last executing test programs: 14.13204055s ago: executing program 2 (id=289): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r0], 0x1}, 0x58) 13.446233071s ago: executing program 2 (id=292): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x0, 0x40003}, 0x20) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000002c0)={0x3, "099fdbcd9b7f20bc91f5c2ef8e3b22bf2db466e70d01ed7d11f67f754354bf9e", 0x0, 0x0, 0x0, 0x0, 0x2020604}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x80, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x48}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x80}}, 0x20004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) recvmmsg(r6, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000005080)=[{0x0, 0x2e}, {0x0, 0x58}], 0x2}, 0xab}], 0x1, 0x141, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 13.317353456s ago: executing program 3 (id=295): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[], 0x30, 0x40400d1}}], 0x1, 0x810) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x0, 0x2}], 0x1) 11.051563607s ago: executing program 3 (id=296): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4040) r0 = getpid() r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000340)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000100)=0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000010c0)={0x8, r1}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32, @ANYRES32=0x0], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 11.029664027s ago: executing program 0 (id=297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/79, 0x4f}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) 10.970115357s ago: executing program 2 (id=298): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8e}, 0x0) syz_clone3(&(0x7f00000004c0)={0x3000000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000240)=0x0, {0x1a}, &(0x7f00000003c0)=""/231, 0xe7, &(0x7f00000002c0)=""/50, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) sched_setscheduler(r2, 0x3, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) fsopen(0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) ioprio_get$pid(0x3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40002017}) syz_io_uring_setup(0x88c, 0xffffffffffffffff, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x7ff) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x4}, 0x10) 10.782373201s ago: executing program 4 (id=299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x1802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)="8b"}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x4004c, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4084) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r6, 0x2004, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0xfffffffffffffff5, 0x0, {{0x7, 0x3, 0xfffffffffffffffb, 0x432c, 0x8000, 0x3, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x2f, 0x6, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xf}}}, 0xa0) 8.986987628s ago: executing program 3 (id=301): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000206050000009f73599fba5466a705aaf9012841bf068e0174cd604ae425fbbc94c8d466536fe355849fdaae5d02e12e559895ef559f587e757e1aaa40033580550f84741c4061c84a"], 0x14}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)='PCI:', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d3"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000004109022d0001100000000b04000003fe03010009cd0d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {0x0}], 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 8.751685102s ago: executing program 4 (id=302): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}]}}}}}, 0x0) 8.27955751s ago: executing program 4 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x300}, 0x10) 8.125535106s ago: executing program 4 (id=304): socket(0x0, 0x2, 0x9d) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x450401, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpriority(0x2, 0x0, 0xb0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xfeffffff, r1, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0xc, 0x0) read$msr(r7, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = openat$cgroup_int(r8, 0x0, 0x2, 0x0) sendfile(r9, r9, 0x0, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x5, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f00000000c0)) 8.124899075s ago: executing program 1 (id=305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000206050000009f73599fba5466a705aaf9012841bf068e0174cd604ae425fbbc94c8d466536fe355849fdaae5d02e12e559895ef559f587e757e1aaa40033580550f84741c4061c84a"], 0x14}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)='PCI:', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d3"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000004109022d0001100000000b04000003fe03010009cd0d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {0x0}], 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 8.114589063s ago: executing program 0 (id=306): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000e6da000000000000000000edf7292f1eb1d69e0f5f2c72dec290f22af2dd6d3d9801d450f252686ec5668d0edf26f4"], 0x48) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x9, 0xa, 0x300b, 0x2, 0x1, 0x1, 0x1, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.837865271s ago: executing program 0 (id=307): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[], 0x30, 0x40400d1}}], 0x1, 0x810) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) 5.375706994s ago: executing program 0 (id=308): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x0, 0x40003}, 0x20) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000002c0)={0x3, "099fdbcd9b7f20bc91f5c2ef8e3b22bf2db466e70d01ed7d11f67f754354bf9e", 0x0, 0x0, 0x0, 0x0, 0x2020604}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x80, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x48}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x80}}, 0x20004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) recvmmsg(r6, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000005080)=[{0x0, 0x2e}, {0x0, 0x58}], 0x2}, 0xab}], 0x1, 0x141, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 5.374598872s ago: executing program 3 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000029c0744af08f204000000007379f46ecafd7a31"], 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) prlimit64(0x0, 0x6, &(0x7f0000000100)={0x2, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="800000000200020008000400000000"], 0x30}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x60, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x43c2a000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) ioctl$HIDIOCGSTRING(r8, 0x81044804, &(0x7f0000000300)={0x7f, "27ba31acb880e18af886ffc8eea5e2462b7730af587c8d3e49b18c3979deb33b9901169f696a6abdfb655b093ef136f96d0970575ac645d1c132b1bcfe855747198cc3f5e98a59881abc2313b4b1c58f64329bc7560e001414c7c1e2ab137f02d99bbb35a6db005eb4098c8e213ac5b131c8bdb13a679ed610886fd8b21c3c"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000c1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES16=r5], 0x58}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 4.935430401s ago: executing program 1 (id=310): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x1802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)="8b"}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x4004c, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4084) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r6, 0x2004, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0xfffffffffffffff5, 0x0, {{0x7, 0x3, 0xfffffffffffffffb, 0x432c, 0x8000, 0x3, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x2f, 0x6, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xf}}}, 0xa0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1ffff}], 0x1, 0x0, 0x0) 4.437394792s ago: executing program 0 (id=311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000900)={@mcast2}, &(0x7f0000000940)=0x14) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x9}, 0x1c, &(0x7f00000000c0)}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="582dbb61650fbf0da96799e2b5bfa006c5ab21c6a0c42f7ea71c281190cb076673998a4ee7677e14bf029b6371fb2e9b8271f01172a29e71b4f9a6d2a3e84790ead1f4", 0x43}, {&(0x7f0000000500)="1bcd5a04ae9033fed01d00b085e445261d8cfd1a035132c0f443f6a1064efdfaf269812b3129dde9b35b854f9c2efe953f330118834913ff0d4eadc227f66d739094bce89321f31cbc66581125a3cbae76b35156af1bd9fa10c1c6d3b43b5cb2d471de85884ad4518f6dbda0f91aff70b26b8664cfea5e0b989d89bbc52360b212b5bed28e7cdc211a7cb50a19b2f6a9c3ce", 0x92}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f00000005c0)="463e52ac52e7f72358e90021b8e01f25f2d7fb478c17b30b73aa848706767332d56460b05f2fe81ea3b5", 0x2a}, {&(0x7f0000002cc0)="de9057183d9dc7c0b5505613d9f37b8731e4cfbc1dfb787d9d48a206d81b110649510161c48159af460502e849a40d5aaba1b2ed224ee64c58a6087bd34d630d735fc79f5213489e76f2670e40d740b5a5a4288aab54c81fe998134d556c6f2fc84becdbbe888fc44ce6a05544180200000000000000dae6c8d98a945837a0b0d61209b9dc79919b70566aa0123660156dcd4f9d1bf38821971d2238de141fe93dd1c9b85b090d241d3c80f5dc983e3b1bf8d13a7a765d14b418d87ccc3761fdf2d307fa3e16c9764a8b4bfdb9066207865fe84206", 0xd5}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="afb62855ed7200e430b5e10623dbdeab991646ddbedfd82136bac6b299e8791099f189ee69568fc3f2a69080d74dd8b36e19664dc86e95b131d2e007386bac5fc2c187d79c8a6a9b7945622e08c953555ff58e9931d2d062fae527add541aaad896bd9bba3408a601dc329274c245ac6a7c7e7554306236fe724af4e7687ab016da53f5eb5b047e783f16fa45a0019ad5cd73018c2ac5dcd44828fbed5790396fa35005219f93672c5836eefaf4db5857a7adff0de46f8f587992f8fce142e0b8948498907d59f1974ec2638351505cb6433a5333ca7648d37", 0xd9}, {&(0x7f0000002b40)="67c6ffa6d70d96774907b8f332a3cdf68c0ac4fac50570cdbb84500c77b24e833ba4b1d2a405894015216a09c8bcb8c1b6ac354aac86421ae12360cf482296a6f891a1849f18aed52c3b3520853a41e9d10fc4d7324821b31f483fb276c7c83b3cb3f1467b5814c27c7ff05d39b3be1fa454adc1f002d1e923b0cb5b2f442ecfbf969d48879448dff5b7dea34672965b05fffbb9391f9055b05a70563eca006bdd8298d675b8bc9f083f6f4dac8aeeb5d423ce1066a970847bfb3a29e24c70209901aabe918d3b8b", 0xc8}], 0x8, &(0x7f0000000980)=[@hoplimit_2292={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x30}}], 0x2, 0x20008050) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[@wrmsr={0x1e, 0x20, {0x305, 0x8000}}], 0x20}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c0001006272696467656de73799633aac1a2693fccf32b1171b276f48916f5dd2c9dca80de1319a3ab3173db4ebfb494d9cd663f0946373d635386ff71c68ca15752da590546f4598d3aa543e3f077695f75654e0c662520732cc583de0a2ee79a91e9f845a1fda5bb4d225eb21057ecc104872fded79fded2f46b5991bd1495f76c8602de9503ad53f833961ca1c0581e5bd2066eda585413d792292b51a9973041ca685b7bd67760ba6ae0762e7d206a4ce1b952bf2fbf82deb8e459938c2ba2d1865b12312d96dc87ceb6bdd99234370186d"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 4.142088919s ago: executing program 2 (id=312): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000000)={&(0x7f00003ae000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xbbbbbbbb}) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000001f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000800)={0x0, &(0x7f00000006c0)=[{}, {}], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000880)={0xfffffffffffffff8, r2, r3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[{}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x7, r5, 0xcccccccc}) 3.880094816s ago: executing program 4 (id=313): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket(0x3e, 0x3, 0xefc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x10}]}}}]}, 0x44}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r4, &(0x7f0000000000)='-0', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r7, 0x5452, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x2d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000140)=0x6) 3.725472987s ago: executing program 0 (id=314): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') timer_create(0x0, 0x0, &(0x7f0000000300)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) r1 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f010000e85696b4000a0006471a010000190f81"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 3.509774864s ago: executing program 1 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)=ANY=[@ANYBLOB="7374617473bd676c6f62616c2c00"]) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)=ANY=[@ANYBLOB="7374617473bd676c6f62616c2c00"]) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x2020) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_DEVICE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf7f01000000080001004d"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0xe6eedc45313651a9, 0x94, 0x1}, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c00078008001240f5ffffff090002"], 0x54}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) (async) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) socket(0x15, 0x5, 0xffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@reiserfs_2={0x8, 0x2, {0x2, 0xa}}, 0x0, 0x400) (async) name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@reiserfs_2={0x8, 0x2, {0x2, 0xa}}, 0x0, 0x400) 3.077885757s ago: executing program 1 (id=316): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000440)='FROZEN\x00', 0x7) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) 2.679084321s ago: executing program 3 (id=317): socket$inet(0x2, 0x80001, 0x84) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a3100000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) open(&(0x7f00000005c0)='./file0\x00', 0x2a4c0, 0x13) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8000, 0x0, 0x0, 0xbf5}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) fsync(r6) fsync(r6) sendmsg(0xffffffffffffffff, 0x0, 0x200000c0) unshare(0x40000080) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x8, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0x38, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) io_setup(0x41, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.358685879s ago: executing program 1 (id=318): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[], 0x30, 0x40400d1}}], 0x1, 0x810) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) 2.35819646s ago: executing program 4 (id=319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000206050000009f73599fba5466a705aaf9012841bf068e0174cd604ae425fbbc94c8d466536fe355849fdaae5d02e12e559895ef559f587e757e1aaa40033580550f84741c4061c84a"], 0x14}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)='PCI:', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d3"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000004109022d0001100000000b04000003fe03010009cd0d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {0x0}], 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 969.011223ms ago: executing program 2 (id=320): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x28, 0x5, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x1, 0x0, 0x0, 0x2, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, 0xfffffffffffffefb) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x70, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x19, 0x0, {0x0, r5}}) r6 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r6, 0x110, 0x5, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) 845.141698ms ago: executing program 1 (id=321): r0 = fsmount(0xffffffffffffffff, 0x0, 0x71) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x321403, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8087, 0x7800, 0x3, 0xfff, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x65, 0x0, 0x37, 0x21, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, {[@end, @ssrr={0x89, 0x7, 0x83, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @ldst={0x2, 0x2, 0x0, 0xa, 0x6, 0xfffffffffffffff4, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 50.991469ms ago: executing program 3 (id=322): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x1, {0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffe, 0x80000001, {0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000002010104000099"], 0x18}, 0x1, 0x0, 0x0, 0x4000041}, 0x4040894) ioctl$FIBMAP(r2, 0x401070cd, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="6cc98d1d1af5", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048800}, 0x41) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf25340000000a00340001010101010100001400fe000272a86273120ff10602f4af4d1800511400fe007e8a2fc753ca89a02d9994f89449c90308001f01d70900001400fe0068936d670594092870829dffbbcd1d85a35600000000000008001f01ff0300001400fe00961d0991d3597147fa5d102f8e2826e5050020010500000008001f0105000000"], 0x98}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40040040) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(0x0, &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0004008cb1cead95af9e000000000000001d00002cf8a4ea00", @ANYRES32=0x0, @ANYBLOB="040000000000000010000700000000002000070000000000"], 0x2c, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) socket(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=323): socket(0x2f, 0x4, 0xffffff7f) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) move_mount(0xffffffffffffff9c, 0x0, r2, 0x0, 0x54) kernel console output (not intermixed with test programs): ass=netlink_generic_socket permissive=1 [ 64.391304][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.401437][ T30] audit: type=1400 audit(1764290556.654:69): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.435432][ T30] audit: type=1400 audit(1764290556.654:70): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.458936][ T30] audit: type=1400 audit(1764290556.664:71): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.397486][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.719632][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.720579][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.736800][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.739453][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.744561][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.752531][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.760355][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.773082][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.780456][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.782637][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.788495][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.802278][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.810397][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.816222][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.818330][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.824678][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.839735][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.840231][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.856776][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.861998][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.864691][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.878681][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.886489][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.886631][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.902402][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.435516][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 68.460526][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 68.506520][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 68.574399][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 68.722899][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.730131][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.737795][ T5815] bridge_slave_0: entered allmulticast mode [ 68.744799][ T5815] bridge_slave_0: entered promiscuous mode [ 68.761544][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 68.789184][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.796386][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.804071][ T5815] bridge_slave_1: entered allmulticast mode [ 68.810811][ T5815] bridge_slave_1: entered promiscuous mode [ 68.817929][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.825157][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.832380][ T5821] bridge_slave_0: entered allmulticast mode [ 68.839126][ T5821] bridge_slave_0: entered promiscuous mode [ 68.859944][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.867107][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.874514][ T5823] bridge_slave_0: entered allmulticast mode [ 68.881287][ T5823] bridge_slave_0: entered promiscuous mode [ 68.905786][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.913008][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.920158][ T5821] bridge_slave_1: entered allmulticast mode [ 68.927109][ T5821] bridge_slave_1: entered promiscuous mode [ 68.941716][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.948825][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.956084][ T5823] bridge_slave_1: entered allmulticast mode [ 68.963188][ T5823] bridge_slave_1: entered promiscuous mode [ 69.014724][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.022074][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.029195][ T5822] bridge_slave_0: entered allmulticast mode [ 69.036629][ T5822] bridge_slave_0: entered promiscuous mode [ 69.046338][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.077486][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.084787][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.092172][ T5822] bridge_slave_1: entered allmulticast mode [ 69.098956][ T5822] bridge_slave_1: entered promiscuous mode [ 69.107703][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.129692][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.145620][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.174576][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.190102][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.209482][ T5815] team0: Port device team_slave_0 added [ 69.244811][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.256376][ T5815] team0: Port device team_slave_1 added [ 69.292030][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.310177][ T5821] team0: Port device team_slave_0 added [ 69.316493][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.323712][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.330868][ T5813] bridge_slave_0: entered allmulticast mode [ 69.337697][ T5813] bridge_slave_0: entered promiscuous mode [ 69.346087][ T5823] team0: Port device team_slave_0 added [ 69.369299][ T5821] team0: Port device team_slave_1 added [ 69.383104][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.390252][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.397826][ T5813] bridge_slave_1: entered allmulticast mode [ 69.405081][ T5813] bridge_slave_1: entered promiscuous mode [ 69.413043][ T5823] team0: Port device team_slave_1 added [ 69.438322][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.445399][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.471564][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.515200][ T5822] team0: Port device team_slave_0 added [ 69.523662][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.533409][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.540353][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.567372][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.578883][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.586217][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.612174][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.624650][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.631703][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.657707][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.678889][ T5822] team0: Port device team_slave_1 added [ 69.686451][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.714456][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.721652][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.747611][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.778244][ T5813] team0: Port device team_slave_0 added [ 69.785945][ T5813] team0: Port device team_slave_1 added [ 69.804198][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.811144][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.837491][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.852512][ T5827] Bluetooth: hci1: command tx timeout [ 69.862161][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.869097][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.895025][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.931487][ T5827] Bluetooth: hci2: command tx timeout [ 69.931600][ T5824] Bluetooth: hci3: command tx timeout [ 69.937155][ T5827] Bluetooth: hci0: command tx timeout [ 69.942986][ T5824] Bluetooth: hci4: command tx timeout [ 69.959236][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.966325][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.992443][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.013793][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.020748][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.047064][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.060285][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.067413][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.093605][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.122288][ T5821] hsr_slave_0: entered promiscuous mode [ 70.128514][ T5821] hsr_slave_1: entered promiscuous mode [ 70.156721][ T5815] hsr_slave_0: entered promiscuous mode [ 70.163216][ T5815] hsr_slave_1: entered promiscuous mode [ 70.169144][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 70.175071][ T5815] Cannot create hsr debugfs directory [ 70.213311][ T5823] hsr_slave_0: entered promiscuous mode [ 70.219416][ T5823] hsr_slave_1: entered promiscuous mode [ 70.225704][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 70.231627][ T5823] Cannot create hsr debugfs directory [ 70.311398][ T5813] hsr_slave_0: entered promiscuous mode [ 70.317599][ T5813] hsr_slave_1: entered promiscuous mode [ 70.324296][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 70.330019][ T5813] Cannot create hsr debugfs directory [ 70.339852][ T5822] hsr_slave_0: entered promiscuous mode [ 70.346383][ T5822] hsr_slave_1: entered promiscuous mode [ 70.352402][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 70.358116][ T5822] Cannot create hsr debugfs directory [ 70.758645][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.773204][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.783984][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.802804][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.853024][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.865177][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.875616][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.887813][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.965405][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.982907][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.008031][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.018273][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.084273][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.097005][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.107515][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.118943][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.184641][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.247731][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.287424][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.298248][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.305296][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.305536][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.318805][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.330281][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.337409][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.356181][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.366781][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.380539][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.397123][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.435243][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.446653][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.476001][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.483183][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.507380][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.527775][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.534912][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.571154][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.598912][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.606092][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.618094][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 71.618109][ T30] audit: type=1400 audit(1764290563.954:86): avc: denied { sys_module } for pid=5815 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.674494][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.681680][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.758678][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.819759][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.870712][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.877915][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.907166][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.914309][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.934934][ T5824] Bluetooth: hci1: command tx timeout [ 71.964046][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.010020][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.017196][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.030297][ T5824] Bluetooth: hci0: command tx timeout [ 72.030325][ T5818] Bluetooth: hci2: command tx timeout [ 72.036163][ T5824] Bluetooth: hci4: command tx timeout [ 72.044026][ T5827] Bluetooth: hci3: command tx timeout [ 72.094176][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.101395][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.157652][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.216529][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.239492][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.363383][ T5815] veth0_vlan: entered promiscuous mode [ 72.391263][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.421283][ T5823] veth0_vlan: entered promiscuous mode [ 72.429135][ T5815] veth1_vlan: entered promiscuous mode [ 72.469567][ T5823] veth1_vlan: entered promiscuous mode [ 72.553690][ T5823] veth0_macvtap: entered promiscuous mode [ 72.570804][ T5815] veth0_macvtap: entered promiscuous mode [ 72.587884][ T5823] veth1_macvtap: entered promiscuous mode [ 72.604175][ T5815] veth1_macvtap: entered promiscuous mode [ 72.620369][ T5822] veth0_vlan: entered promiscuous mode [ 72.650487][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.665032][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.679795][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.692113][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.702760][ T5822] veth1_vlan: entered promiscuous mode [ 72.714863][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.739767][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.763177][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.772396][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.796127][ T5821] veth0_vlan: entered promiscuous mode [ 72.807970][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.817062][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.826439][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.855042][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.864462][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.886411][ T5821] veth1_vlan: entered promiscuous mode [ 72.944254][ T5813] veth0_vlan: entered promiscuous mode [ 72.953900][ T5822] veth0_macvtap: entered promiscuous mode [ 72.979467][ T5822] veth1_macvtap: entered promiscuous mode [ 73.001780][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.006905][ T5813] veth1_vlan: entered promiscuous mode [ 73.016280][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.071215][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.077510][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.092000][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.109139][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.150616][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.159705][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.169878][ T5821] veth0_macvtap: entered promiscuous mode [ 73.181978][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.186581][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.189887][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.198695][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.215261][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.216530][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.233377][ T5821] veth1_macvtap: entered promiscuous mode [ 73.248634][ T5813] veth0_macvtap: entered promiscuous mode [ 73.268428][ T30] audit: type=1400 audit(1764290565.604:87): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.JKTjns/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.273990][ T5813] veth1_macvtap: entered promiscuous mode [ 73.296054][ T30] audit: type=1400 audit(1764290565.604:88): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.345822][ T30] audit: type=1400 audit(1764290565.654:89): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.JKTjns/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.377165][ T30] audit: type=1400 audit(1764290565.664:90): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.400336][ T30] audit: type=1400 audit(1764290565.664:91): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.JKTjns/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.433142][ T30] audit: type=1400 audit(1764290565.664:92): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.JKTjns/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.438954][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.474472][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.474472][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.479247][ T30] audit: type=1400 audit(1764290565.674:93): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.525111][ T30] audit: type=1400 audit(1764290565.684:94): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.528212][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.561117][ T30] audit: type=1400 audit(1764290565.684:95): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="gadgetfs" ino=7622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.586942][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.619619][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.630437][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.659001][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.690962][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.705714][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.723676][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.775859][ T5931] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 73.784216][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.793996][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.805748][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.816712][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.827717][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.836694][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.848341][ T5933] FAULT_INJECTION: forcing a failure. [ 73.848341][ T5933] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.868963][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 73.868988][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.869001][ T5933] Call Trace: [ 73.869007][ T5933] [ 73.869015][ T5933] dump_stack_lvl+0x16c/0x1f0 [ 73.869042][ T5933] should_fail_ex+0x512/0x640 [ 73.869066][ T5933] _copy_from_iter+0x29f/0x1720 [ 73.869093][ T5933] ? __pfx__copy_from_iter+0x10/0x10 [ 73.869114][ T5933] ? lockdep_unlock+0x64/0xe0 [ 73.869134][ T5933] ? _parse_integer_limit+0x17f/0x1d0 [ 73.869164][ T5933] ? _kstrtoull+0x145/0x200 [ 73.869193][ T5933] tun_get_user+0x3c7/0x3cc0 [ 73.869231][ T5933] ? __pfx_tun_get_user+0x10/0x10 [ 73.869257][ T5933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 73.869288][ T5933] ? find_held_lock+0x2b/0x80 [ 73.869311][ T5933] ? tun_get+0x191/0x370 [ 73.869340][ T5933] tun_chr_write_iter+0xdc/0x210 [ 73.869365][ T5933] vfs_write+0x7d3/0x11d0 [ 73.869381][ T5933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 73.869407][ T5933] ? __pfx_vfs_write+0x10/0x10 [ 73.869423][ T5933] ? find_held_lock+0x2b/0x80 [ 73.869461][ T5933] ksys_write+0x12a/0x250 [ 73.869479][ T5933] ? __pfx_ksys_write+0x10/0x10 [ 73.869495][ T5933] ? xfd_validate_state+0x61/0x180 [ 73.869530][ T5933] do_syscall_64+0xcd/0xfa0 [ 73.869551][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.869577][ T5933] RIP: 0033:0x7f178838f749 [ 73.869593][ T5933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.869609][ T5933] RSP: 002b:00007f17892ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.869627][ T5933] RAX: ffffffffffffffda RBX: 00007f17885e6090 RCX: 00007f178838f749 [ 73.869639][ T5933] RDX: 0000000000000b24 RSI: 0000200000000840 RDI: 0000000000000003 [ 73.869650][ T5933] RBP: 00007f17892ee090 R08: 0000000000000000 R09: 0000000000000000 [ 73.869661][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.869672][ T5933] R13: 00007f17885e6128 R14: 00007f17885e6090 R15: 00007ffe9bec9a28 [ 73.869697][ T5933] [ 73.869888][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.030897][ T5824] Bluetooth: hci1: command tx timeout [ 74.098943][ T5824] Bluetooth: hci3: command tx timeout [ 74.104605][ T43] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 74.110387][ T5827] Bluetooth: hci2: command tx timeout [ 74.112854][ T5818] Bluetooth: hci4: command tx timeout [ 74.123779][ T5818] Bluetooth: hci0: command tx timeout [ 74.224459][ T5939] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 74.249386][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.255427][ T43] usb 4-1: config 0 has no interfaces? [ 74.262618][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.262966][ T43] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 74.279369][ T5939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.282430][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.332239][ T43] usb 4-1: config 0 descriptor?? [ 74.367496][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.387763][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.486729][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.510647][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.542342][ T5944] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 74.578786][ T5944] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.614427][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.634800][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.716964][ T5947] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 74.860543][ T5958] mmap: syz.2.8 (5958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.221814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.231126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.239697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.248320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.373809][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.435858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.492364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.500893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.509416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.518703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.529552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.710816][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.827073][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.841386][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.861255][ T43] usb 2-1: Product: syz [ 75.866891][ T43] usb 2-1: Manufacturer: syz [ 75.871637][ T43] usb 2-1: SerialNumber: syz [ 76.086013][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.132054][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.156909][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.173353][ T5824] Bluetooth: hci3: command tx timeout [ 76.178831][ T5824] Bluetooth: hci0: command tx timeout [ 76.184916][ T5936] usb 4-1: USB disconnect, device number 2 [ 76.184953][ T5818] Bluetooth: hci2: command tx timeout [ 76.192069][ T5827] Bluetooth: hci4: command tx timeout [ 76.196575][ T5824] Bluetooth: hci1: command tx timeout [ 76.228079][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.323012][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.371548][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.380344][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.738073][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.892991][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.940841][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 76.940856][ T30] audit: type=1400 audit(1764290569.274:152): avc: denied { read write } for pid=5980 comm="syz.2.13" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.003646][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.334577][ T30] audit: type=1400 audit(1764290569.274:153): avc: denied { open } for pid=5980 comm="syz.2.13" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.358443][ T30] audit: type=1400 audit(1764290569.274:154): avc: denied { mounton } for pid=5980 comm="syz.2.13" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.771396][ T30] audit: type=1400 audit(1764290569.744:155): avc: denied { create } for pid=5988 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.772905][ T43] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 77.822340][ T43] cdc_ncm 2-1:1.0: bind() failure [ 77.834320][ T43] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 77.841308][ T43] cdc_ncm 2-1:1.1: bind() failure [ 77.842390][ T30] audit: type=1400 audit(1764290569.744:156): avc: denied { setopt } for pid=5988 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.228481][ T5993] SELinux: failed to load policy [ 78.631733][ T30] audit: type=1400 audit(1764290569.804:157): avc: denied { name_bind } for pid=5988 comm="syz.3.15" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.664191][ T30] audit: type=1400 audit(1764290569.804:158): avc: denied { node_bind } for pid=5988 comm="syz.3.15" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.717490][ T5878] usb 2-1: USB disconnect, device number 2 [ 78.771430][ T30] audit: type=1400 audit(1764290569.964:159): avc: denied { load_policy } for pid=5980 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 78.855104][ T30] audit: type=1400 audit(1764290570.964:160): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 78.889714][ T30] audit: type=1400 audit(1764290571.024:161): avc: denied { map_read map_write } for pid=5997 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.124052][ T6009] tipc: Started in network mode [ 79.129178][ T6009] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 79.145074][ T6009] tipc: Enabled bearer , priority 10 [ 79.157381][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 79.662348][ T5878] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 79.938264][ T6016] Zero length message leads to an empty skb [ 80.071788][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.081959][ T5878] usb 2-1: config 0 has no interfaces? [ 80.102472][ T5878] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 80.115316][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.328689][ T6024] erofs (device nbd3): cannot find valid erofs superblock [ 80.408625][ T5927] tipc: Node number set to 4269801488 [ 80.626065][ T5878] usb 2-1: Product: syz [ 80.630378][ T5878] usb 2-1: Manufacturer: syz [ 80.635096][ T5878] usb 2-1: SerialNumber: syz [ 80.643131][ T5878] usb 2-1: config 0 descriptor?? [ 81.862922][ T6029] bridge0: port 1(bridge_slave_0) entered listening state [ 81.980227][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 81.980242][ T30] audit: type=1400 audit(1764290574.314:181): avc: denied { setopt } for pid=6028 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.020499][ T980] usb 2-1: USB disconnect, device number 3 [ 82.026548][ T24] cfg80211: failed to load regulatory.db [ 82.087278][ T30] audit: type=1400 audit(1764290574.314:182): avc: denied { accept } for pid=6028 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.111750][ T30] audit: type=1400 audit(1764290574.404:183): avc: denied { write } for pid=6028 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.130997][ T30] audit: type=1400 audit(1764290574.414:184): avc: denied { read } for pid=6028 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.175902][ T30] audit: type=1400 audit(1764290574.414:185): avc: denied { write } for pid=6033 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.206302][ T6031] ======================================================= [ 82.206302][ T6031] WARNING: The mand mount option has been deprecated and [ 82.206302][ T6031] and is ignored by this kernel. Remove the mand [ 82.206302][ T6031] option from the mount to silence this warning. [ 82.206302][ T6031] ======================================================= [ 82.332490][ T6031] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 82.370639][ T6031] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 82.521515][ T6031] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 82.685258][ T6043] tipc: Started in network mode [ 82.690276][ T6043] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 82.702481][ T6043] tipc: Enabled bearer , priority 10 [ 82.711546][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 83.195265][ T30] audit: type=1400 audit(1764290575.534:186): avc: denied { create } for pid=6040 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.322514][ T6031] UDF-fs: Scanning with blocksize 512 failed [ 83.443461][ T6031] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 83.475737][ T30] audit: type=1400 audit(1764290575.764:187): avc: denied { write } for pid=6040 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.501514][ T30] audit: type=1400 audit(1764290575.764:188): avc: denied { read } for pid=6040 comm="syz.3.29" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.501764][ T6031] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 83.527257][ T30] audit: type=1400 audit(1764290575.764:189): avc: denied { open } for pid=6040 comm="syz.3.29" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.567448][ T6038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.589637][ T30] audit: type=1400 audit(1764290575.774:190): avc: denied { ioctl } for pid=6040 comm="syz.3.29" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.622806][ T6034] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 83.677764][ T6046] fuse: Unknown parameter 'fd0x0000000000000003' [ 83.705029][ T5927] tipc: Node number set to 4269801488 [ 83.729706][ T6031] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 83.734693][ T6046] 9pnet_fd: Insufficient options for proto=fd [ 83.756435][ T6031] UDF-fs: Scanning with blocksize 1024 failed [ 84.131806][ T6031] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 84.412555][ T6031] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 84.461591][ T6031] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 84.469256][ T6031] UDF-fs: Scanning with blocksize 2048 failed [ 84.527422][ T6055] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.542898][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 84.562169][ T6031] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 84.575149][ T6055] warning: `syz.2.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.633215][ T6031] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 84.634013][ T6057] netlink: 'syz.3.33': attribute type 83 has an invalid length. [ 84.692445][ T6031] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 84.714950][ T6031] UDF-fs: Scanning with blocksize 4096 failed [ 84.735127][ T6031] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 85.324203][ T6068] binder: 6067:6068 ioctl 4020ae46 200000000000 returned -22 [ 85.602615][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.000529][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.010519][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 86.029791][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.115326][ T5892] usb 3-1: config 0 descriptor?? [ 86.131473][ T6075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.366051][ T5892] logitech-djreceiver 0003:046D:C71F.0001: unbalanced collection at end of report description [ 86.383666][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 86.424268][ T5892] logitech-djreceiver 0003:046D:C71F.0001: logi_dj_probe: parse failed [ 86.447034][ T5892] logitech-djreceiver 0003:046D:C71F.0001: probe with driver logitech-djreceiver failed with error -22 [ 86.560792][ T24] usb 3-1: USB disconnect, device number 2 [ 86.654538][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 86.683730][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 86.692617][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 86.851800][ T5934] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.963993][ T6093] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 87.042580][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.054060][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.072602][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.096451][ T6094] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 87.104900][ T5934] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.117934][ T6094] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 87.136294][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.187178][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 87.187193][ T30] audit: type=1400 audit(1764290579.524:217): avc: denied { write } for pid=6095 comm="syz.2.46" name="igmp" dev="proc" ino=4026532987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 87.222712][ T5934] usb 4-1: config 0 descriptor?? [ 87.925376][ T30] audit: type=1400 audit(1764290580.264:218): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.058561][ T5934] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 88.183382][ T5934] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 88.349561][ T30] audit: type=1400 audit(1764290580.674:219): avc: denied { create } for pid=6111 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.685340][ T30] audit: type=1400 audit(1764290580.674:220): avc: denied { bind } for pid=6111 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.916651][ T30] audit: type=1400 audit(1764290581.054:221): avc: denied { write } for pid=6111 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.089564][ T24] usb 4-1: USB disconnect, device number 3 [ 89.181540][ T30] audit: type=1400 audit(1764290581.464:222): avc: denied { ioctl } for pid=6103 comm="syz.1.48" path="socket:[8981]" dev="sockfs" ino=8981 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.629449][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 89.822348][ T6122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 89.839930][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.206488][ T6133] fuse: Bad value for 'fd' [ 90.458504][ T6138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 90.468217][ T6138] unsupported nlmsg_type 40 [ 91.041522][ T30] audit: type=1400 audit(1764290583.374:223): avc: denied { append } for pid=6136 comm="syz.0.56" name="v4l-subdev1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.072824][ T6139] Sensor B: ================= START STATUS ================= [ 91.083387][ T6139] Sensor B: Test Pattern: 75% Colorbar [ 91.089335][ T6139] Sensor B: Show Information: All [ 91.094578][ T6139] Sensor B: Vertical Flip: false [ 91.099752][ T6139] Sensor B: Horizontal Flip: false [ 91.107734][ T6139] Sensor B: Brightness: 128 [ 91.112569][ T6139] Sensor B: Contrast: 128 [ 91.117049][ T6139] Sensor B: Hue: 0 [ 91.120954][ T6139] Sensor B: Saturation: 128 [ 91.126298][ T6139] Sensor B: ================== END STATUS ================== [ 91.356778][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.841470][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.991501][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 92.003261][ T5927] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 92.011664][ T5927] usb 3-1: config 0 has no interface number 0 [ 92.019936][ T5927] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 92.030434][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.044716][ T5927] usb 3-1: Product: syz [ 92.048968][ T5927] usb 3-1: Manufacturer: syz [ 92.061243][ T5927] usb 3-1: SerialNumber: syz [ 92.088006][ T5927] usb 3-1: config 0 descriptor?? [ 92.103906][ T5927] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 92.113739][ T30] audit: type=1400 audit(1764290584.444:224): avc: denied { connect } for pid=6121 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.318313][ T5927] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 92.359893][ T5927] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 92.751213][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 92.829849][ T6145] Bluetooth: MGMT ver 1.23 [ 92.835273][ T6145] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 92.844775][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 92.855747][ T5892] usb 3-1: USB disconnect, device number 3 [ 92.864253][ T30] audit: type=1400 audit(1764290585.164:225): avc: denied { create } for pid=6143 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.884639][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 92.884848][ T5892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 92.898930][ T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 92.908612][ T30] audit: type=1400 audit(1764290585.164:226): avc: denied { bind } for pid=6143 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.932317][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 92.966229][ T5892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 92.980907][ T5892] quatech2 3-1:0.51: device disconnected [ 92.988853][ T30] audit: type=1400 audit(1764290585.164:227): avc: denied { write } for pid=6143 comm="syz.2.59" path="socket:[9117]" dev="sockfs" ino=9117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.103107][ T24] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 93.113753][ T24] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 93.135974][ T24] usb 2-1: config 8 has no interface number 0 [ 93.156266][ T24] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.173039][ T24] usb 2-1: config 8 interface 177 has no altsetting 0 [ 93.180309][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 93.194040][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.288260][ T24] ir_toy 2-1:8.177: required endpoints not found [ 93.514985][ T24] usb 2-1: USB disconnect, device number 4 [ 93.725374][ T30] audit: type=1400 audit(1764290586.064:228): avc: denied { read write } for pid=6162 comm="syz.3.63" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.835097][ T30] audit: type=1400 audit(1764290586.064:229): avc: denied { open } for pid=6162 comm="syz.3.63" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.870260][ T30] audit: type=1400 audit(1764290586.204:230): avc: denied { mount } for pid=6162 comm="syz.3.63" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 93.961731][ T5934] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.965793][ T6171] process 'syz.4.66' launched './file0' with NULL argv: empty string added [ 93.981385][ T30] audit: type=1400 audit(1764290586.304:231): avc: denied { execute } for pid=6170 comm="syz.4.66" name="file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.088751][ T30] audit: type=1400 audit(1764290586.424:232): avc: denied { execute_no_trans } for pid=6170 comm="syz.4.66" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.151483][ T5934] usb 1-1: device descriptor read/64, error -71 [ 94.210983][ T6176] fuse: Bad value for 'fd' [ 94.436101][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.68'. [ 94.467033][ T6180] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.219500][ T30] audit: type=1400 audit(1764290587.554:233): avc: denied { ioctl } for pid=6172 comm="syz.3.67" path="socket:[9169]" dev="sockfs" ino=9169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.282475][ T6181] netlink: 14 bytes leftover after parsing attributes in process `syz.3.67'. [ 95.296851][ T30] audit: type=1400 audit(1764290587.634:234): avc: denied { create } for pid=6183 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 95.345725][ T6180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.352560][ T5934] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.393314][ T6180] bond0: (slave bond1): Enslaving as an active interface with an up link [ 95.521483][ T5934] usb 1-1: device descriptor read/64, error -71 [ 95.654535][ T5934] usb usb1-port1: attempt power cycle [ 95.719627][ T6191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=6191 comm=syz.4.70 [ 96.070605][ T6181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.107390][ T6181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.122775][ T6181] bond0 (unregistering): (slave bond1): Releasing backup interface [ 96.138045][ T6181] bond0 (unregistering): Released all slaves [ 96.222478][ T5934] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.259601][ T5934] usb 1-1: device descriptor read/8, error -71 [ 96.545629][ T5934] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.582259][ T5934] usb 1-1: device descriptor read/8, error -71 [ 96.894219][ T5934] usb usb1-port1: unable to enumerate USB device [ 97.146143][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 98.863169][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 98.881449][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 99.013110][ T6219] tipc: Started in network mode [ 99.018116][ T6219] tipc: Node identity 8a44a16359a5, cluster identity 4711 [ 99.026760][ T6219] tipc: Enabled bearer , priority 0 [ 99.127952][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 99.127977][ T30] audit: type=1400 audit(1764290591.444:238): avc: denied { set_context_mgr } for pid=6217 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.216914][ T6219] syzkaller0: entered promiscuous mode [ 99.222598][ T6219] syzkaller0: entered allmulticast mode [ 99.402736][ T6217] tipc: Resetting bearer [ 99.503237][ T6217] tipc: Disabling bearer [ 99.554277][ T6225] netlink: 'syz.4.80': attribute type 10 has an invalid length. [ 99.563732][ T6225] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 101.586247][ T5824] Bluetooth: Frame is too long (len 10, expected len 8) [ 101.841591][ T6243] fuse: Bad value for 'fd' [ 102.011948][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.027737][ T5892] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.035460][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.548847][ T6248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.79'. [ 102.605738][ T30] audit: type=1400 audit(1764290594.494:239): avc: denied { read } for pid=6242 comm="syz.0.85" name="sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.865262][ T5892] usb 5-1: device descriptor read/64, error -71 [ 102.871732][ T30] audit: type=1400 audit(1764290594.494:240): avc: denied { open } for pid=6242 comm="syz.0.85" path="/dev/sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.896145][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 102.915547][ T30] audit: type=1400 audit(1764290594.504:241): avc: denied { ioctl } for pid=6242 comm="syz.0.85" path="/dev/sg0" dev="devtmpfs" ino=795 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.941055][ T5878] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 102.956784][ T5878] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.058611][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.068874][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.079208][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.093360][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.107111][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.223677][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.411625][ T5892] usb 5-1: device descriptor read/64, error -71 [ 103.524477][ T5892] usb usb5-port1: attempt power cycle [ 103.873535][ T5878] usb 4-1: usb_control_msg returned -32 [ 103.885324][ T5878] usbtmc 4-1:16.0: can't read capabilities [ 103.934272][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.964739][ T5892] usb 5-1: device descriptor read/8, error -71 [ 104.136523][ T30] audit: type=1400 audit(1764290596.474:242): avc: denied { ioctl } for pid=6256 comm="syz.0.88" path="socket:[10501]" dev="sockfs" ino=10501 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.232794][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.251092][ T30] audit: type=1400 audit(1764290596.584:243): avc: denied { write } for pid=6237 comm="syz.3.83" name="usbtmc0" dev="devtmpfs" ino=2818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.296297][ T5892] usb 5-1: device descriptor read/8, error -71 [ 104.330183][ T6258] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 104.343145][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 104.360369][ T5927] usb 4-1: USB disconnect, device number 4 [ 104.421803][ T5892] usb usb5-port1: unable to enumerate USB device [ 104.493450][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 104.502544][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 107.063699][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 107.405144][ T30] audit: type=1400 audit(1764290599.744:244): avc: denied { sys_module } for pid=6270 comm="syz.0.92" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.406540][ T6286] SELinux: policydb magic number 0xf97c0001 does not match expected magic number 0xf97cff8c [ 107.426192][ T30] audit: type=1400 audit(1764290599.744:245): avc: denied { load_policy } for pid=6270 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 107.541510][ T6286] SELinux: failed to load policy [ 107.637703][ T6291] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 107.711886][ T6291] SELinux: failed to load policy [ 107.793970][ T6293] fuse: Bad value for 'fd' [ 108.120345][ T30] audit: type=1400 audit(1764290600.454:246): avc: denied { read } for pid=6301 comm="syz.4.99" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.222402][ T30] audit: type=1400 audit(1764290600.454:247): avc: denied { open } for pid=6301 comm="syz.4.99" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.337500][ T30] audit: type=1400 audit(1764290600.494:248): avc: denied { ioctl } for pid=6301 comm="syz.4.99" path="/dev/usbmon4" dev="devtmpfs" ino=728 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.521939][ T30] audit: type=1400 audit(1764290600.834:249): avc: denied { read } for pid=6310 comm="syz.4.101" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.556312][ T30] audit: type=1400 audit(1764290600.834:250): avc: denied { open } for pid=6310 comm="syz.4.101" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.798757][ T30] audit: type=1400 audit(1764290600.834:251): avc: denied { ioctl } for pid=6310 comm="syz.4.101" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.273458][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 109.273493][ T30] audit: type=1400 audit(1764290601.604:254): avc: denied { mount } for pid=6319 comm="syz.4.103" name="/" dev="overlay" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.278248][ T6321] overlayfs: failed lookup in lower (newroot/19, name='bus', err=-40): overlapping layers [ 110.084311][ T30] audit: type=1400 audit(1764290602.424:255): avc: denied { link } for pid=6319 comm="syz.4.103" name="#4" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.218560][ T30] audit: type=1400 audit(1764290602.454:256): avc: denied { rename } for pid=6319 comm="syz.4.103" name="#5" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.406170][ T30] audit: type=1400 audit(1764290602.744:257): avc: denied { mount } for pid=6331 comm="syz.4.107" name="/" dev="ramfs" ino=10764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 110.482576][ T5892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.519803][ T30] audit: type=1400 audit(1764290602.744:258): avc: denied { create } for pid=6331 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.601449][ T30] audit: type=1326 audit(1764290602.904:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 110.675519][ T30] audit: type=1326 audit(1764290602.914:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 110.686648][ T5892] usb 2-1: config index 0 descriptor too short (expected 1042, got 18) [ 110.749134][ T30] audit: type=1326 audit(1764290602.914:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 110.762024][ T5892] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 110.779098][ T6336] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 110.791442][ T6336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.797837][ T5892] usb 2-1: config 0 has no interface number 0 [ 110.824855][ T5892] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=fc.ee [ 110.834169][ T5892] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 110.879837][ T30] audit: type=1326 audit(1764290602.914:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 110.881549][ T5892] usb 2-1: Product: syz [ 111.316859][ T30] audit: type=1326 audit(1764290602.914:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 111.320044][ T5892] usb 2-1: Manufacturer: syz [ 111.394393][ T5892] usb 2-1: SerialNumber: syz [ 111.418815][ T5892] usb 2-1: config 0 descriptor?? [ 111.674201][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.804088][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.825273][ T5934] usb 2-1: USB disconnect, device number 5 [ 113.975926][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.111708][ T5878] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.149837][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 114.246247][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.260213][ T5892] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.270139][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.287497][ T5892] usb 2-1: config 0 descriptor?? [ 114.391401][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 114.398689][ T5878] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 114.408587][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.427038][ T5878] usb 4-1: config 0 descriptor?? [ 114.447875][ T5878] gspca_main: sq930x-2.14.0 probing 041e:403c [ 114.561499][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.631452][ T980] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.711469][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 114.718690][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.744751][ T5892] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 114.761730][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.770856][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.780152][ T9] usb 3-1: Product: syz [ 114.785420][ T9] usb 3-1: Manufacturer: syz [ 114.790076][ T9] usb 3-1: SerialNumber: syz [ 114.797063][ T9] usb 3-1: config 0 descriptor?? [ 114.805081][ T9] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 114.818074][ T980] usb 5-1: config index 0 descriptor too short (expected 65069, got 45) [ 114.827026][ T980] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 114.840977][ T980] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 114.862071][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.868695][ T5878] gspca_sq930x: ucbus_write failed -71 [ 114.874088][ T980] usb 5-1: config 0 has no interfaces? [ 114.901565][ T5878] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 114.922605][ T5878] usb 4-1: USB disconnect, device number 5 [ 114.949797][ T980] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 114.970382][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.998665][ T980] usb 5-1: config 0 descriptor?? [ 115.007587][ T9] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 115.027777][ T9] quatech2 3-1:0.0: probe with driver quatech2 failed with error -8 [ 115.191911][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 115.191925][ T30] audit: type=1400 audit(1764290607.534:309): avc: denied { connect } for pid=6359 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.217669][ T30] audit: type=1400 audit(1764290607.534:310): avc: denied { write } for pid=6359 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.222094][ T980] usb 2-1: USB disconnect, device number 6 [ 115.244355][ T5878] usb 5-1: USB disconnect, device number 6 [ 115.450710][ T30] audit: type=1400 audit(1764290607.784:311): avc: denied { append } for pid=6382 comm="syz.3.122" name="sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.474936][ T6383] program syz.3.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.488804][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.506327][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.516899][ T980] usb 3-1: USB disconnect, device number 4 [ 116.159816][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 118.753984][ T6390] tipc: Enabling of bearer rejected, already enabled [ 118.768858][ T6397] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.784834][ T6397] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 119.014840][ T6400] tipc: Enabled bearer , priority 0 [ 119.034683][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 119.049113][ T6400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'. [ 119.371503][ T30] audit: type=1400 audit(1764290611.704:312): avc: denied { read } for pid=6401 comm="syz.2.126" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 119.431158][ T30] audit: type=1400 audit(1764290611.704:313): avc: denied { open } for pid=6401 comm="syz.2.126" path="/25/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 119.471029][ T6406] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.488958][ T6405] syzkaller0: entered promiscuous mode [ 119.490031][ T6406] block device autoloading is deprecated and will be removed. [ 119.495053][ T6405] syzkaller0: entered allmulticast mode [ 119.862811][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.192104][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 120.296168][ T3543] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.324387][ T6400] tipc: Resetting bearer [ 120.330269][ T5878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 120.357072][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 120.367862][ T3543] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.376745][ T5878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 120.394350][ T3543] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.407400][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 120.417911][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.431908][ T5878] usb 1-1: config 0 descriptor?? [ 120.739589][ T6419] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 120.749697][ T6419] SELinux: failed to load policy [ 120.787694][ T6399] tipc: Resetting bearer [ 120.834644][ T6399] tipc: Disabling bearer [ 121.580675][ T6426] Bluetooth: hci0: invalid len left 7, exp >= 67 [ 121.966496][ T5878] hdpvr 1-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 121.980627][ T3543] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.006156][ T5878] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 122.180835][ T30] audit: type=1400 audit(1764290614.514:314): avc: denied { mount } for pid=6430 comm="syz.2.134" name="/" dev="hugetlbfs" ino=10178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 122.414885][ T6429] tipc: Started in network mode [ 122.421538][ T6429] tipc: Node identity c24acd0baeb4, cluster identity 4711 [ 122.431833][ T6429] tipc: Enabled bearer , priority 0 [ 122.613494][ T30] audit: type=1400 audit(1764290614.824:315): avc: denied { read write } for pid=6430 comm="syz.2.134" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.689936][ T30] audit: type=1400 audit(1764290614.824:316): avc: denied { open } for pid=6430 comm="syz.2.134" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.843462][ T30] audit: type=1400 audit(1764290614.844:317): avc: denied { ioctl } for pid=6430 comm="syz.2.134" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.882834][ T5878] hdpvr 1-1:0.0: Could not setup controls [ 123.476436][ T6440] siw: device registration error -23 [ 123.501940][ T980] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.911006][ T5892] tipc: Node number set to 1828637963 [ 123.917124][ T5878] hdpvr 1-1:0.0: registering videodev failed [ 123.930891][ T30] audit: type=1400 audit(1764290615.384:318): avc: denied { read write } for pid=6437 comm="syz.3.137" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 123.966561][ T5878] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 123.980175][ T5878] usb 1-1: USB disconnect, device number 6 [ 124.000627][ T30] audit: type=1400 audit(1764290615.384:319): avc: denied { open } for pid=6437 comm="syz.3.137" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.111426][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 124.118386][ T980] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 124.137217][ T980] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 124.322327][ T6428] binder: 6427:6428 ioctl c0306201 200000000080 returned -14 [ 124.351626][ T6428] binder: 6427:6428 ioctl c0306201 0 returned -14 [ 124.359768][ T6428] syzkaller0: entered promiscuous mode [ 124.365327][ T6428] syzkaller0: entered allmulticast mode [ 124.395129][ T6427] tipc: Resetting bearer [ 124.395585][ T980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.410869][ T30] audit: type=1400 audit(1764290616.744:320): avc: denied { create } for pid=6443 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.430771][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.444493][ T980] usb 3-1: SerialNumber: syz [ 124.449238][ T30] audit: type=1400 audit(1764290616.744:321): avc: denied { connect } for pid=6443 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.461917][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.478961][ T30] audit: type=1400 audit(1764290616.754:322): avc: denied { bind } for pid=6443 comm="syz.0.138" lport=39062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.482590][ T6446] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 124.505050][ T6432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.519152][ T6427] tipc: Disabling bearer [ 124.527141][ T6432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.535583][ T30] audit: type=1400 audit(1764290616.754:323): avc: denied { name_bind } for pid=6443 comm="syz.0.138" src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 124.577842][ T6446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.612755][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 124.660987][ T6446] bond1: entered promiscuous mode [ 124.667838][ T6446] bond1: entered allmulticast mode [ 124.683210][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 124.697057][ T6450] bond1: (slave dummy0): making interface the new active one [ 124.704774][ T6450] dummy0: entered promiscuous mode [ 124.710399][ T6450] dummy0: entered allmulticast mode [ 124.717555][ T6450] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 124.844208][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.853640][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.866368][ T980] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 124.866790][ T5927] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 124.879948][ T980] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 124.901841][ T980] usb 3-1: USB disconnect, device number 5 [ 124.970455][ T6455] tipc: Enabled bearer , priority 10 [ 124.978906][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 125.345669][ T5927] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.358418][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.376340][ T5927] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.387871][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.405082][ T5927] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.416504][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.452974][ T5927] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.463590][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.481235][ T5927] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.492429][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.604308][ T5927] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.617883][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.667166][ T5927] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.682476][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.776655][ T5927] usb 4-1: unable to read config index 7 descriptor/start: -71 [ 125.788383][ T5927] usb 4-1: can't read configurations, error -71 [ 125.871513][ T980] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.021399][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 126.023288][ T980] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 126.023315][ T980] usb 1-1: config 0 has no interface number 0 [ 126.133667][ T980] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 126.133697][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.133716][ T980] usb 1-1: Product: syz [ 126.133731][ T980] usb 1-1: Manufacturer: syz [ 126.133745][ T980] usb 1-1: SerialNumber: syz [ 126.170972][ T6470] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 126.171145][ T6470] SELinux: failed to load policy [ 126.236307][ T980] usb 1-1: config 0 descriptor?? [ 126.778308][ T6477] ALSA: seq fatal error: cannot create timer (-22) [ 126.798491][ T6477] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.845041][ T980] msi2500 1-1:0.246: Registered as swradio24 [ 126.845065][ T980] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 126.848609][ T980] usb 1-1: USB disconnect, device number 7 [ 127.311586][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 127.311603][ T30] audit: type=1400 audit(1764290619.644:330): avc: denied { watch } for pid=6485 comm="syz.0.149" path="/33" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.465431][ T30] audit: type=1400 audit(1764290619.794:331): avc: denied { write } for pid=6481 comm="syz.3.147" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.488500][ T980] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 127.605585][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 127.605614][ T30] audit: type=1400 audit(1764290619.934:332): avc: denied { create } for pid=6491 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.644279][ T6493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.653939][ T30] audit: type=1400 audit(1764290619.944:333): avc: denied { bind } for pid=6491 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.674448][ T30] audit: type=1400 audit(1764290619.944:334): avc: denied { getopt } for pid=6491 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.695432][ T980] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 127.703675][ T980] usb 5-1: config 0 has no interface number 0 [ 127.722880][ T980] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 127.751466][ T980] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 127.764555][ T980] usb 5-1: config 0 interface 11 has no altsetting 0 [ 127.771705][ T980] usb 5-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 127.783055][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.794024][ T980] usb 5-1: config 0 descriptor?? [ 127.799499][ T6486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.808054][ T980] keyspan 5-1:0.11: Keyspan 4 port adapter converter detected [ 127.817401][ T980] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 127.831473][ T980] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 127.854860][ T980] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 127.886585][ T980] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 127.907032][ T980] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 127.931177][ T980] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 127.982238][ T980] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 128.094439][ T30] audit: type=1400 audit(1764290620.414:335): avc: denied { read } for pid=6484 comm="syz.4.148" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.247789][ T980] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 128.374024][ T980] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 128.411400][ T30] audit: type=1400 audit(1764290620.414:336): avc: denied { open } for pid=6484 comm="syz.4.148" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.434741][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.467597][ T980] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 128.513844][ T980] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 128.543188][ T30] audit: type=1400 audit(1764290620.414:337): avc: denied { ioctl } for pid=6484 comm="syz.4.148" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.546912][ T980] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 128.567887][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.649847][ T980] usb 5-1: USB disconnect, device number 7 [ 128.688283][ T980] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 128.721649][ T30] audit: type=1400 audit(1764290621.044:338): avc: denied { block_suspend } for pid=6497 comm="syz.2.151" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.759996][ T980] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 128.790543][ T980] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 128.817144][ T980] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 128.849934][ T980] keyspan 5-1:0.11: device disconnected [ 128.861425][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.951435][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.023235][ T24] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 129.032567][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.045553][ T24] usb 1-1: config 0 descriptor?? [ 129.193066][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 129.214847][ T43] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 129.371864][ T30] audit: type=1400 audit(1764290621.704:339): avc: denied { setopt } for pid=6501 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.822804][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.831067][ T43] usb 3-1: Product: syz [ 129.950622][ T24] gp8psk: usb in 128 operation failed. [ 129.959667][ T43] usb 3-1: Manufacturer: syz [ 129.982252][ T43] usb 3-1: SerialNumber: syz [ 129.987442][ T24] gp8psk: usb in 137 operation failed. [ 130.076468][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.346001][ T43] usb 3-1: config 0 descriptor?? [ 130.354867][ T24] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 130.371549][ T24] usb 1-1: media controller created [ 130.398687][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.430981][ T24] gp8psk_fe: Frontend attached [ 130.438246][ T24] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 130.447901][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 130.659167][ T5824] Bluetooth: hci0: unknown advertising packet type: 0x5f [ 130.659231][ T5824] Bluetooth: hci0: Malformed LE Event: 0x02 [ 130.707507][ T43] usb-storage 3-1:0.0: USB Mass Storage device detected [ 130.927426][ T6520] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 130.937705][ T6520] SELinux: failed to load policy [ 131.265141][ T24] gp8psk: usb in 137 operation failed. [ 131.518120][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 131.528251][ T24] gp8psk: found Genpix USB device pID = 203 (hex) [ 131.543508][ T24] usb 1-1: USB disconnect, device number 8 [ 131.684653][ T43] usb 3-1: USB disconnect, device number 6 [ 132.164793][ T6537] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 132.753358][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.767160][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.782999][ T6533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.849067][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 134.091429][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.221551][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 134.230409][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 134.239363][ T6558] netlink: 'syz.1.166': attribute type 13 has an invalid length. [ 134.247152][ T6558] netlink: 'syz.1.166': attribute type 12 has an invalid length. [ 134.421609][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 134.605535][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 134.617363][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 134.629064][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 134.740691][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 134.782807][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 134.863562][ T24] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 134.879173][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.922616][ T24] usb 5-1: Product: syz [ 134.939522][ T24] usb 5-1: Manufacturer: syz [ 134.950765][ T24] usb 5-1: SerialNumber: syz [ 134.980824][ T24] usb 5-1: config 0 descriptor?? [ 135.862215][ T6566] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 135.871919][ T6566] SELinux: failed to load policy [ 135.917906][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 135.917921][ T30] audit: type=1400 audit(1764290628.254:343): avc: denied { read } for pid=6571 comm="syz.3.171" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 135.986948][ T30] audit: type=1400 audit(1764290628.304:344): avc: denied { open } for pid=6571 comm="syz.3.171" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.246337][ T30] audit: type=1326 audit(1764290628.584:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178838f749 code=0x7ffc0000 [ 136.246346][ T24] input input6: Device does not respond to id packet M [ 136.269552][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.292673][ T30] audit: type=1326 audit(1764290628.584:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178838f749 code=0x7ffc0000 [ 136.315901][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.387415][ T6582] openvswitch: netlink: nsh attribute has 12800 unknown bytes. [ 136.395331][ T6582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.423712][ T6582] random: crng reseeded on system resumption [ 136.473120][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 136.482068][ T6583] openvswitch: netlink: Flow key attr not present in new flow. [ 136.832447][ T6563] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 136.840070][ T6563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.863390][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.883587][ T30] audit: type=1326 audit(1764290628.624:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f178838f749 code=0x7ffc0000 [ 136.907282][ T30] audit: type=1326 audit(1764290628.624:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178838f749 code=0x7ffc0000 [ 136.931241][ T30] audit: type=1326 audit(1764290628.624:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178838f749 code=0x7ffc0000 [ 136.954467][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.961303][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.044198][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 137.050257][ T24] input input6: Device does not respond to id packet P [ 137.061528][ T30] audit: type=1326 audit(1764290628.624:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f178838f749 code=0x7ffc0000 [ 137.084757][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.086913][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 137.098455][ T24] input input6: Device does not respond to id packet B [ 137.110132][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 137.117365][ T30] audit: type=1326 audit(1764290628.624:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178838f749 code=0x7ffc0000 [ 137.140823][ T24] input input6: Device does not respond to id packet N [ 137.184657][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 137.193678][ T30] audit: type=1326 audit(1764290628.624:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178838f749 code=0x7ffc0000 [ 137.221135][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 137.232088][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 137.241105][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 137.248121][ T24] iforce 5-1:0.0: usb_submit_urb failed -90 [ 137.257464][ T24] iforce 5-1:0.0: usb_submit_urb failed -90 [ 137.291540][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 137.378901][ T24] usb 5-1: USB disconnect, device number 8 [ 139.952256][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 139.999971][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 140.183288][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 140.201766][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 140.217236][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 140.586909][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 140.740760][ T6626] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 141.049948][ T6634] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 141.357642][ T6634] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.404191][ T6631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.306109][ T6632] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 142.314064][ T6632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.108013][ T6662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.147999][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 144.148013][ T30] audit: type=1400 audit(1764290636.484:360): avc: denied { map } for pid=6661 comm="syz.1.194" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.228718][ T30] audit: type=1400 audit(1764290636.524:361): avc: denied { call } for pid=6661 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.445307][ T6671] syzkaller1: entered promiscuous mode [ 144.510798][ T6671] syzkaller1: entered allmulticast mode [ 144.724762][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 144.837142][ T6679] tipc: Enabling of bearer rejected, already enabled [ 144.848003][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 145.425248][ T6685] SELinux: Context system_u:object_r:power_device_t:s0 is not valid (left unmapped). [ 145.444210][ T30] audit: type=1400 audit(1764290637.774:362): avc: denied { relabelto } for pid=6681 comm="syz.3.199" name="cgroup.procs" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 145.474413][ T6687] capability: warning: `syz.1.202' uses deprecated v2 capabilities in a way that may be insecure [ 145.487442][ T6687] sg_read: process 127 (syz.1.202) changed security contexts after opening file descriptor, this is not allowed. [ 145.603163][ T30] audit: type=1400 audit(1764290637.774:363): avc: denied { associate } for pid=6681 comm="syz.3.199" name="cgroup.procs" dev="cgroup2" ino=70 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:power_device_t:s0" [ 145.698170][ T30] audit: type=1400 audit(1764290637.774:364): avc: denied { write } for pid=6681 comm="syz.3.199" name="cgroup.procs" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 145.921204][ T6699] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 146.089060][ T30] audit: type=1400 audit(1764290637.774:365): avc: denied { open } for pid=6681 comm="syz.3.199" path="/syzcgroup/unified/syz3/cgroup.procs" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:power_device_t:s0" [ 146.245169][ T30] audit: type=1400 audit(1764290637.784:366): avc: denied { ioctl } for pid=6681 comm="syz.3.199" path="pid:[4026532794]" dev="nsfs" ino=4026532794 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.197341][ T30] audit: type=1400 audit(1764290637.814:367): avc: denied { write } for pid=6684 comm="syz.1.202" name="sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.221057][ T30] audit: type=1400 audit(1764290638.144:368): avc: denied { append } for pid=6693 comm="syz.4.204" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.331484][ T6691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.704404][ T6699] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.766060][ T5878] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.127400][ T5878] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 148.136730][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.147790][ T5878] usb 4-1: config 0 descriptor?? [ 148.258899][ T30] audit: type=1400 audit(1764290640.594:369): avc: denied { write } for pid=6713 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 149.201081][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 149.267792][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 149.564693][ T5878] usb 4-1: Cannot set autoneg [ 149.569853][ T5878] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 149.586435][ T6733] fuse: Invalid rootmode [ 149.817998][ T6737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.215'. [ 150.341693][ T30] audit: type=1400 audit(1764290642.674:370): avc: denied { setopt } for pid=6739 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.376362][ T30] audit: type=1400 audit(1764290642.704:371): avc: denied { ioctl } for pid=6739 comm="syz.1.217" path="socket:[12979]" dev="sockfs" ino=12979 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.400973][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.560500][ T6743] syzkaller1: entered promiscuous mode [ 150.566191][ T6743] syzkaller1: entered allmulticast mode [ 150.577406][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.219'. [ 150.627836][ T977] usb 4-1: USB disconnect, device number 8 [ 150.633890][ T5878] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.681448][ T5878] usb 2-1: device descriptor read/64, error -71 [ 151.921721][ T5878] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 152.373926][ T5878] usb 2-1: device descriptor read/64, error -71 [ 152.484444][ T5878] usb usb2-port1: attempt power cycle [ 153.333212][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.101569][ T5878] usb 2-1: device descriptor read/8, error -71 [ 154.278982][ T6770] Invalid source name [ 154.283302][ T6770] UBIFS error (pid: 6770): cannot open "./file0", error -22 [ 155.381934][ T30] audit: type=1400 audit(1764290647.714:372): avc: denied { bind } for pid=6783 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.923181][ T30] audit: type=1326 audit(1764290648.144:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 156.082232][ T30] audit: type=1326 audit(1764290648.154:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 156.105634][ T30] audit: type=1326 audit(1764290648.154:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 156.129180][ T30] audit: type=1326 audit(1764290648.154:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 157.347344][ T30] audit: type=1326 audit(1764290648.154:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 157.448629][ T30] audit: type=1326 audit(1764290648.154:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 157.575429][ T30] audit: type=1326 audit(1764290648.154:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f652df8df90 code=0x7ffc0000 [ 157.611599][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 157.617937][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.693129][ T30] audit: type=1326 audit(1764290648.154:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 157.718866][ T6808] syzkaller1: entered promiscuous mode [ 157.724688][ T6808] syzkaller1: entered allmulticast mode [ 157.733893][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 157.814724][ T30] audit: type=1326 audit(1764290648.154:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652df8f749 code=0x7ffc0000 [ 159.635337][ T6825] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 159.643049][ T6825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.048762][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 161.048798][ T30] audit: type=1400 audit(1764290653.034:409): avc: denied { create } for pid=6842 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.353566][ T30] audit: type=1400 audit(1764290653.034:410): avc: denied { mount } for pid=6842 comm="syz.0.247" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.772531][ T30] audit: type=1400 audit(1764290654.094:411): avc: denied { create } for pid=6834 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.868648][ T6851] netlink: 'syz.3.248': attribute type 10 has an invalid length. [ 161.887418][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.907444][ T30] audit: type=1400 audit(1764290654.104:412): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.957439][ T30] audit: type=1400 audit(1764290654.134:413): avc: denied { accept } for pid=6834 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.761429][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.969719][ T9] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 162.989776][ T9] usb 3-1: config 0 has no interface number 0 [ 163.005367][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 163.020704][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.059412][ T9] usb 3-1: config 0 descriptor?? [ 163.178033][ T9] gspca_main: spca500-2.14.0 probing 041e:400a [ 163.843890][ T30] audit: type=1400 audit(1764290656.184:414): avc: denied { getopt } for pid=6853 comm="syz.2.250" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.982049][ T30] audit: type=1400 audit(1764290656.324:415): avc: denied { ioctl } for pid=6853 comm="syz.2.250" path="socket:[13279]" dev="sockfs" ino=13279 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.111045][ T30] audit: type=1326 audit(1764290656.444:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.0.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f178838f749 code=0x0 [ 164.255389][ T980] usb 3-1: USB disconnect, device number 7 [ 164.262613][ T6871] netlink: 'syz.0.253': attribute type 25 has an invalid length. [ 164.263316][ T30] audit: type=1400 audit(1764290656.604:417): avc: denied { nlmsg_read } for pid=6868 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.309494][ T30] audit: type=1400 audit(1764290657.614:418): avc: denied { write } for pid=6887 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.561539][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.723384][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.821442][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.875728][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.918320][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.939350][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.962585][ T9] usb 5-1: config 0 descriptor?? [ 168.556115][ T30] audit: type=1400 audit(1764290660.884:419): avc: denied { setopt } for pid=6916 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.721277][ T9] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 168.742170][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 168.781450][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 168.941932][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 168.974745][ T24] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 168.992292][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.012516][ T9] usb 5-1: USB disconnect, device number 9 [ 169.071401][ T24] usb 3-1: Product: syz [ 169.085896][ T24] usb 3-1: Manufacturer: syz [ 169.100958][ T24] usb 3-1: SerialNumber: syz [ 169.115000][ T24] usb 3-1: config 0 descriptor?? [ 169.364041][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 169.641439][ T30] audit: type=1400 audit(1764290661.974:420): avc: denied { connect } for pid=6927 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.861429][ T30] audit: type=1400 audit(1764290662.194:421): avc: denied { mount } for pid=6930 comm="syz.4.272" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 170.243709][ T30] audit: type=1400 audit(1764290662.584:422): avc: denied { sqpoll } for pid=6943 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.272691][ T24] gspca_sunplus: reg_w_riv err -110 [ 170.277989][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 170.521678][ T5878] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 170.813517][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 170.830462][ T5878] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 170.854853][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.876447][ T5878] usb 1-1: config 0 descriptor?? [ 171.030058][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.276'. [ 171.041244][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 171.521014][ T9] usb 3-1: USB disconnect, device number 8 [ 173.474196][ T6966] FAULT_INJECTION: forcing a failure. [ 173.474196][ T6966] name failslab, interval 1, probability 0, space 0, times 1 [ 173.496976][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.3.281 Not tainted syzkaller #0 PREEMPT(full) [ 173.497002][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.497012][ T6966] Call Trace: [ 173.497019][ T6966] [ 173.497026][ T6966] dump_stack_lvl+0x16c/0x1f0 [ 173.497048][ T6966] should_fail_ex+0x512/0x640 [ 173.497069][ T6966] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 173.497099][ T6966] should_failslab+0xc2/0x120 [ 173.497120][ T6966] kmem_cache_alloc_node_noprof+0x78/0x770 [ 173.497146][ T6966] ? __alloc_skb+0x2b2/0x380 [ 173.497173][ T6966] ? __alloc_skb+0x2b2/0x380 [ 173.497192][ T6966] ? __pfx_netlink_insert+0x10/0x10 [ 173.497215][ T6966] __alloc_skb+0x2b2/0x380 [ 173.497236][ T6966] ? __pfx___alloc_skb+0x10/0x10 [ 173.497255][ T6966] ? netlink_autobind.isra.0+0x158/0x370 [ 173.497283][ T6966] netlink_alloc_large_skb+0x69/0x140 [ 173.497306][ T6966] netlink_sendmsg+0x698/0xdd0 [ 173.497330][ T6966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.497359][ T6966] ____sys_sendmsg+0xa98/0xc70 [ 173.497377][ T6966] ? copy_msghdr_from_user+0x10a/0x160 [ 173.497399][ T6966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.497429][ T6966] ___sys_sendmsg+0x134/0x1d0 [ 173.497453][ T6966] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.497473][ T6966] ? __lock_acquire+0x622/0x1c90 [ 173.497527][ T6966] __sys_sendmsg+0x16d/0x220 [ 173.497553][ T6966] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.497596][ T6966] do_syscall_64+0xcd/0xfa0 [ 173.497627][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.497648][ T6966] RIP: 0033:0x7f677d38f749 [ 173.497663][ T6966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.497681][ T6966] RSP: 002b:00007f677e2ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.497700][ T6966] RAX: ffffffffffffffda RBX: 00007f677d5e5fa0 RCX: 00007f677d38f749 [ 173.497713][ T6966] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 173.497725][ T6966] RBP: 00007f677e2ac090 R08: 0000000000000000 R09: 0000000000000000 [ 173.497736][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.497747][ T6966] R13: 00007f677d5e6038 R14: 00007f677d5e5fa0 R15: 00007ffe662d07b8 [ 173.497776][ T6966] [ 173.619243][ T6969] tipc: Enabled bearer , priority 0 [ 173.622359][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.734739][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.778703][ T6970] binder: 6967:6970 ioctl c0306201 200000000080 returned -14 [ 173.817934][ T6970] syzkaller0: entered promiscuous mode [ 173.823615][ T6970] syzkaller0: entered allmulticast mode [ 174.073517][ T5878] usbhid 1-1:0.0: can't add hid device: -71 [ 174.079513][ T5878] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 174.089197][ T5878] usb 1-1: USB disconnect, device number 9 [ 174.243128][ T6967] tipc: Resetting bearer [ 174.548706][ T30] audit: type=1400 audit(1764290666.864:423): avc: denied { override_creds } for pid=6973 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 174.811051][ T6967] tipc: Disabling bearer [ 175.005723][ T5878] tipc: Node number set to 3554779491 [ 175.309824][ T6984] comedi comedi0: Cannot bond this driver to itself! [ 175.344842][ T30] audit: type=1400 audit(1764290667.664:424): avc: denied { map } for pid=6979 comm="syz.0.284" path="socket:[13581]" dev="sockfs" ino=13581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 175.368349][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.826237][ T6991] tipc: Enabled bearer , priority 0 [ 175.897641][ T6991] binder: 6989:6991 ioctl c0306201 200000000080 returned -14 [ 178.376971][ T30] audit: type=1400 audit(1764290670.204:425): avc: denied { create } for pid=7008 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 179.012434][ T30] audit: type=1400 audit(1764290670.204:426): avc: denied { read } for pid=7008 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 182.273047][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 182.443601][ T30] audit: type=1400 audit(1764290674.764:427): avc: denied { connect } for pid=7031 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.541451][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 182.551738][ T43] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 182.595772][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 182.611407][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.029505][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.058048][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.341637][ T5934] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.392619][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.417335][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.494303][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.541986][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.585622][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 183.601101][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.624293][ T5934] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 183.644645][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.680541][ T5934] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.710174][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.738938][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.753689][ T5934] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.764080][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.788054][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.824577][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.835860][ T5934] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.876644][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.889943][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.913636][ T5934] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.924601][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.944488][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.958502][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.141667][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.150788][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.169535][ T5934] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 185.332213][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.287688][ T43] usb 4-1: can't set config #16, error -71 [ 186.389954][ T5934] usb 2-1: unable to read config index 5 descriptor/start: -71 [ 186.402335][ T43] usb 4-1: USB disconnect, device number 9 [ 186.411625][ T5934] usb 2-1: can't read configurations, error -71 [ 186.472692][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 186.870675][ T7079] syzkaller1: entered promiscuous mode [ 186.881546][ T7079] syzkaller1: entered allmulticast mode [ 186.898544][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 187.060370][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 187.221067][ T30] audit: type=1400 audit(1764290679.554:428): avc: denied { remount } for pid=7091 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 187.221091][ T7093] binder: Unknown parameter 'stats½global' [ 187.249340][ T7093] binder: Unknown parameter 'stats½global' [ 187.445918][ T7089] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 187.456285][ T7089] bridge1: entered promiscuous mode [ 187.461812][ T7089] bridge1: entered allmulticast mode [ 187.505755][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 187.562917][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 187.712681][ T5934] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 187.814394][ T7101] erofs (device nbd4): cannot find valid erofs superblock [ 187.871537][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 187.900987][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.964940][ T5934] usb 1-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 188.048691][ T5934] usb 1-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 188.141808][ T5934] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 188.181448][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.205813][ T7104] netlink: 44 bytes leftover after parsing attributes in process `syz.3.317'. [ 188.235000][ T5934] usb 1-1: Product: syz [ 188.239303][ T5934] usb 1-1: Manufacturer: syz [ 188.244601][ T5934] usb 1-1: SerialNumber: syz [ 188.563381][ T5934] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 188.676379][ T30] audit: type=1400 audit(1764290681.014:429): avc: denied { read } for pid=7103 comm="syz.3.317" dev="sockfs" ino=13923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.821450][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 189.981578][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 190.144706][ T43] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 190.159032][ T43] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 190.169693][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.192805][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 190.192805][ T5934] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 190.217879][ T43] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 190.234743][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.269001][ T43] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 190.279328][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.299820][ T43] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 190.314295][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.447426][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 190.456709][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.465118][ T9] usb 2-1: Product: syz [ 190.475913][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.492510][ T5934] usb 1-1: device firmware changed [ 190.499046][ T9] usb 2-1: Manufacturer: syz [ 190.511531][ T9] usb 2-1: SerialNumber: syz [ 190.517412][ T43] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 190.535067][ T5934] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 190.561541][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.575916][ T5934] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 190.587229][ T5936] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 190.599983][ T5936] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 190.612873][ T30] audit: type=1400 audit(1764290682.934:430): avc: denied { firmware_load } for pid=5936 comm="kworker/1:8" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 190.643860][ T43] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 190.654372][ T5934] usb 1-1: USB disconnect, device number 10 [ 190.671520][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.698241][ T5936] ------------[ cut here ]------------ [ 190.704188][ T5936] WARNING: CPU: 1 PID: 5936 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80 [ 190.713293][ T5936] Modules linked in: [ 190.717513][ T5936] CPU: 1 UID: 0 PID: 5936 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 190.727136][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.737901][ T5936] Workqueue: events request_firmware_work_func [ 190.744152][ T5936] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 190.749728][ T5936] Code: 38 da 57 ff 85 ed 74 1c e8 ef de 57 ff be 04 00 00 00 48 89 df e8 62 8a c0 ff f0 ff 03 5b 5d e9 98 ce fe 08 e8 d3 de 57 ff 90 <0f> 0b 90 eb d9 48 89 df e8 45 82 c0 ff eb c0 0f 1f 00 90 90 90 90 [ 190.769418][ T5936] RSP: 0018:ffffc900046af780 EFLAGS: 00010293 [ 190.775904][ T5936] RAX: 0000000000000000 RBX: ffff888073ef12d0 RCX: ffffffff826508e8 [ 190.784035][ T5936] RDX: ffff888025512480 RSI: ffffffff8265090d RDI: 0000000000000005 [ 190.792053][ T5936] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 190.800030][ T5936] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880304ab0b0 [ 190.808091][ T5936] R13: ffff888052c14730 R14: 0000000000000000 R15: ffff888052c14728 [ 190.816199][ T5936] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 190.825236][ T5936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.831850][ T5936] CR2: 00007f76eed7e08d CR3: 0000000073f49000 CR4: 00000000003526f0 [ 190.840019][ T5936] Call Trace: [ 190.843329][ T5936] [ 190.846254][ T5936] kernfs_get+0x1f/0x30 [ 190.850405][ T5936] kobject_add_internal+0x353/0x9b0 [ 190.855643][ T5936] ? kfree_const+0x51/0x60 [ 190.860058][ T5936] kobject_add+0x16e/0x240 [ 190.864504][ T5936] ? __pfx_kobject_add+0x10/0x10 [ 190.869450][ T5936] get_device_parent+0x399/0x4e0 [ 190.874412][ T5936] device_add+0x1ad/0x1aa0 [ 190.878837][ T5936] ? __pfx_device_add+0x10/0x10 [ 190.883711][ T5936] ? __init_waitqueue_head+0xca/0x150 [ 190.889095][ T5936] firmware_fallback_sysfs+0x2ec/0xbe0 [ 190.894627][ T5936] _request_firmware+0xfe9/0x1470 [ 190.899675][ T5936] ? __pfx__request_firmware+0x10/0x10 [ 190.905189][ T5936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.910998][ T5936] ? debug_object_deactivate+0x1ec/0x3a0 [ 190.916843][ T5936] request_firmware_work_func+0xea/0x250 [ 190.922516][ T5936] ? __pfx_request_firmware_work_func+0x10/0x10 [ 190.928786][ T5936] ? rcu_is_watching+0x12/0xc0 [ 190.933591][ T5936] process_one_work+0x9cf/0x1b70 [ 190.938560][ T5936] ? __pfx_process_one_work+0x10/0x10 [ 190.944157][ T5936] ? assign_work+0x1a0/0x250 [ 190.948758][ T5936] worker_thread+0x6c8/0xf10 [ 190.953397][ T5936] ? __kthread_parkme+0x19e/0x250 [ 190.958431][ T5936] ? __pfx_worker_thread+0x10/0x10 [ 190.963565][ T5936] kthread+0x3c5/0x780 [ 190.967643][ T5936] ? __pfx_kthread+0x10/0x10 [ 190.972590][ T5936] ? rcu_is_watching+0x12/0xc0 [ 190.977353][ T5936] ? __pfx_kthread+0x10/0x10 [ 190.981955][ T5936] ret_from_fork+0x675/0x7d0 [ 190.986554][ T5936] ? __pfx_kthread+0x10/0x10 [ 190.991148][ T5936] ret_from_fork_asm+0x1a/0x30 [ 190.995981][ T5936] [ 190.999006][ T5936] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.006285][ T5936] CPU: 1 UID: 0 PID: 5936 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 191.015668][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.025740][ T5936] Workqueue: events request_firmware_work_func [ 191.031923][ T5936] Call Trace: [ 191.035208][ T5936] [ 191.038132][ T5936] dump_stack_lvl+0x3d/0x1f0 [ 191.042716][ T5936] vpanic+0x640/0x6f0 [ 191.046696][ T5936] ? kernfs_get.part.0+0x6e/0x80 [ 191.051622][ T5936] panic+0xca/0xd0 [ 191.055334][ T5936] ? __pfx_panic+0x10/0x10 [ 191.059744][ T5936] ? check_panic_on_warn+0x1f/0xb0 [ 191.064834][ T5936] check_panic_on_warn+0xab/0xb0 [ 191.069752][ T5936] __warn+0xf6/0x3c0 [ 191.073628][ T5936] ? kernfs_get.part.0+0x6e/0x80 [ 191.078552][ T5936] report_bug+0x3c3/0x580 [ 191.082874][ T5936] ? kernfs_get.part.0+0x6e/0x80 [ 191.087797][ T5936] handle_bug+0x184/0x210 [ 191.092110][ T5936] exc_invalid_op+0x17/0x50 [ 191.096595][ T5936] asm_exc_invalid_op+0x1a/0x20 [ 191.101426][ T5936] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 191.106959][ T5936] Code: 38 da 57 ff 85 ed 74 1c e8 ef de 57 ff be 04 00 00 00 48 89 df e8 62 8a c0 ff f0 ff 03 5b 5d e9 98 ce fe 08 e8 d3 de 57 ff 90 <0f> 0b 90 eb d9 48 89 df e8 45 82 c0 ff eb c0 0f 1f 00 90 90 90 90 [ 191.126549][ T5936] RSP: 0018:ffffc900046af780 EFLAGS: 00010293 [ 191.132605][ T5936] RAX: 0000000000000000 RBX: ffff888073ef12d0 RCX: ffffffff826508e8 [ 191.140557][ T5936] RDX: ffff888025512480 RSI: ffffffff8265090d RDI: 0000000000000005 [ 191.148510][ T5936] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 191.156461][ T5936] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880304ab0b0 [ 191.164444][ T5936] R13: ffff888052c14730 R14: 0000000000000000 R15: ffff888052c14728 [ 191.172403][ T5936] ? kernfs_get.part.0+0x48/0x80 [ 191.177330][ T5936] ? kernfs_get.part.0+0x6d/0x80 [ 191.182259][ T5936] kernfs_get+0x1f/0x30 [ 191.186398][ T5936] kobject_add_internal+0x353/0x9b0 [ 191.191578][ T5936] ? kfree_const+0x51/0x60 [ 191.195978][ T5936] kobject_add+0x16e/0x240 [ 191.200377][ T5936] ? __pfx_kobject_add+0x10/0x10 [ 191.205310][ T5936] get_device_parent+0x399/0x4e0 [ 191.210238][ T5936] device_add+0x1ad/0x1aa0 [ 191.214645][ T5936] ? __pfx_device_add+0x10/0x10 [ 191.219488][ T5936] ? __init_waitqueue_head+0xca/0x150 [ 191.224854][ T5936] firmware_fallback_sysfs+0x2ec/0xbe0 [ 191.230305][ T5936] _request_firmware+0xfe9/0x1470 [ 191.235331][ T5936] ? __pfx__request_firmware+0x10/0x10 [ 191.240781][ T5936] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 191.246577][ T5936] ? debug_object_deactivate+0x1ec/0x3a0 [ 191.252204][ T5936] request_firmware_work_func+0xea/0x250 [ 191.257831][ T5936] ? __pfx_request_firmware_work_func+0x10/0x10 [ 191.264062][ T5936] ? rcu_is_watching+0x12/0xc0 [ 191.268816][ T5936] process_one_work+0x9cf/0x1b70 [ 191.273747][ T5936] ? __pfx_process_one_work+0x10/0x10 [ 191.279111][ T5936] ? assign_work+0x1a0/0x250 [ 191.283686][ T5936] worker_thread+0x6c8/0xf10 [ 191.288266][ T5936] ? __kthread_parkme+0x19e/0x250 [ 191.293281][ T5936] ? __pfx_worker_thread+0x10/0x10 [ 191.298380][ T5936] kthread+0x3c5/0x780 [ 191.302434][ T5936] ? __pfx_kthread+0x10/0x10 [ 191.307007][ T5936] ? rcu_is_watching+0x12/0xc0 [ 191.311756][ T5936] ? __pfx_kthread+0x10/0x10 [ 191.316327][ T5936] ret_from_fork+0x675/0x7d0 [ 191.320896][ T5936] ? __pfx_kthread+0x10/0x10 [ 191.325466][ T5936] ret_from_fork_asm+0x1a/0x30 [ 191.330230][ T5936] [ 191.333545][ T5936] Kernel Offset: disabled [ 191.337850][ T5936] Rebooting in 86400 seconds..