor?? [ 144.007963][ T7229] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 144.046345][ T5910] usb 1-1: USB disconnect, device number 4 [ 144.075132][ T7229] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 144.111950][ T7229] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 145.880310][ T7253] netlink: 96 bytes leftover after parsing attributes in process `syz.4.401'. [ 145.970716][ T92] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.142365][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 146.161585][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.181864][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 146.204595][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 146.227570][ T92] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 146.238191][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.255445][ T92] usb 4-1: Product: syz [ 146.265237][ T92] usb 4-1: Manufacturer: syz [ 146.284780][ T92] usb 4-1: SerialNumber: syz [ 146.409760][ T92] usb 4-1: config 0 descriptor?? [ 146.785634][ T92] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 146.828842][ T92] usb 4-1: USB disconnect, device number 9 [ 147.571852][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 147.571885][ T30] audit: type=1400 audit(1756137097.353:305): avc: denied { accept } for pid=7266 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.384733][ T30] audit: type=1326 audit(1756137098.243:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 148.468241][ T30] audit: type=1326 audit(1756137098.243:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 148.613066][ T30] audit: type=1326 audit(1756137098.273:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 148.858650][ T30] audit: type=1326 audit(1756137098.273:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 149.599903][ T30] audit: type=1326 audit(1756137098.273:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 149.826319][ T30] audit: type=1326 audit(1756137098.273:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 150.324608][ T30] audit: type=1326 audit(1756137098.273:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 150.348006][ T30] audit: type=1326 audit(1756137098.273:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 150.380945][ T30] audit: type=1326 audit(1756137098.273:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 152.749787][ T7329] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 152.757711][ T7329] VFS: Can't find a romfs filesystem on dev nullb0. [ 152.757711][ T7329] [ 155.873878][ T92] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.937202][ T7371] QAT: failed to copy from user cfg_data. [ 156.040732][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 156.366749][ T92] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 156.615836][ T92] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 156.694135][ T92] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.726557][ T92] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.762910][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.850189][ T92] usbtmc 2-1:16.0: bulk endpoints not found [ 158.687566][ T7399] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 158.695809][ T7399] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 158.704266][ T7399] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 159.088700][ T5993] usb 2-1: USB disconnect, device number 7 [ 160.590831][ T5903] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 160.749478][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.815342][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 160.976186][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.155547][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 161.204965][ T5903] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.214421][ T5903] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.232163][ T5903] usb 4-1: Manufacturer: syz [ 161.245651][ T5903] usb 4-1: config 0 descriptor?? [ 161.533158][ T7435] vivid-000: ================= START STATUS ================= [ 161.541246][ T7435] vivid-000: Radio HW Seek Mode: Bounded [ 161.547162][ T7435] vivid-000: Radio Programmable HW Seek: false [ 161.554427][ T7435] vivid-000: RDS Rx I/O Mode: Block I/O [ 161.560532][ T7435] vivid-000: Generate RBDS Instead of RDS: false [ 161.567328][ T7435] vivid-000: RDS Reception: true [ 161.572555][ T7435] vivid-000: RDS Program Type: 0 inactive [ 161.578557][ T7435] vivid-000: RDS PS Name: inactive [ 161.584130][ T7435] vivid-000: RDS Radio Text: inactive [ 161.589792][ T7435] vivid-000: RDS Traffic Announcement: false inactive [ 161.596908][ T7435] vivid-000: RDS Traffic Program: false inactive [ 161.603868][ T7435] vivid-000: RDS Music: false inactive [ 161.609582][ T7435] vivid-000: ================== END STATUS ================== [ 161.940695][ T5903] rc_core: IR keymap rc-hauppauge not found [ 161.946762][ T5903] Registered IR keymap rc-empty [ 161.969632][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.001218][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.034636][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 162.095820][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 162.169065][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.730929][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.750704][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.771895][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.800726][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.820921][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.930835][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.960701][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.022893][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.142666][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.282411][ T5903] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.370957][ T5910] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.440504][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 163.440573][ T30] audit: type=1400 audit(1756137113.334:335): avc: denied { write } for pid=7451 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 163.468474][ T5903] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 163.477600][ T5903] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 163.490719][ T5903] usb 4-1: USB disconnect, device number 10 [ 163.750891][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 163.842458][ T5910] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 163.897401][ T5910] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 164.144161][ T5910] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.177430][ T5910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.200727][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.253015][ T5910] usbtmc 1-1:16.0: bulk endpoints not found [ 166.239322][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 166.365118][ T5903] usb 1-1: USB disconnect, device number 5 [ 167.415057][ T30] audit: type=1326 audit(1756137117.334:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 167.453336][ T30] audit: type=1326 audit(1756137117.364:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 167.486402][ T30] audit: type=1326 audit(1756137117.364:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 167.510668][ T30] audit: type=1326 audit(1756137117.364:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 167.534136][ T5910] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 167.566892][ T30] audit: type=1326 audit(1756137117.364:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 167.648226][ T30] audit: type=1326 audit(1756137117.364:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 167.656761][ T7525] fuse: Invalid rootmode [ 168.163295][ T30] audit: type=1326 audit(1756137117.364:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 168.186918][ T30] audit: type=1326 audit(1756137117.364:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 168.210400][ T30] audit: type=1326 audit(1756137117.374:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b938ebe9 code=0x7ffc0000 [ 168.274455][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 168.283840][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.317869][ T5910] usb 5-1: config 0 descriptor?? [ 168.351835][ T5910] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 168.572409][ T7535] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 168.583803][ T7535] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 168.592890][ T7535] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 168.942927][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 169.536173][ T5910] usb 5-1: USB disconnect, device number 15 [ 170.792966][ T7565] fuse: Invalid rootmode [ 173.159195][ T7593] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 173.168883][ T7593] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 173.177991][ T7593] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 174.485621][ T7617] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 174.493019][ T7617] VFS: Can't find a romfs filesystem on dev nullb0. [ 174.493019][ T7617] [ 175.263483][ T7619] fuse: Invalid rootmode [ 175.893719][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 179.230830][ T5903] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 179.244596][ T7673] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 179.252596][ T7673] VFS: Can't find a romfs filesystem on dev nullb0. [ 179.252596][ T7673] [ 179.287747][ T7672] fuse: Bad value for 'rootmode' [ 179.497095][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.619176][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 179.665966][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.676091][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 179.694974][ T5903] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.704519][ T5903] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.714611][ T5903] usb 2-1: Manufacturer: syz [ 179.729202][ T5903] usb 2-1: config 0 descriptor?? [ 180.030884][ T5903] rc_core: IR keymap rc-hauppauge not found [ 180.040058][ T5903] Registered IR keymap rc-empty [ 180.050112][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.070765][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.092653][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 180.120026][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 180.184209][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.807881][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.944349][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.980861][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.009341][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.033904][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.044582][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 181.061133][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.120277][ T7701] vivid-003: ================= START STATUS ================= [ 181.150709][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.180883][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.196336][ T7696] vlan2: entered promiscuous mode [ 181.246576][ T7701] vivid-003: Radio HW Seek Mode: Bounded [ 181.252583][ T7701] vivid-003: Radio Programmable HW Seek: false [ 181.257544][ T7696] syz_tun: entered promiscuous mode [ 181.280848][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.253072][ T7701] vivid-003: RDS Rx I/O Mode: Block I/O [ 182.258648][ T7701] vivid-003: Generate RBDS Instead of RDS: false [ 182.274692][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 182.274709][ T30] audit: type=1400 audit(1756137131.334:364): avc: denied { ioctl } for pid=7698 comm="syz.2.526" path="socket:[14509]" dev="sockfs" ino=14509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.290709][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.396666][ T30] audit: type=1400 audit(1756137131.334:365): avc: denied { write } for pid=7698 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.416500][ T7701] vivid-003: RDS Reception: true [ 182.530098][ T7701] vivid-003: RDS Program Type: 0 inactive [ 182.536056][ T7701] vivid-003: RDS PS Name: inactive [ 182.543345][ T7701] vivid-003: RDS Radio Text: inactive [ 182.549057][ T7701] vivid-003: RDS Traffic Announcement: false inactive [ 182.556344][ T7701] vivid-003: RDS Traffic Program: false inactive [ 182.562898][ T7701] vivid-003: RDS Music: false inactive [ 182.568569][ T7701] vivid-003: ================== END STATUS ================== [ 182.795135][ T5903] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 182.818932][ T5903] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.937951][ T5903] usb 2-1: USB disconnect, device number 8 [ 185.811272][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 185.811317][ T5170] Bluetooth: hci4: command 0x0406 tx timeout [ 185.812136][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 185.818052][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 185.835497][ T5170] Bluetooth: hci2: command 0x0406 tx timeout [ 186.574229][ T7751] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 186.582709][ T7751] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 186.591368][ T7751] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 187.335418][ T5857] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 188.406017][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.446665][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 188.489209][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.515368][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.542018][ T5857] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 188.558655][ T5857] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 189.538491][ T5857] usb 5-1: Manufacturer: syz [ 189.569843][ T5857] usb 5-1: config 0 descriptor?? [ 189.893915][ T30] audit: type=1326 audit(1756137139.804:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 190.055125][ T30] audit: type=1326 audit(1756137139.804:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 190.089326][ T5857] rc_core: IR keymap rc-hauppauge not found [ 190.106879][ T5857] Registered IR keymap rc-empty [ 190.114222][ T7793] fuse: Bad value for 'fd' [ 190.125929][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.146910][ T30] audit: type=1326 audit(1756137139.814:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 190.171336][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.221151][ T30] audit: type=1326 audit(1756137139.814:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 190.245260][ T5857] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 190.710958][ T5857] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 190.742950][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.781792][ T30] audit: type=1326 audit(1756137139.814:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 190.841633][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.890938][ T30] audit: type=1326 audit(1756137139.814:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 191.499082][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.507250][ T30] audit: type=1326 audit(1756137139.814:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 191.530777][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.550729][ T30] audit: type=1326 audit(1756137139.814:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 191.589133][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.599278][ T30] audit: type=1326 audit(1756137139.814:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 191.633943][ T30] audit: type=1326 audit(1756137139.814:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 191.780716][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.802785][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.834680][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.337291][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.363168][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.743300][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 192.801474][ T5857] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.834016][ T5857] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 193.177071][ T5857] usb 5-1: USB disconnect, device number 16 [ 193.469645][ T7839] fuse: Bad value for 'fd' [ 193.631212][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 193.950280][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.956816][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.110690][ T5857] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 196.002462][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.017230][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 196.028536][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.039929][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 196.081756][ T5857] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.092426][ T5857] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.100401][ T5857] usb 5-1: Manufacturer: syz [ 196.190419][ T5857] usb 5-1: config 0 descriptor?? [ 196.790289][ T7873] fuse: Bad value for 'fd' [ 196.830691][ T5857] rc_core: IR keymap rc-hauppauge not found [ 196.852192][ T5857] Registered IR keymap rc-empty [ 196.857177][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 196.971066][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.020434][ T5857] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 197.044669][ T5857] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 197.065596][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.097685][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.141375][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.750813][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.771367][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.803303][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.830711][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 197.880812][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.065507][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.105969][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.136002][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 198.136019][ T30] audit: type=1326 audit(1756137148.054:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 198.142551][ T5857] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 198.165634][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.181942][ T30] audit: type=1326 audit(1756137148.054:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 198.210191][ T5857] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 198.219373][ T5857] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 198.242886][ T30] audit: type=1326 audit(1756137148.054:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 198.267650][ T5857] usb 5-1: USB disconnect, device number 17 [ 198.297185][ T30] audit: type=1326 audit(1756137148.094:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 198.366443][ T30] audit: type=1326 audit(1756137148.094:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 198.460423][ T30] audit: type=1326 audit(1756137148.124:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 199.036329][ T30] audit: type=1326 audit(1756137148.124:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 199.134786][ T30] audit: type=1326 audit(1756137148.124:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 199.160881][ T5857] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 199.242798][ T7903] fuse: Unknown parameter 'user_i00000000000000000000' [ 199.322266][ T5857] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 200.085145][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.120778][ T30] audit: type=1326 audit(1756137148.124:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 200.148757][ T5857] usb 5-1: config 0 descriptor?? [ 200.177972][ T30] audit: type=1326 audit(1756137148.124:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 200.178055][ T5857] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 201.230768][ T7922] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.589'. [ 201.453074][ T7924] fuse: Bad value for 'group_id' [ 201.458090][ T7924] fuse: Bad value for 'group_id' [ 201.623692][ T5857] usb 5-1: USB disconnect, device number 18 [ 203.009622][ T7943] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 203.016875][ T7943] VFS: Can't find a romfs filesystem on dev nullb0. [ 203.016875][ T7943] [ 204.543255][ T7961] fuse: Bad value for 'group_id' [ 204.563569][ T7961] fuse: Bad value for 'group_id' [ 204.792277][ T7970] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 204.801189][ T7970] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 204.809915][ T7970] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 204.925965][ T7969] vivid-003: ================= START STATUS ================= [ 204.935537][ T7969] vivid-003: Radio HW Seek Mode: Bounded [ 204.942470][ T7969] vivid-003: Radio Programmable HW Seek: false [ 204.948972][ T7969] vivid-003: RDS Rx I/O Mode: Block I/O [ 204.954774][ T7969] vivid-003: Generate RBDS Instead of RDS: false [ 204.961463][ T7969] vivid-003: RDS Reception: true [ 204.966631][ T7969] vivid-003: RDS Program Type: 0 inactive [ 204.972667][ T7969] vivid-003: RDS PS Name: inactive [ 204.988658][ T7969] vivid-003: RDS Radio Text: inactive [ 204.995311][ T7969] vivid-003: RDS Traffic Announcement: false inactive [ 205.003621][ T7969] vivid-003: RDS Traffic Program: false inactive [ 205.011145][ T7969] vivid-003: RDS Music: false inactive [ 205.018137][ T7969] vivid-003: ================== END STATUS ================== [ 205.880811][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 208.820175][ T5903] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 209.013075][ T5903] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.020428][ T8038] fuse: Unknown parameter 'group_id00000000000000000000' [ 209.027141][ T5903] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 209.039032][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.065736][ T5903] usb 1-1: config 0 descriptor?? [ 209.282748][ T92] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 209.812718][ T92] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 209.880889][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.909866][ T92] usb 4-1: config 0 descriptor?? [ 209.935981][ T92] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 210.743268][ T5903] usb 1-1: USB disconnect, device number 6 [ 211.025039][ T8065] vivid-000: ================= START STATUS ================= [ 211.033083][ T8065] vivid-000: Radio HW Seek Mode: Bounded [ 211.039063][ T8065] vivid-000: Radio Programmable HW Seek: false [ 211.045701][ T8065] vivid-000: RDS Rx I/O Mode: Block I/O [ 211.051748][ T8065] vivid-000: Generate RBDS Instead of RDS: false [ 211.058430][ T8065] vivid-000: RDS Reception: true [ 211.063720][ T8065] vivid-000: RDS Program Type: 0 inactive [ 211.069734][ T8065] vivid-000: RDS PS Name: inactive [ 211.075284][ T8065] vivid-000: RDS Radio Text: inactive [ 211.084129][ T8065] vivid-000: RDS Traffic Announcement: false inactive [ 211.091385][ T8065] vivid-000: RDS Traffic Program: false inactive [ 211.098074][ T8065] vivid-000: RDS Music: false inactive [ 211.103865][ T8065] vivid-000: ================== END STATUS ================== [ 211.416285][ T92] usb 4-1: USB disconnect, device number 11 [ 211.681285][ T8075] fuse: Bad value for 'rootmode' [ 212.197802][ T8079] fuse: Unknown parameter 'group_id00000000000000000000' [ 213.480730][ T5903] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 214.032335][ T5903] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.044244][ T5903] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 214.076312][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.101558][ T5903] usb 1-1: config 0 descriptor?? [ 215.470773][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 215.938517][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 215.963152][ T8130] 8021q: VLANs not supported on ip_vti0 [ 216.090092][ T5903] usb 1-1: USB disconnect, device number 7 [ 216.591867][ T8145] vivid-000: ================= START STATUS ================= [ 216.599680][ T8145] vivid-000: Radio HW Seek Mode: Bounded [ 216.605648][ T8145] vivid-000: Radio Programmable HW Seek: false [ 216.606539][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 216.621116][ T8145] vivid-000: RDS Rx I/O Mode: Block I/O [ 216.626940][ T8145] vivid-000: Generate RBDS Instead of RDS: false [ 216.633531][ T8145] vivid-000: RDS Reception: true [ 216.638732][ T8145] vivid-000: RDS Program Type: 0 inactive [ 216.644787][ T8145] vivid-000: RDS PS Name: inactive [ 216.650212][ T8145] vivid-000: RDS Radio Text: inactive [ 216.655992][ T8145] vivid-000: RDS Traffic Announcement: false inactive [ 216.663181][ T8145] vivid-000: RDS Traffic Program: false inactive [ 216.669856][ T8145] vivid-000: RDS Music: false inactive [ 216.675671][ T8145] vivid-000: ================== END STATUS ================== [ 217.377906][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 217.377922][ T30] audit: type=1400 audit(1756137167.352:422): avc: denied { unlink } for pid=8158 comm="syz.4.664" name="#1" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 217.579108][ T30] audit: type=1400 audit(1756137167.352:423): avc: denied { mount } for pid=8158 comm="syz.4.664" name="/" dev="overlay" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 218.427378][ T30] audit: type=1400 audit(1756137168.382:424): avc: denied { ioctl } for pid=8169 comm="syz.1.667" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 218.452779][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.605705][ T8186] fuse: Bad value for 'fd' [ 218.712316][ T5903] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.282492][ T5903] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 220.446675][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.711859][ T5903] usb 1-1: config 0 descriptor?? [ 221.192332][ T5903] usb 1-1: Cannot read MAC address [ 221.218257][ T5903] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 221.889513][ T5903] usb 1-1: USB disconnect, device number 8 [ 222.128155][ T8219] fuse: Unknown parameter 'grou00000000000000000000' [ 222.172092][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 222.233496][ T8223] fuse: Bad value for 'fd' [ 222.653707][ T30] audit: type=1326 audit(1756137172.632:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 222.718281][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 222.840120][ T30] audit: type=1326 audit(1756137172.632:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 222.864337][ T30] audit: type=1326 audit(1756137172.632:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 222.896493][ T8229] vlan2: entered promiscuous mode [ 222.910184][ T30] audit: type=1326 audit(1756137172.632:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 222.959596][ T8229] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 223.358977][ T30] audit: type=1326 audit(1756137172.632:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 223.395013][ T30] audit: type=1326 audit(1756137172.632:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 223.466199][ T30] audit: type=1326 audit(1756137172.632:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 223.616179][ T30] audit: type=1326 audit(1756137172.632:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 223.645437][ T30] audit: type=1326 audit(1756137172.632:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 223.771567][ T30] audit: type=1326 audit(1756137172.632:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 223.904024][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 225.877121][ T8267] fuse: Unknown parameter 'use00000000000000000000' [ 226.943307][ T5993] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 227.837618][ T5993] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 228.075180][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.103044][ T5993] usb 1-1: config 0 descriptor?? [ 228.121392][ T5993] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 228.196440][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 228.236896][ T8287] QAT: failed to copy from user cfg_data. [ 228.306495][ T8285] vlan2: entered promiscuous mode [ 228.632458][ T8285] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 230.049905][ T5993] usb 1-1: USB disconnect, device number 9 [ 231.565814][ T8328] fuse: Unknown parameter 'user_i00000000000000000000' [ 232.786356][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 232.826496][ T8338] vlan2: entered promiscuous mode [ 232.850748][ T8338] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 232.958632][ T8346] fuse: Unknown parameter 'group_i00000000000000000000' [ 233.511765][ T5956] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 234.222235][ T5956] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 234.231473][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.764463][ T5956] usb 5-1: config 0 descriptor?? [ 234.774894][ T5956] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 235.122701][ T8376] fuse: Unknown parameter 'group_i00000000000000000000' [ 235.867703][ T5956] usb 5-1: USB disconnect, device number 19 [ 236.143119][ T8388] fuse: Unknown parameter '0x0000000000000005' [ 237.220696][ T5857] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 237.331829][ T5956] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 237.424346][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.460663][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 237.501029][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.524500][ T5857] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 237.547744][ T5956] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 237.566021][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.635308][ T5857] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.709633][ T5956] usb 1-1: config 0 descriptor?? [ 237.736186][ T5857] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.740811][ T5956] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 237.752578][ T5857] usb 4-1: Manufacturer: syz [ 237.814035][ T5857] usb 4-1: config 0 descriptor?? [ 238.291734][ T5857] rc_core: IR keymap rc-hauppauge not found [ 238.297665][ T5857] Registered IR keymap rc-empty [ 238.325381][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.380700][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.462047][ T5857] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 238.475237][ T5857] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 238.490333][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.610174][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.634256][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.661022][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.690927][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.721101][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.758871][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.886405][ T5956] usb 1-1: USB disconnect, device number 10 [ 238.900694][ T92] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 238.943659][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.970875][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.010735][ T5857] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.057050][ T5857] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.071978][ T5857] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.086696][ T92] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 239.104512][ T5857] usb 4-1: USB disconnect, device number 12 [ 239.125207][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.147015][ T92] usb 2-1: config 0 descriptor?? [ 239.165435][ T92] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 239.694879][ T8440] fuse: Unknown parameter '0x0000000000000005' [ 239.712854][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.752'. [ 239.728065][ T8442] fuse: Invalid rootmode [ 239.742902][ T8435] vlan2: entered promiscuous mode [ 239.747952][ T8435] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 240.221058][ T92] usb 2-1: USB disconnect, device number 9 [ 241.363126][ T8473] fuse: Unknown parameter '0x0000000000000005' [ 241.400807][ T976] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 241.441611][ T8478] fuse: Invalid rootmode [ 241.683481][ T8487] overlayfs: missing 'lowerdir' [ 241.719055][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.735519][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 241.746872][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 241.746891][ T30] audit: type=1326 audit(1756137191.692:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 241.777157][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 241.812311][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.814247][ T30] audit: type=1326 audit(1756137191.692:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 241.832343][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 241.845978][ T30] audit: type=1326 audit(1756137191.692:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 241.881891][ T30] audit: type=1326 audit(1756137191.692:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 241.888359][ T976] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.905363][ T30] audit: type=1326 audit(1756137191.692:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 241.939722][ T30] audit: type=1326 audit(1756137191.692:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 242.183181][ T30] audit: type=1326 audit(1756137191.692:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 242.221504][ T30] audit: type=1326 audit(1756137191.692:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 242.259391][ T30] audit: type=1326 audit(1756137191.692:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 242.411638][ T30] audit: type=1326 audit(1756137191.692:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8479 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 242.503219][ T976] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.511670][ T976] usb 5-1: Manufacturer: syz [ 242.518373][ T976] usb 5-1: config 0 descriptor?? [ 243.690695][ T976] rc_core: IR keymap rc-hauppauge not found [ 243.696728][ T976] Registered IR keymap rc-empty [ 243.706926][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 243.757968][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 243.838835][ T8516] fuse: Unknown parameter '0x0000000000000005' [ 243.922952][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 243.942260][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 244.029821][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.080757][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.110787][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.132752][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.201638][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.274629][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.431989][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.531940][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.571007][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.600697][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.812418][ T976] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 244.850766][ T976] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 244.861913][ T8526] overlayfs: missing 'lowerdir' [ 244.910975][ T976] usb 5-1: USB disconnect, device number 20 [ 245.158022][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 245.420676][ T976] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 245.575007][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 245.589691][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.844983][ T976] usb 5-1: config 0 descriptor?? [ 245.994808][ T976] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 247.259886][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 247.691528][ T976] usb 5-1: USB disconnect, device number 21 [ 249.361471][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.804'. [ 251.182532][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 251.404013][ T8611] overlayfs: missing 'lowerdir' [ 251.631444][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 251.631461][ T30] audit: type=1326 audit(1756137201.602:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 251.689241][ T30] audit: type=1326 audit(1756137201.602:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437538ebe9 code=0x7ffc0000 [ 252.094915][ T8624] serio: Serial port ptm0 [ 255.611359][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.636570][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.220654][ T5857] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 256.372714][ T5857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.423201][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 256.445015][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.455310][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 256.469720][ T5857] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 256.502185][ T5857] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.510213][ T5857] usb 2-1: Manufacturer: syz [ 256.551431][ T5857] usb 2-1: config 0 descriptor?? [ 257.419875][ T5857] rc_core: IR keymap rc-hauppauge not found [ 257.425852][ T5857] Registered IR keymap rc-empty [ 257.430847][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.458811][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.482679][ T5857] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 257.765828][ T5857] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 257.815819][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.850803][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.890740][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.920748][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 257.971892][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 258.041058][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 258.080905][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 258.100785][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 258.132308][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 258.271780][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 258.303256][ T5857] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 258.318922][ T5857] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 258.397317][ T5857] usb 2-1: USB disconnect, device number 10 [ 260.020741][ T5993] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 260.215163][ T5993] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 260.225550][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.433878][ T5993] usb 5-1: config 0 descriptor?? [ 262.009197][ T5993] usb 5-1: Cannot set autoneg [ 262.020834][ T5993] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 262.050893][ T5993] usb 5-1: USB disconnect, device number 22 [ 263.857688][ T30] audit: type=1400 audit(1756137213.952:483): avc: denied { name_bind } for pid=8792 comm="syz.4.865" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 264.592103][ T30] audit: type=1400 audit(1756137214.612:484): avc: denied { read } for pid=8794 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.789266][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 265.849505][ T8809] vlan2: entered promiscuous mode [ 265.885404][ T8809] erspan0: entered promiscuous mode [ 266.064437][ T8819] fuse: Bad value for 'fd' [ 268.787068][ T8862] fuse: Bad value for 'fd' [ 269.793874][ T8875] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.893'. [ 272.174162][ T8893] fuse: Bad value for 'fd' [ 272.238065][ T8894] fuse: Unknown parameter 'user_id00000000000000000000' [ 273.518955][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.907'. [ 273.530942][ T8919] 8021q: VLANs not supported on sit0 [ 274.189462][ T8932] overlayfs: missing 'lowerdir' [ 274.384704][ T30] audit: type=1400 audit(1756137224.549:485): avc: denied { unmount } for pid=8925 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 275.131804][ T8939] fuse: Invalid rootmode [ 275.873958][ T8948] fuse: Bad value for 'fd' [ 276.752396][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 279.052444][ T8987] fuse: Bad value for 'fd' [ 279.155274][ T8989] Zero length message leads to an empty skb [ 281.786329][ T9022] overlayfs: missing 'lowerdir' [ 282.358292][ T9025] fuse: Bad value for 'fd' [ 282.662835][ T30] audit: type=1326 audit(1756137232.990:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 282.686058][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.878111][ T30] audit: type=1326 audit(1756137233.000:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 282.901361][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.909883][ T30] audit: type=1326 audit(1756137233.030:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 283.136177][ T9039] overlayfs: missing 'lowerdir' [ 283.941299][ T30] audit: type=1326 audit(1756137233.030:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 283.964524][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.970765][ T30] audit: type=1326 audit(1756137233.030:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 284.110333][ T30] audit: type=1326 audit(1756137233.030:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 284.264195][ T30] audit: type=1326 audit(1756137233.030:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 284.287371][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.337766][ T30] audit: type=1326 audit(1756137233.030:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 284.390354][ T9046] overlayfs: missing 'lowerdir' [ 284.510268][ T30] audit: type=1326 audit(1756137233.110:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 284.575160][ T30] audit: type=1326 audit(1756137233.110:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d578ebe9 code=0x7ffc0000 [ 286.146767][ T9050] netlink: 92 bytes leftover after parsing attributes in process `syz.0.949'. [ 288.085359][ T9098] overlayfs: missing 'lowerdir' [ 288.288074][ T976] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 288.292882][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 288.292894][ T30] audit: type=1326 audit(1756137238.535:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 288.486476][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.500421][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 288.578724][ T30] audit: type=1326 audit(1756137238.535:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 288.625269][ T30] audit: type=1326 audit(1756137238.535:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 288.656507][ T30] audit: type=1326 audit(1756137238.535:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 289.110222][ T30] audit: type=1326 audit(1756137238.535:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 289.172103][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 289.172108][ T30] audit: type=1326 audit(1756137238.535:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 289.172151][ T30] audit: type=1326 audit(1756137238.535:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 289.193334][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 289.283322][ T30] audit: type=1326 audit(1756137238.535:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 289.309048][ T30] audit: type=1326 audit(1756137238.535:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 289.332912][ T976] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 289.344174][ T976] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 289.352204][ T976] usb 2-1: Manufacturer: syz [ 289.360508][ T976] usb 2-1: config 0 descriptor?? [ 289.373104][ T30] audit: type=1326 audit(1756137238.535:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 290.220698][ T976] rc_core: IR keymap rc-hauppauge not found [ 290.226776][ T976] Registered IR keymap rc-empty [ 290.235112][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.261160][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.281505][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 290.299880][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 290.315843][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.341003][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.360775][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.451331][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.470895][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.500767][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.610747][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.641614][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.660679][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.680862][ T976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.767844][ T9135] overlayfs: missing 'lowerdir' [ 291.178409][ T976] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 291.190090][ T976] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 291.207567][ T976] usb 2-1: USB disconnect, device number 11 [ 291.288195][ T9141] overlayfs: missing 'lowerdir' [ 291.589735][ T9143] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.975'. [ 292.581539][ T9173] serio: Serial port ptm0 [ 295.634162][ T9189] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.993'. [ 295.645936][ T9188] fuse: Unknown parameter '0x0000000000000004' [ 295.733814][ T9193] overlayfs: missing 'lowerdir' [ 295.756738][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 295.756756][ T30] audit: type=1326 audit(1756137246.155:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 295.859769][ T30] audit: type=1326 audit(1756137246.155:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 295.964601][ T30] audit: type=1326 audit(1756137246.155:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 296.094950][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 296.961099][ T30] audit: type=1326 audit(1756137246.155:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 297.006847][ T30] audit: type=1326 audit(1756137246.155:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 297.048876][ T30] audit: type=1326 audit(1756137246.155:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 297.700722][ T30] audit: type=1326 audit(1756137246.155:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 297.754190][ T30] audit: type=1326 audit(1756137246.155:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 297.866104][ T30] audit: type=1326 audit(1756137246.155:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 297.940858][ T30] audit: type=1326 audit(1756137246.155:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 298.019662][ T9217] fuse: Unknown parameter '0x0000000000000004' [ 298.269210][ T9227] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1006'. [ 298.361993][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1005'. [ 298.371366][ T9228] 8021q: VLANs not supported on ip6_vti0 [ 300.332555][ T9255] fuse: Unknown parameter '0x0000000000000004' [ 301.716439][ T9270] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1019'. [ 302.393942][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1023'. [ 302.431167][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1023'. [ 302.563158][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1023'. [ 302.885975][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1023'. [ 302.919388][ T9286] overlayfs: missing 'lowerdir' [ 302.959988][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 302.960006][ T30] audit: type=1326 audit(1756137253.408:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.007366][ T30] audit: type=1326 audit(1756137253.408:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.030867][ T30] audit: type=1326 audit(1756137253.408:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.054231][ T30] audit: type=1326 audit(1756137253.408:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.113582][ T9292] fuse: Unknown parameter 'fd0x0000000000000004' [ 303.136188][ T30] audit: type=1326 audit(1756137253.418:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.202961][ T30] audit: type=1326 audit(1756137253.418:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.256276][ T30] audit: type=1326 audit(1756137253.418:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.372155][ T30] audit: type=1326 audit(1756137253.418:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.519052][ T30] audit: type=1326 audit(1756137253.418:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 303.554556][ T30] audit: type=1326 audit(1756137253.418:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 305.038430][ T9319] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1034'. [ 306.362239][ T9331] fuse: Unknown parameter 'fd0x0000000000000004' [ 307.045736][ T9343] fuse: Unknown parameter 'user_i00000000000000000000' [ 307.879752][ T9359] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1046'. [ 309.024278][ T9379] fuse: Unknown parameter 'user_id00000000000000000000' [ 309.146678][ T9385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1057'. [ 309.176640][ T9385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 309.200283][ T9388] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1056'. [ 309.219043][ T9385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1057'. [ 309.283622][ T9385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1057'. [ 311.940899][ T9415] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1064'. [ 312.387747][ T9424] fuse: Unknown parameter 'user_id00000000000000000000' [ 315.667078][ T9466] fuse: Unknown parameter 'user_id00000000000000000000' [ 316.815452][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.827395][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.955620][ T9541] fuse: Bad value for 'user_id' [ 321.960512][ T9541] fuse: Bad value for 'user_id' [ 327.257870][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 327.337177][ T9602] overlayfs: missing 'lowerdir' [ 327.359706][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 327.359721][ T30] audit: type=1326 audit(1756137277.873:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 327.390463][ T30] audit: type=1326 audit(1756137277.873:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 327.419062][ T30] audit: type=1326 audit(1756137277.873:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 327.443676][ T30] audit: type=1326 audit(1756137277.873:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 327.467739][ T30] audit: type=1326 audit(1756137277.873:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 327.676596][ T30] audit: type=1326 audit(1756137277.873:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 327.985783][ T30] audit: type=1326 audit(1756137277.873:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 328.129406][ T30] audit: type=1326 audit(1756137277.873:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 328.189815][ T30] audit: type=1326 audit(1756137277.873:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 328.280793][ T30] audit: type=1326 audit(1756137277.873:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63ff8ebe9 code=0x7ffc0000 [ 328.844416][ T9611] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1121'. [ 332.164755][ T9656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1137'. [ 332.285263][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1137'. [ 332.356075][ T9656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1137'. [ 333.391370][ T9656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1137'. [ 356.471222][ T9752] overlayfs: missing 'lowerdir' [ 359.528672][ T30] audit: type=1326 audit(1756137307.106:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.292221][ T30] audit: type=1326 audit(1756137307.106:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.316759][ T30] audit: type=1326 audit(1756137307.106:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.340088][ T30] audit: type=1326 audit(1756137307.106:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.363475][ T30] audit: type=1326 audit(1756137307.106:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.386895][ T30] audit: type=1326 audit(1756137307.106:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.410302][ T30] audit: type=1326 audit(1756137307.106:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.433643][ T30] audit: type=1326 audit(1756137307.106:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.456991][ T30] audit: type=1326 audit(1756137307.106:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.480309][ T30] audit: type=1326 audit(1756137307.106:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 365.503606][ T30] audit: type=1326 audit(1756137307.106:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.2.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6b8ebe9 code=0x7ffc0000 [ 379.284624][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.295641][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.982611][ T5860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 392.990949][ T5860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 392.998697][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.008582][ T5860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.016172][ T5860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 393.027282][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 393.027295][ T30] audit: type=1400 audit(1756137343.516:684): avc: denied { mounton } for pid=9766 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 399.042810][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 399.329297][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 404.677126][ T51] Bluetooth: hci6: command tx timeout [ 405.214043][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.271853][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.744094][ T51] Bluetooth: hci6: command tx timeout [ 406.750979][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.735770][ T5850] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 408.753479][ T5860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 408.900755][ T5850] Bluetooth: hci6: command tx timeout [ 409.638055][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 409.646171][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.654477][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 409.662568][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 409.669746][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.678902][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 409.739665][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 410.431532][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 412.240683][ T51] Bluetooth: hci6: command tx timeout [ 412.246140][ T51] Bluetooth: hci5: command tx timeout [ 413.947550][ T9766] chnl_net:caif_netlink_parms(): no params data found [ 413.970972][ T5860] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 414.026744][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 416.226090][ T51] Bluetooth: hci5: command tx timeout [ 418.443541][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 422.047486][ T5860] Bluetooth: hci5: command tx timeout [ 422.101314][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.280780][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 423.750673][ T5860] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 425.285953][ T5848] Bluetooth: hci5: command tx timeout [ 425.291481][ T5848] Bluetooth: hci7: command tx timeout [ 425.308297][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.325936][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.084120][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 430.137691][ T51] Bluetooth: hci7: command tx timeout [ 430.541400][ T5848] Bluetooth: hci4: command tx timeout [ 432.170759][ T51] Bluetooth: hci7: command tx timeout [ 432.570821][ T5848] Bluetooth: hci4: command tx timeout [ 432.577105][ T51] Bluetooth: hci8: command tx timeout [ 435.648485][ T51] Bluetooth: hci7: command tx timeout [ 435.653942][ T51] Bluetooth: hci8: command tx timeout [ 435.659312][ T51] Bluetooth: hci4: command tx timeout [ 442.971322][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.977639][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.016029][ T51] Bluetooth: hci8: command tx timeout [ 443.021529][ T5848] Bluetooth: hci4: command tx timeout [ 443.418654][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.432421][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.440065][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.448293][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.458557][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.180630][ T51] Bluetooth: hci8: command tx timeout [ 448.186091][ T51] Bluetooth: hci0: command tx timeout [ 448.430702][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.459129][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.469674][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.478644][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.489316][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.250772][ T51] Bluetooth: hci0: command tx timeout [ 450.571697][ T51] Bluetooth: hci1: command tx timeout [ 459.586889][ T51] Bluetooth: hci0: command tx timeout [ 459.593512][ T51] Bluetooth: hci1: command tx timeout [ 459.603598][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.615856][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.626586][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.635609][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.646118][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.610772][ T5848] Bluetooth: hci1: command tx timeout [ 461.616201][ T5848] Bluetooth: hci0: command tx timeout [ 464.759596][ T5848] Bluetooth: hci2: command tx timeout [ 464.765502][ T5848] Bluetooth: hci1: command tx timeout [ 468.505934][ T51] Bluetooth: hci2: command tx timeout [ 473.736387][ T51] Bluetooth: hci2: command tx timeout [ 474.011883][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.020276][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.035721][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.046463][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.055166][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.770716][ T51] Bluetooth: hci2: command tx timeout [ 476.090647][ T51] Bluetooth: hci3: command tx timeout [ 481.320912][ T9766] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 483.894038][ T51] Bluetooth: hci3: command tx timeout [ 485.970705][ T5848] Bluetooth: hci3: command tx timeout [ 486.076321][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 486.085648][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 486.097070][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 486.105658][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 486.116209][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 489.352230][ T51] Bluetooth: hci3: command tx timeout [ 489.357695][ T51] Bluetooth: hci9: command tx timeout [ 495.072082][ T5848] Bluetooth: hci9: command tx timeout [ 506.600704][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.607011][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.455074][ T51] Bluetooth: hci9: command tx timeout [ 514.629064][ T5848] Bluetooth: hci9: command tx timeout [ 514.665095][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 514.674974][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 514.685162][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 514.694125][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 514.703777][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 514.986377][ T5860] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 514.995238][ T5860] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 515.006576][ T5860] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 515.015323][ T5860] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 515.026176][ T5860] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 519.425262][ T5850] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 519.438817][ T5850] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 519.447961][ T5850] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 519.460363][ T5850] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 519.469143][ T5850] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 525.880738][ T5850] Bluetooth: hci11: command tx timeout [ 525.886690][ T5850] Bluetooth: hci10: command tx timeout [ 528.699079][ T51] Bluetooth: hci10: command tx timeout [ 528.704716][ T51] Bluetooth: hci11: command tx timeout [ 530.731093][ T5860] Bluetooth: hci11: command tx timeout [ 530.736615][ T5860] Bluetooth: hci10: command tx timeout [ 530.743965][ T5850] Bluetooth: hci12: command tx timeout [ 532.810949][ T51] Bluetooth: hci11: command tx timeout [ 532.816483][ T5860] Bluetooth: hci10: command tx timeout [ 532.822248][ T5850] Bluetooth: hci12: command tx timeout [ 534.890910][ T5850] Bluetooth: hci12: command tx timeout [ 534.939175][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.947956][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.956065][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.964850][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.973449][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.972373][ T5850] Bluetooth: hci12: command tx timeout [ 537.051120][ T5850] Bluetooth: hci5: command tx timeout [ 539.130679][ T5850] Bluetooth: hci5: command tx timeout [ 544.082451][ T5850] Bluetooth: hci5: command tx timeout [ 544.381759][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 544.390027][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 544.408253][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 544.417398][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 544.432519][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 557.300464][ T5860] Bluetooth: hci5: command tx timeout [ 557.305931][ T5860] Bluetooth: hci7: command 0x0406 tx timeout [ 557.311969][ T5860] Bluetooth: hci6: command tx timeout [ 564.193447][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 564.199518][ T5848] Bluetooth: hci6: command tx timeout [ 564.217324][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.223709][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.999950][ T51] Bluetooth: hci6: command tx timeout [ 571.351197][ T9837] Bluetooth: hci0: command 0x0406 tx timeout [ 571.357619][ T9837] Bluetooth: hci6: command tx timeout [ 576.628574][ T31] INFO: task syz-executor:5844 blocked for more than 140 seconds. [ 576.636454][ T31] Not tainted syzkaller #0 [ 576.641410][ T31] Blocked by coredump. [ 576.645975][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.654712][ T31] task:syz-executor state:D stack:22328 pid:5844 tgid:5844 ppid:1 task_flags:0x40054c flags:0x00004006 [ 576.666637][ T31] Call Trace: [ 576.669901][ T31] [ 576.681173][ T31] __schedule+0x1190/0x5de0 [ 576.685708][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 576.695481][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 576.700544][ T31] ? __pfx___schedule+0x10/0x10 [ 576.705392][ T31] ? find_held_lock+0x2b/0x80 [ 576.710060][ T31] ? schedule+0x2d7/0x3a0 [ 576.714486][ T31] ? tun_chr_close+0x38/0x230 [ 576.719161][ T31] schedule+0xe7/0x3a0 [ 576.723308][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.728756][ T31] __mutex_lock+0x81b/0x1060 [ 576.733419][ T31] ? tun_chr_close+0x38/0x230 [ 576.738092][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.743126][ T31] ? locks_remove_file+0x39e/0x5c0 [ 576.748228][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 576.753694][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 576.758799][ T31] ? tun_chr_close+0x38/0x230 [ 576.763486][ T31] ? rtnl_lock+0x9/0x20 [ 576.767637][ T31] tun_chr_close+0x38/0x230 [ 576.772146][ T31] __fput+0x402/0xb70 [ 576.776129][ T31] task_work_run+0x14d/0x240 [ 576.780731][ T31] ? __pfx_task_work_run+0x10/0x10 [ 576.785841][ T31] do_exit+0x86f/0x2bf0 [ 576.789998][ T31] ? __pfx_do_exit+0x10/0x10 [ 576.794614][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 576.799631][ T31] ? find_held_lock+0x2b/0x80 [ 576.804321][ T31] do_group_exit+0xd3/0x2a0 [ 576.808823][ T31] get_signal+0x2673/0x26d0 [ 576.813340][ T31] ? __pfx_get_signal+0x10/0x10 [ 576.818188][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 576.823762][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 576.829912][ T31] ? ksys_read+0x1ac/0x250 [ 576.834336][ T31] ? __pfx_ksys_read+0x10/0x10 [ 576.839090][ T31] exit_to_user_mode_loop+0x84/0x110 [ 576.844428][ T31] do_syscall_64+0x3f6/0x4c0 [ 576.849027][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.854934][ T31] RIP: 0033:0x7f94d578d5fc [ 576.859335][ T31] RSP: 002b:00007ffc2ad12570 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 576.867762][ T31] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00007f94d578d5fc [ 576.875741][ T31] RDX: 0000000000000030 RSI: 00007ffc2ad12630 RDI: 00000000000000f9 [ 576.883731][ T31] RBP: 00007ffc2ad125dc R08: 0000000000000000 R09: 00007ffc2ad122e7 [ 576.891705][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000d5 [ 576.899659][ T31] R13: 0000000000000000 R14: 0000000000062f52 R15: 00007ffc2ad12630 [ 576.907651][ T31] [ 576.910719][ T31] [ 576.910719][ T31] Showing all locks held in the system: [ 576.918413][ T31] 2 locks held by kworker/0:0/9: [ 576.923349][ T31] 4 locks held by kworker/u8:1/13: [ 576.928442][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 576.938809][ T31] #1: ffffc90000127d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 576.948755][ T31] #2: ffffffff9036d010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 576.958085][ T31] #3: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230 [ 576.967428][ T31] 1 lock held by khungtaskd/31: [ 576.972331][ T31] #0: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 576.982176][ T31] 2 locks held by kworker/1:1/43: [ 576.987183][ T31] 5 locks held by kworker/u9:0/51: [ 576.992293][ T31] #0: ffff88802aff3148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 577.002579][ T31] #1: ffffc90000bb7d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 577.014508][ T31] #2: ffff8880336d4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 577.024346][ T31] #3: ffff8880336d40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 577.034037][ T31] #4: ffffffff905eb368 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 577.043851][ T31] 3 locks held by kworker/u8:4/59: [ 577.048953][ T31] #0: ffff888031853948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 577.060032][ T31] #1: ffffc9000210fd10 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 577.073104][ T31] #2: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 577.082648][ T31] 3 locks held by kworker/u8:5/3551: [ 577.087919][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 577.099066][ T31] #1: ffffc9000c5b7d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 577.109434][ T31] #2: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 577.118506][ T31] 2 locks held by getty/5603: [ 577.123196][ T31] #0: ffff88803621e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 577.132987][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 577.143105][ T31] 1 lock held by syz-executor/5843: [ 577.148287][ T31] 1 lock held by syz-executor/5844: [ 577.153487][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 577.162486][ T31] 3 locks held by kworker/u9:2/5848: [ 577.167754][ T31] #0: ffff888024f24148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 577.178044][ T31] #1: ffffc900031b7d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 577.190085][ T31] #2: ffff888034434dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 577.199938][ T31] 4 locks held by kworker/u9:3/5850: [ 577.205223][ T31] #0: ffff88807950c148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 577.215513][ T31] #1: ffffc900031a7d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 577.227447][ T31] #2: ffff888079204dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 577.237310][ T31] #3: ffff8880792040b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 577.246986][ T31] 2 locks held by kworker/0:3/5857: [ 577.252195][ T31] 6 locks held by kworker/u9:6/5860: [ 577.257463][ T31] #0: ffff8880253bf148 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 577.267926][ T31] #1: ffffc90003137d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 577.279866][ T31] #2: ffff8880340d8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 577.289732][ T31] #3: ffff8880340d80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 577.299439][ T31] #4: ffffffff905eb368 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 577.309207][ T31] #5: ffff8881467b4b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 577.318561][ T31] 2 locks held by kworker/1:3/5955: [ 577.323757][ T31] 3 locks held by kworker/1:6/5993: [ 577.328938][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 577.339399][ T31] #1: ffffc90002f97d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 577.349074][ T31] #2: ffffffff8e5cc7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 577.359114][ T31] 1 lock held by syz-executor/9764: [ 577.364311][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 577.373295][ T31] 7 locks held by kworker/1:7/9770: [ 577.378477][ T31] 2 locks held by syz-executor/9781: [ 577.383768][ T31] #0: ffffffff9036d010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.393195][ T31] #1: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230 [ 577.402531][ T31] 1 lock held by syz-executor/9799: [ 577.407715][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.417129][ T31] 1 lock held by syz-executor/9803: [ 577.422327][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.431751][ T31] 1 lock held by syz-executor/9807: [ 577.436930][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.446343][ T31] 1 lock held by syz-executor/9811: [ 577.451550][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.460966][ T31] 1 lock held by syz-executor/9817: [ 577.466146][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.475560][ T31] 1 lock held by syz-executor/9828: [ 577.480756][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.490154][ T31] 1 lock held by syz-executor/9831: [ 577.495369][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.504780][ T31] 3 locks held by kworker/1:8/9833: [ 577.509961][ T31] 1 lock held by syz-executor/9835: [ 577.515164][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.524577][ T31] 1 lock held by syz-executor/9841: [ 577.529759][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.539228][ T31] 1 lock held by syz-executor/9846: [ 577.544433][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.553849][ T31] 2 locks held by dhcpcd/9849: [ 577.558594][ T31] 1 lock held by dhcpcd/9850: [ 577.563268][ T31] #0: ffff8880308d0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 577.572955][ T31] 1 lock held by dhcpcd/9851: [ 577.577614][ T31] #0: ffff88802bc0e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 577.587288][ T31] 1 lock held by dhcpcd/9852: [ 577.591971][ T31] #0: ffff88802bc0c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 577.601653][ T31] [ 577.603962][ T31] ============================================= [ 577.603962][ T31] [ 577.612383][ T31] NMI backtrace for cpu 0 [ 577.612395][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.612415][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.612425][ T31] Call Trace: [ 577.612432][ T31] [ 577.612439][ T31] dump_stack_lvl+0x116/0x1f0 [ 577.612460][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 577.612487][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 577.612515][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 577.612547][ T31] watchdog+0xf0e/0x1260 [ 577.612572][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.612590][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 577.612610][ T31] ? __kthread_parkme+0x19e/0x250 [ 577.612636][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.612655][ T31] kthread+0x3c5/0x780 [ 577.612673][ T31] ? __pfx_kthread+0x10/0x10 [ 577.612691][ T31] ? rcu_is_watching+0x12/0xc0 [ 577.612713][ T31] ? __pfx_kthread+0x10/0x10 [ 577.612731][ T31] ret_from_fork+0x5d7/0x6f0 [ 577.612747][ T31] ? __pfx_kthread+0x10/0x10 [ 577.612764][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.612797][ T31] [ 577.612803][ T31] Sending NMI from CPU 0 to CPUs 1: [ 577.727854][ C1] NMI backtrace for cpu 1 [ 577.727868][ C1] CPU: 1 UID: 0 PID: 9770 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 577.727883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.727892][ C1] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 577.727913][ C1] RIP: 0010:write_comp_data+0x0/0x90 [ 577.727926][ C1] Code: 48 8b 05 bb ea 1a 12 48 8b 80 30 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 87 ea 1a 12 65 8b 05 98 ea [ 577.727939][ C1] RSP: 0018:ffffc9000472f068 EFLAGS: 00000086 [ 577.727949][ C1] RAX: 0000000000000000 RBX: ffff8880b8536514 RCX: ffffffff84e478d2 [ 577.727957][ C1] RDX: 0000000000000005 RSI: 0000000000000010 RDI: 0000000000000005 [ 577.727965][ C1] RBP: ffffc9000472f0b4 R08: 0000000000000001 R09: 0000000000000010 [ 577.727973][ C1] R10: 0000000000000004 R11: 0000000094062014 R12: ffffc9000472f18c [ 577.727981][ C1] R13: 0000000000000005 R14: ffffc9000472f178 R15: dffffc0000000000 [ 577.727989][ C1] FS: 0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 577.728003][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.728012][ C1] CR2: 00007f4ebe0b3de2 CR3: 000000000e380000 CR4: 00000000003526f0 [ 577.728020][ C1] Call Trace: [ 577.728024][ C1] [ 577.728028][ C1] chacha_block_generic+0x202/0x330 [ 577.728046][ C1] ? __pfx_chacha_block_generic+0x10/0x10 [ 577.728064][ C1] ? crng_make_state+0x2ac/0x6d0 [ 577.728082][ C1] _get_random_bytes+0x16b/0x1e0 [ 577.728098][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 577.728123][ C1] get_random_u16+0x261/0x7e0 [ 577.728140][ C1] ? __pfx_get_random_u16+0x10/0x10 [ 577.728159][ C1] cake_get_flow_quantum+0xd9/0x290 [ 577.728179][ C1] cake_dequeue+0x1be7/0x4830 [ 577.728204][ C1] ? cake_enqueue+0x1cdb/0x4070 [ 577.728223][ C1] ? __pfx_cake_dequeue+0x10/0x10 [ 577.728244][ C1] __qdisc_run+0x1bd/0x1bf0 [ 577.728259][ C1] ? rcu_is_watching+0x12/0xc0 [ 577.728275][ C1] __dev_queue_xmit+0x2b43/0x4490 [ 577.728302][ C1] ? selinux_ip_postroute+0x73a/0xde0 [ 577.728316][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 577.728333][ C1] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 577.728349][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 577.728373][ C1] ? lock_acquire+0x179/0x350 [ 577.728391][ C1] ? find_held_lock+0x2b/0x80 [ 577.728407][ C1] ? mark_held_locks+0x49/0x80 [ 577.728426][ C1] ip6_finish_output2+0xe98/0x2020 [ 577.728444][ C1] __ip6_finish_output+0x3cd/0x1010 [ 577.728457][ C1] ip6_output+0x1ca/0x3e0 [ 577.728470][ C1] ip6_local_out+0xd1/0x4d0 [ 577.728486][ C1] udp_tunnel6_xmit_skb+0x7f1/0xc50 [ 577.728506][ C1] send6+0x4ba/0xd30 [ 577.728521][ C1] ? __pfx_send6+0x10/0x10 [ 577.728539][ C1] wg_socket_send_skb_to_peer+0xf6/0x210 [ 577.728553][ C1] wg_packet_tx_worker+0x1aa/0x810 [ 577.728574][ C1] process_one_work+0x9cf/0x1b70 [ 577.728592][ C1] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 577.728610][ C1] ? __pfx_process_one_work+0x10/0x10 [ 577.728626][ C1] ? assign_work+0x1a0/0x250 [ 577.728639][ C1] worker_thread+0x6c8/0xf10 [ 577.728656][ C1] ? __kthread_parkme+0x19e/0x250 [ 577.728673][ C1] ? __pfx_worker_thread+0x10/0x10 [ 577.728686][ C1] kthread+0x3c5/0x780 [ 577.728698][ C1] ? __pfx_kthread+0x10/0x10 [ 577.728711][ C1] ? rcu_is_watching+0x12/0xc0 [ 577.728726][ C1] ? __pfx_kthread+0x10/0x10 [ 577.728738][ C1] ret_from_fork+0x5d7/0x6f0 [ 577.728749][ C1] ? __pfx_kthread+0x10/0x10 [ 577.728761][ C1] ret_from_fork_asm+0x1a/0x30 [ 577.728782][ C1] [ 577.728854][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 578.083771][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 578.092869][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.102909][ T31] Call Trace: [ 578.106173][ T31] [ 578.109090][ T31] dump_stack_lvl+0x3d/0x1f0 [ 578.113673][ T31] vpanic+0x6e8/0x7a0 [ 578.117655][ T31] ? __pfx_vpanic+0x10/0x10 [ 578.122153][ T31] ? __irq_work_queue_local+0x1d7/0x580 [ 578.127690][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 578.133577][ T31] panic+0xca/0xd0 [ 578.137818][ T31] ? __pfx_panic+0x10/0x10 [ 578.142231][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 578.147602][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 578.153752][ T31] ? watchdog+0xd78/0x1260 [ 578.158158][ T31] ? watchdog+0xd6b/0x1260 [ 578.162564][ T31] watchdog+0xd89/0x1260 [ 578.166803][ T31] ? __pfx_watchdog+0x10/0x10 [ 578.171470][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 578.176659][ T31] ? __kthread_parkme+0x19e/0x250 [ 578.181683][ T31] ? __pfx_watchdog+0x10/0x10 [ 578.186349][ T31] kthread+0x3c5/0x780 [ 578.190405][ T31] ? __pfx_kthread+0x10/0x10 [ 578.194987][ T31] ? rcu_is_watching+0x12/0xc0 [ 578.199742][ T31] ? __pfx_kthread+0x10/0x10 [ 578.204322][ T31] ret_from_fork+0x5d7/0x6f0 [ 578.208901][ T31] ? __pfx_kthread+0x10/0x10 [ 578.213481][ T31] ret_from_fork_asm+0x1a/0x30 [ 578.218251][ T31] [ 578.221454][ T31] Kernel Offset: disabled [ 578.225757][ T31] Rebooting in 86400 seconds..