last executing test programs: 10m49.829363174s ago: executing program 0 (id=592): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0xc8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x3e9, 0x400, 0x70bd27, 0x25dfdbfe, {0x11, 0x1, 0x0, 0x0, 0xb, 0x55, 0x7fffffff, 0x4, 0x0, 0xd8, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = userfaultfd(0x801) r3 = io_uring_setup(0x3615, &(0x7f0000000240)={0x0, 0x2a56, 0x8000, 0x2, 0xd8}) poll(&(0x7f0000000340)=[{r3, 0x140}, {r2, 0x2}], 0x2, 0x3) shmat(0x0, &(0x7f0000f02000/0x4000)=nil, 0x4000) 10m48.943968517s ago: executing program 0 (id=595): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000300)={@rand_addr=0x64010101, @private=0xa010102, @remote}, 0xc) 10m40.934464496s ago: executing program 0 (id=615): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) 10m40.781454979s ago: executing program 0 (id=619): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) 10m40.663074793s ago: executing program 0 (id=622): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a80)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 10m40.180463035s ago: executing program 0 (id=625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) 10m24.559878772s ago: executing program 32 (id=625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) 8m7.950403018s ago: executing program 2 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0xf, 0x9, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x9ef, 0x52}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'nicvf0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000001d00010026", @ANYRES32=r1, @ANYBLOB="02004007080004000300000006000600b2b2000008000a00a004000010000e800500010001000000040002000a000100eaaaaaaaaa35000008000f00010000008b94fed46760ca7c021acd5552b06b6e936593350656e507d515aae3a76a92d02c394389ad0afc7ee1832121e0bd76aa0bffaf8c38ee23dbfb57b299a69420b1297c89c888bc2b4c7701331a0183022adfefb3631896e0d6f3930a776b02ad2021203c7265f33820f49904a474bd1f440c63e80ed323750a24c3a1ac8165ad1e5a39784dc977f8b959f2d1932ae4da2268869dc5f223283607c59fa3149287"], 0x58}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r2 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)="92e3f027281f9298fcc6c2529ef193701ddce4d967b7fb618a9784ab4d39cec9f41f3822b6f44671a6145220d679d919b42971829424131d63dce088636b740978d025083d0462b20d2be38ef69621df5425fe61a56c6efb218c20b2f42606c80c1875838d5c6ff2be0f5d21b2e19c49319242865ce1934c2f1e11ccd756a9b3055188753169ce5841cabebc44441f591c3faad67831827faeafdb2b8d423a5f463b03a6c552739fd38ae3b4cc15640bc7b3ad639fedbef728f408a79ebe1e0a75848c3b5d0261c10200068dee0ff786f745d30ee1488655731b6ccc585ec87dc0ae6da734c52842cf1cb528c38b1876", 0xf0}, {&(0x7f0000000500)="fdd7aec6a8ed65f50ec75a597fd32c8cc597a6884e06ad733e3a4d392c216aa2dd1fba3eff4b151a285a89303e424e1633aed1daaeb48f2b088f51acb88ccf96b32fba13ab7ecfda5a97f18830a9b91fe3004e4f2fe2a1bf39f377e487d9cb18c2b1fcb4a8c21d45ce574fbf70bda33968d66ef3bde9ec8aba63ed3e574700fd2d032432548c3a78b2d992ecfb6886312f87b294a31a22cf56a3d837a9282e91206fb216c8adf1df35ec3ea9f58e29bc9c84f42a68d3575733bd188fdc30455bd8703d9fb70f8e9eb14f3a7cef04d6880ac6", 0xd2}, {&(0x7f0000000600)="4dfde96bcedf973755c96cf8f9df2be56e9db71d347e11ba7a2ab8da9449382f5b6206bbe3ec589e7727f3f16823703c65e2c3f85c40342f199b363e8db2692ff898245c781d995f6c19a422bd9428c290e87b71c195f44af7f7df41cc6764c6598a2cfd6656e73ba48920fb8fc34862994407aa20e92f03f26138ddb0f935bcbba59feae676555076e00f05b3154d68680d78102485d7eff05c5aa43baa23076182d23c0e64e54800795f8a453c802f593039309a4e87a4a4a708e7f073725f67b38e1fbd6b40431fc4030c7769d7613a94ff60c8bbc68de63105b5b94161", 0xdf}], 0x3}}], 0x2, 0x4008080) fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) 8m7.82926304s ago: executing program 2 (id=1634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m7.754386362s ago: executing program 2 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r2, 0x4000) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8m6.720363084s ago: executing program 2 (id=1649): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 8m6.677200677s ago: executing program 2 (id=1650): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/18, 0x12}, 0x5}], 0x1, 0x10142, 0x0) 8m6.355706068s ago: executing program 2 (id=1654): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') fcntl$notify(r0, 0x402, 0x8000002f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0, 0x0, 0x1, 0x0, 0x2}]) 8m6.100011027s ago: executing program 33 (id=1654): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') fcntl$notify(r0, 0x402, 0x8000002f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0, 0x0, 0x1, 0x0, 0x2}]) 6m38.472162333s ago: executing program 6 (id=2661): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 6m38.203944079s ago: executing program 6 (id=2664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x480}, {r2, 0x8}, {r2, 0x100}, {r3, 0x4001}, {r1, 0x4080}], 0x5, 0x0, &(0x7f0000000380)={[0x1]}, 0x8) 6m37.220744471s ago: executing program 6 (id=2666): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r2, @ANYBLOB="0000d400000000000a00010000"], 0x2c}}, 0x0) 6m34.792286609s ago: executing program 6 (id=2667): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 6m34.587766981s ago: executing program 6 (id=2671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40) syz_open_dev$tty20(0xc, 0x4, 0x0) 6m33.547881103s ago: executing program 6 (id=2678): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r3, &(0x7f00000001c0)="fad33075218151db00316f3a277fedbc86dd46fe766f486d7cea18d5be2cf4380cc23be564201f35f1ca85e2b3f96364cbe34d5c80271a0547e3", 0x3a, 0x880, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0xda}, 0x14) 6m32.949382036s ago: executing program 34 (id=2678): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r3, &(0x7f00000001c0)="fad33075218151db00316f3a277fedbc86dd46fe766f486d7cea18d5be2cf4380cc23be564201f35f1ca85e2b3f96364cbe34d5c80271a0547e3", 0x3a, 0x880, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0xda}, 0x14) 2m38.656007321s ago: executing program 3 (id=4030): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ec5050520"], 0x7) 2m38.372077425s ago: executing program 3 (id=4034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m37.396002936s ago: executing program 3 (id=4039): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0x90, 0xd, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd6, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0xc, 0x61, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c00)=0x11) 2m34.75595858s ago: executing program 3 (id=4049): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x7, 0x10001, 0x9, 0x1}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2m34.586116624s ago: executing program 3 (id=4052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14}}, 0x50}}, 0x0) 2m33.96449137s ago: executing program 3 (id=4055): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x5, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x404c840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m33.75576117s ago: executing program 5 (id=4057): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') socket$unix(0x1, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 2m33.561029632s ago: executing program 5 (id=4059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$9p(r2, &(0x7f0000000300)="f8", 0x1) 2m32.634564215s ago: executing program 5 (id=4069): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') socket$unix(0x1, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 2m32.30470098s ago: executing program 5 (id=4070): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x40000000200, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x6, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 2m32.256419803s ago: executing program 5 (id=4071): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000000000/0x4000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth0_vlan\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m29.632300178s ago: executing program 5 (id=4087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2m18.533759259s ago: executing program 35 (id=4055): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x5, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x404c840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m14.136037616s ago: executing program 36 (id=4087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 6.79019346s ago: executing program 8 (id=5005): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4001000000) 6.747587879s ago: executing program 4 (id=5006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x894) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, 0x0, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x8, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r8, &(0x7f00000000c0)='./file0\x00') unlinkat(r8, &(0x7f0000000040)='./file0\x00', 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/15, @ANYRES32], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) 5.725082941s ago: executing program 7 (id=5009): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 4.811813893s ago: executing program 7 (id=5010): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x24060400) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblcr\x00', 0x0, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.73664296s ago: executing program 7 (id=5012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0xb4, 0xa, 0xb2b9, 0x26, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x48, 0x100d, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe76b, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xc66, 0xa8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x4, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x402, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0xc, 0x2, 0x2e6bf783, 0x5, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2008004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x1, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xbb3f, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) signalfd4(r1, &(0x7f0000000300)={[0x5]}, 0x8, 0x80800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) ioctl$KVM_TDX_INIT_MEM_REGION(r4, 0xc008aeba, &(0x7f00000002c0)={0x3, 0x1, &(0x7f0000000280)={&(0x7f0000014000/0x3000)=nil}}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0xc0c4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.618047848s ago: executing program 4 (id=5014): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff00070000000800", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 4.120897095s ago: executing program 7 (id=5017): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6bb}], 0x1, 0x40000103, 0x0) 4.031871572s ago: executing program 4 (id=5018): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(r0, &(0x7f00000017c0), 0x0) 3.585374343s ago: executing program 8 (id=5019): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x0) 3.404442933s ago: executing program 9 (id=5020): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 3.281755365s ago: executing program 9 (id=5021): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000004c0), &(0x7f0000000600)=0x8) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1", 0x14}], 0x1, 0x807, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000003"], 0x0) socket$inet6(0xa, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) 3.043935161s ago: executing program 1 (id=5024): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x103400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) close_range(r0, 0xffffffffffffffff, 0x0) 2.998503076s ago: executing program 1 (id=5025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.963626378s ago: executing program 1 (id=5026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0xc8800, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) 2.883623751s ago: executing program 9 (id=5027): socket(0x28, 0x5, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) chdir(0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 2.271085051s ago: executing program 4 (id=5028): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff00070000000800", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 2.24583256s ago: executing program 7 (id=5029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x7fffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0xcb) 2.244374477s ago: executing program 8 (id=5030): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x100000002) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x6) 1.500269195s ago: executing program 1 (id=5031): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.499107043s ago: executing program 7 (id=5032): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 1.445160201s ago: executing program 9 (id=5033): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x24060400) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblcr\x00', 0x0, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.425245479s ago: executing program 4 (id=5034): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}]}, 0x8) syz_extract_tcp_res(0x0, 0x6, 0x5) open$dir(0x0, 0x200800, 0x1a1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$loop(0x0, 0x400000c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 1.287985527s ago: executing program 1 (id=5035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.012774294s ago: executing program 9 (id=5036): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250400000008000800dfffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004091}, 0x400c054) 839.829041ms ago: executing program 8 (id=5037): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="000000000c00000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000851000000700000018000000020000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450000700000000000019078ac1e0001ac1414aa0c0090780000000045800000000000000089000000000000ac141400443c0001ac1e0001000000000000000000000000ac1414aa000000000000200000000000ac14140000000000ffffffff00000000ac1414010000000000000000"], 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000005c0)=0x1, 0x4) r3 = socket(0x1, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 228.875484ms ago: executing program 1 (id=5038): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(r0, &(0x7f00000017c0), 0x0) 200.564965ms ago: executing program 9 (id=5039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 143.979942ms ago: executing program 8 (id=5040): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 74.391103ms ago: executing program 4 (id=5041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xd, 0x0, &(0x7f00000007c0)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7d15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) r6 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x2, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2a, 0x63, &(0x7f0000000080)="5fab413d270cec0465f5fc3f6da4cae37472246135260602e30ec7dc16531b8d0bb99da3dc71504f2176", &(0x7f00000003c0)=""/99, 0x5, 0x0, 0xd4, 0x85, &(0x7f0000000440)="5ae2bb912e49a234ba239fc69950ee7c06cf06fcdffe9a605d42aad4404830fd4ce0fe4bc5499f59528b69eaf04fa334fbe5e0beb95e2fd2b3c199eace71e075a9d5184c34c2f7a7b3a1ece9a4568f9b72cb8e0f4a65a1f0cdfe77586d32064da9e3185148d9431b610b558c094f28185e3187660483528fdcb5a8ae90534537aa1037a34730e02afc2c2c455978ecb0ad06f87fec2b214184ff07c9500cca477061d86a1431c6e5f307d8aeee58cf5928a8fb218d805435663ed681d39f98f7a9dae2def68ad04c413d12e5bd06bf81198841f0", &(0x7f0000000540)="2f4c3e58e889f32f1bb7278987b83562bd5903f37c2239c15ed8c4b48e9d8e6f43efd6306dabbb596e328aa06632c43a7b9e05d89f32957c47bb97f7cfbf4f5cef3c78b318856f1ce78466e4376ace142367efa489f0c8d1ef00cbae898d81cd2e01b9da31a420fb74045e18ff6476e2f6136982a9c59bbadc53b5628cc656f62abfa14fc3", 0x0, 0x0, 0x7f}, 0x50) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 8 (id=5042): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000500)={r4, 0x2, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x6, 0x1a, 0x14, "00c566fa69812c5b7eaffe637883470f79fa9dcc5675cc9989b00e3904717202f0f762c5169053283584bfcc15682e3335f74d8c71d78eaf7c7bb4df66e6b449", "72710d18e983dce8c284d96497367917dcb63678f04acd7620768e53f0fea6c47eb4e7097abf948f7a4e56d16f0a25cd15b67338e28fc657f3057b8cedde876b", "fa880c78c4c986e58a0631c6217aaeaddd0dc118a98e3a24b795d01a083f6011", [0xc, 0xff80000000000000]}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read$dsp(r5, &(0x7f0000000040)=""/196, 0xc4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) epoll_create1(0x0) kernel console output (not intermixed with test programs): hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.594048][ T29] audit: type=1400 audit(2000000203.533:736): avc: denied { write } for pid=17380 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.694982][T17384] tipc: Started in network mode [ 645.708517][T17384] tipc: Node identity 4, cluster identity 4711 [ 645.722907][T17384] tipc: Node number set to 4 [ 646.083383][T17402] netlink: 798 bytes leftover after parsing attributes in process `syz.5.3935'. [ 646.533024][ T8711] usb 4-1: USB disconnect, device number 7 [ 646.601077][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3939'. [ 646.682059][T17410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.436764][T17409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.454273][T17409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.564260][T17409] vlan0: left promiscuous mode [ 647.894475][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3952'. [ 647.917567][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3944'. [ 647.931936][ T3300] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.941511][ T3300] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.951407][ T3300] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.117686][ T3300] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.128595][ T3300] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.137859][ T3300] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.149395][ T5738] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 649.612840][ T805] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 649.641810][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.653172][ T5738] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 649.663390][ T5738] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 649.674181][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.689314][ T5738] usb 6-1: config 0 descriptor?? [ 649.789862][ T805] usb 2-1: Using ep0 maxpacket: 16 [ 649.835903][ T805] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 649.851562][ T805] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 649.868602][ T805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.885854][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 649.894801][ T805] usb 2-1: SerialNumber: syz [ 649.942592][ T805] cdc_acm 2-1:1.0: skipping garbage [ 650.153837][ T5738] usb 2-1: USB disconnect, device number 10 [ 651.214274][ T5805] usb 6-1: USB disconnect, device number 6 [ 651.386909][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 651.386927][ T29] audit: type=1400 audit(2000000209.323:739): avc: denied { read } for pid=17491 comm="syz.1.3969" path="socket:[54039]" dev="sockfs" ino=54039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 651.550919][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3971'. [ 651.651297][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3973'. [ 651.753435][T17507] input: syz1 as /devices/virtual/input/input21 [ 652.646589][ T805] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 652.903532][ T805] usb 6-1: Using ep0 maxpacket: 16 [ 652.921210][ T805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.946547][ T805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.962514][ T805] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.973759][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.987285][ T805] usb 6-1: Product: syz [ 652.992401][ T805] usb 6-1: Manufacturer: syz [ 652.999187][ T805] usb 6-1: SerialNumber: syz [ 653.033408][ T805] usb 6-1: 0:2 : does not exist [ 653.163419][ T29] audit: type=1400 audit(2000000211.083:740): avc: denied { setcurrent } for pid=17535 comm="syz.3.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 653.241018][ T805] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 653.325365][ T5805] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 653.747643][ T805] usb 6-1: USB disconnect, device number 7 [ 653.784158][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.825170][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.858671][ T5805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.873730][ T5805] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.883961][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.011554][ T5805] usb 2-1: config 0 descriptor?? [ 654.842520][ T5805] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 654.878423][ T5805] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 654.890011][ T5805] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 654.897735][ T5805] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 654.905273][ T5805] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 654.913001][ T5805] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 654.921555][ T5805] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 654.957542][ T5805] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 655.062978][ T5805] usb 2-1: USB disconnect, device number 11 [ 655.779601][ T8710] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 655.787434][ T29] audit: type=1400 audit(2000000213.603:741): avc: denied { accept } for pid=17571 comm="syz.5.3998" path="socket:[54189]" dev="sockfs" ino=54189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 656.043428][ T8710] usb 8-1: Using ep0 maxpacket: 8 [ 656.170705][ T8710] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 656.203104][ T8710] usb 8-1: config 0 has no interface number 0 [ 656.235641][ T8710] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 656.268443][ T8710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.096577][ T8710] usb 8-1: Product: syz [ 657.203299][ T8710] usb 8-1: Manufacturer: syz [ 657.298269][ T8710] usb 8-1: SerialNumber: syz [ 657.312153][ T8710] usb 8-1: config 0 descriptor?? [ 657.533656][ T8710] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 657.552768][ T8710] uvcvideo 8-1:0.31: No valid video chain found. [ 657.573224][ T8710] usb 8-1: USB disconnect, device number 16 [ 659.067000][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.076938][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.086079][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.095663][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.105017][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.114223][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.123843][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.133097][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.142499][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.152252][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4008'. [ 659.376696][ T805] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 659.631503][ T805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.661652][ T805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.678225][ T805] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 659.725677][ T805] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 659.740575][ T805] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.769954][ T805] usb 8-1: config 0 descriptor?? [ 660.037617][T17632] ªªªªªª: renamed from vlan0 (while UP) [ 660.558909][ T805] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 661.193920][T17662] mmap: syz.5.4023 (17662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 661.233073][T17662] netlink: 'syz.5.4023': attribute type 21 has an invalid length. [ 662.170857][ T805] usb 8-1: USB disconnect, device number 17 [ 662.553800][T15414] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 663.174254][ T29] audit: type=1400 audit(2000000220.883:742): avc: denied { write } for pid=17649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.552461][T15414] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 663.746243][ T29] audit: type=1400 audit(2000000221.683:743): avc: denied { write } for pid=17699 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.630322][ T805] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 664.811551][ T805] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 664.845957][ T805] usb 4-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 664.865819][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.881838][ T805] usb 4-1: Product: syz [ 664.888184][ T805] usb 4-1: Manufacturer: syz [ 664.897648][ T805] usb 4-1: SerialNumber: syz [ 665.009434][ T8719] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 665.187620][T17743] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 665.199312][ T8719] usb 8-1: Using ep0 maxpacket: 16 [ 665.209955][ T8719] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.220432][ T8719] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.239991][ T8719] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 665.257853][ T8719] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.274071][ T805] usb 4-1: USB disconnect, device number 8 [ 665.323989][ T29] audit: type=1400 audit(2000000223.263:744): avc: denied { write } for pid=17722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.349941][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.367143][ T8719] usb 8-1: config 0 descriptor?? [ 665.506468][ T29] audit: type=1400 audit(2000000223.443:745): avc: denied { write } for pid=17749 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.720533][ T29] audit: type=1400 audit(2000000223.663:746): avc: denied { setopt } for pid=17723 comm="syz.5.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 666.014339][T17757] __nla_validate_parse: 11 callbacks suppressed [ 666.014489][T17757] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4044'. [ 667.080647][T17771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.116967][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4054'. [ 667.125022][T17771] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 667.169732][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4054'. [ 667.250618][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4055'. [ 667.267574][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4055'. [ 667.335794][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.335938][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4055'. [ 667.353607][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4055'. [ 667.364026][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.399698][ T134] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.792887][T17311] usb 8-1: USB disconnect, device number 18 [ 668.168044][T17803] tipc: Started in network mode [ 668.173204][T17803] tipc: Node identity 7f000001, cluster identity 4711 [ 668.181096][T17803] tipc: Enabling of bearer rejected, failed to enable media [ 668.530580][T17812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4068'. [ 668.542453][T17812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4068'. [ 668.551592][T17812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4068'. [ 669.290088][ T805] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 669.466675][ T805] usb 5-1: Using ep0 maxpacket: 16 [ 669.480977][ T805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.513648][ T805] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 669.538063][ T805] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 669.632043][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.659995][ T805] usb 5-1: config 0 descriptor?? [ 669.679081][T17834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.752754][T17834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.773865][ T29] audit: type=1400 audit(2000000227.713:747): avc: denied { ioctl } for pid=17833 comm="syz.7.4078" path="socket:[55812]" dev="sockfs" ino=55812 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 671.538415][T17865] __nla_validate_parse: 18 callbacks suppressed [ 671.538435][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4087'. [ 671.584735][T17865] team0: Port device team_slave_0 removed [ 671.978918][ T805] usb 5-1: USB disconnect, device number 20 [ 672.608960][T17889] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 672.685167][ T29] audit: type=1326 audit(2000000230.623:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.1.4099" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0900f9ce59 code=0x0 [ 673.096989][T17900] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 673.103538][T17900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 673.111499][T17900] vhci_hcd vhci_hcd.0: Device attached [ 673.124677][T17900] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 673.131223][T17900] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 673.139574][T17900] vhci_hcd vhci_hcd.0: Device attached [ 673.148213][T17900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 673.165810][T17900] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 673.172451][T17900] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 673.181380][T17900] vhci_hcd vhci_hcd.0: Device attached [ 673.191670][T17900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 673.206533][T17900] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 673.213181][T17900] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 673.223838][T17900] vhci_hcd vhci_hcd.0: Device attached [ 673.236175][T17900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 673.349396][T17311] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 673.358500][T15414] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 675.274204][T17900] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 675.419458][T15414] Bluetooth: hci4: command 0x0c1a tx timeout [ 675.420366][T17909] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 676.294685][T17909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 676.310159][T17909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 676.316213][T17909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.322479][T17909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.328428][T17909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 676.365029][T17909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 676.513555][T17907] vhci_hcd: connection closed [ 676.514197][ T13] vhci_hcd vhci_hcd.4: stop threads [ 676.535753][T17905] vhci_hcd: connection closed [ 676.540885][T17903] vhci_hcd: connection closed [ 676.551327][T17901] vhci_hcd: connection reset by peer [ 676.568839][ T13] vhci_hcd vhci_hcd.4: release socket [ 676.577269][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 676.585582][ T13] vhci_hcd vhci_hcd.4: stop threads [ 676.592147][ T13] vhci_hcd vhci_hcd.4: release socket [ 676.601607][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 676.607627][ T13] vhci_hcd vhci_hcd.4: stop threads [ 676.614892][ T13] vhci_hcd vhci_hcd.4: release socket [ 676.622337][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 676.636726][ T13] vhci_hcd vhci_hcd.4: stop threads [ 676.650865][ T13] vhci_hcd vhci_hcd.4: release socket [ 676.662854][T17936] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4109'. [ 676.668636][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 676.939328][ T29] audit: type=1400 audit(2000000234.873:749): avc: denied { write } for pid=17924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.495054][ T29] audit: type=1400 audit(2000000235.433:750): avc: denied { write } for pid=17953 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.589011][T17959] misc userio: The device must be registered before sending interrupts [ 677.993745][ T29] audit: type=1400 audit(2000000235.933:751): avc: denied { write } for pid=17960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.469493][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 678.476657][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout [ 678.482892][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 678.627668][T17311] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 678.753245][ T29] audit: type=1400 audit(2000000236.693:752): avc: denied { write } for pid=17985 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.032714][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 679.046612][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4116'. [ 679.058238][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4116'. [ 679.068459][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4116'. [ 679.077698][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4116'. [ 679.087110][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4116'. [ 679.096294][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4116'. [ 679.108002][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4116'. [ 679.118095][T17992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4116'. [ 679.487899][ T29] audit: type=1400 audit(2000000237.423:753): avc: denied { sqpoll } for pid=18010 comm="syz.1.4122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 679.530939][ T29] audit: type=1400 audit(2000000237.463:754): avc: denied { write } for pid=17987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.573474][ T8710] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 679.672233][ T29] audit: type=1400 audit(2000000237.603:755): avc: denied { write } for pid=18016 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.851196][ T8710] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 679.872521][ T8710] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 679.888190][ T8710] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 679.897553][ T8710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.972271][T17998] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 680.041438][ T8710] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.343591][ T8714] usb usb42-port1: attempt power cycle [ 680.549346][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 680.637650][ T29] audit: type=1400 audit(2000000238.573:756): avc: denied { write } for pid=18023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.855177][ T8710] usb 5-1: USB disconnect, device number 21 [ 681.076053][ T29] audit: type=1400 audit(2000000239.003:757): avc: denied { write } for pid=18048 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.383645][ T8714] usb usb42-port1: unable to enumerate USB device [ 681.739017][ T29] audit: type=1400 audit(2000000239.673:758): avc: denied { write } for pid=18052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.620099][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 682.768954][T18088] syzkaller0: entered promiscuous mode [ 682.791891][T18088] syzkaller0: entered allmulticast mode [ 682.822697][T18091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.859940][T18091] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 682.924823][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.947388][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.961144][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.983979][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.994705][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 683.064273][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 683.064292][ T29] audit: type=1400 audit(2000000241.003:760): avc: denied { write } for pid=18080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.165447][T18105] __nla_validate_parse: 12 callbacks suppressed [ 683.165472][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4140'. [ 683.294382][ T29] audit: type=1400 audit(2000000241.233:761): avc: denied { write } for pid=18108 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.529547][ T8710] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 683.685074][ T29] audit: type=1400 audit(2000000241.623:762): avc: denied { create } for pid=18125 comm="syz.4.4146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 683.706192][ T8710] usb 2-1: Using ep0 maxpacket: 8 [ 683.717714][ T8710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.753862][ T8710] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 683.782319][ T8710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.819098][ T8710] usb 2-1: config 0 descriptor?? [ 683.864628][ T8710] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 683.988759][T18107] infiniband syz1: set active [ 683.994000][T18107] infiniband syz1: added syz_tun [ 684.022752][T18107] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 684.038530][T18107] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 684.056007][T18107] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 684.228943][T18107] RDS/IB: syz1: added [ 684.237937][T18093] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.261032][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.278642][T18107] smc: adding ib device syz1 with port count 1 [ 684.290480][T18093] bridge_slave_0: entered allmulticast mode [ 684.301913][T18107] smc: ib device syz1 port 1 has no pnetid [ 684.312764][T18093] bridge_slave_0: entered promiscuous mode [ 684.344263][T18093] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.362452][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.370476][T18093] bridge_slave_1: entered allmulticast mode [ 684.378092][T18093] bridge_slave_1: entered promiscuous mode [ 684.468597][T18093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.486226][T18147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.506939][T18093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.531517][T18150] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 684.601629][T18093] team0: Port device team_slave_0 added [ 684.635274][T18093] team0: Port device team_slave_1 added [ 684.722646][T18093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.730747][ T29] audit: type=1400 audit(2000000242.673:763): avc: denied { setopt } for pid=18154 comm="syz.4.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.751879][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.780060][T18093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.802364][T18093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.814908][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.841919][T18093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.902778][T18093] hsr_slave_0: entered promiscuous mode [ 684.909802][T18093] hsr_slave_1: entered promiscuous mode [ 684.916306][T18093] debugfs: 'hsr0' already exists in 'hsr' [ 684.924163][T18093] Cannot create hsr debugfs directory [ 685.099572][ T5630] Bluetooth: hci5: command tx timeout [ 685.321539][T18093] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 685.332083][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.340434][T18093] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 685.350976][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.359411][T18093] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 685.369922][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.377989][T18093] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 685.387899][T18093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.507461][T18093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.527969][T18093] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.554640][ T3395] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.561900][ T3395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.591710][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.598957][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.633861][T18169] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4155'. [ 685.748277][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.179544][ T5630] Bluetooth: hci5: command tx timeout [ 687.370933][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 687.390740][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 687.405437][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 687.417699][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 687.430344][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 687.726069][T18093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.236679][T18093] veth0_vlan: entered promiscuous mode [ 688.251387][T18093] veth1_vlan: entered promiscuous mode [ 688.303255][T18093] veth0_macvtap: entered promiscuous mode [ 688.325758][T18093] veth1_macvtap: entered promiscuous mode [ 688.352174][T18093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.368157][T18093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.386371][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.404689][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.424982][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.461334][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.554563][T17311] usb 2-1: USB disconnect, device number 12 [ 688.891809][ T3395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.917664][ T3395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.264433][ T5626] Bluetooth: hci5: command tx timeout [ 689.408450][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.416621][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.500683][ T5626] Bluetooth: hci6: command tx timeout [ 689.628019][T18233] netlink: 798 bytes leftover after parsing attributes in process `syz.4.4163'. [ 689.846026][T18189] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.853909][T18189] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.863388][T18189] bridge_slave_0: entered allmulticast mode [ 689.878769][T18189] bridge_slave_0: entered promiscuous mode [ 689.897991][T18189] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.932725][T18189] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.950098][T18189] bridge_slave_1: entered allmulticast mode [ 689.966294][T18189] bridge_slave_1: entered promiscuous mode [ 690.015140][ T5626] Bluetooth: hci0: unexpected event for opcode 0x0005 [ 690.035689][T18189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.003888][T18189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.278867][T18189] team0: Port device team_slave_0 added [ 691.326689][T18189] team0: Port device team_slave_1 added [ 691.339736][ T5626] Bluetooth: hci5: command tx timeout [ 691.558663][T18189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.579419][ T5626] Bluetooth: hci6: command tx timeout [ 691.586735][T18189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.658577][T18189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.797795][T18189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.852491][T18189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.129532][T18189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.215480][T18270] netlink: 'syz.8.4178': attribute type 11 has an invalid length. [ 692.271703][T18189] hsr_slave_0: entered promiscuous mode [ 692.280914][T18189] hsr_slave_1: entered promiscuous mode [ 692.297319][T18189] debugfs: 'hsr0' already exists in 'hsr' [ 692.311775][T18189] Cannot create hsr debugfs directory [ 692.347807][T18272] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 692.522373][T18276] netlink: set zone limit has 4 unknown bytes [ 693.659553][ T5626] Bluetooth: hci6: command tx timeout [ 693.725336][ T29] audit: type=1400 audit(2000000251.663:764): avc: denied { listen } for pid=18293 comm="syz.1.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 693.751423][ T29] audit: type=1400 audit(2000000251.693:765): avc: denied { bind } for pid=18293 comm="syz.1.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 693.810166][ T29] audit: type=1400 audit(2000000251.693:766): avc: denied { read } for pid=18293 comm="syz.1.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 693.923160][T18296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.392919][T18189] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 694.406412][T18189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.417363][T18189] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 694.445127][T18189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.475344][T18189] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 694.545038][T18189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.563808][T18189] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 694.572795][ T8714] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 694.593133][T18189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.742559][ T8714] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 694.767722][ T8714] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 694.785203][T18315] syzkaller0: entered promiscuous mode [ 694.787122][ T8714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.797193][T18315] syzkaller0: entered allmulticast mode [ 694.808648][ T8714] usb 2-1: Product: syz [ 694.818920][ T8714] usb 2-1: Manufacturer: syz [ 694.832188][ T8714] usb 2-1: SerialNumber: syz [ 694.914438][T18303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 695.707637][ T29] audit: type=1400 audit(2000000253.643:767): avc: denied { map } for pid=18302 comm="syz.1.4192" path="socket:[58301]" dev="sockfs" ino=58301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 695.740889][ T5626] Bluetooth: hci6: command tx timeout [ 695.835917][ T29] audit: type=1400 audit(2000000253.643:768): avc: denied { accept } for pid=18302 comm="syz.1.4192" path="socket:[58301]" dev="sockfs" ino=58301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 700.004200][ T8714] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 700.040666][ T8714] usb 2-1: MIDIStreaming interface descriptor not found [ 700.066080][T18370] misc userio: Invalid payload size [ 700.073847][T18370] misc userio: No port type given on /dev/userio [ 700.096972][T18370] misc userio: The device must be registered before sending interrupts [ 704.595857][ T805] usb 2-1: USB disconnect, device number 13 [ 704.744114][T18410] binder_alloc: 18409: binder_alloc_buf, no vma [ 704.829156][T18411] binder_alloc: 18409: binder_alloc_buf, no vma [ 704.862897][T18189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.885095][T18189] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.934050][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.941269][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.966439][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.973677][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.074262][T18189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.110333][ T29] audit: type=1400 audit(2000000263.053:769): avc: denied { read } for pid=18412 comm="syz.8.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 706.314151][T18189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.921960][ T5738] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 707.111466][ T5738] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 707.162179][ T5738] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 707.177635][ T5738] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.187112][ T5738] usb 9-1: Product: syz [ 707.193217][ T5738] usb 9-1: Manufacturer: syz [ 707.208551][ T5738] usb 9-1: SerialNumber: syz [ 707.221979][T18447] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 707.238129][T18464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.475694][T18189] veth0_vlan: entered promiscuous mode [ 707.516362][T18189] veth1_vlan: entered promiscuous mode [ 707.565520][ T5738] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 707.588856][ T5738] usb 9-1: MIDIStreaming interface descriptor not found [ 707.621506][T18189] veth0_macvtap: entered promiscuous mode [ 707.627883][ T29] audit: type=1400 audit(2000000265.563:770): avc: denied { map } for pid=18480 comm="syz.4.4238" path="socket:[58542]" dev="sockfs" ino=58542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 707.652951][T18189] veth1_macvtap: entered promiscuous mode [ 707.721286][T18189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.758888][T18189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.769699][ T5738] usb 9-1: USB disconnect, device number 2 [ 707.805017][ T3395] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.839126][ T3395] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.900705][ T3395] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.931725][ T3395] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.426754][T11677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.447841][T11677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.562164][T15287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.573912][T15287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.645394][T18499] netlink: 'syz.4.4244': attribute type 1 has an invalid length. [ 708.687322][ T29] audit: type=1400 audit(2000000266.623:771): avc: denied { create } for pid=18498 comm="syz.4.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 708.758760][T18503] netlink: 'syz.4.4244': attribute type 10 has an invalid length. [ 708.817848][T18503] veth0_vlan: left promiscuous mode [ 708.851649][T18503] veth0_vlan: entered promiscuous mode [ 708.875662][T18503] team0: Device veth0_vlan failed to register rx_handler [ 708.964470][T18508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 708.968887][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4249'. [ 709.028699][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4249'. [ 709.038829][T18517] xfrm1: entered promiscuous mode [ 709.051664][T18517] xfrm1: entered allmulticast mode [ 709.184263][T18524] netlink: 'syz.8.4251': attribute type 11 has an invalid length. [ 709.253778][T18527] netlink: 'syz.8.4253': attribute type 1 has an invalid length. [ 709.338476][T18531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18531 comm=syz.8.4253 [ 710.362081][ T29] audit: type=1400 audit(2000000268.303:772): avc: denied { bind } for pid=18551 comm="syz.9.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 710.460306][T18557] syz_tun: entered allmulticast mode [ 710.608476][ T29] audit: type=1400 audit(2000000268.543:773): avc: denied { bind } for pid=18560 comm="syz.8.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 710.674115][T18565] netlink: 'syz.1.4267': attribute type 1 has an invalid length. [ 710.744803][T18565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 710.772156][T18568] bond1: (slave gretap1): making interface the new active one [ 710.794529][T18568] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 710.802086][T18565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18565 comm=syz.1.4267 [ 710.903281][T18575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.064554][T18581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18581 comm=syz.1.4272 [ 711.882995][T18599] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4277'. [ 711.983017][T18606] netlink: 'syz.8.4280': attribute type 12 has an invalid length. [ 712.019980][T18606] netlink: 'syz.8.4280': attribute type 29 has an invalid length. [ 712.052665][T18606] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4280'. [ 712.069207][T18606] netlink: 59 bytes leftover after parsing attributes in process `syz.8.4280'. [ 712.168535][T18614] syzkaller0: entered promiscuous mode [ 712.177948][T18614] syzkaller0: entered allmulticast mode [ 712.319340][ T5863] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 712.983309][T18624] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 712.989983][T18624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 713.038769][T18624] vhci_hcd vhci_hcd.0: Device attached [ 713.046688][ T5863] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 713.063573][ T5863] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 713.078903][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.134028][T18624] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 713.140614][T18624] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 713.208812][T18635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 713.228853][ T5863] usb 5-1: Product: syz [ 713.239099][ T5863] usb 5-1: Manufacturer: syz [ 713.243826][ T5863] usb 5-1: SerialNumber: syz [ 713.249417][T18624] vhci_hcd vhci_hcd.0: Device attached [ 713.265627][T18610] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 713.281798][T18638] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 713.295295][T18624] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 713.295325][T18638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.301991][T18624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 713.302740][T18624] vhci_hcd vhci_hcd.0: Device attached [ 713.353608][ T5805] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 713.742561][T18624] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 713.784319][T18624] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 713.791001][T18624] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 713.802016][T18624] vhci_hcd vhci_hcd.0: Device attached [ 713.857347][T18624] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 714.009985][ T5626] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 714.344345][ T5863] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 714.366699][ T5863] usb 5-1: MIDIStreaming interface descriptor not found [ 714.458984][ T5863] usb 5-1: USB disconnect, device number 22 [ 714.536868][T17925] udevd[17925]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.732139][T18675] syzkaller0: entered promiscuous mode [ 714.737799][T18675] syzkaller0: entered allmulticast mode [ 714.903734][T18681] netlink: 6 bytes leftover after parsing attributes in process `syz.9.4305'. [ 715.456975][T18624] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 715.479608][T18645] vhci_hcd: connection closed [ 715.479834][ T996] vhci_hcd vhci_hcd.1: stop threads [ 715.480284][T18641] vhci_hcd: connection closed [ 715.487837][ T996] vhci_hcd vhci_hcd.1: release socket [ 715.490531][T18629] vhci_hcd: connection closed [ 715.495152][ T996] vhci_hcd vhci_hcd.1: disconnect device [ 715.501438][T18625] vhci_hcd: connection reset by peer [ 715.517269][ T996] vhci_hcd vhci_hcd.1: stop threads [ 715.522981][ T996] vhci_hcd vhci_hcd.1: release socket [ 715.528647][ T996] vhci_hcd vhci_hcd.1: disconnect device [ 715.543548][ T996] vhci_hcd vhci_hcd.1: stop threads [ 715.548941][ T996] vhci_hcd vhci_hcd.1: release socket [ 715.555532][ T996] vhci_hcd vhci_hcd.1: disconnect device [ 715.563159][ T996] vhci_hcd vhci_hcd.1: stop threads [ 715.570347][ T996] vhci_hcd vhci_hcd.1: release socket [ 715.576501][ T996] vhci_hcd vhci_hcd.1: disconnect device [ 715.641313][ T29] audit: type=1400 audit(2000000273.583:774): avc: denied { setopt } for pid=18713 comm="syz.1.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 716.020807][ T29] audit: type=1400 audit(2000000273.963:775): avc: denied { shutdown } for pid=18723 comm="syz.9.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 716.049484][ T29] audit: type=1400 audit(2000000273.963:776): avc: denied { connect } for pid=18723 comm="syz.9.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.075365][ T29] audit: type=1400 audit(2000000273.963:777): avc: denied { setopt } for pid=18723 comm="syz.9.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 718.084034][T18689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.452127][ T5805] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 718.484581][T18743] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 718.491151][T18743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 718.531847][T18743] vhci_hcd vhci_hcd.0: Device attached [ 718.567388][T18748] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 718.574059][T18748] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 718.611313][T18743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 718.631906][T18748] vhci_hcd vhci_hcd.0: Device attached [ 718.690538][T18748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 718.718273][T18748] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 718.724930][T18748] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 718.766365][T18748] vhci_hcd vhci_hcd.0: Device attached [ 718.775637][T18756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 718.784596][T18743] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 718.791223][T18743] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 718.801080][T18743] vhci_hcd vhci_hcd.0: Device attached [ 718.960818][ T5626] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 719.349346][ T8719] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 719.394203][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.405260][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.414502][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.423975][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.433368][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.445641][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.454811][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.456496][T18769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.464918][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.479969][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4331'. [ 719.568439][T18772] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 719.790311][ T8711] usb usb36-port1: attempt power cycle [ 720.028959][ T29] audit: type=1400 audit(2000000277.963:778): avc: denied { map } for pid=18787 comm="syz.1.4340" path="socket:[59284]" dev="sockfs" ino=59284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 720.053860][T18789] __nla_validate_parse: 11 callbacks suppressed [ 720.053881][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4340'. [ 720.213631][T18798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.235055][T18798] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 720.386025][T18802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.387709][ T8711] usb usb36-port1: unable to enumerate USB device [ 720.416608][T18802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.861131][T18756] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 720.885317][T18754] vhci_hcd: connection closed [ 720.885486][T18753] vhci_hcd: connection closed [ 720.894396][ T43] vhci_hcd vhci_hcd.4: stop threads [ 720.898953][T18744] vhci_hcd: connection reset by peer [ 720.899205][T18749] vhci_hcd: connection closed [ 720.926548][ T43] vhci_hcd vhci_hcd.4: release socket [ 720.955600][ T43] vhci_hcd vhci_hcd.4: disconnect device [ 720.963069][ T43] vhci_hcd vhci_hcd.4: stop threads [ 720.968829][ T43] vhci_hcd vhci_hcd.4: release socket [ 720.984318][ T43] vhci_hcd vhci_hcd.4: disconnect device [ 721.001067][T18822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.002242][ T43] vhci_hcd vhci_hcd.4: stop threads [ 721.029121][ T43] vhci_hcd vhci_hcd.4: release socket [ 721.038391][ T43] vhci_hcd vhci_hcd.4: disconnect device [ 721.045839][ T43] vhci_hcd vhci_hcd.4: stop threads [ 721.051473][ T43] vhci_hcd vhci_hcd.4: release socket [ 721.057042][ T43] vhci_hcd vhci_hcd.4: disconnect device [ 721.187263][T18831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.260038][T18834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=18834 comm=syz.1.4359 [ 721.602214][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4366'. [ 722.397057][T18861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.784377][T18879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.679156][T18892] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 723.685737][T18892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 723.699507][T18892] vhci_hcd vhci_hcd.0: Device attached [ 723.734401][T18892] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 723.741407][T18892] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 723.790528][T18892] vhci_hcd vhci_hcd.0: Device attached [ 723.802956][T18905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 723.870385][T18905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 723.888562][T18892] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(14) [ 723.895219][T18892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 723.912153][T18892] vhci_hcd vhci_hcd.0: Device attached [ 723.924533][T18905] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(19) [ 723.931212][T18905] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 723.953702][T18905] vhci_hcd vhci_hcd.0: Device attached [ 724.217165][ T805] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 724.359954][T18905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 724.449741][ T8719] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 725.184825][ T29] audit: type=1400 audit(2000000283.113:779): avc: denied { write } for pid=18918 comm="syz.9.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 725.361118][T18923] smc: removing ib device syz1 [ 725.798441][T17311] usb usb42-port1: attempt power cycle [ 725.805434][T18923] smbdirect: ib_dev[syz1] removed [ 726.398013][T17311] usb usb42-port1: unable to enumerate USB device [ 728.999634][T18905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 729.011752][T18905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 729.034603][T18905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 729.051257][T18905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 729.067991][T18905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 729.092678][T18905] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 729.105629][T18905] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 730.202985][T18905] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 730.215364][T18905] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 730.229396][T18905] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 730.691187][T18953] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 730.697766][T18953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 730.706930][T18953] vhci_hcd vhci_hcd.0: Device attached [ 730.714029][T18905] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 730.721497][T18957] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 730.728046][T18957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 730.738593][T18957] vhci_hcd vhci_hcd.0: Device attached [ 730.746767][T18951] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 730.777617][T18949] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(14) [ 730.784295][T18949] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 730.811346][T18949] vhci_hcd vhci_hcd.0: Device attached [ 730.822803][T18949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 730.834040][T18949] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(18) [ 730.834071][T18949] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 730.834149][T18949] vhci_hcd vhci_hcd.0: Device attached [ 730.847089][T18967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.878486][T18907] vhci_hcd: connection closed [ 730.878915][ T13] vhci_hcd vhci_hcd.7: stop threads [ 730.884241][T18911] vhci_hcd: connection closed [ 730.895966][T18902] vhci_hcd: connection closed [ 730.901005][T18894] vhci_hcd: connection reset by peer [ 730.904870][T18949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 730.948624][T18968] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 730.955776][ T8719] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 730.995960][ T5630] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 731.011370][ T13] vhci_hcd vhci_hcd.7: release socket [ 731.017207][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 731.024440][ T13] vhci_hcd vhci_hcd.7: stop threads [ 731.033391][ T13] vhci_hcd vhci_hcd.7: release socket [ 731.038963][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 731.045440][ T13] vhci_hcd vhci_hcd.7: stop threads [ 731.051506][ T13] vhci_hcd vhci_hcd.7: release socket [ 731.062070][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 731.071663][ T13] vhci_hcd vhci_hcd.7: stop threads [ 731.076959][ T13] vhci_hcd vhci_hcd.7: release socket [ 731.082617][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 731.099359][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 731.099423][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout [ 731.105726][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 731.112357][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 731.130419][ T805] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 731.143488][ T29] audit: type=1400 audit(2000000289.083:780): avc: denied { setopt } for pid=18969 comm="syz.9.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 731.264790][T18975] syzkaller0: entered promiscuous mode [ 731.284373][T18975] syzkaller0: entered allmulticast mode [ 731.434977][ T29] audit: type=1400 audit(2000000289.373:781): avc: denied { connect } for pid=18985 comm="syz.7.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 731.621332][ T29] audit: type=1400 audit(2000000289.393:782): avc: denied { ioctl } for pid=18985 comm="syz.7.4403" path="socket:[60689]" dev="sockfs" ino=60689 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 731.651647][ T29] audit: type=1400 audit(2000000289.453:783): avc: denied { getopt } for pid=18985 comm="syz.7.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 732.119109][ T29] audit: type=1400 audit(2000000289.493:784): avc: denied { getopt } for pid=18985 comm="syz.7.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 732.220402][T18970] Bluetooth: hci6: command 0x0c1a tx timeout [ 732.312822][T18997] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 732.319394][T18997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 732.332063][T18997] vhci_hcd vhci_hcd.0: Device attached [ 732.343353][T18997] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 732.349930][T18997] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 732.368529][T18997] vhci_hcd vhci_hcd.0: Device attached [ 732.385020][T18997] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 732.419404][T18997] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(14) [ 732.426086][T18997] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 732.472200][T19012] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 732.502754][T18997] vhci_hcd vhci_hcd.0: Device attached [ 732.521188][T18997] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(16) [ 732.527838][T18997] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 732.551482][T18997] vhci_hcd vhci_hcd.0: Device attached [ 732.572983][T18997] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 732.581644][ T5805] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 732.736268][T18970] Bluetooth: hci6: unexpected event for opcode 0x0c03 [ 732.890444][ T8711] usb usb48-port1: attempt power cycle [ 733.019318][T18949] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 733.059138][T18965] vhci_hcd: connection closed [ 733.061689][ T43] vhci_hcd vhci_hcd.8: stop threads [ 733.073679][T18962] vhci_hcd: connection closed [ 733.074163][T18958] vhci_hcd: connection closed [ 733.079342][ T43] vhci_hcd vhci_hcd.8: release socket [ 733.080041][T18955] vhci_hcd: connection reset by peer [ 733.089978][ T43] vhci_hcd vhci_hcd.8: disconnect device [ 733.102263][ T43] vhci_hcd vhci_hcd.8: stop threads [ 733.108841][ T43] vhci_hcd vhci_hcd.8: release socket [ 733.117519][ T43] vhci_hcd vhci_hcd.8: disconnect device [ 733.140728][ T43] vhci_hcd vhci_hcd.8: stop threads [ 733.146783][ T43] vhci_hcd vhci_hcd.8: release socket [ 733.154790][ T43] vhci_hcd vhci_hcd.8: disconnect device [ 733.161225][ T43] vhci_hcd vhci_hcd.8: stop threads [ 733.169303][ T43] vhci_hcd vhci_hcd.8: release socket [ 733.178643][ T43] vhci_hcd vhci_hcd.8: disconnect device [ 733.927955][ T8711] usb usb48-port1: unable to enumerate USB device [ 734.639739][T19064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.649744][T19064] IPv6: NLM_F_CREATE should be set when creating new route [ 734.790096][T19012] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 734.800556][T18970] Bluetooth: hci4: command 0x0c1a tx timeout [ 734.819303][T18997] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 734.897608][T19064] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.904944][T19064] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.087197][T19064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.125075][T19064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.354950][ T13] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.386524][ T13] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.402259][ T13] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.426436][ T13] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.436768][ T13] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.446060][ T13] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.737851][T19009] vhci_hcd: connection closed [ 735.738072][T19019] vhci_hcd: connection closed [ 735.746622][T18998] vhci_hcd: connection reset by peer [ 735.749052][ T43] vhci_hcd vhci_hcd.9: stop threads [ 735.752385][T19001] vhci_hcd: connection closed [ 736.723073][ T43] vhci_hcd vhci_hcd.9: release socket [ 736.814246][ T8719] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 736.865484][T19012] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 736.930667][ T43] vhci_hcd vhci_hcd.9: disconnect device [ 736.956847][T19012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 736.977620][ T43] vhci_hcd vhci_hcd.9: stop threads [ 736.991496][T19012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 737.001059][ T43] vhci_hcd vhci_hcd.9: release socket [ 737.016390][T19012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 737.026200][ T43] vhci_hcd vhci_hcd.9: disconnect device [ 737.049600][T19012] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 737.056193][T19012] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 737.062285][ T43] vhci_hcd vhci_hcd.9: stop threads [ 737.071857][ T43] vhci_hcd vhci_hcd.9: release socket [ 737.079078][ T43] vhci_hcd vhci_hcd.9: disconnect device [ 737.085126][ T43] vhci_hcd vhci_hcd.9: stop threads [ 737.090913][ T43] vhci_hcd vhci_hcd.9: release socket [ 737.096427][ T43] vhci_hcd vhci_hcd.9: disconnect device [ 737.124074][T19105] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 737.130645][T19105] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 737.157062][T19105] vhci_hcd vhci_hcd.0: Device attached [ 737.200709][T19105] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 737.207272][T19105] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 737.254647][T19112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 737.320396][T19105] vhci_hcd vhci_hcd.0: Device attached [ 737.336124][T19118] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(16) [ 737.342793][T19118] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 737.371488][ T29] audit: type=1400 audit(2000000295.313:785): avc: denied { getopt } for pid=19110 comm="syz.9.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 737.374856][T19118] vhci_hcd vhci_hcd.0: Device attached [ 737.397760][T19112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 737.400130][ T8711] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 737.456174][T19125] openvswitch: netlink: nsh attr 0 has unexpected len 6 expected 0 [ 737.458753][T19105] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 737.464372][T19125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.470733][T19105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 737.505395][T19105] vhci_hcd vhci_hcd.0: Device attached [ 737.598069][T19105] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 737.671285][T19105] Bluetooth: hci0: Opcode 0x0c03 failed: -38 [ 737.710770][T19119] vhci_hcd: connection closed [ 737.711513][T19106] vhci_hcd: connection reset by peer [ 737.721709][T19122] vhci_hcd: connection closed [ 737.752211][T19108] vhci_hcd: connection closed [ 737.845301][ T5805] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 737.847381][ T134] vhci_hcd vhci_hcd.7: stop threads [ 737.880154][ T134] vhci_hcd vhci_hcd.7: release socket [ 737.885723][ T134] vhci_hcd vhci_hcd.7: disconnect device [ 737.915608][ T134] vhci_hcd vhci_hcd.7: stop threads [ 737.924034][ T134] vhci_hcd vhci_hcd.7: release socket [ 737.930374][ T134] vhci_hcd vhci_hcd.7: disconnect device [ 737.936352][ T134] vhci_hcd vhci_hcd.7: stop threads [ 737.942386][ T134] vhci_hcd vhci_hcd.7: release socket [ 738.669422][ T134] vhci_hcd vhci_hcd.7: disconnect device [ 738.731546][ T134] vhci_hcd vhci_hcd.7: stop threads [ 738.738778][ T134] vhci_hcd vhci_hcd.7: release socket [ 738.751127][ T134] vhci_hcd vhci_hcd.7: disconnect device [ 738.883338][ T5738] usb usb50-port1: attempt power cycle [ 739.082427][T18970] Bluetooth: hci3: command 0x0c1a tx timeout [ 739.088641][T18970] Bluetooth: hci2: command 0x0c1a tx timeout [ 739.095042][T18970] Bluetooth: hci1: command 0x0c1a tx timeout [ 739.101171][T15414] Bluetooth: hci6: command 0x0c1a tx timeout [ 739.107217][T18970] Bluetooth: hci5: command 0x0c1a tx timeout [ 739.341786][T19150] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 739.582136][T19165] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 739.710602][ T5738] usb usb50-port1: unable to enumerate USB device [ 739.747308][ T29] audit: type=1400 audit(2000000297.683:786): avc: denied { bind } for pid=19161 comm="syz.4.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 739.779179][T19049] Set syz1 is full, maxelem 65536 reached [ 739.870231][T17311] usb usb52-port1: attempt power cycle [ 740.936461][T17311] usb usb52-port1: unable to enumerate USB device [ 741.130291][T19069] IPVS: starting estimator thread 0... [ 741.148450][T19208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4464'. [ 741.179592][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 741.179600][T18970] Bluetooth: hci6: command 0x0c1a tx timeout [ 741.229309][T19207] IPVS: using max 56 ests per chain, 134400 per kthread [ 741.347173][T19220] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 742.539517][ T8711] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 743.259389][T18970] Bluetooth: hci5: command 0x0c1a tx timeout [ 743.810686][T19067] usb usb48-port1: attempt power cycle [ 743.941785][T19198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.348092][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4476'. [ 744.862663][T19067] usb usb48-port1: unable to enumerate USB device [ 745.055220][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4482'. [ 745.106140][ T3300] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.117886][ T3300] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.144937][ T3300] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.161637][T19264] netlink: 248 bytes leftover after parsing attributes in process `syz.8.4483'. [ 745.291294][T19271] netlink: 'syz.1.4485': attribute type 32 has an invalid length. [ 746.081670][T19067] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 746.195973][T19300] netlink: 'syz.7.4497': attribute type 1 has an invalid length. [ 746.232284][T19300] netlink: 1280 bytes leftover after parsing attributes in process `syz.7.4497'. [ 746.280960][T19067] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 746.308393][T19067] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 746.325863][T19067] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.336831][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4499'. [ 746.358715][T19067] usb 9-1: Product: syz [ 746.373924][T19067] usb 9-1: Manufacturer: syz [ 746.389964][T19067] usb 9-1: SerialNumber: syz [ 746.414846][T19269] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 746.480426][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4501'. [ 746.498067][T19311] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4501'. [ 746.570950][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4501'. [ 746.769450][ T8711] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 746.803604][T19323] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4507'. [ 747.159759][T19334] netlink: 'syz.9.4510': attribute type 1 has an invalid length. [ 747.188724][T19067] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.197383][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.201293][T19067] usb 9-1: MIDIStreaming interface descriptor not found [ 747.626810][ T8711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.638710][T19334] netlink: 1280 bytes leftover after parsing attributes in process `syz.9.4510'. [ 747.723530][ T8711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.757040][ T8711] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 747.777941][ T8711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.808164][ T8711] usb 8-1: config 0 descriptor?? [ 747.816756][T19067] usb 9-1: USB disconnect, device number 3 [ 747.845077][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4511'. [ 747.868665][T19343] pimreg: entered allmulticast mode [ 747.886520][T19344] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4512'. [ 747.926360][T19347] pimreg: left allmulticast mode [ 747.987810][T19350] udevd[19350]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.275140][T19360] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 748.281720][T19360] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 748.311213][T19360] vhci_hcd vhci_hcd.0: Device attached [ 748.325768][ T8711] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 748.349424][T19366] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 748.356078][T19366] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 748.417587][T19360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 748.427651][T19366] vhci_hcd vhci_hcd.0: Device attached [ 748.444932][ T8711] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 748.466087][ T8711] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 748.488831][ T8711] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 748.491185][T19360] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(14) [ 748.498595][T19365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=19365 comm=syz.8.4516 [ 748.503991][T19360] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 748.538027][T19366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 748.546940][T19360] vhci_hcd vhci_hcd.0: Device attached [ 748.552961][ T8711] usb 8-1: USB disconnect, device number 19 [ 748.561150][T19085] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 748.599655][T19360] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(16) [ 748.606313][T19360] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 748.631840][T19360] vhci_hcd vhci_hcd.0: Device attached [ 748.646266][T19360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 748.687766][T19384] netlink: 'syz.1.4522': attribute type 1 has an invalid length. [ 748.697273][T19384] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.4522'. [ 748.767204][T18970] Bluetooth: hci6: unexpected event for opcode 0x0c03 [ 749.174690][T19417] netlink: 'syz.4.4534': attribute type 1 has an invalid length. [ 750.709419][T19360] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 750.779891][T18970] Bluetooth: hci4: command 0x0c1a tx timeout [ 750.787643][T19366] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 750.985791][T19463] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 751.115676][T19469] bridge0: port 3(vlan2) entered blocking state [ 751.122651][T19469] bridge0: port 3(vlan2) entered disabled state [ 751.129128][T19469] vlan2: entered allmulticast mode [ 751.134305][T19469] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 751.143453][T19469] vlan2: entered promiscuous mode [ 751.148493][T19469] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 751.722416][T19366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 751.733506][T19366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 751.739697][T19366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 751.745706][T19366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 751.751826][T19366] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 751.757849][T19366] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 751.800904][T19377] vhci_hcd: connection closed [ 751.801154][T19375] vhci_hcd: connection closed [ 751.806148][ T43] vhci_hcd vhci_hcd.9: stop threads [ 751.817300][T19367] vhci_hcd: connection closed [ 751.822038][T19362] vhci_hcd: connection reset by peer [ 751.834414][ T43] vhci_hcd vhci_hcd.9: release socket [ 751.870934][ T43] vhci_hcd vhci_hcd.9: disconnect device [ 751.901177][ T43] vhci_hcd vhci_hcd.9: stop threads [ 751.917275][ T43] vhci_hcd vhci_hcd.9: release socket [ 751.940956][ T43] vhci_hcd vhci_hcd.9: disconnect device [ 751.960399][ T43] vhci_hcd vhci_hcd.9: stop threads [ 751.974138][T19489] tipc: Started in network mode [ 751.989416][ T43] vhci_hcd vhci_hcd.9: release socket [ 751.994951][T19489] tipc: Node identity ac14140f, cluster identity 4711 [ 752.002139][ T43] vhci_hcd vhci_hcd.9: disconnect device [ 752.009605][T19489] tipc: New replicast peer: 255.255.255.255 [ 752.015643][ T43] vhci_hcd vhci_hcd.9: stop threads [ 752.027490][T19489] tipc: Enabled bearer , priority 10 [ 752.033825][ T43] vhci_hcd vhci_hcd.9: release socket [ 752.044115][ T43] vhci_hcd vhci_hcd.9: disconnect device [ 752.072384][T19493] __nla_validate_parse: 7 callbacks suppressed [ 752.072402][T19493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4560'. [ 752.201987][T19501] nbd: couldn't find a device at index 0 [ 752.283713][T19505] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 752.290305][T19505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 752.298089][T19505] vhci_hcd vhci_hcd.0: Device attached [ 752.301744][ T8711] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 752.312145][T19508] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4564'. [ 752.340141][T19505] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 752.346714][T19505] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 752.360599][T19505] vhci_hcd vhci_hcd.0: Device attached [ 752.367278][T19505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 752.384563][T19505] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(14) [ 752.390820][T19511] tipc: Enabled bearer , priority 0 [ 752.391212][T19505] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 752.411659][T19505] vhci_hcd vhci_hcd.0: Device attached [ 752.421670][T19505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 752.434120][T19505] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(18) [ 752.434324][T19511] syzkaller0: entered promiscuous mode [ 752.440767][T19505] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 752.441577][T19505] vhci_hcd vhci_hcd.0: Device attached [ 752.466800][T19511] syzkaller0: entered allmulticast mode [ 752.475618][T19505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 752.490998][ T8711] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 752.505020][ T8711] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 752.508098][T19511] tipc: Resetting bearer [ 752.519265][ T8711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.529498][T17311] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 752.542243][ T8719] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 752.548902][ T8711] usb 8-1: Product: syz [ 752.560648][ T8711] usb 8-1: Manufacturer: syz [ 752.569147][ T8711] usb 8-1: SerialNumber: syz [ 752.575620][T19509] tipc: Resetting bearer [ 752.583688][T19495] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 752.613640][T19509] tipc: Disabling bearer [ 752.614813][T18970] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 752.691072][T17311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.719383][T17311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.739113][T17311] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 752.748420][T17311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.758446][T17311] usb 10-1: config 0 descriptor?? [ 753.013941][ T8711] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 753.023081][ T8711] usb 8-1: MIDIStreaming interface descriptor not found [ 753.095549][ T8711] usb 8-1: USB disconnect, device number 20 [ 753.142782][ T5738] tipc: Node number set to 2886997007 [ 753.146177][T19348] udevd[19348]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.181765][T17311] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 753.202844][T17311] pyra 0003:1E7D:2CF6.000C: item fetching failed at offset 5/7 [ 753.225551][T17311] pyra 0003:1E7D:2CF6.000C: parse failed [ 753.233322][T17311] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -22 [ 753.382682][T17311] usb 10-1: USB disconnect, device number 2 [ 753.731511][T19085] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 753.741960][T18970] Bluetooth: hci1: command 0x0c1a tx timeout [ 753.819552][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 753.825776][T15414] Bluetooth: hci2: command 0x0c1a tx timeout [ 753.833312][T18970] Bluetooth: hci6: command 0x0c1a tx timeout [ 754.372176][T19546] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4574'. [ 754.427908][T19548] ipip0: entered promiscuous mode [ 754.540803][T19505] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 754.701393][T19556] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4578'. [ 754.710495][T18970] Bluetooth: hci4: command 0x0c1a tx timeout [ 754.722274][T19519] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 754.729015][T19556] openvswitch: netlink: Flow actions attr not present in new flow. [ 755.039816][T19067] usb usb52-port1: attempt power cycle [ 755.567419][T19519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 755.580252][T19519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 755.586646][T19519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 755.594030][T19519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 755.602060][T19519] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 755.621222][T19067] usb usb52-port1: unable to enumerate USB device [ 755.628002][T19519] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 755.687789][T19516] vhci_hcd: connection closed [ 755.688200][ T13] vhci_hcd vhci_hcd.8: stop threads [ 755.698330][T19506] vhci_hcd: connection reset by peer [ 755.703916][T19513] vhci_hcd: connection closed [ 755.704187][T19510] vhci_hcd: connection closed [ 755.737851][ T13] vhci_hcd vhci_hcd.8: release socket [ 755.770023][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 755.783861][ T13] vhci_hcd vhci_hcd.8: stop threads [ 755.808714][ T13] vhci_hcd vhci_hcd.8: release socket [ 755.833212][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 755.862768][ T13] vhci_hcd vhci_hcd.8: stop threads [ 755.868994][T19575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.885736][ T13] vhci_hcd vhci_hcd.8: release socket [ 755.910931][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 755.926098][ T13] vhci_hcd vhci_hcd.8: stop threads [ 755.941521][ T13] vhci_hcd vhci_hcd.8: release socket [ 755.964232][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 756.125333][ T29] audit: type=1400 audit(2000000314.063:787): avc: denied { connect } for pid=19579 comm="syz.8.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 757.649352][ T8719] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 757.660074][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 757.666204][T15414] Bluetooth: hci3: command 0x0c1a tx timeout [ 757.672675][T15414] Bluetooth: hci2: command 0x0c1a tx timeout [ 757.678741][T15414] Bluetooth: hci1: command 0x0c1a tx timeout [ 757.685542][T18970] Bluetooth: hci6: command 0x0c1a tx timeout [ 757.997989][ T29] audit: type=1400 audit(2000000315.933:788): avc: denied { listen } for pid=19635 comm="syz.4.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 758.029652][T19636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19636 comm=syz.4.4606 [ 758.053173][ T29] audit: type=1400 audit(2000000315.963:789): avc: denied { accept } for pid=19635 comm="syz.4.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 758.056207][T19638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.081297][T19636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19636 comm=syz.4.4606 [ 758.082059][T19636] netlink: 'syz.4.4606': attribute type 1 has an invalid length. [ 758.281866][T19652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.300148][T19652] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 758.725855][T19672] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 758.732458][T19672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 758.748417][T19672] vhci_hcd vhci_hcd.0: Device attached [ 758.762313][T19672] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 758.768976][T19672] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 758.787719][T19672] vhci_hcd vhci_hcd.0: Device attached [ 758.799652][T19672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.813792][T19672] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(14) [ 758.820454][T19672] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 758.857412][T19672] vhci_hcd vhci_hcd.0: Device attached [ 758.869533][T19681] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.887010][T19672] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(16) [ 758.893670][T19672] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 758.902601][T19672] vhci_hcd vhci_hcd.0: Device attached [ 758.963607][T18970] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 758.979787][T19083] usb 50-1: SetAddress Request (7) to port 0 [ 758.987697][T19083] usb 50-1: new SuperSpeed USB device number 7 using vhci_hcd [ 759.415741][T19697] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 759.427333][T19695] netlink: 'syz.9.4625': attribute type 13 has an invalid length. [ 759.910750][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4633'. [ 760.164469][T19714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19714 comm=syz.9.4633 [ 760.197450][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4633'. [ 760.463025][T19716] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 760.550835][T19729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.678859][T19734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4641'. [ 760.680760][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4636'. [ 760.940786][T19672] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 760.962750][T19682] vhci_hcd: connection closed [ 760.962971][T19679] vhci_hcd: connection closed [ 760.997546][T19675] vhci_hcd: connection closed [ 761.005511][T19677] vhci_hcd: connection reset by peer [ 761.053991][ T3395] vhci_hcd vhci_hcd.8: stop threads [ 761.060285][ T3395] vhci_hcd vhci_hcd.8: release socket [ 761.065935][ T3395] vhci_hcd vhci_hcd.8: disconnect device [ 761.079954][ T3395] vhci_hcd vhci_hcd.8: stop threads [ 761.085784][ T3395] vhci_hcd vhci_hcd.8: release socket [ 761.091927][ T3395] vhci_hcd vhci_hcd.8: disconnect device [ 761.169539][ T3395] vhci_hcd vhci_hcd.8: stop threads [ 761.177675][ T3395] vhci_hcd vhci_hcd.8: release socket [ 761.191202][ T3395] vhci_hcd vhci_hcd.8: disconnect device [ 761.218316][ T3395] vhci_hcd vhci_hcd.8: stop threads [ 761.231283][ T3395] vhci_hcd vhci_hcd.8: release socket [ 761.246005][ T3395] vhci_hcd vhci_hcd.8: disconnect device [ 761.488711][T19766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.520131][T19766] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 761.582351][T19769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.053734][T19767] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 762.480275][ T5738] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 762.556546][T19804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4660'. [ 762.567314][T19804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4660'. [ 762.592030][T19804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4660'. [ 762.619626][T19804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4660'. [ 762.641219][ T5738] usb 5-1: Using ep0 maxpacket: 16 [ 762.644947][T19804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4660'. [ 762.650905][ T5738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.675303][ T5738] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.677576][T19804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4660'. [ 762.689398][ T5738] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 762.710398][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.727985][ T5738] usb 5-1: config 0 descriptor?? [ 763.223678][ T29] audit: type=1400 audit(2000000321.163:790): avc: denied { create } for pid=19818 comm="syz.7.4667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 764.139444][T19083] usb 50-1: device descriptor read/8, error -110 [ 764.249746][T19083] usb usb50-port1: attempt power cycle [ 764.319788][ T8719] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 764.580996][T19771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 765.435763][T19851] tipc: Enabling of bearer rejected, already enabled [ 765.482345][T19067] usb 5-1: USB disconnect, device number 23 [ 765.982905][T19083] usb usb50-port1: unable to enumerate USB device [ 766.410740][ T29] audit: type=1400 audit(2000000324.343:791): avc: denied { cmd } for pid=19890 comm="syz.8.4691" path="socket:[64132]" dev="sockfs" ino=64132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 766.513307][ T29] audit: type=1400 audit(2000000324.453:792): avc: denied { ioctl } for pid=19885 comm="syz.7.4689" path="socket:[64130]" dev="sockfs" ino=64130 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 766.543008][ T8719] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 766.719417][ T8719] usb 5-1: Using ep0 maxpacket: 16 [ 766.729938][ T8719] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.740579][ T8719] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 766.750180][ T8719] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 766.760429][ T8719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.775149][ T8719] usb 5-1: config 0 descriptor?? [ 767.235216][T19913] loop5: detected capacity change from 0 to 7 [ 767.253539][T19913] Dev loop5: unable to read RDB block 7 [ 767.262711][T19913] loop5: unable to read partition table [ 767.268638][T19913] loop5: partition table beyond EOD, truncated [ 767.277568][T19913] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 767.329078][T19915] netlink: 'syz.7.4698': attribute type 13 has an invalid length. [ 767.349884][T19915] mac80211_hwsim hwsim22 syzkaller0: Caught tx_queue_len zero misconfig [ 767.421325][T19919] __nla_validate_parse: 15 callbacks suppressed [ 767.421346][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4688'. [ 768.728131][T19861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 768.986714][T19950] netlink: 'syz.9.4711': attribute type 13 has an invalid length. [ 769.070021][ T5738] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 769.462247][ T5738] usb 8-1: Using ep0 maxpacket: 16 [ 769.483033][ T5738] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.507779][ T5738] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 769.522809][ T8719] usb 5-1: USB disconnect, device number 24 [ 769.541656][ T5738] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.566617][ T5738] usb 8-1: config 0 descriptor?? [ 769.696260][T19967] binder: 19966:19967 ioctl 40046205 0 returned -22 [ 769.712520][ T29] audit: type=1400 audit(2000000327.653:793): avc: denied { mount } for pid=19964 comm="syz.4.4718" name="/" dev="autofs" ino=64259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 770.061085][T19971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.093781][T19973] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 770.187948][ T5738] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 770.608024][ T5738] usb 8-1: USB disconnect, device number 21 [ 770.920857][ T8719] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 771.447329][ T8719] usb 10-1: Using ep0 maxpacket: 16 [ 771.724456][ T8719] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.822295][ T8719] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.881255][ T8719] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 771.892997][ T8719] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.913976][ T8719] usb 10-1: config 0 descriptor?? [ 772.091947][T20010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.107828][T20010] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 772.643464][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4726'. [ 773.659171][T20030] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4740'. [ 773.731413][T20030] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4740'. [ 774.592833][T20037] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 774.603221][T20037] CPU: 1 UID: 0 PID: 20037 Comm: syz.1.4741 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.603262][T20037] Tainted: [L]=SOFTLOCKUP [ 774.603272][T20037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.603286][T20037] Call Trace: [ 774.603297][T20037] [ 774.603307][T20037] dump_stack_lvl+0x100/0x190 [ 774.603341][T20037] sysfs_warn_dup.cold+0x1c/0x28 [ 774.603372][T20037] sysfs_do_create_link_sd+0x113/0x140 [ 774.603404][T20037] sysfs_create_link+0x61/0xc0 [ 774.603435][T20037] device_add+0x675/0x1950 [ 774.603465][T20037] ? __pfx_device_add+0x10/0x10 [ 774.603488][T20037] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 774.603517][T20037] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 774.603545][T20037] wiphy_register+0x1edd/0x2d90 [ 774.603569][T20037] ? __rtnl_unlock+0xb9/0xf0 [ 774.603600][T20037] ? __pfx_wiphy_register+0x10/0x10 [ 774.603626][T20037] ? __asan_memset+0x23/0x50 [ 774.603654][T20037] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 774.603708][T20037] ieee80211_register_hw+0x3055/0x4570 [ 774.603758][T20037] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 774.603791][T20037] ? __pfx___debug_object_init+0x10/0x10 [ 774.603833][T20037] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 774.603861][T20037] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 774.603888][T20037] ? __hrtimer_setup+0x208/0x330 [ 774.603920][T20037] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 774.603972][T20037] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 774.604008][T20037] ? __asan_memcpy+0x3c/0x60 [ 774.604041][T20037] hwsim_new_radio_nl+0xc5f/0x1370 [ 774.604098][T20037] ? rcu_is_watching+0x12/0xc0 [ 774.604132][T20037] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 774.604174][T20037] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 774.604206][T20037] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 774.604244][T20037] genl_family_rcv_msg_doit+0x214/0x300 [ 774.604279][T20037] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 774.604319][T20037] ? bpf_lsm_capable+0x9/0x10 [ 774.604341][T20037] ? security_capable+0x80/0x260 [ 774.604365][T20037] ? ns_capable+0xd2/0xf0 [ 774.604397][T20037] genl_rcv_msg+0x560/0x800 [ 774.604433][T20037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.604465][T20037] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 774.604500][T20037] ? irqentry_exit+0x24d/0x7e0 [ 774.604529][T20037] ? lockdep_hardirqs_on+0x78/0x100 [ 774.604563][T20037] netlink_rcv_skb+0x159/0x420 [ 774.604593][T20037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.604630][T20037] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 774.604666][T20037] ? rcu_is_watching+0x12/0xc0 [ 774.604709][T20037] genl_rcv+0x28/0x40 [ 774.604737][T20037] netlink_unicast+0x585/0x850 [ 774.604769][T20037] ? __pfx_netlink_unicast+0x10/0x10 [ 774.604805][T20037] netlink_sendmsg+0x8b0/0xda0 [ 774.604839][T20037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.604865][T20037] ? __might_fault+0x30/0x140 [ 774.604908][T20037] ____sys_sendmsg+0x9e1/0xb70 [ 774.604935][T20037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.604966][T20037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.605006][T20037] ___sys_sendmsg+0x190/0x1e0 [ 774.605037][T20037] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.605063][T20037] ? find_held_lock+0x2b/0x80 [ 774.605083][T20037] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 774.605144][T20037] __sys_sendmsg+0x170/0x220 [ 774.605166][T20037] ? __pfx___sys_sendmsg+0x10/0x10 [ 774.605184][T20037] ? __pfx___schedule+0x10/0x10 [ 774.605220][T20037] ? rcu_is_watching+0x12/0xc0 [ 774.605253][T20037] do_syscall_64+0x10b/0xf80 [ 774.605281][T20037] ? clear_bhb_loop+0x40/0x90 [ 774.605305][T20037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.605325][T20037] RIP: 0033:0x7f0900f9ce59 [ 774.605344][T20037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.605363][T20037] RSP: 002b:00007f0901e93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.605383][T20037] RAX: ffffffffffffffda RBX: 00007f0901216180 RCX: 00007f0900f9ce59 [ 774.605395][T20037] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000b [ 774.605408][T20037] RBP: 00007f0901032d6f R08: 0000000000000000 R09: 0000000000000000 [ 774.605419][T20037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.605430][T20037] R13: 00007f0901216218 R14: 00007f0901216180 R15: 00007ffe9a859b08 [ 774.605457][T20037] [ 775.306324][T19067] usb 10-1: USB disconnect, device number 3 [ 776.353658][T20074] netlink: 248 bytes leftover after parsing attributes in process `syz.7.4755'. [ 776.368944][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4754'. [ 776.382329][T20075] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4754'. [ 776.587545][T20085] veth0_macvtap: Caught tx_queue_len zero misconfig [ 776.661295][T19067] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 776.819484][T19067] usb 9-1: Using ep0 maxpacket: 16 [ 776.833185][T19067] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.853973][T19067] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 776.876583][T19067] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 776.886216][T19067] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.899114][T19067] usb 9-1: config 0 descriptor?? [ 777.003115][T20115] netlink: 248 bytes leftover after parsing attributes in process `syz.9.4769'. [ 777.514002][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4756'. [ 777.951351][T20141] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 779.669848][ T8711] usb 9-1: USB disconnect, device number 4 [ 780.802966][T20171] syzkaller0: entered promiscuous mode [ 780.825153][T20171] syzkaller0: entered allmulticast mode [ 780.856860][T20180] lo: Caught tx_queue_len zero misconfig [ 780.877137][T20180] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 781.074921][T20190] netlink: 220 bytes leftover after parsing attributes in process `syz.8.4795'. [ 781.108673][T20190] netlink: 'syz.8.4795': attribute type 2 has an invalid length. [ 781.265354][ T29] audit: type=1400 audit(2000000339.203:794): avc: denied { name_bind 0x1000000 } for pid=20185 comm="syz.1.4796" path="socket:[65784]" dev="sockfs" ino=65784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 781.382349][ T29] audit: type=1400 audit(2000000339.323:795): avc: denied { name_bind } for pid=20195 comm="syz.9.4799" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 782.081791][ T29] audit: type=1400 audit(2000000340.023:796): avc: denied { ioctl } for pid=20204 comm="syz.8.4802" path="socket:[65814]" dev="sockfs" ino=65814 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 782.260433][T20210] Bluetooth: MGMT ver 1.23 [ 782.481674][T20209] ALSA: mixer_oss: invalid OSS volume '' [ 782.825490][T20222] netlink: 'syz.7.4806': attribute type 13 has an invalid length. [ 783.539684][T20240] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4811'. [ 783.548916][T20240] netlink: 'syz.1.4811': attribute type 2 has an invalid length. [ 783.559019][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4811'. [ 786.762496][T20231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 786.975134][T20254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.107019][T20265] tipc: Started in network mode [ 787.112157][T20265] tipc: Node identity ac14140f, cluster identity 4711 [ 787.121255][T20265] tipc: New replicast peer: 255.255.255.255 [ 787.128098][T20265] tipc: Enabled bearer , priority 10 [ 787.186023][T20269] netlink: 220 bytes leftover after parsing attributes in process `syz.8.4822'. [ 787.198059][T20269] netlink: 'syz.8.4822': attribute type 2 has an invalid length. [ 787.206696][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4822'. [ 787.239813][ T8711] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 787.390950][T20278] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 787.409631][ T8711] usb 10-1: Using ep0 maxpacket: 16 [ 787.416283][ T8711] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.427692][ T8711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.438796][ T8711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 787.448662][ T8711] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 787.459557][ T8711] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.474316][ T8711] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 787.483632][ T8711] usb 10-1: New USB device strings: Mfr=191, Product=249, SerialNumber=0 [ 787.492187][ T8711] usb 10-1: Product: syz [ 787.496507][ T8711] usb 10-1: Manufacturer: syz [ 787.503318][ T8711] usb 10-1: config 0 descriptor?? [ 787.695029][T20286] netlink: 'syz.4.4827': attribute type 13 has an invalid length. [ 787.800084][ T8711] rc_core: IR keymap rc-hauppauge not found [ 787.814832][ T8711] Registered IR keymap rc-empty [ 787.828738][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 787.980047][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.021090][ T8711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 788.036615][ T8711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input22 [ 788.083654][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.111105][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.129586][ T5738] tipc: Node number set to 2886997007 [ 788.139450][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.171010][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.199348][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.240133][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.269895][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.289431][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.304139][T20311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 788.312115][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.322210][T20311] lo: Caught tx_queue_len zero misconfig [ 788.351242][ T8711] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 788.381232][ T8711] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 788.389843][ T8711] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 788.410126][ T8711] usb 10-1: USB disconnect, device number 4 [ 789.344807][ T8711] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 789.509562][ T8711] usb 10-1: Using ep0 maxpacket: 16 [ 789.531466][ T8711] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.555973][ T8711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 789.580639][ T8711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 789.608369][ T8711] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 789.619392][ T8711] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.635067][ T8711] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 789.789923][ T8711] usb 10-1: New USB device strings: Mfr=191, Product=249, SerialNumber=0 [ 789.799047][ T8711] usb 10-1: Product: syz [ 789.803425][ T8711] usb 10-1: Manufacturer: syz [ 790.054060][ T8711] usb 10-1: config 0 descriptor?? [ 790.161286][ T8711] usb 10-1: can't set config #0, error -71 [ 790.679123][ T8711] usb 10-1: USB disconnect, device number 5 [ 790.765216][T20359] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4855'. [ 790.775080][T20359] netlink: 'syz.7.4855': attribute type 2 has an invalid length. [ 790.850170][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4855'. [ 791.161691][T17311] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 791.565324][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4864'. [ 791.599590][T17311] usb 9-1: Using ep0 maxpacket: 16 [ 791.643438][T17311] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.677467][T17311] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 791.706981][T17311] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 791.720724][T20387] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 791.727284][T20387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 791.737076][T17311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.762230][T17311] usb 9-1: config 0 descriptor?? [ 791.773101][T20387] vhci_hcd vhci_hcd.0: Device attached [ 791.802385][T20391] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 791.809056][T20391] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 791.821624][T20391] vhci_hcd vhci_hcd.0: Device attached [ 792.287508][T19067] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 792.360542][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4859'. [ 792.521420][T20392] vhci_hcd: connection closed [ 792.521703][T20389] vhci_hcd: connection reset by peer [ 792.531865][ T134] vhci_hcd vhci_hcd.7: stop threads [ 792.545646][ T134] vhci_hcd vhci_hcd.7: release socket [ 792.545752][T20405] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4872'. [ 792.560741][T20405] netlink: 'syz.4.4872': attribute type 2 has an invalid length. [ 792.563222][ T134] vhci_hcd vhci_hcd.7: disconnect device [ 792.568512][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4872'. [ 792.592881][ T134] vhci_hcd vhci_hcd.7: stop threads [ 792.598380][ T134] vhci_hcd vhci_hcd.7: release socket [ 792.604304][ T134] vhci_hcd vhci_hcd.7: disconnect device [ 792.743543][T20413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.929547][T20425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=20425 comm=syz.1.4880 [ 793.026015][T20387] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 793.939840][ T8711] usb 9-1: USB disconnect, device number 5 [ 794.005953][T20456] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 794.012539][T20456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 794.025580][T20456] vhci_hcd vhci_hcd.0: Device attached [ 794.564495][T20472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.816688][T20457] vhci_hcd: connection closed [ 794.817995][ T12] vhci_hcd vhci_hcd.7: stop threads [ 794.834555][ T12] vhci_hcd vhci_hcd.7: release socket [ 794.848842][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 795.160172][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.177837][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.221626][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.452138][T20456] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 795.585991][T20492] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4902'. [ 797.223982][T20520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=20520 comm=syz.1.4913 [ 797.388682][T20522] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 797.419353][T19067] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 798.917152][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4924'. [ 798.951476][T17311] usb usb48-port1: attempt power cycle [ 799.146654][T20566] mac80211_hwsim hwsim22 syzkaller0: Caught tx_queue_len zero misconfig [ 799.721034][T17311] usb usb48-port1: unable to enumerate USB device [ 799.766396][ T29] audit: type=1400 audit(2000000357.553:797): avc: denied { connect } for pid=20567 comm="syz.8.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 800.036811][T20565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4925'. [ 803.175361][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4938'. [ 804.914455][T19085] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 805.169650][T19085] usb 9-1: Using ep0 maxpacket: 16 [ 805.249947][T19085] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 805.305124][T19085] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.321030][T19085] usb 9-1: Product: syz [ 805.328833][T19085] usb 9-1: Manufacturer: syz [ 805.345378][T19085] usb 9-1: SerialNumber: syz [ 805.573621][T19085] usb 9-1: config 0 descriptor?? [ 805.927943][T19085] usb-storage 9-1:0.0: USB Mass Storage device detected [ 807.544945][T19085] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 807.624401][T19085] usb 9-1: USB disconnect, device number 6 [ 807.717889][T20666] veth0_macvtap: Caught tx_queue_len zero misconfig [ 807.824651][ T29] audit: type=1400 audit(2000000365.763:798): avc: denied { read } for pid=20669 comm="syz.1.4961" path="socket:[66701]" dev="sockfs" ino=66701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 807.864239][T20673] lo: Caught tx_queue_len zero misconfig [ 808.622198][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.819393][T19085] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 809.010022][T19085] usb 9-1: Using ep0 maxpacket: 16 [ 809.080858][T19085] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 809.122777][T19085] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.169557][T19085] usb 9-1: Product: syz [ 809.181615][T19085] usb 9-1: Manufacturer: syz [ 809.240215][T19085] usb 9-1: SerialNumber: syz [ 809.458298][T19085] usb 9-1: config 0 descriptor?? [ 809.468115][T19085] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 810.358346][T19085] ssu100 9-1:0.0: probe with driver ssu100 failed with error -110 [ 810.456313][T20725] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' already exists in 'ieee80211' [ 810.818465][T20726] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 810.828836][T20726] CPU: 0 UID: 0 PID: 20726 Comm: syz.4.4978 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.828873][T20726] Tainted: [L]=SOFTLOCKUP [ 810.828880][T20726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 810.828893][T20726] Call Trace: [ 810.828902][T20726] [ 810.828909][T20726] dump_stack_lvl+0x100/0x190 [ 810.828943][T20726] sysfs_warn_dup.cold+0x1c/0x28 [ 810.828972][T20726] sysfs_do_create_link_sd+0x113/0x140 [ 810.829000][T20726] sysfs_create_link+0x61/0xc0 [ 810.829025][T20726] device_add+0x675/0x1950 [ 810.829052][T20726] ? __pfx_device_add+0x10/0x10 [ 810.829073][T20726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.829100][T20726] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 810.829133][T20726] wiphy_register+0x1edd/0x2d90 [ 810.829157][T20726] ? __rtnl_unlock+0xb9/0xf0 [ 810.829189][T20726] ? __pfx_wiphy_register+0x10/0x10 [ 810.829212][T20726] ? __asan_memset+0x23/0x50 [ 810.829237][T20726] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 810.829279][T20726] ieee80211_register_hw+0x3055/0x4570 [ 810.829325][T20726] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 810.829355][T20726] ? __pfx___debug_object_init+0x10/0x10 [ 810.829391][T20726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.829413][T20726] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 810.829438][T20726] ? __hrtimer_setup+0x208/0x330 [ 810.829469][T20726] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 810.829516][T20726] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 810.829550][T20726] ? __asan_memcpy+0x3c/0x60 [ 810.829582][T20726] hwsim_new_radio_nl+0xc5f/0x1370 [ 810.829615][T20726] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 810.829655][T20726] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 810.829685][T20726] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 810.829721][T20726] genl_family_rcv_msg_doit+0x214/0x300 [ 810.829754][T20726] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 810.829793][T20726] ? bpf_lsm_capable+0x9/0x10 [ 810.829814][T20726] ? security_capable+0x80/0x260 [ 810.829837][T20726] ? ns_capable+0xd2/0xf0 [ 810.829867][T20726] genl_rcv_msg+0x560/0x800 [ 810.829899][T20726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.829929][T20726] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 810.829962][T20726] ? __lock_acquire+0x4a5/0x2630 [ 810.829992][T20726] netlink_rcv_skb+0x159/0x420 [ 810.830018][T20726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.830047][T20726] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.830083][T20726] ? netlink_deliver_tap+0x1ae/0xcc0 [ 810.830110][T20726] genl_rcv+0x28/0x40 [ 810.830142][T20726] netlink_unicast+0x585/0x850 [ 810.830171][T20726] ? __pfx_netlink_unicast+0x10/0x10 [ 810.830205][T20726] netlink_sendmsg+0x8b0/0xda0 [ 810.830236][T20726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.830262][T20726] ? __might_fault+0x30/0x140 [ 810.830304][T20726] ____sys_sendmsg+0x9e1/0xb70 [ 810.830332][T20726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.830360][T20726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.830391][T20726] ? __pfx_futex_wake_mark+0x10/0x10 [ 810.830416][T20726] ___sys_sendmsg+0x190/0x1e0 [ 810.830445][T20726] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.830504][T20726] __sys_sendmsg+0x170/0x220 [ 810.830525][T20726] ? __pfx___sys_sendmsg+0x10/0x10 [ 810.830543][T20726] ? __x64_sys_futex+0x34f/0x4d0 [ 810.830583][T20726] ? rcu_is_watching+0x12/0xc0 [ 810.830616][T20726] do_syscall_64+0x10b/0xf80 [ 810.830643][T20726] ? clear_bhb_loop+0x40/0x90 [ 810.830667][T20726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.830687][T20726] RIP: 0033:0x7fab1079ce59 [ 810.830706][T20726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.830725][T20726] RSP: 002b:00007fab1164c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.830744][T20726] RAX: ffffffffffffffda RBX: 00007fab10a16180 RCX: 00007fab1079ce59 [ 810.830757][T20726] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000b [ 810.830768][T20726] RBP: 00007fab10832d6f R08: 0000000000000000 R09: 0000000000000000 [ 810.830778][T20726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.830789][T20726] R13: 00007fab10a16218 R14: 00007fab10a16180 R15: 00007ffc063260e8 [ 810.830816][T20726] [ 811.660181][T20746] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 811.682883][T20746] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 811.702384][T20746] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 811.728499][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4987'. [ 811.825068][T20746] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 812.695208][T19085] usb 9-1: USB disconnect, device number 7 [ 814.790994][T17311] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 815.062966][T17311] usb 9-1: Using ep0 maxpacket: 8 [ 815.167370][T17311] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 815.247323][T17311] usb 9-1: config 0 has no interface number 0 [ 815.320038][T17311] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 815.417053][T17311] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 815.494680][T17311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.874522][T17311] usb 9-1: config 0 descriptor?? [ 816.197537][T20819] siw: device registration error -23 [ 816.220773][T17311] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 816.243017][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5008'. [ 816.274322][T17311] usb 9-1: USB disconnect, device number 8 [ 816.816243][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'. [ 817.949436][ T5738] IPVS: starting estimator thread 0... [ 818.049303][T20862] IPVS: using max 53 ests per chain, 127200 per kthread [ 818.862644][T20880] syz.7.5029: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 818.877913][T20880] CPU: 0 UID: 0 PID: 20880 Comm: syz.7.5029 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.877936][T20880] Tainted: [L]=SOFTLOCKUP [ 818.877942][T20880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.877949][T20880] Call Trace: [ 818.877954][T20880] [ 818.877959][T20880] dump_stack_lvl+0x100/0x190 [ 818.877983][T20880] warn_alloc.cold+0x95/0x1c1 [ 818.877997][T20880] ? __pfx_warn_alloc+0x10/0x10 [ 818.878023][T20880] ? __lock_acquire+0x4a5/0x2630 [ 818.878042][T20880] ? avc_has_extended_perms+0x33a/0x1080 [ 818.878062][T20880] __vmalloc_node_range_noprof+0x136c/0x1630 [ 818.878080][T20880] ? rcu_is_watching+0x12/0xc0 [ 818.878097][T20880] ? trace_contention_end+0x122/0x170 [ 818.878114][T20880] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 818.878129][T20880] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 818.878142][T20880] ? find_held_lock+0x2b/0x80 [ 818.878156][T20880] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 818.878170][T20880] ? __pfx___mutex_lock+0x10/0x10 [ 818.878190][T20880] ? futex_wait+0x11e/0x370 [ 818.878204][T20880] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 818.878214][T20880] __vmalloc_node_noprof+0xad/0xf0 [ 818.878228][T20880] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 818.878241][T20880] dvb_dvr_do_ioctl+0x15d/0x270 [ 818.878256][T20880] dvb_usercopy+0x167/0x340 [ 818.878276][T20880] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 818.878286][T20880] ? __pfx_dvb_usercopy+0x10/0x10 [ 818.878308][T20880] ? selinux_file_ioctl+0x13b/0x290 [ 818.878323][T20880] ? selinux_file_ioctl+0xb6/0x290 [ 818.878339][T20880] dvb_dvr_ioctl+0x29/0x40 [ 818.878348][T20880] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 818.878358][T20880] __x64_sys_ioctl+0x18e/0x210 [ 818.878371][T20880] do_syscall_64+0x10b/0xf80 [ 818.878387][T20880] ? clear_bhb_loop+0x40/0x90 [ 818.878407][T20880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.878421][T20880] RIP: 0033:0x7f329cd9ce59 [ 818.878433][T20880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.878447][T20880] RSP: 002b:00007f329dd14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.878461][T20880] RAX: ffffffffffffffda RBX: 00007f329d015fa0 RCX: 00007f329cd9ce59 [ 818.878471][T20880] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 818.878480][T20880] RBP: 00007f329ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 818.878488][T20880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.878496][T20880] R13: 00007f329d016038 R14: 00007f329d015fa0 R15: 00007ffcfa211ed8 [ 818.878512][T20880] [ 818.878517][T20880] Mem-Info: [ 819.140393][T20880] active_anon:15758 inactive_anon:0 isolated_anon:0 [ 819.140393][T20880] active_file:10884 inactive_file:51747 isolated_file:0 [ 819.140393][T20880] unevictable:768 dirty:485 writeback:0 [ 819.140393][T20880] slab_reclaimable:12853 slab_unreclaimable:120114 [ 819.140393][T20880] mapped:40468 shmem:4186 pagetables:3961 [ 819.140393][T20880] sec_pagetables:0 bounce:0 [ 819.140393][T20880] kernel_misc_reclaimable:0 [ 819.140393][T20880] free:1225648 free_pcp:11803 free_cma:0 [ 819.185978][T20880] Node 0 active_anon:63032kB inactive_anon:0kB active_file:43536kB inactive_file:206788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149584kB dirty:1940kB writeback:0kB shmem:15208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15372kB pagetables:15720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 819.221020][T20880] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12288kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 819.253916][T20880] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 819.283839][T20880] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 819.289622][T20880] Node 0 DMA32 free:1016776kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63032kB inactive_anon:0kB active_file:43536kB inactive_file:206788kB unevictable:1536kB writepending:1940kB zspages:0kB present:3129332kB managed:2537028kB mlocked:0kB bounce:0kB free_pcp:46840kB local_pcp:17928kB free_cma:0kB [ 819.323392][T20880] lowmem_reserve[]: 0 0 1 1 1 [ 819.328098][T20880] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1088kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 819.357908][T20880] lowmem_reserve[]: 0 0 0 0 0 [ 819.362618][T20880] Node 1 Normal free:3874552kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:356kB local_pcp:0kB free_cma:0kB [ 819.394348][T20880] lowmem_reserve[]: 0 0 0 0 0 [ 819.399269][T20880] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 819.412064][T20880] Node 0 DMA32: 3623*4kB (UME) 2938*8kB (UM) 1754*16kB (UM) 740*32kB (UME) 863*64kB (UME) 1355*128kB (UME) 860*256kB (UM) 440*512kB (UME) 231*1024kB (UM) 8*2048kB (UM) 0*4096kB = 1016780kB [ 819.430807][T20880] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 819.442260][T20880] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 7*16kB (UM) 8*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 944*4096kB (UM) = 3874552kB [ 819.459048][T20880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.468616][T20880] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 819.477921][T20880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 819.487488][T20880] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 819.496795][T20880] 66813 total pagecache pages [ 819.502035][T20880] 0 pages in swap cache [ 819.506370][T20880] Free swap = 124996kB [ 819.510558][T20880] Total swap = 124996kB [ 819.514700][T20880] 2097051 pages RAM [ 819.518495][T20880] 0 pages HighMem/MovableOnly [ 819.523209][T20880] 430907 pages reserved [ 819.527354][T20880] 0 pages cma reserved [ 819.730725][T17311] IPVS: starting estimator thread 0... [ 819.849167][T20893] IPVS: using max 36 ests per chain, 86400 per kthread [ 819.909277][T19067] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 820.583377][T19067] usb 8-1: Using ep0 maxpacket: 32 [ 820.789086][T19067] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 820.800537][T19067] usb 8-1: config 0 interface 0 has no altsetting 0 [ 820.807206][T19067] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 820.816721][T19067] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.818056][T20898] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5036'. [ 820.845080][T19067] usb 8-1: config 0 descriptor?? [ 820.917273][T20904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.074069][T20911] siw: device registration error -23 [ 821.081604][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5041'. [ 821.479435][ T30] INFO: task syz.5.4087:17862 blocked for more than 143 seconds. [ 821.506884][ T30] Tainted: G L syzkaller #0 [ 821.516578][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 821.528363][ T30] task:syz.5.4087 state:D stack:28264 pid:17862 tgid:17861 ppid:17053 task_flags:0x400140 flags:0x00080002 [ 821.608589][ T30] Call Trace: [ 821.636650][ T30] [ 821.657285][ T30] __schedule+0x1295/0x67a0 [ 821.734372][ T30] ? __pfx___schedule+0x10/0x10 [ 821.796327][ T30] ? find_held_lock+0x2b/0x80 [ 821.853878][ T30] ? schedule+0x2bf/0x390 [ 821.897821][ T30] schedule+0xdd/0x390 [ 821.925693][ T30] schedule_preempt_disabled+0x13/0x30 [ 821.963254][T19067] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 821.963418][ T30] __mutex_lock+0xced/0x1b10 [ 822.100796][ T30] ? nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 822.140768][T19067] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 822.148266][T19067] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 822.155738][T19067] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 822.156857][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 822.164348][T19067] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 822.190012][ T30] ? net_generic+0xea/0x2a0 [ 822.195103][T19067] corsair-psu 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.7-1/input0 [ 822.213084][ T30] ? net_generic+0xea/0x2a0 [ 822.218685][ T30] ? nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 822.225015][ T30] nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 822.230738][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 822.236372][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 822.242754][ T30] ? bpf_lsm_capable+0x9/0x10 [ 822.247516][ T30] ? security_capable+0x80/0x260 [ 822.252490][ T30] genl_rcv_msg+0x560/0x800 [ 822.257022][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.262122][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 822.268854][ T30] netlink_rcv_skb+0x159/0x420 [ 822.274413][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.279559][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.284940][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 822.290274][ T30] genl_rcv+0x28/0x40 [ 822.294270][ T30] netlink_unicast+0x585/0x850 [ 822.299064][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 822.304392][ T30] netlink_sendmsg+0x8b0/0xda0 [ 822.309223][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.314527][ T30] ? __might_fault+0x30/0x140 [ 822.319438][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 822.324315][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.329840][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.335145][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 822.340514][ T30] ___sys_sendmsg+0x190/0x1e0 [ 822.345398][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.354650][ T30] __sys_sendmsg+0x170/0x220 [ 822.364441][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 822.376118][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 822.386030][ T30] ? rcu_is_watching+0x12/0xc0 [ 822.395615][ T30] do_syscall_64+0x10b/0xf80 [ 822.406270][ T30] ? clear_bhb_loop+0x40/0x90 [ 822.413937][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.419905][ T30] RIP: 0033:0x7f0d0fb9ce59 [ 822.424365][ T30] RSP: 002b:00007f0d10974028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.432910][ T30] RAX: ffffffffffffffda RBX: 00007f0d0fe15fa0 RCX: 00007f0d0fb9ce59 [ 822.441324][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 822.450256][ T30] RBP: 00007f0d0fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 822.458312][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.467851][ T30] R13: 00007f0d0fe16038 R14: 00007f0d0fe15fa0 R15: 00007ffff345aea8 [ 822.478055][ T30] [ 822.483410][ T30] [ 822.483410][ T30] Showing all locks held in the system: [ 822.491263][ T30] 1 lock held by khungtaskd/30: [ 822.496157][ T30] #0: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 822.506182][ T30] 5 locks held by kworker/u8:2/35: [ 822.523385][ T30] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 822.533500][T19067] corsair-psu 0003:1B1C:1C09.000E: unable to initialize device (-110) [ 822.541890][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 822.551478][ T30] #2: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 822.562517][T19067] corsair-psu 0003:1B1C:1C09.000E: probe with driver corsair-psu failed with error -110 [ 822.574872][ T30] #3: ffffffff9b390fb8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 822.588830][T19067] usb 8-1: USB disconnect, device number 22 [ 822.597078][ T30] #4: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 822.611419][ T30] 3 locks held by udevd/4979: [ 822.617487][ T30] 2 locks held by getty/5367: [ 822.622408][ T30] #0: ffff888038c360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 822.632385][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 822.642730][ T30] 2 locks held by syz.3.4055/17775: [ 822.647948][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.656676][ T30] #1: ffffffff8ec62d80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 822.667073][ T30] 2 locks held by syz.5.4087/17862: [ 822.672351][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.681737][ T30] #1: ffffffff8ec62d80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 822.692401][ T30] 3 locks held by kworker/1:4/19067: [ 822.697754][ T30] #0: ffff88801f6c5d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 822.709374][ T30] #1: ffffc90006fb7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 822.721607][ T30] #2: ffff88802b50c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 822.730857][ T30] 1 lock held by syz.4.5041/20909: [ 822.735988][ T30] #0: ffffffff8e7f11b8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 822.746019][ T30] [ 822.748364][ T30] ============================================= [ 822.748364][ T30] [ 822.757261][ T30] NMI backtrace for cpu 1 [ 822.757282][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 822.757308][ T30] Tainted: [L]=SOFTLOCKUP [ 822.757314][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.757324][ T30] Call Trace: [ 822.757330][ T30] [ 822.757337][ T30] dump_stack_lvl+0x100/0x190 [ 822.757364][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 822.757386][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 822.757409][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 822.757436][ T30] sys_info+0x141/0x190 [ 822.757451][ T30] watchdog+0xcb1/0x1030 [ 822.757473][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 822.757495][ T30] ? __pfx_watchdog+0x10/0x10 [ 822.757513][ T30] ? __kthread_parkme+0x18c/0x230 [ 822.757531][ T30] ? kthread+0x13a/0x450 [ 822.757548][ T30] ? __pfx_watchdog+0x10/0x10 [ 822.757563][ T30] kthread+0x370/0x450 [ 822.757580][ T30] ? __pfx_kthread+0x10/0x10 [ 822.757598][ T30] ret_from_fork+0x72b/0xd50 [ 822.757619][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 822.757642][ T30] ? __switch_to+0x800/0x1100 [ 822.757668][ T30] ? __pfx_kthread+0x10/0x10 [ 822.757687][ T30] ret_from_fork_asm+0x1a/0x30 [ 822.757721][ T30] [ 822.757728][ T30] Sending NMI from CPU 1 to CPUs 0: [ 822.893400][ C0] NMI backtrace for cpu 0 [ 822.893418][ C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.893439][ C0] Tainted: [L]=SOFTLOCKUP [ 822.893444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.893453][ C0] Workqueue: 0x0 (events_unbound) [ 822.893474][ C0] RIP: 0010:worker_enter_idle+0xb0/0x580 [ 822.893495][ C0] Code: 66 3a 00 48 83 3b 00 74 21 e8 fc 65 3a 00 90 0f 0b 90 e8 f3 65 3a 00 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc db 65 3a 00 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa [ 822.893508][ C0] RSP: 0018:ffffc90000ab7d70 EFLAGS: 00000046 [ 822.893519][ C0] RAX: 0000000000000000 RBX: ffff88801eac5700 RCX: ffffffff81ce48a4 [ 822.893528][ C0] RDX: ffff888020ed4a00 RSI: ffffffff81ce48d9 RDI: ffff888020ed4a00 [ 822.893537][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 822.893545][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 822.893553][ C0] R13: ffff88801eac5700 R14: 0000000000000080 R15: ffff88813febb000 [ 822.893563][ C0] FS: 0000000000000000(0000) GS:ffff88812436d000(0000) knlGS:0000000000000000 [ 822.893577][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.893586][ C0] CR2: 00007f329cfe8158 CR3: 000000007e647000 CR4: 00000000003526f0 [ 822.893595][ C0] Call Trace: [ 822.893600][ C0] [ 822.893607][ C0] worker_thread+0x4b1/0xe50 [ 822.893627][ C0] ? kthread+0x13a/0x450 [ 822.893642][ C0] ? __pfx_worker_thread+0x10/0x10 [ 822.893658][ C0] kthread+0x370/0x450 [ 822.893672][ C0] ? __pfx_kthread+0x10/0x10 [ 822.893687][ C0] ret_from_fork+0x72b/0xd50 [ 822.893704][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 822.893721][ C0] ? __switch_to+0x800/0x1100 [ 822.893745][ C0] ? __pfx_kthread+0x10/0x10 [ 822.893760][ C0] ret_from_fork_asm+0x1a/0x30 [ 822.893785][ C0] [ 823.082375][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 823.089261][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 823.099933][ T30] Tainted: [L]=SOFTLOCKUP [ 823.104250][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.114286][ T30] Call Trace: [ 823.117550][ T30] [ 823.120461][ T30] dump_stack_lvl+0x100/0x190 [ 823.125141][ T30] vpanic+0x552/0x970 [ 823.129098][ T30] ? __pfx_vpanic+0x10/0x10 [ 823.133577][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 823.139725][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 823.145858][ T30] panic+0xd1/0xe0 [ 823.149566][ T30] ? __pfx_panic+0x10/0x10 [ 823.153989][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 823.160175][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 823.166324][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 823.172460][ T30] ? watchdog.cold+0x1ec/0x234 [ 823.177208][ T30] ? watchdog+0xcc1/0x1030 [ 823.181623][ T30] watchdog.cold+0x1fd/0x234 [ 823.186196][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 823.191994][ T30] ? __pfx_watchdog+0x10/0x10 [ 823.196670][ T30] ? __kthread_parkme+0x18c/0x230 [ 823.201697][ T30] ? kthread+0x13a/0x450 [ 823.205931][ T30] ? __pfx_watchdog+0x10/0x10 [ 823.210601][ T30] kthread+0x370/0x450 [ 823.214659][ T30] ? __pfx_kthread+0x10/0x10 [ 823.219243][ T30] ret_from_fork+0x72b/0xd50 [ 823.223830][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 823.228932][ T30] ? __switch_to+0x800/0x1100 [ 823.233604][ T30] ? __pfx_kthread+0x10/0x10 [ 823.238185][ T30] ret_from_fork_asm+0x1a/0x30 [ 823.242950][ T30] [ 823.246339][ T30] Kernel Offset: disabled [ 823.250656][ T30] Rebooting in 86400 seconds..