last executing test programs: 53.632532338s ago: executing program 2 (id=260): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0xcc9e0000) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xa8) close(r3) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000300)={0x4d, 0x2, 0x0, "0ba7dfad1cfbb5a12e6a2bdee19988d940d2c1aebd746fc04a0026d174932d46"}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 52.40103195s ago: executing program 2 (id=262): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000009000)=[{{&(0x7f0000000ec0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000f40)=[{&(0x7f00000090c0)=""/197, 0xc5}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f00000091c0)=""/4105, 0x1009}, {&(0x7f0000006500)=""/142, 0x8e}, {&(0x7f00000065c0)=""/206, 0xce}, {&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f00000076c0)=""/219, 0xdb}], 0x7}, 0x9}, {{&(0x7f00000077c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001380)=[{&(0x7f0000007840)=""/4089, 0xff9}, {&(0x7f0000008840)=""/187, 0xbb}], 0x2, &(0x7f0000008900)=""/149, 0x95}, 0x21e5}, {{&(0x7f00000089c0)=@qipcrtr, 0x80, &(0x7f0000008f00)=[{&(0x7f0000008a40)=""/26, 0x1a}, {&(0x7f0000008a80)=""/235, 0xeb}, {&(0x7f0000005500)=""/159, 0x9f}, {&(0x7f0000008c40)=""/224, 0xe0}, {&(0x7f0000008d40)=""/159, 0x9f}, {&(0x7f0000004400)=""/243, 0xf3}], 0x6, &(0x7f0000008f80)=""/108, 0x6c}}], 0x3, 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000380)={0x3e, r2}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000380)={0x3e, r2}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x9cb441be16ccd63c) (async) r6 = accept4(r5, 0x0, 0x0, 0x9cb441be16ccd63c) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010) recvmmsg(r6, &(0x7f0000004140)=[{{&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000600)=""/4, 0x4}, {&(0x7f0000000640)=""/242, 0xf2}], 0x5, &(0x7f00000007c0)=""/41, 0x29}, 0xf427}, {{&(0x7f0000000840)=@xdp, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/78, 0x4e}, {&(0x7f0000000980)=""/97, 0x61}, {&(0x7f0000000a00)=""/29, 0x1d}, {&(0x7f0000000a40)=""/146, 0x92}], 0x4, &(0x7f00000015c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000000b40)=@sco, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000bc0)=""/124, 0x7c}, {&(0x7f0000000c40)=""/169, 0xa9}, {&(0x7f0000000d00)=""/217, 0xd9}, {&(0x7f0000000e00)=""/61, 0x3d}, {&(0x7f0000000e40)=""/98, 0x62}, {&(0x7f0000004300)=""/211, 0xd3}, {&(0x7f0000000fc0)=""/19, 0x13}, {&(0x7f0000001000)=""/183, 0xb7}], 0x8, &(0x7f0000001140)=""/198, 0xc6}, 0x80000000}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/230, 0xe6}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/235, 0xeb}, {&(0x7f00000025c0)=""/187, 0xbb}], 0x4}, 0x7}, {{&(0x7f0000002680)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/165, 0xa5}, {&(0x7f0000002840)=""/91, 0x5b}, {&(0x7f00000028c0)=""/253, 0xfd}, {&(0x7f00000029c0)=""/230, 0xe6}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/128, 0x80}], 0x7, &(0x7f0000003bc0)=""/157, 0x9d}}, {{&(0x7f0000003c80)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d00)=""/213, 0xd5}, {&(0x7f0000003e00)=""/197, 0xc5}, {&(0x7f0000003f00)=""/74, 0x4a}, {&(0x7f0000001500)=""/9, 0x9}], 0x4, &(0x7f0000003fc0)=""/71, 0x47}, 0xffffff70}, {{&(0x7f0000004040)=@ax25={{}, [@rose, @remote, @default, @netrom, @default, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000004100)=[{&(0x7f00000040c0)=""/46, 0x2e}], 0x1}, 0xb3b}], 0x7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0xf, 0xffffffffffffffff, {0x1, 0xfff}}, './file0\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={0x0}}, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioperm(0x0, 0x6, 0x10000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x4601dd03) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xac040) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000800)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000800)) close_range(r4, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) 48.205343383s ago: executing program 2 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(0xfffffffffffffffe, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) tkill(r1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500000000000000e9ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r3], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000ac0), 0x0}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) io_setup(0x6, 0x0) (async) r4 = epoll_create1(0x0) (async, rerun: 32) r5 = epoll_create1(0x0) (rerun: 32) epoll_create(0xa5) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000300)={0x20000010}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) (rerun: 32) memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nod\xffv\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xe1\xc4\xdfe\xfa\xf1&\x01\x89E`~[UW\x18\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9Xf\xda\xf2\x1fb\x14\x96g@*\xef\xae\xf8\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6#\x9c\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH', 0x2) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001f0005040000000000000000020000400c0001"], 0x114}], 0x1}, 0x0) 47.877249234s ago: executing program 0 (id=276): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) ioperm(0x0, 0x44, 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0) process_mrelease(0xffffffffffffffff, 0x2) ioperm(0x1, 0x5, 0x10001) ioperm(0x9, 0xa78, 0xffffffffffffffff) syz_emit_ethernet(0xb6, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x80, 0x3a, 0xff, @private0, @mcast1, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x2, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400f563b4dc74c5"}, {0x18, 0x1, "7e9080ffefe3"}, {0x18, 0x1, "45976e75e433"}]}}}}}}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f00000000c0)={0x16a608a527ba3f2e}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010010000000060002"], 0x44}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x2b00a9, &(0x7f0000000040)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x34]}}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0xffffffff}}, @common=@unspec=@statistic={{0x38}, {0x7400}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) write$binfmt_script(r7, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x0, 0xe, 0xd4, {0xd4, 0x31, "faf9c2f00cb75f2d4dd757d36a98f4018f0ef1b6fbbcb599c4d073d6da58321d354e712e98832d39a94896eb984a8c94ff6c925329d94b241a3c1d7eb1306674c03d70bfde624c520e8190e0a4636d43ab7a8505d702acf86adc94000149e1d6817ed180984ccbb8718e8f3f6890c67bb65280e4ea038709e5c9184a8888f6723b4c1ec1442c46be7e3fcaf235bc81e7c75925da69db46da26e62bb737cddc0299ab297ad4e264f08525edf1968155e83bf8417b20ee5bbda084842cb158c2eb9d37648c1577302f46961b6a950964df6e9c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000000400)={0x44, &(0x7f0000000080)={0x40, 0x11, 0x2a, "bb355290890e03c9e57f5b1abe88848d17b0f0f278c4184e8f5e4aff00bad9f3d60f42679e5a622a8176"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)=ANY=[@ANYBLOB="2081030001000000ed"], &(0x7f0000000300)={0x20, 0x82, 0x2, '!@'}, &(0x7f0000000340)={0x20, 0x83, 0x1, "03"}, &(0x7f0000000380)={0x20, 0x84, 0x3, "d213bd"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "d11d26"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 45.508193188s ago: executing program 4 (id=279): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x2, 0x0, 0x6}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x30008081) r2 = gettid() waitid(0x2, r2, 0xfffffffffffffffd, 0x8, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x3, 0x0) 44.813562182s ago: executing program 4 (id=280): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000840)=0x1) 44.715378141s ago: executing program 4 (id=281): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140)=0x100, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x10132) (async) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r4, 0x0) (async) syz_usb_connect(0x5, 0x4e2, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x56, 0xe7, 0xfc, 0xff, 0xbb4, 0xa7b, 0x817e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d0, 0x2, 0x2, 0x7, 0xa0, 0x7, [{{0x9, 0x4, 0xe6, 0x5, 0x0, 0xcd, 0x62, 0x3b, 0x7, [@generic={0x2b, 0x4, "63d9fcf70e3ebcae4e387c91df6db20cf9deca45528ca68ef273103a247ab83355a871fe7bf8c6f233"}, @generic={0xd3, 0x21, "f951b80dac5df6f1d194fe56c8694db1e23352ad2d7a6380c46754f7d688ec048e3bbc6f8dedf2f4e05b5d0faafaec25ac3986354adc19c17ddc80c27303051496dbc1268fc3ea1efe02faa9fc96128a6e7b5596799971b83520796c13c2c7642973cb411daa0fd7c5ac084903cdd3b782297b992194cc324405206c807aee254ba8e36d5d752aedb37a5324a6e384e044d4473ead571ce88daae9498f9bdb4cbf19ff9ca25f0d99d2153b379bd7867865895f746e6657a732826d3288938261d6b597e3e7a7f5e7f590fd7ad9377004d0"}]}}, {{0x9, 0x4, 0xf7, 0x2, 0x5, 0xbd, 0x59, 0xdb, 0x6, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x6, 0x10, "e75d991bb6"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6a, 0xf, "7c7db5abad89"}]}, @uac_control={{0xa, 0x24, 0x1, 0x800, 0x6}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0xe7, "216bd760"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x2, 0x5, [0x9, 0x6, 0x4, 0x2, 0x5], 0xb}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x1, 0x2, 0x2}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x6, "483ef89798"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x4, 0x5, [0xa, 0x3, 0x7, 0x5, 0x2], 0x92}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x10, "70eda7a4e5"}]}], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x8, 0x0, 0x8, [@generic={0x53, 0x23, "8e06a92f6535978c41068d4b8daa11c6e683f09698986af1759e7bc2b4de02b5da6d9828e4d89f125e03f03faff44bf42eba9e807c6388253f37b6e40b13a9b3c25d6b245cd61f1e4d2b7eca539532a5fb"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0xc0, 0x2f, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0x9, 0x7f, [@generic={0xa7, 0x0, "502ff5048dfee568cc8b5055b74204d11d93892693d702e2b5960440fd2c65ea143bce0e7f71099d1c5a67ffc13c068e5671a3e4c0b2f13ac4e282c2b599e3db55c80a51adfc06c6084b6597c720d1d35d218cb5b92de61795575f1bf329b3444987c3d030c04303c74ebb848b9df9219a0011382eca51af432ca324f929de2fa7cbbff601b06ce5f2bf2c7ef86e1673f86e4e02d45c4670aaa96f002fb3a4082db5825639"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x7f, 0x4, 0x5, [@generic={0xdc, 0x8, "803192ea48577dce33e63ea78abee63605991f3c8a616bba3d4da1b283a30768002adeba3e52d4c8a403c3ae77d49ff5af068ce8efc64574b4b6ff41b63721e82542bf454b9a41623c15f60e3a179ec234b90a3f0f120fd95392ad667cf16285dfd5baf716c851156b402c83af9ed4ed2dfe1173f233167cf578fdd7bdd295f9c30bd2e7c770c36697d420bd5afc07143bdd4034999229ce82c38ed4f4b1c57f19dbab8fe9cab381970370bb405b2567494da3e4c853904152b37fa68059b86e86fe98393a02c723107dde9a68fb867345691accd5dda6ec56ca"}, @generic={0x34, 0x1, "78f2d0ef1ce7f6b6a695421f033b2a825782fe0a85d374e8650a824e94c9472de4e7e9d55faa5f4e40b48b93f5524392f879"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x4, 0x3, 0x3, [@generic={0x8e, 0x11, "dcd3502b2d2803e62db8ab0958ba4e455aeaa14bd4d54c6d3401747d57e8bb1fac69c96e42d9381f369371781e5cbf53a8e522a727c0d4f02f47dfda71f334b355e027a821bdca64cb21b8962435c0556d92f4829856f99783d76ce1a8b0d2f7c61713968dd9adbc3f65d49f8b32f8769d6447620bea21acf6947a151e1ca8bc4eb5c8bc6611ef2c49f842c1"}, @generic={0x85, 0xf, "f697405872937d5008c04dd21ede1deb1acf8c966fc28ebfaa01e1eda7b1040de280734b59d89942b58d6b1c8433666fb986d6568522cb8ae507e31ff72c20d4862193d4d3fed8f6eb51dd11c70507751e454165f878e7127010f0e884ace684b5a0ab108d762b4484087fac4f2ab80514349924308ecaccd1ece244075983230dbdd4"}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x7, 0x9, 0x10, 0x1}, 0x1a, &(0x7f0000000380)={0x5, 0xf, 0x1a, 0x2, [@ext_cap={0x0, 0x10, 0x2, 0x0, 0x1, 0xa, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x6, 0x4, 0xa6}]}, 0x8, [{0xcd, &(0x7f00000009c0)=@string={0xcd, 0x3, "ca410a8677b7da0f7267130e7c7450d01633700e642109e9e9c18e00372541d3243e99374bd75fb0cd5512ed6c568823ef88bd968476f20cd82a889e83fd6bffde9a74167633c79cb6742510d8f274ed457736d005ca69df74c6317bed6c192ecad036af387ed3532ca2ed8c4284d68e258bdfd9eb158554b8ae3deb6cbd502d3de6ce8f7102b03fd3136c1478cc9dbd77d86ec936206facaa76b9286cb84d2454eaeccadbce6c88173f22811f2f29b14a25bbde36e3ef9671e56eed8512149e8ab06900b3e13b8661306a"}}, {0xd5, &(0x7f0000001040)=@string={0xd5, 0x3, "910508ab0ff501d0488fb85baff59428c5a00f5bd848b1526fb56257afca287871527f713c2c1b80ce4841322de955975d0da8d602979602c5bb4a58cc79b8ea6a1eeaf0a81ede9ae462975aee57e54405ca8850350c42c7b44e8cafb9ce4a769379ac2b2bce70b5a964d8ea5a4dff39f6e74ed5aa1b03cbba946aed7223889ef75538d85ed83eb2bd626bb98bee10919601c5eb99c1307bcfa1102abdae1d6693eb9f1996eb746b9484151009928c97dcf7a9bef6d72f55e04e1d007a2b68510f2a8d7f947fe430b21e6d45aeba812a28945d"}}, {0x16, &(0x7f00000003c0)=@lang_id={0x0, 0x3, 0x810}}, {0xe7, &(0x7f0000000bc0)=@string={0xe7, 0x3, "5bedc0e6ab0134d7d7dde7d49883258f733515e63897dc3172bde0a4e607aad93d543364140a35696cc046267cc7810a0aa768defb566f275c0b49547c2c645eedde031291ea745bc67b10b5d4fa98c770aa2373b1448066bcc1b7f1d71113d18bdd4d131967b8df5d5a2fa2f71010768d52a5d55f7912fc53524d8077f1579a19148e73d7504bc2da1e44e709efec35631f7828d3a79fdf7fef6b8700ce53e002dbaf9038e7b119d071e72ddbbe27c4060f2a0ca2ab193c5da2474ffe8241a42c23ebf0f69c41c0a67281d892b67c1f998e2e34e8e3078069eda1fde52a47ec844103b35c"}}, {0xf6, &(0x7f0000000cc0)=@lang_id={0x0, 0x3, 0x1401}}, {0x102, &(0x7f0000000f00)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x200a}}, {0xffffffffffffffe2, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x801}}]}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000000)="82cd1c506e11d1965a", &(0x7f0000000040)=""/244, &(0x7f0000000140)="fa1c3ea3c1", &(0x7f00000002c0)="91fd69eecfcf9159e23e44141adad5e5d1cf0f79936aa67bc5fc572d4cdcfa2745d4e4ee6a0495d4b849e4516e50bc24f9bc8070a0d908ad4b32b10f71b3db7f06ad28fa12b781291e6a2817dfd48610cdc5632c8de8b48f15f4445967a82e66cf3f371007d6cabb7c158e0e17961e1104ecb87574756110d5e2078a2cf1a5e68475b4dc052dee472e3c4242630d7b3fcaa20900d7d55b77d99dfe8c077a6648a8bb644eef1a2fb1ddc1006aa71ae49d2c68edb17510f05b2fb5", 0x3, r4}, 0x38) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @local, @private1}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000240)=ANY=[]) 43.341566583s ago: executing program 2 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2002c041}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x34}}, 0x0) 43.328845192s ago: executing program 0 (id=284): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r1 = getpid() (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x0, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x4, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff8}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x1, 0x3}}}}]}]}, 0x50}}, 0x0) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e", 0x5) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) (async) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000480)) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000180)) 43.309653134s ago: executing program 4 (id=285): syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa0ac0, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 35.129257413s ago: executing program 2 (id=288): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x426800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', '', [{0x20, 'blkio.bfq.io_merged_recursive\x00'}, {}]}, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES64=r0], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="b9740b00000f32ea0000000021000f019e6f750000b906030000b800500000ba000000000f300f0e0f01c466660f38305c311366baa10066b8001066efb805000000b9800000000f01d9f2ac", 0x4c}], 0x1, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x8, 0x0) write$binfmt_script(r6, 0x0, 0xfffffe48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000000000000000000000000008242ec6ce8542e52f3a55d8068e982d09956c344058a2a9c8de06984113cdee343dcb0b95168e6b5bbd5c37d4af6db407e3af9112b7780d880b4f724691972233b61a7a0f490d936de54e524d1920b3fe03f3b6476bcbd71879bcf18b856b9cbb11084f4546f31d47353d63d65a3b188f1f52a6a"], 0x14}}, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) landlock_restrict_self(r7, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000a6b000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket(0x1, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) 34.825432672s ago: executing program 0 (id=290): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000cb00fbdcbfb3e488ccf78f0085c3176e5686c57208956dfb69f68e860977bfd5c7bc7f8e1ae61e368493d7b40e30166c4edc607ed95f0d351d06fe53c0d889515ad6b1c435974dea71b08a491193275584ff12bbea6482840336ee405d03f3021134aad8bf"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb2, 0x0, &(0x7f00000004c0)="9b2d6bcab4f848f9df76b6231f508e5b5c6a7a1f29add723bab7ec2c80095cf5c30656b5f6bff1740156a3ff7dc8c3901e6c013d533aea7f7618fb0fd813e9305139fdcbe2980c32d4e8740a0f605e1386457adafecc9a601c12e52102a737594b3b20d0eff238f212d1177dfb8d421f327f132f9abda4b832c48264671f6f32cf5c895fabbd48bf60d78d0fbad095c872bc4e2964c0b9df6fa7232c3232038baba481ba6c65475829c2512dd8f1bc589866"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='a[l,fscontext=unconfined_u,\x00']) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x9}}, @l2cap_disconn_req={{0x6, 0xb, 0x4}, {0x69, 0x7}}]}}, 0x20) 30.081864695s ago: executing program 0 (id=293): syz_emit_ethernet(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) clock_gettime(0x0, 0x0) (async) mremap(&(0x7f00000a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000469000/0x4000)=nil) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$sock(r3, &(0x7f00000002c0)={&(0x7f0000005440)=@caif, 0x80, 0x0, 0x0, &(0x7f0000005580)}, 0x8001) (rerun: 64) sendfile(r3, r2, 0x0, 0xffefffff) (async) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000003400)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) (async, rerun: 64) accept4(r1, 0x0, 0x0, 0x0) (rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x58, [{}, {0x0, 0x100000000000000}]}, 0x68) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x4a, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x4000) sendmmsg$sock(r0, &(0x7f0000000100), 0x0, 0x4004080) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000000080104000000000000000007000007140004800800024000000009080001000000fa2e050003002f00000006000240080500000600024008050000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020805"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 29.179836549s ago: executing program 2 (id=294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffff55, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r7, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a, &(0x7f0000000040), 0x3}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x9, "d02453bf"}, @global=@item_012={0x2, 0x1, 0x0, "a313"}]}}, 0x0}, 0x0) 29.173370462s ago: executing program 4 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtaction={0x14bc, 0x30, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{0x14a8, 0x1, [@m_ipt={0x6c, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x570a}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x8, 0x6, "6514cb0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x8c, 0x1a, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x36, 0x6, {0x49, 'filter\x00', 0x5, 0x800, "4bcfd18f304ba59622cbfc40"}}]}, {0x2b, 0x6, "f91299790648f5cbe2a708f5b527b23bc69e2c7c7bd64de1d2de3be9fa31ff0973be84ffd92fd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_ipt={0x1c0, 0x1a, 0x0, 0x0, {{0x8}, {0x180, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x5d, 0x6, {0x1000, 'mangle\x00', 0x6, 0x2, "9f4a88c759fc74264566d1b85a7cc3271d82c568a7031edf0268a3edf69534154c1faebe50f6cffc0940416fb7807ac2ea3305"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xdd, 0x6, {0x6beb, 'raw\x00', 0x0, 0x6, "3cc485f63288408974319bde0b3d23e5964b0af1c4e71b9dfaa2ebe0519384f44d5efb849a5d4f31de2c6f45ecbad37c6b8de50124ea7ba3e4fb5d567601509fae925deed1c168d2f5eb7110d4a33f436a447715bbf9287e7c5a004317a6e3036ea5d5f21827edcbd4aa9047b82bf18c6145a699dd6f4fb7ec83adfed0233077b1dfe71de462dbd3737d125aca2a0455f18c8f22e056b9e4fe4e67d08c4e8887ed5042baac82fab872cd25cb2b2836e7ccb5b0"}}, @TCA_IPT_HOOK={0x8}]}, {0x1a, 0x6, "c017c2925d22f92b36b3ea3c543f2e33f6bdfbefd1aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x1060, 0x1c, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x18c, 0x17, 0x0, 0x0, {{0x8}, {0x148, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x118, 0x6, {0x8, 'filter\x00', 0xd8, 0xd, "40938af9bb8152cd178a17ea63456eab1ecb90530234ef994db8d65f26e70652eae74aa5bcfde6130196b385644ab7d12e8385ab38c0ab99b370f88c33463c1e40d6d92d09efaccf2896e6564790a5f6486312fb7fcc6b7fff804393c594f282809d3c8fb479df806aa06ef51d138a6b21e674d023fb27d8c1ec0b4e9b736762cd9ed46d0187b20e1c65d2a51909f17ea2a942c4fab025b9dede8f6a11b82e2c3322c51824a90366c46944c30d19c5806e93eaca95498735b2ac75214b649f28a8753b2cbf1bb0f11632c594d63f573eb1d0b9e6b5b1517a8c9ce195ba757229f9774a0e399a6c6abcd8a15ae93b"}}]}, {0x1e, 0x6, "9e14967e4a288dd23385dee2191d6443fabb6abd9dce23b224ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x14bc}, 0x1, 0x0, 0x0, 0x40000}, 0x24008851) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000180001c946f763123700"/25], 0x24}}, 0x0) 28.893419898s ago: executing program 1 (id=296): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x450d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket(0x15, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@loopback, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0) getsockopt$nfc_llcp(r6, 0x114, 0x271b, 0x0, 0x20000008) 28.864117982s ago: executing program 0 (id=297): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioperm(0x0, 0x1, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x1}) fchmod(r1, 0x504) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.665353245s ago: executing program 4 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000004) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) 27.645609777s ago: executing program 3 (id=299): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$GIO_CMAP(r1, 0x4b70, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x7255, 0x0, 0x8, 0x7, 0x1, 0x14}) 26.10038193s ago: executing program 3 (id=300): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x25, 0x5, 0xbd) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r1 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f00009ac000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18a047"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$loop(&(0x7f0000000240), 0x20360, 0x1) (async) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) (async) r6 = getpid() (async) r7 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) process_vm_readv(r6, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000000340)=""/95, 0x5f}], 0x1, 0x0) 26.026270946s ago: executing program 0 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "cfbc6ac116946cf4a5b2f81c4d07"}}]}, 0x30}}, 0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff15) prlimit64(0x0, 0xe, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x6908, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async, rerun: 64) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) (async, rerun: 32) poll(&(0x7f0000000040)=[{r5, 0x1000}], 0x1, 0x5) (rerun: 32) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', @broadcast}) 23.23893378s ago: executing program 1 (id=302): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x2000000, 0x421}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt(r1, 0xe, 0x7, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x89, @loopback, 0x4e23, 0x3, 'wlc\x00', 0xb, 0x44e6, 0x13}, {@local, 0x4e20, 0x0, 0x1, 0x400, 0x2}}, 0x44) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000480)='!', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r4, r5, r6}, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0xffffffffffffff3e, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1000}, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'macvtap0\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="05"], 0x10) 22.904356889s ago: executing program 1 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) 22.781453268s ago: executing program 3 (id=304): creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000140)=0x3) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8]}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}], [], 0x6b}}) 21.403491408s ago: executing program 1 (id=305): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x89}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="34cfa1d40ae695fa2f28d228a8507806e9e648f57b95dc4578a4495f960b1eb9c13812cb478cc224502cd33129ad7d3debb0f27b2f4c716742f45a9de8a382c09d"], 0x118) r2 = dup2(r1, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc020aa07, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f000092a000/0x1000)=nil, 0x4000, 0x0, 0x6040000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5e785b720000000000020800000000df5700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x9b0c, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/12], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) 21.227109231s ago: executing program 1 (id=306): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102", @ANYRES64], 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x220d40) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000280)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x140) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000005b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0x0, 0xffffffffffffffff) getdents64(r1, &(0x7f0000000000)=""/29, 0x1d) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3d82212d", @ANYRES16=r3, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) mq_open(&(0x7f00000002c0)='$\x00', 0x40, 0x90, &(0x7f0000000300)={0x2, 0x2, 0xfffffffffffffffe, 0x9}) 20.025321374s ago: executing program 3 (id=307): socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200c02, 0x10) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000500)=@userptr={0x81, 0x1, 0x4, 0x800, 0x2, {}, {0x1, 0xc, 0xd, 0xff, 0x8, 0xf9, "33b7502a"}, 0x1, 0x2, {&(0x7f0000000440)}, 0x9}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x93, 0x1, 0x5}, 0x18, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000008f61a8bc4f4949b11aaf5d9d2fe4825dd2af462484ad5d54bf098efa6576b47c72ec08152996eb9641966a189aea44ac27a8062d757794860074b4481f17a0c2976811b406b5cd7fa403e798e136dedeea0cc8dc3b5e4094e30f45f4e086bc242b93a4c9f4", @ANYRES16=r6, @ANYBLOB="200026bd7000ffdbdf25030000000c00030009000000000000000c0005000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}], 0xb0}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r11 = socket(0x15, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x271d, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00000000000905", @ANYRES16], 0x0) 19.684437078s ago: executing program 1 (id=308): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000cb00fbdcbfb3e488ccf78f0085c3176e5686c57208956dfb69f68e860977bfd5c7bc7f8e1ae61e368493d7b40e30166c4edc607ed95f0d351d06fe53c0d889515ad6b1c435974dea71b08a491193275584ff12bbea6482840336ee405d03f3021134aad8bf"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb2, 0x0, &(0x7f00000004c0)="9b2d6bcab4f848f9df76b6231f508e5b5c6a7a1f29add723bab7ec2c80095cf5c30656b5f6bff1740156a3ff7dc8c3901e6c013d533aea7f7618fb0fd813e9305139fdcbe2980c32d4e8740a0f605e1386457adafecc9a601c12e52102a737594b3b20d0eff238f212d1177dfb8d421f327f132f9abda4b832c48264671f6f32cf5c895fabbd48bf60d78d0fbad095c872bc4e2964c0b9df6fa7232c3232038baba481ba6c65475829c2512dd8f1bc589866"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='a[l,fscontext=unconfined_u,\x00']) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x9}}, @l2cap_disconn_req={{0x6, 0xb, 0x4}, {0x69, 0x7}}]}}, 0x20) 16.590292329s ago: executing program 3 (id=309): r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2000, 0x211, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$P9_RSTATu(r0, &(0x7f00000005c0)={0x88, 0x7d, 0x1, {{0x0, 0x71, 0x6, 0x7, {0x2, 0x0, 0x2}, 0x8040000, 0x7, 0x7, 0x4000000000000, 0x13, './binderfs/binder0\x00', 0x13, './binderfs/binder0\x00', 0x9, '+$}]}$--\'', 0xf, 'broadcast-link\x00'}, 0x2, '(-', r1, r2, r3}}, 0x88) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000140)=[@acquire, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@handle, @flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800cdb029ab9e8454ede0234f26cec97eca0aa6", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000000000000b000000000c001462726f6164636173742d6c696e6b0000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r9, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) 15.109419261s ago: executing program 3 (id=310): syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa0ac0, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x8b, 0x100000500) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 4.60766826s ago: executing program 32 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "cfbc6ac116946cf4a5b2f81c4d07"}}]}, 0x30}}, 0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff15) prlimit64(0x0, 0xe, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x6908, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async, rerun: 64) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) (async, rerun: 32) poll(&(0x7f0000000040)=[{r5, 0x1000}], 0x1, 0x5) (rerun: 32) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', @broadcast}) 4.18596763s ago: executing program 33 (id=294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffff55, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r7, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a, &(0x7f0000000040), 0x3}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x9, "d02453bf"}, @global=@item_012={0x2, 0x1, 0x0, "a313"}]}}, 0x0}, 0x0) 4.073167315s ago: executing program 34 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000004) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) 3.925429028s ago: executing program 35 (id=308): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000cb00fbdcbfb3e488ccf78f0085c3176e5686c57208956dfb69f68e860977bfd5c7bc7f8e1ae61e368493d7b40e30166c4edc607ed95f0d351d06fe53c0d889515ad6b1c435974dea71b08a491193275584ff12bbea6482840336ee405d03f3021134aad8bf"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb2, 0x0, &(0x7f00000004c0)="9b2d6bcab4f848f9df76b6231f508e5b5c6a7a1f29add723bab7ec2c80095cf5c30656b5f6bff1740156a3ff7dc8c3901e6c013d533aea7f7618fb0fd813e9305139fdcbe2980c32d4e8740a0f605e1386457adafecc9a601c12e52102a737594b3b20d0eff238f212d1177dfb8d421f327f132f9abda4b832c48264671f6f32cf5c895fabbd48bf60d78d0fbad095c872bc4e2964c0b9df6fa7232c3232038baba481ba6c65475829c2512dd8f1bc589866"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='a[l,fscontext=unconfined_u,\x00']) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x9}}, @l2cap_disconn_req={{0x6, 0xb, 0x4}, {0x69, 0x7}}]}}, 0x20) 0s ago: executing program 36 (id=310): syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa0ac0, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x8b, 0x100000500) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) kernel console output (not intermixed with test programs): ce_t tclass=chr_file permissive=1 [ 109.591340][ T29] audit: type=1400 audit(1730051740.652:197): avc: denied { open } for pid=6012 comm="syz.4.25" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.920288][ T6014] netlink: 'syz.2.26': attribute type 8 has an invalid length. [ 110.076722][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25'. [ 110.115360][ T6019] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 111.524820][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.711920][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.735751][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.758329][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.775190][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.784258][ T46] usb 5-1: Product: syz [ 111.790853][ T46] usb 5-1: Manufacturer: syz [ 111.800178][ T46] usb 5-1: SerialNumber: syz [ 111.887144][ T970] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.041801][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 112.072157][ T970] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 112.100247][ T970] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 112.130112][ T970] usb 3-1: config 135 has no interface number 0 [ 112.154832][ T970] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.217894][ T970] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 112.243266][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.251789][ T5863] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.273666][ T970] usb 3-1: Product: syz [ 112.283515][ T970] usb 3-1: Manufacturer: syz [ 112.293780][ T970] usb 3-1: SerialNumber: syz [ 112.318262][ T970] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 112.325089][ T970] usb 3-1: No valid video chain found. [ 112.449854][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.462391][ T5863] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.482311][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.523993][ T5863] usb 4-1: config 0 descriptor?? [ 112.627181][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.714490][ T970] usb 3-1: USB disconnect, device number 6 [ 112.789329][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.814307][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.843270][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=df.97 [ 112.872874][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.889545][ T9] usb 2-1: Product: syz [ 112.893871][ T9] usb 2-1: Manufacturer: syz [ 112.910940][ T9] usb 2-1: SerialNumber: syz [ 112.933244][ T9] usb 2-1: config 0 descriptor?? [ 113.010910][ T5863] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 113.043084][ T5863] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 113.097228][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.104546][ T46] usb 5-1: MIDIStreaming interface descriptor not found [ 113.190453][ T6064] sctp: [Deprecated]: syz.4.37 (pid 6064) Use of int in maxseg socket option. [ 113.190453][ T6064] Use struct sctp_assoc_value instead [ 113.234268][ T970] usb 2-1: USB disconnect, device number 4 [ 113.302384][ T46] usb 5-1: USB disconnect, device number 3 [ 113.418606][ T5863] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 113.459818][ T6072] 8021q: VLANs not supported on ipvlan1 [ 113.537227][ T1340] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.728129][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 113.728153][ T29] audit: type=1400 audit(1730051744.822:220): avc: denied { create } for pid=6071 comm="syz.0.38" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.830117][ T6077] syz_tun: entered promiscuous mode [ 113.844858][ T29] audit: type=1400 audit(1730051744.822:221): avc: denied { ioctl } for pid=6071 comm="syz.0.38" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8099 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.879517][ T6074] mmap: syz.0.38 (6074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.008487][ T29] audit: type=1400 audit(1730051744.872:222): avc: denied { ioctl } for pid=6075 comm="syz.2.40" path="socket:[8103]" dev="sockfs" ino=8103 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.171865][ T6077] batadv_slave_0: entered promiscuous mode [ 114.261909][ T6077] hsr1: entered allmulticast mode [ 114.267526][ T6077] syz_tun: entered allmulticast mode [ 114.309681][ T6077] batadv_slave_0: entered allmulticast mode [ 114.527016][ T29] audit: type=1400 audit(1730051745.612:223): avc: denied { ioctl } for pid=6084 comm="syz.4.41" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.595963][ T29] audit: type=1400 audit(1730051745.662:224): avc: denied { read write } for pid=6084 comm="syz.4.41" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 114.619638][ T29] audit: type=1400 audit(1730051745.672:225): avc: denied { open } for pid=6084 comm="syz.4.41" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.098185][ T6095] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 115.268214][ T29] audit: type=1400 audit(1730051746.352:226): avc: denied { nlmsg_read } for pid=6093 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 115.537962][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 115.544449][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.704432][ T29] audit: type=1400 audit(1730051746.792:227): avc: denied { execute } for pid=6105 comm="syz.4.47" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.784371][ T5863] usb 4-1: USB disconnect, device number 3 [ 115.828708][ T29] audit: type=1400 audit(1730051746.792:228): avc: denied { getopt } for pid=6103 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.853696][ T29] audit: type=1400 audit(1730051746.792:229): avc: denied { getopt } for pid=6103 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.413085][ T6123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.446704][ T6123] netlink: 'syz.3.53': attribute type 9 has an invalid length. [ 117.477668][ T6123] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.53'. [ 117.497780][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.936511][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.706385][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 119.128206][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 119.128258][ T29] audit: type=1400 audit(1730051749.992:231): avc: denied { bind } for pid=6132 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.470987][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.482001][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.492062][ T5863] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 119.517220][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.597582][ T5863] usb 1-1: config 0 descriptor?? [ 119.784806][ T25] usb 5-1: too many configurations: 127, using maximum allowed: 8 [ 120.050027][ T6147] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 120.175488][ T5863] usbhid 1-1:0.0: can't add hid device: -71 [ 120.182928][ T5863] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 120.361318][ T5863] usb 1-1: USB disconnect, device number 4 [ 121.191719][ T25] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 121.199667][ T25] usb 5-1: can't read configurations, error -71 [ 121.206153][ T6151] netlink: 'syz.2.61': attribute type 21 has an invalid length. [ 121.214006][ T6151] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 121.221733][ T6151] netlink: 144 bytes leftover after parsing attributes in process `syz.2.61'. [ 121.236852][ T29] audit: type=1400 audit(1730051752.322:232): avc: denied { mounton } for pid=6150 comm="syz.2.61" path="/12/file0" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.253180][ T6151] ISOFS: Unable to identify CD-ROM format. [ 121.285654][ T29] audit: type=1400 audit(1730051752.362:233): avc: denied { write } for pid=6150 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.420988][ T29] audit: type=1400 audit(1730051752.382:234): avc: denied { read } for pid=6153 comm="syz.4.59" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.443837][ T5863] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.631610][ T29] audit: type=1400 audit(1730051752.382:235): avc: denied { open } for pid=6153 comm="syz.4.59" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.658480][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 121.674871][ T5863] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 121.819068][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.443523][ T29] audit: type=1400 audit(1730051752.392:236): avc: denied { ioctl } for pid=6153 comm="syz.4.59" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.469623][ T5863] usb 1-1: config 0 descriptor?? [ 122.484881][ T29] audit: type=1400 audit(1730051752.402:237): avc: denied { set_context_mgr } for pid=6153 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 122.505640][ T5863] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 122.513402][ T29] audit: type=1400 audit(1730051752.402:238): avc: denied { map } for pid=6153 comm="syz.4.59" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.570871][ T29] audit: type=1400 audit(1730051752.462:239): avc: denied { call } for pid=6153 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 123.198448][ T29] audit: type=1400 audit(1730051752.472:240): avc: denied { recv } for pid=6142 comm="syz.1.57" saddr=10.128.0.169 src=30006 daddr=10.128.1.10 dest=44254 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 123.597366][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.755707][ T6171] x_tables: duplicate underflow at hook 3 [ 124.167096][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 124.223059][ T25] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 124.231880][ T25] usb 3-1: config 0 has no interface number 0 [ 124.238379][ T25] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 124.248665][ T25] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 124.648561][ T5863] gspca_sonixj: reg_w1 err -110 [ 124.677359][ T5863] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 124.759257][ T25] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 124.768453][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.776758][ T25] usb 3-1: Product: syz [ 124.781071][ T25] usb 3-1: Manufacturer: syz [ 124.786092][ T25] usb 3-1: SerialNumber: syz [ 124.800721][ T6174] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 124.838467][ T25] usb 3-1: config 0 descriptor?? [ 124.859233][ T6166] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.866590][ T6166] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.921699][ T6169] team0: Port device team_slave_1 removed [ 124.987216][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 124.987239][ T29] audit: type=1400 audit(1730051756.052:243): avc: denied { name_bind } for pid=6168 comm="syz.3.64" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 125.141543][ T6180] sctp: [Deprecated]: syz.4.66 (pid 6180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.141543][ T6180] Use struct sctp_sack_info instead [ 125.192927][ T6166] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 125.200677][ T6166] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 125.272257][ T6180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.300322][ T5847] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.348017][ T5850] Bluetooth: hci0: unexpected event 0x30 length: 4 > 3 [ 125.460452][ T5847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.495056][ T5847] usb 2-1: config 6 has an invalid interface number: 95 but max is 1 [ 125.510097][ T5847] usb 2-1: config 6 has an invalid interface number: 24 but max is 1 [ 125.518605][ T5847] usb 2-1: config 6 has no interface number 0 [ 125.524832][ T5847] usb 2-1: config 6 has no interface number 1 [ 125.531296][ T5847] usb 2-1: config 6 interface 95 has no altsetting 0 [ 125.539041][ T5847] usb 2-1: config 6 interface 24 has no altsetting 0 [ 125.555101][ T5847] usb 2-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=cc.be [ 125.576990][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.601237][ T5847] usb 2-1: Product: syz [ 125.610261][ T5847] usb 2-1: Manufacturer: syz [ 125.614839][ T25] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 125.631028][ T5847] usb 2-1: SerialNumber: syz [ 125.631461][ T25] asix 3-1:0.251: probe with driver asix failed with error -524 [ 126.097443][ T29] audit: type=1400 audit(1730051757.172:244): avc: denied { read } for pid=6178 comm="syz.1.67" name="sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.163006][ T6182] capability: warning: `syz.2.63' uses 32-bit capabilities (legacy support in use) [ 126.187335][ T5847] usb 2-1: USB disconnect, device number 5 [ 126.200154][ T29] audit: type=1400 audit(1730051757.172:245): avc: denied { open } for pid=6178 comm="syz.1.67" path="/dev/sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.293598][ T5863] usb 1-1: USB disconnect, device number 5 [ 126.338916][ T29] audit: type=1400 audit(1730051757.172:246): avc: denied { ioctl } for pid=6178 comm="syz.1.67" path="/dev/sg0" dev="devtmpfs" ino=709 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.390758][ T29] audit: type=1400 audit(1730051757.172:247): avc: denied { map } for pid=6178 comm="syz.1.67" path="/dev/sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.423791][ T29] audit: type=1400 audit(1730051757.172:248): avc: denied { read append } for pid=6178 comm="syz.1.67" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.457110][ T29] audit: type=1400 audit(1730051757.172:249): avc: denied { open } for pid=6178 comm="syz.1.67" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.494832][ T29] audit: type=1400 audit(1730051757.182:250): avc: denied { ioctl } for pid=6178 comm="syz.1.67" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x542b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.524973][ T29] audit: type=1400 audit(1730051757.212:251): avc: denied { create } for pid=6165 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.550092][ T29] audit: type=1400 audit(1730051757.222:252): avc: denied { connect } for pid=6165 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 127.330817][ T5863] usb 3-1: USB disconnect, device number 7 [ 127.405041][ T5850] Bluetooth: hci0: command tx timeout [ 129.327404][ T6193] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 129.457319][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 129.957414][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 130.047383][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 130.047439][ T29] audit: type=1400 audit(1730051761.032:311): avc: denied { bind } for pid=6199 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.907591][ T29] audit: type=1400 audit(1730051761.032:312): avc: denied { name_bind } for pid=6199 comm="syz.1.73" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 130.981841][ T29] audit: type=1400 audit(1730051761.032:313): avc: denied { node_bind } for pid=6199 comm="syz.1.73" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 131.052677][ T29] audit: type=1400 audit(1730051761.062:314): avc: denied { write } for pid=6199 comm="syz.1.73" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.124010][ T29] audit: type=1400 audit(1730051761.072:315): avc: denied { connect } for pid=6199 comm="syz.1.73" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.189053][ T29] audit: type=1400 audit(1730051761.072:316): avc: denied { name_connect } for pid=6199 comm="syz.1.73" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 131.265614][ T6223] netlink: 52 bytes leftover after parsing attributes in process `syz.2.77'. [ 131.325159][ T29] audit: type=1400 audit(1730051762.392:317): avc: denied { create } for pid=6224 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.838775][ T29] audit: type=1400 audit(1730051762.392:318): avc: denied { getopt } for pid=6224 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.957336][ T29] audit: type=1400 audit(1730051762.412:319): avc: denied { read write } for pid=6224 comm="syz.0.78" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.815658][ T5863] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 132.887534][ T6242] Zero length message leads to an empty skb [ 132.927719][ T29] audit: type=1400 audit(1730051762.412:320): avc: denied { open } for pid=6224 comm="syz.0.78" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.974316][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 134.039834][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.075440][ T5863] usb 1-1: not running at top speed; connect to a high speed hub [ 134.106682][ T5863] usb 1-1: config 106 has an invalid interface number: 33 but max is 0 [ 134.118848][ T5863] usb 1-1: config 106 has no interface number 0 [ 134.125208][ T5863] usb 1-1: config 106 interface 33 has no altsetting 0 [ 134.139032][ T5863] usb 1-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 9.b9 [ 134.167198][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.175396][ T5863] usb 1-1: Product: syz [ 134.180712][ T5863] usb 1-1: Manufacturer: syz [ 134.187286][ T5863] usb 1-1: SerialNumber: syz [ 134.358360][ T5863] ums-sddr55 1-1:106.33: USB Mass Storage device detected [ 134.392706][ T6253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.427618][ T5863] ums-sddr55 1-1:106.33: Quirks match for vid 07c4 pid a103: 8 [ 134.758174][ T5863] usb 1-1: USB disconnect, device number 6 [ 135.819110][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 135.819130][ T29] audit: type=1400 audit(1730051766.362:327): avc: denied { getopt } for pid=6258 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.027338][ T29] audit: type=1400 audit(1730051767.092:328): avc: denied { setopt } for pid=6264 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.114306][ T29] audit: type=1400 audit(1730051767.102:329): avc: denied { write } for pid=6264 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.512235][ T29] audit: type=1400 audit(1730051767.602:330): avc: denied { read } for pid=6273 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.711796][ T5843] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 136.885694][ T6287] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 137.013648][ T6290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.914795][ T29] audit: type=1400 audit(1730051769.002:331): avc: denied { create } for pid=6282 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.027502][ T29] audit: type=1400 audit(1730051769.032:332): avc: denied { write } for pid=6282 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.061669][ T29] audit: type=1400 audit(1730051769.032:333): avc: denied { read } for pid=6282 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.120742][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.262408][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.407663][ T5889] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.482201][ T29] audit: type=1400 audit(1730051769.562:334): avc: denied { connect } for pid=6305 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.501932][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.597099][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 138.638225][ T5889] usb 3-1: config 254 has an invalid interface number: 18 but max is 0 [ 138.687018][ T5889] usb 3-1: config 254 has no interface number 0 [ 138.699329][ T5889] usb 3-1: New USB device found, idVendor=0b48, idProduct=3006, bcdDevice=1f.7e [ 138.719543][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.797032][ T5889] usb 3-1: Product: syz [ 138.811628][ T5889] usb 3-1: Manufacturer: syz [ 138.816372][ T5889] usb 3-1: SerialNumber: syz [ 138.827298][ T970] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.867272][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.910075][ T5889] dvb-usb: found a 'Technotrend TT-connect S-2400' in warm state. [ 138.947448][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 138.957733][ T5889] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 138.983230][ T5889] dvb-usb: bulk message failed: -22 (5/0) [ 138.993319][ T5889] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.025857][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.035647][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 139.052481][ T970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.055357][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.072686][ T29] audit: type=1400 audit(1730051770.162:335): avc: denied { rename } for pid=5188 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.109112][ T5889] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400) [ 139.116966][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 139.133298][ T5889] usb 3-1: media controller created [ 139.140568][ T25] usb 5-1: config 127 has an invalid interface number: 179 but max is 0 [ 139.147066][ T29] audit: type=1400 audit(1730051770.162:336): avc: denied { unlink } for pid=5188 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.179666][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 139.220434][ T970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.230622][ T25] usb 5-1: config 127 has no interface number 0 [ 139.267051][ T970] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 139.273425][ T25] usb 5-1: config 127 interface 179 altsetting 1 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 139.291151][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.300457][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.342029][ T25] usb 5-1: config 127 interface 179 has no altsetting 0 [ 139.350786][ T970] usb 4-1: config 0 descriptor?? [ 139.364284][ T5889] ttusb2: set interface to alts=3 failed [ 139.388260][ T970] appletouch 4-1:0.0: Could not find int-in endpoint [ 139.388349][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d0.96 [ 139.415372][ T970] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 139.434033][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.454328][ T25] usb 5-1: Product: syz [ 139.483552][ T970] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 139.503244][ T25] usb 5-1: Manufacturer: syz [ 139.518254][ T25] usb 5-1: SerialNumber: syz [ 139.583622][ T5889] DVB: Unable to find symbol tda10086_attach() [ 139.597477][ T5887] usb 4-1: USB disconnect, device number 4 [ 139.637344][ T5889] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400' [ 139.685557][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 139.717026][ T5889] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.754939][ T5889] dvb-usb: bulk message failed: -22 (5/0) [ 139.775232][ T25] iowarrior 5-1:127.179: no interrupt-out endpoint found [ 139.805639][ T5889] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.849071][ T25] usb 5-1: USB disconnect, device number 6 [ 139.861427][ T5889] dvb-usb: Technotrend TT-connect S-2400 successfully initialized and connected. [ 139.926499][ T5889] usb 3-1: USB disconnect, device number 8 [ 140.063424][ T5889] dvb-usb: Technotrend TT-connect S-2400 successfully deinitialized and disconnected. [ 140.882395][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 140.882413][ T29] audit: type=1400 audit(1730051771.962:341): avc: denied { mounton } for pid=6318 comm="syz.0.99" path="/proc/65/task" dev="proc" ino=8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 140.943330][ T29] audit: type=1400 audit(1730051772.012:342): avc: denied { setattr } for pid=6318 comm="syz.0.99" path="/dev/snd/controlC0" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 140.967643][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.974909][ T29] audit: type=1400 audit(1730051772.012:343): avc: denied { create } for pid=6318 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.986196][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 140.995226][ T29] audit: type=1400 audit(1730051772.062:344): avc: denied { write } for pid=6318 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 141.347325][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 141.452718][ T29] audit: type=1400 audit(1730051772.542:345): avc: denied { create } for pid=6338 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.474796][ T6340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.587045][ T29] audit: type=1400 audit(1730051772.672:346): avc: denied { map } for pid=6338 comm="syz.0.105" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.797360][ T29] audit: type=1400 audit(1730051772.672:347): avc: denied { read write } for pid=6338 comm="syz.0.105" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.904940][ T29] audit: type=1400 audit(1730051772.712:348): avc: denied { bind } for pid=6342 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.980245][ T29] audit: type=1400 audit(1730051772.782:349): avc: denied { mount } for pid=6338 comm="syz.0.105" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.002147][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.679678][ T29] audit: type=1400 audit(1730051773.762:350): avc: denied { create } for pid=6364 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 143.080866][ T5863] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.628735][ T5863] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 143.715578][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.871687][ T5863] usb 4-1: config 0 descriptor?? [ 144.111332][ T5863] cp210x 4-1:0.0: cp210x converter detected [ 144.247815][ T5847] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.369433][ T5863] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 144.420819][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 144.593317][ T5847] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.631069][ T5863] usb 4-1: cp210x converter now attached to ttyUSB0 [ 144.639492][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.677102][ T5847] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 144.686115][ T5847] usb 3-1: config 1 has no interface number 1 [ 144.712680][ T5847] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 144.770819][ T5847] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x4A, changing to 0xA [ 144.810992][ T5863] usb 4-1: USB disconnect, device number 5 [ 144.820958][ T5847] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 144.857827][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 144.918183][ T5847] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.931342][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.939561][ T5847] usb 3-1: Product: syz [ 144.943774][ T5847] usb 3-1: Manufacturer: syz [ 144.948910][ T5847] usb 3-1: SerialNumber: syz [ 144.969211][ T5863] cp210x 4-1:0.0: device disconnected [ 145.627112][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.634966][ T5889] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.829708][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 145.840305][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.939212][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.022548][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.114922][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.176522][ T25] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 146.195784][ T5847] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 146.238785][ T5847] usb 3-1: USB disconnect, device number 9 [ 146.244481][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.269042][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.309275][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.353462][ T25] usb 1-1: config 0 descriptor?? [ 146.399864][ T5889] usb 5-1: config 0 descriptor?? [ 146.426400][ T5889] hub 5-1:0.0: USB hub found [ 146.449192][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.460489][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.473854][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.597840][ T6408] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.630627][ T5889] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 146.897158][ T5847] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.060353][ T5847] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.068796][ T5847] usb 2-1: config 0 has no interface number 0 [ 147.088099][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 147.088120][ T29] audit: type=1400 audit(1730051778.182:361): avc: denied { read } for pid=6409 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.104939][ T5847] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.113369][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.127236][ T25] samsung 0003:0419:0600.0003: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.0-1/input0 [ 147.132272][ T29] audit: type=1400 audit(1730051778.182:362): avc: denied { accept } for pid=6409 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.145565][ T25] usb 1-1: USB disconnect, device number 7 [ 147.166614][ T29] audit: type=1400 audit(1730051778.202:363): avc: denied { write } for pid=6409 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.187425][ T5847] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.197370][ T5847] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 147.206548][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.252019][ T5847] usb 2-1: config 0 descriptor?? [ 147.367167][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 147.469440][ T29] audit: type=1400 audit(1730051778.562:364): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 147.521972][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.543106][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.553085][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.566663][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 147.576642][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.615971][ T9] usb 3-1: config 0 descriptor?? [ 147.709703][ T5847] asus 0003:048D:CE50.0004: unknown main item tag 0xd [ 147.732294][ T5847] asus 0003:048D:CE50.0004: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input1 [ 147.752904][ T5847] asus 0003:048D:CE50.0004: Asus input not registered [ 147.769800][ T5847] asus 0003:048D:CE50.0004: probe with driver asus failed with error -12 [ 147.917040][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.937557][ T5847] usb 2-1: USB disconnect, device number 6 [ 148.079789][ T9] holtek_mouse 0003:04D9:A070.0005: hidraw0: USB HID v0.00 Device [HID 04d9:a070] on usb-dummy_hcd.2-1/input0 [ 148.107918][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 148.123189][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.165283][ T5889] usbhid 5-1:0.0: can't add hid device: -71 [ 148.192310][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.227187][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.246096][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 148.265666][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.277980][ T25] usb 4-1: config 0 descriptor?? [ 148.288599][ T5889] usb 5-1: USB disconnect, device number 7 [ 148.373726][ T29] audit: type=1400 audit(1730051779.462:365): avc: denied { mounton } for pid=6412 comm="syz.2.120" path="/27/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 148.433727][ T29] audit: type=1400 audit(1730051779.522:366): avc: denied { append } for pid=6412 comm="syz.2.120" name="v4l-subdev6" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.511189][ T6423] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 148.547030][ T6423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.120'. [ 148.576479][ T6423] batman_adv: batadv0: Adding interface: virt_wifi0 [ 148.646765][ T6423] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.721206][ T6423] batman_adv: batadv0: Interface activated: virt_wifi0 [ 148.750396][ T25] apple 0003:05AC:0246.0006: unknown main item tag 0x0 [ 148.779403][ T25] apple 0003:05AC:0246.0006: unknown main item tag 0x0 [ 148.800534][ T25] apple 0003:05AC:0246.0006: item fetching failed at offset 2/160 [ 148.817755][ T25] apple 0003:05AC:0246.0006: parse failed [ 148.836288][ T25] apple 0003:05AC:0246.0006: probe with driver apple failed with error -22 [ 148.937048][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.953787][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.978435][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.999588][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.038690][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.132042][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 149.144372][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.165635][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.175899][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 149.189970][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 149.199807][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.244172][ T9] usb 2-1: config 0 descriptor?? [ 149.617396][ T5863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.676621][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0007/input/input8 [ 149.778383][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 149.848058][ T5863] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 149.928303][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0007/input/input9 [ 149.997153][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.046328][ T5863] usb 5-1: config 0 has no interface number 0 [ 150.135300][ T5863] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x3E, changing to 0xE [ 150.156329][ T5847] usb 3-1: USB disconnect, device number 10 [ 150.235849][ T9] kye 0003:0458:5011.0007: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 150.280213][ T5863] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 150.377174][ T5863] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 150.387340][ T5863] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.448394][ T5863] usb 5-1: config 0 interface 52 has no altsetting 0 [ 150.460334][ T5863] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 150.471758][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.783954][ T5889] usb 2-1: USB disconnect, device number 7 [ 151.623367][ T5863] usb 5-1: config 0 descriptor?? [ 151.700341][ T5911] usb 4-1: USB disconnect, device number 7 [ 151.777090][ T29] audit: type=1400 audit(1730051782.842:367): avc: denied { search } for pid=5188 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.013881][ T6448] GUP no longer grows the stack in syz.3.128 (6448): 20006000-2000a000 (20005000) [ 152.032208][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.3.128 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 152.042874][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.052982][ T6448] Call Trace: [ 152.056291][ T6448] [ 152.059252][ T6448] dump_stack_lvl+0x16c/0x1f0 [ 152.064005][ T6448] gup_vma_lookup+0x1d2/0x220 [ 152.068742][ T6448] __get_user_pages+0x26c/0x3b90 [ 152.073743][ T6448] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 152.079396][ T6448] ? __gup_longterm_locked+0x126/0x1b30 [ 152.085028][ T6448] ? __pfx___get_user_pages+0x10/0x10 [ 152.090456][ T6448] ? down_read_killable+0xcc/0x380 [ 152.095610][ T6448] ? __pfx_down_read_killable+0x10/0x10 [ 152.101198][ T6448] ? find_held_lock+0x2d/0x110 [ 152.106020][ T6448] ? __pfx_mark_lock+0x10/0x10 [ 152.110845][ T6448] __gup_longterm_locked+0x22e/0x1b30 [ 152.116277][ T6448] ? irqentry_exit+0x3b/0x90 [ 152.120936][ T6448] ? __pfx___gup_longterm_locked+0x10/0x10 [ 152.126800][ T6448] ? gup_fast_fallback+0x1ddc/0x2690 [ 152.132153][ T6448] gup_fast_fallback+0x180a/0x2690 [ 152.137371][ T6448] ? __pfx_gup_fast_fallback+0x10/0x10 [ 152.142899][ T6448] ? __pfx___lock_acquire+0x10/0x10 [ 152.148149][ T6448] ? hlock_class+0x4e/0x130 [ 152.152714][ T6448] ? __lock_acquire+0xbdd/0x3ce0 [ 152.157723][ T6448] get_user_pages_fast+0xa8/0x100 [ 152.162814][ T6448] ? __pfx_get_user_pages_fast+0x10/0x10 [ 152.168535][ T6448] __iov_iter_get_pages_alloc+0x8e5/0x2220 [ 152.174432][ T6448] ? rcu_is_watching+0x12/0xc0 [ 152.179269][ T6448] ? trace_contention_end+0xea/0x140 [ 152.184633][ T6448] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 152.190951][ T6448] ? copy_iovec_from_user+0x138/0x170 [ 152.196389][ T6448] ? pipe_lock+0x64/0x80 [ 152.200697][ T6448] ? __pfx___mutex_lock+0x10/0x10 [ 152.205830][ T6448] iov_iter_get_pages2+0xa4/0x100 [ 152.210915][ T6448] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 152.216605][ T6448] ? wait_for_space+0x224/0x2d0 [ 152.221544][ T6448] __do_sys_vmsplice+0x7c3/0xef0 [ 152.226550][ T6448] ? __pfx_lock_release+0x10/0x10 [ 152.231620][ T6448] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 152.237126][ T6448] ? wake_up_q+0x9e/0x140 [ 152.241503][ T6448] ? lock_acquire.part.0+0x11b/0x380 [ 152.246811][ T6448] ? find_held_lock+0x2d/0x110 [ 152.251664][ T6448] ? rcu_is_watching+0x12/0xc0 [ 152.256456][ T6448] ? do_syscall_64+0xcd/0x250 [ 152.261159][ T6448] do_syscall_64+0xcd/0x250 [ 152.265708][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.271628][ T6448] RIP: 0033:0x7f95d2d7e719 [ 152.276073][ T6448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.295698][ T6448] RSP: 002b:00007f95d3bda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 152.304138][ T6448] RAX: ffffffffffffffda RBX: 00007f95d2f35f80 RCX: 00007f95d2d7e719 [ 152.312128][ T6448] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000006 [ 152.320112][ T6448] RBP: 00007f95d2df132e R08: 0000000000000000 R09: 0000000000000000 [ 152.328111][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.331450][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.336112][ T6448] R13: 0000000000000000 R14: 00007f95d2f35f80 R15: 00007fff79e4b5f8 [ 152.351715][ T6448] [ 152.458202][ T5889] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 152.481936][ T25] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.493224][ T25] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.503478][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.510262][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00 [ 152.519473][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.529779][ T25] usb 3-1: config 0 descriptor?? [ 152.629321][ T5889] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 152.657686][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.686391][ T5889] usb 1-1: config 0 descriptor?? [ 152.712567][ T5889] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 152.724759][ T970] usb 5-1: USB disconnect, device number 8 [ 152.939178][ T29] audit: type=1326 audit(1730051784.032:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f266b37e719 code=0x0 [ 153.074926][ T25] wacom 0003:056A:0035.0008: hidraw0: USB HID v0.00 Device [HID 056a:0035] on usb-dummy_hcd.2-1/input0 [ 153.234169][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.274838][ T29] audit: type=1400 audit(1730051784.312:369): avc: denied { write } for pid=6450 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.319209][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.440063][ T5887] usb 3-1: USB disconnect, device number 11 [ 154.534753][ T6469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.668569][ T29] audit: type=1400 audit(1730051785.732:370): avc: denied { ioctl } for pid=6470 comm="syz.1.133" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 154.996814][ T6477] syz.4.134: attempt to access beyond end of device [ 154.996814][ T6477] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 155.792492][ T5889] gp8psk: usb out operation failed. [ 155.798306][ T5889] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 155.802612][ T6469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.808777][ T5889] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 155.812254][ T5889] usb 1-1: USB disconnect, device number 8 [ 156.637090][ T970] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 156.670533][ T29] audit: type=1400 audit(1730051787.762:371): avc: denied { read } for pid=6489 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.887461][ T970] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.172466][ T970] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 158.399633][ T970] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.459089][ T970] usb usb5-port1: attempt power cycle [ 158.778952][ T6490] mkiss: ax0: crc mode is auto. [ 158.835443][ T29] audit: type=1400 audit(1730051789.922:372): avc: denied { search } for pid=5500 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.857145][ T970] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 158.882197][ T970] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.903235][ T29] audit: type=1400 audit(1730051789.922:373): avc: denied { read } for pid=5500 comm="dhcpcd" name="n100" dev="tmpfs" ino=2593 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.934491][ T29] audit: type=1400 audit(1730051789.922:374): avc: denied { open } for pid=5500 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2593 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.017475][ T970] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 159.034314][ T29] audit: type=1400 audit(1730051789.932:375): avc: denied { getattr } for pid=5500 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2593 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.238151][ T970] usb 5-1: device not accepting address 12, error -71 [ 159.263772][ T970] usb usb5-port1: unable to enumerate USB device [ 159.607762][ T6527] ======================================================= [ 159.607762][ T6527] WARNING: The mand mount option has been deprecated and [ 159.607762][ T6527] and is ignored by this kernel. Remove the mand [ 159.607762][ T6527] option from the mount to silence this warning. [ 159.607762][ T6527] ======================================================= [ 159.916987][ T5911] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.935933][ T29] audit: type=1400 audit(1730051791.022:376): avc: denied { read } for pid=6537 comm="syz.4.151" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 159.977593][ T29] audit: type=1400 audit(1730051791.022:377): avc: denied { open } for pid=6537 comm="syz.4.151" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 160.062176][ T5911] usb 3-1: device descriptor read/64, error -71 [ 160.317139][ T5911] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 160.467070][ T5911] usb 3-1: device descriptor read/64, error -71 [ 160.577571][ T5911] usb usb3-port1: attempt power cycle [ 160.622368][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 160.633446][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 160.644628][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.154'. [ 160.947213][ T5911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 161.033758][ T5911] usb 3-1: device descriptor read/8, error -71 [ 161.358462][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.445803][ T5911] usb 3-1: device descriptor read/8, error -71 [ 161.707875][ T5911] usb usb3-port1: unable to enumerate USB device [ 163.457594][ T29] audit: type=1400 audit(1730051794.492:378): avc: denied { create } for pid=6568 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.489201][ T5843] Bluetooth: hci0: unexpected cc 0x1408 length: 57 > 4 [ 163.499183][ T5843] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 163.521090][ T29] audit: type=1400 audit(1730051794.492:379): avc: denied { ioctl } for pid=6568 comm="syz.0.157" path="socket:[10342]" dev="sockfs" ino=10342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.549068][ T29] audit: type=1400 audit(1730051794.522:380): avc: denied { ioctl } for pid=6566 comm="syz.2.159" path="socket:[10345]" dev="sockfs" ino=10345 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 163.574761][ T29] audit: type=1400 audit(1730051794.662:381): avc: denied { connect } for pid=6568 comm="syz.0.157" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.678538][ T5863] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 163.818597][ T6582] netlink: 'syz.4.163': attribute type 9 has an invalid length. [ 163.828294][ T6582] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.163'. [ 163.886991][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 163.898103][ T5863] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.918450][ T5863] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.950358][ T5863] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.997575][ T5863] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 164.036932][ T5863] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 164.080358][ T5863] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 164.094490][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.101873][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.119108][ T5863] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 164.167423][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.185254][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.220290][ T5863] usb 3-1: SerialNumber: syz [ 164.364531][ T25] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 164.372088][ T5863] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 164.509788][ T29] audit: type=1400 audit(1730051795.602:382): avc: denied { bind } for pid=6586 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.642260][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 164.661429][ T5863] usb 3-1: USB disconnect, device number 16 [ 164.718728][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 164.869957][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.894231][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.918162][ T25] usb 2-1: SerialNumber: syz [ 165.147360][ T6590] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.241861][ T29] audit: type=1400 audit(1730051796.332:383): avc: denied { listen } for pid=6598 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.308624][ T29] audit: type=1400 audit(1730051796.402:384): avc: denied { create } for pid=6598 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.349075][ T29] audit: type=1400 audit(1730051796.402:385): avc: denied { create } for pid=6602 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.395773][ T6589] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.424609][ T6589] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.425300][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.503068][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.588381][ T29] audit: type=1400 audit(1730051796.672:386): avc: denied { create } for pid=6608 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 165.908660][ T25] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 165.924800][ T25] usb 2-1: USB disconnect, device number 8 [ 165.933090][ T29] audit: type=1400 audit(1730051797.022:387): avc: denied { create } for pid=6608 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 167.017668][ T29] audit: type=1400 audit(1730051797.022:388): avc: denied { setopt } for pid=6608 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 167.734183][ T5843] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 167.742990][ T5843] Bluetooth: hci0: Injecting HCI hardware error event [ 167.751766][ T5843] Bluetooth: hci0: hardware error 0x00 [ 169.022829][ T29] audit: type=1400 audit(1730051800.112:389): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.274748][ T29] audit: type=1400 audit(1730051800.332:390): avc: denied { create } for pid=6631 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.004351][ T29] audit: type=1400 audit(1730051801.082:391): avc: denied { create } for pid=6638 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 170.221701][ T29] audit: type=1400 audit(1730051801.312:392): avc: denied { getopt } for pid=6638 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.749712][ T6647] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.842159][ T6647] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 170.882720][ T29] audit: type=1400 audit(1730051801.942:393): avc: denied { append } for pid=6644 comm="syz.1.183" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 170.905873][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.940888][ T5887] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.017552][ T29] audit: type=1400 audit(1730051801.952:394): avc: denied { map } for pid=6644 comm="syz.1.183" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.040923][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.047044][ T29] audit: type=1400 audit(1730051801.952:395): avc: denied { execute } for pid=6644 comm="syz.1.183" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.222346][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 171.661331][ T6654] wg2: entered promiscuous mode [ 171.666388][ T6654] wg2: entered allmulticast mode [ 171.726927][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 171.748099][ T5887] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 171.756345][ T5887] usb 5-1: config 0 has an invalid interface number: 98 but max is 1 [ 171.768179][ T6654] wg2: left promiscuous mode [ 171.768663][ T5887] usb 5-1: config 0 has no interface number 0 [ 171.772830][ T6654] wg2: left allmulticast mode [ 171.787004][ T5887] usb 5-1: config 0 has no interface number 1 [ 171.798754][ T5887] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 171.818863][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.830261][ T5887] usb 5-1: Product: syz [ 171.837775][ T5887] usb 5-1: Manufacturer: syz [ 171.842636][ T5887] usb 5-1: SerialNumber: syz [ 171.864515][ T5887] usb 5-1: config 0 descriptor?? [ 172.015047][ T5887] viperboard 5-1:0.61: version 0.00 found at bus 005 address 013 [ 172.027101][ T5863] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.062864][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'. [ 172.076538][ T5887] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 172.112038][ T5887] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 172.132913][ T5887] viperboard 5-1:0.98: version 0.00 found at bus 005 address 013 [ 172.155855][ T5887] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 172.166222][ T5887] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 172.196976][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 172.204307][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.241493][ T5887] usb 5-1: USB disconnect, device number 13 [ 172.257554][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.326636][ T5863] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 172.370887][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.409667][ T5863] usb 3-1: config 0 descriptor?? [ 172.415006][ T29] audit: type=1400 audit(1730051803.502:396): avc: denied { write } for pid=6669 comm="syz.0.189" name="ns" dev="proc" ino=11645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 172.457070][ T29] audit: type=1400 audit(1730051803.542:397): avc: denied { add_name } for pid=6669 comm="syz.0.189" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 172.524049][ T29] audit: type=1400 audit(1730051803.542:398): avc: denied { create } for pid=6669 comm="syz.0.189" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 172.557085][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.605962][ T29] audit: type=1400 audit(1730051803.542:399): avc: denied { associate } for pid=6669 comm="syz.0.189" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 172.776267][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 172.808741][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.013077][ T29] audit: type=1326 audit(1730051804.102:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266b37e719 code=0x7fc00000 [ 173.020541][ T5863] hid_mf 0003:0079:1801.0009: unknown main item tag 0x0 [ 173.057764][ T5863] hid_mf 0003:0079:1801.0009: unknown main item tag 0x0 [ 173.249105][ T5863] hid_mf 0003:0079:1801.0009: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.2-1/input0 [ 173.249163][ T5863] hid_mf 0003:0079:1801.0009: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 173.278198][ T9] usb 2-1: config 0 descriptor?? [ 173.579060][ T9] [drm] vendor descriptor length:6 data:06 5f 01 15 72 a2 00 00 00 00 00 [ 173.594022][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 173.603027][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.765823][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.786443][ T6659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.185'. [ 173.797012][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 173.853152][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 173.884629][ T9] [drm] Initialized udl on minor 2 [ 173.910045][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.921501][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 173.931156][ T5863] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.941797][ T5863] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.950673][ T5863] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 174.025499][ T6691] netlink: 'syz.3.194': attribute type 16 has an invalid length. [ 174.109724][ T9] usb 2-1: USB disconnect, device number 9 [ 174.155062][ T25] usb 3-1: USB disconnect, device number 17 [ 174.247982][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.444023][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.477158][ T5911] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.487106][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.504889][ T5887] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 174.515179][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.525907][ T5887] usb 1-1: config 0 descriptor?? [ 174.657151][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 174.672980][ T5911] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 174.682093][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.693194][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.709012][ T5911] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.717125][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.718400][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.744083][ T5911] usb 4-1: Product: syz [ 174.756055][ T5911] usb 4-1: Manufacturer: syz [ 174.761254][ T5887] usbhid 1-1:0.0: can't add hid device: -32 [ 174.767916][ T5887] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 174.776015][ T5911] usb 4-1: SerialNumber: syz [ 174.827005][ T5863] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.883958][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 174.893278][ T9] usb 2-1: can't read configurations, error -22 [ 174.972129][ T5863] usb 5-1: device descriptor read/64, error -71 [ 175.038581][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.136149][ T6720] netlink: 'syz.2.201': attribute type 4 has an invalid length. [ 175.144573][ T6720] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.201'. [ 175.199392][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 175.216214][ T9] usb 2-1: can't read configurations, error -22 [ 175.227053][ T5863] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 175.246650][ T9] usb usb2-port1: attempt power cycle [ 175.377112][ T5863] usb 5-1: device descriptor read/64, error -71 [ 175.402373][ T5911] usb 4-1: 0:2 : does not exist [ 175.410758][ T5911] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 175.434014][ T5911] usb 4-1: USB disconnect, device number 9 [ 175.461145][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.501536][ T5863] usb usb5-port1: attempt power cycle [ 175.541908][ T6722] process 'syz.2.201' launched './file0' with NULL argv: empty string added [ 175.567413][ T6722] 9pnet_virtio: no channels available for device [ 175.578572][ T6722] netlink: 100 bytes leftover after parsing attributes in process `syz.2.201'. [ 175.670360][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 175.670409][ T29] audit: type=1400 audit(1730051806.642:405): avc: denied { execute_no_trans } for pid=6719 comm="syz.2.201" path="/40/file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.809643][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.019721][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 176.052753][ T9] usb 2-1: can't read configurations, error -22 [ 176.127071][ T5863] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 176.192472][ T5863] usb 5-1: device descriptor read/8, error -71 [ 176.207088][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 176.260736][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 176.286779][ T9] usb 2-1: can't read configurations, error -22 [ 176.297572][ T9] usb usb2-port1: unable to enumerate USB device [ 176.321442][ T29] audit: type=1400 audit(1730051807.412:406): avc: denied { sys_module } for pid=6723 comm="syz.3.202" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 176.479940][ T5863] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 176.498926][ T6733] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 176.523751][ T6733] bond0: (slave netdevsim0): no link monitoring support [ 176.537094][ T5863] usb 5-1: device descriptor read/8, error -71 [ 176.547930][ T6733] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 176.589974][ T6733] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 176.647194][ T5863] usb usb5-port1: unable to enumerate USB device [ 176.666056][ T29] audit: type=1400 audit(1730051807.752:407): avc: denied { getopt } for pid=6737 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.687024][ T29] audit: type=1400 audit(1730051807.772:408): avc: denied { ioctl } for pid=6737 comm="syz.2.205" path="socket:[10720]" dev="sockfs" ino=10720 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.921513][ T5863] usb 1-1: USB disconnect, device number 9 [ 177.062526][ T6744] sch_tbf: peakrate 5 is lower than or equals to rate 8 ! [ 177.964909][ T6759] tmpfs: Bad value for 'mpol' [ 178.293774][ T29] audit: type=1400 audit(1730051809.382:409): avc: denied { create } for pid=6753 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 178.297426][ T6771] hfsplus: unable to find HFS+ superblock [ 178.368701][ T6765] syzkaller0: entered promiscuous mode [ 178.374518][ T6765] syzkaller0: entered allmulticast mode [ 178.537114][ T29] audit: type=1400 audit(1730051809.622:410): avc: denied { read } for pid=6776 comm="syz.0.214" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.578049][ T5863] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 178.648384][ T29] audit: type=1400 audit(1730051809.632:411): avc: denied { open } for pid=6776 comm="syz.0.214" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.674703][ T29] audit: type=1400 audit(1730051809.742:412): avc: denied { read } for pid=6776 comm="syz.0.214" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.087038][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 179.110322][ T5863] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 179.134280][ T5863] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 179.146123][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.174978][ T5863] usb 5-1: Product: syz [ 179.185084][ T5863] usb 5-1: Manufacturer: syz [ 179.192691][ T5863] usb 5-1: SerialNumber: syz [ 179.203265][ T5863] usb 5-1: config 0 descriptor?? [ 179.211175][ T6775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.228793][ T5863] hub 5-1:0.0: bad descriptor, ignoring hub [ 179.244958][ T5863] hub 5-1:0.0: probe with driver hub failed with error -5 [ 179.270946][ T5863] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 179.467479][ T5911] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 179.637334][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 179.647681][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.653605][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.695348][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 179.876629][ T5911] usb 3-1: can't read configurations, error -71 [ 179.913403][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.148006][ T6789] netlink: 'syz.3.217': attribute type 11 has an invalid length. [ 180.165030][ T5887] usb 5-1: USB disconnect, device number 18 [ 180.165028][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 180.417849][ T29] audit: type=1400 audit(1730051811.502:413): avc: denied { name_connect } for pid=6800 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 181.556957][ T29] audit: type=1400 audit(1730051812.152:414): avc: denied { create } for pid=6806 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.577084][ T29] audit: type=1400 audit(1730051812.242:415): avc: denied { getopt } for pid=6806 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.597130][ T29] audit: type=1400 audit(1730051812.642:416): avc: denied { setattr } for pid=6809 comm="syz.0.222" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.857184][ T29] audit: type=1400 audit(1730051812.942:417): avc: denied { setopt } for pid=6821 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.906237][ T29] audit: type=1400 audit(1730051812.942:418): avc: denied { shutdown } for pid=6821 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.948818][ T29] audit: type=1400 audit(1730051812.992:419): avc: denied { setattr } for pid=6822 comm="syz.4.224" name="comm" dev="proc" ino=12074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 182.338164][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 182.441555][ T46] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 182.644735][ T29] audit: type=1400 audit(1730051813.722:420): avc: denied { mount } for pid=6831 comm="syz.0.226" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 183.378241][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 183.390919][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 183.416990][ T46] usb 3-1: device descriptor read/64, error -71 [ 183.442444][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 183.455476][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.468381][ T25] usb 4-1: Product: syz [ 183.472629][ T25] usb 4-1: Manufacturer: syz [ 183.482438][ T25] usb 4-1: SerialNumber: syz [ 183.513049][ T25] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 183.678469][ T46] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 183.709538][ T5191] bcm5974 4-1:1.0: could not read from device [ 183.743651][ T5191] bcm5974 4-1:1.0: could not read from device [ 183.810741][ T25] usb 4-1: USB disconnect, device number 10 [ 183.817479][ T46] usb 3-1: device descriptor read/64, error -71 [ 183.843353][ T5191] bcm5974 4-1:1.0: could not read from device [ 183.879764][ T5191] bcm5974 4-1:1.0: could not read from device [ 183.931875][ T46] usb usb3-port1: attempt power cycle [ 183.998551][ T5844] udevd[5844]: Error opening device "/dev/input/event4": No such file or directory [ 184.013581][ T5844] udevd[5844]: Unable to EVIOCGABS device "/dev/input/event4" [ 184.029045][ T5844] udevd[5844]: Unable to EVIOCGABS device "/dev/input/event4" [ 184.038769][ T5844] udevd[5844]: Unable to EVIOCGABS device "/dev/input/event4" [ 184.046531][ T5844] udevd[5844]: Unable to EVIOCGABS device "/dev/input/event4" [ 184.306999][ T5911] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.320227][ T46] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 184.347740][ T46] usb 3-1: device descriptor read/8, error -71 [ 184.378061][ T6848] netlink: 134652 bytes leftover after parsing attributes in process `syz.3.230'. [ 184.509496][ T5911] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 184.588373][ T5911] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 184.617068][ T46] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 184.638711][ T46] usb 3-1: device descriptor read/8, error -71 [ 184.650392][ T5911] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 184.703833][ T5911] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 184.731087][ T5911] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 184.747525][ T5911] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 184.759663][ T5911] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 184.774859][ T5911] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 184.796114][ T46] usb usb3-port1: unable to enumerate USB device [ 184.858322][ T5911] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 184.868767][ T5911] usb 1-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 184.878635][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.943154][ T5911] pwc: Logitech QuickCam detected (reserved ID). [ 184.949861][ T5911] pwc: Warning: more than 1 configuration available. [ 185.119449][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 185.199056][ T29] audit: type=1400 audit(1730051816.282:421): avc: denied { setopt } for pid=6845 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.232874][ T5887] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 185.429240][ T5887] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 185.441819][ T29] audit: type=1400 audit(1730051816.532:422): avc: denied { map } for pid=6859 comm="syz.3.234" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.491496][ T5887] usb 2-1: config 0 has no interface number 0 [ 185.512589][ T5887] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.564600][ T29] audit: type=1400 audit(1730051816.532:423): avc: denied { execute } for pid=6859 comm="syz.3.234" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.588121][ T5887] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.590853][ T6860] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 185.624117][ T6860] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.234'. [ 185.854719][ T5887] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 185.864750][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.877085][ T5887] usb 2-1: config 0 descriptor?? [ 186.774821][ T6872] fuse: Unknown parameter 'OnT3<*@20x0000000000000003' [ 186.935379][ T5887] logitech-djreceiver 0003:046D:C71B.000A: unexpected long global item [ 186.944901][ T5887] logitech-djreceiver 0003:046D:C71B.000A: logi_dj_probe: parse failed [ 186.953728][ T5887] logitech-djreceiver 0003:046D:C71B.000A: probe with driver logitech-djreceiver failed with error -22 [ 187.068551][ T5863] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 187.177402][ T29] audit: type=1400 audit(1730051818.252:424): avc: denied { setopt } for pid=6877 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 187.179693][ T6879] netlink: 'syz.3.239': attribute type 2 has an invalid length. [ 187.207796][ T6879] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.239'. [ 187.342067][ T6881] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 187.377069][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 187.386807][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.438160][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.465788][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.503495][ T970] usb 2-1: USB disconnect, device number 14 [ 187.525409][ T5863] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.553401][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.609697][ T5863] usb 3-1: config 0 descriptor?? [ 188.123857][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 188.131066][ T5863] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 188.179093][ T5911] pwc: Failed to set LED on/off time (-71) [ 188.182898][ T5863] usb 3-1: USB disconnect, device number 24 [ 188.207095][ T5911] pwc: send_video_command error -71 [ 188.212424][ T5911] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 188.483759][ T5911] Philips webcam 1-1:250.0: probe with driver Philips webcam failed with error -71 [ 188.495588][ T5911] usb 1-1: USB disconnect, device number 10 [ 188.567046][ T970] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 188.650090][ T29] audit: type=1400 audit(1730051819.732:425): avc: denied { bind } for pid=6904 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.720682][ T29] audit: type=1400 audit(1730051819.732:426): avc: denied { ioctl } for pid=6904 comm="syz.3.244" path="socket:[12158]" dev="sockfs" ino=12158 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.766985][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 188.800847][ T970] usb 5-1: config 0 has no interfaces? [ 188.819585][ T970] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 188.853904][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.885010][ T29] audit: type=1400 audit(1730051819.812:427): avc: denied { connect } for pid=6886 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.907609][ T970] usb 5-1: Product: syz [ 188.921897][ T970] usb 5-1: Manufacturer: syz [ 188.926794][ T970] usb 5-1: SerialNumber: syz [ 188.961538][ T970] usb 5-1: config 0 descriptor?? [ 188.973029][ T29] audit: type=1400 audit(1730051819.852:428): avc: denied { shutdown } for pid=6886 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.778600][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 190.158848][ T5887] usb 5-1: USB disconnect, device number 19 [ 190.227504][ T29] audit: type=1400 audit(1730051821.312:429): avc: denied { write } for pid=6929 comm="syz.3.247" path="socket:[12206]" dev="sockfs" ino=12206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.815609][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 191.957934][ T29] audit: type=1400 audit(1730051823.052:430): avc: denied { ioctl } for pid=6943 comm="syz.4.251" path="socket:[11148]" dev="sockfs" ino=11148 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.036466][ T6941] block device autoloading is deprecated and will be removed. [ 192.089933][ T6938] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 192.220754][ T29] audit: type=1400 audit(1730051823.312:431): avc: denied { write } for pid=6943 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.712169][ T29] audit: type=1400 audit(1730051823.792:432): avc: denied { mount } for pid=6948 comm="syz.0.253" name="/" dev="ramfs" ino=12313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 192.962595][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 193.124275][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.139714][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 193.163472][ T29] audit: type=1400 audit(1730051823.802:433): avc: denied { unmount } for pid=6948 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 193.218184][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.270402][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.288432][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.349589][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.359942][ T29] audit: type=1400 audit(1730051823.842:434): avc: denied { read write } for pid=6956 comm="syz.3.254" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 193.384187][ T29] audit: type=1400 audit(1730051823.842:435): avc: denied { open } for pid=6956 comm="syz.3.254" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 193.387032][ T5911] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 193.416428][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.434518][ T29] audit: type=1400 audit(1730051823.882:436): avc: denied { mount } for pid=6948 comm="syz.0.253" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 193.455213][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.497536][ T29] audit: type=1400 audit(1730051823.892:437): avc: denied { search } for pid=6948 comm="syz.0.253" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.502334][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.617159][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.634526][ T29] audit: type=1400 audit(1730051823.902:438): avc: denied { mounton } for pid=6948 comm="syz.0.253" path="/52/file0" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.719993][ T29] audit: type=1400 audit(1730051824.582:439): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 193.862694][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.871161][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.879069][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.887264][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.894942][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 193.908410][ T5887] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 194.743526][ T970] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 194.918915][ T970] usb 1-1: config index 0 descriptor too short (expected 244, got 18) [ 195.124715][ T970] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 195.145943][ T970] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 195.238525][ T970] usb 1-1: Product: syz [ 195.261755][ T970] usb 1-1: Manufacturer: syz [ 195.292556][ T970] usb 1-1: SerialNumber: syz [ 195.881159][ T970] usb 1-1: config 0 descriptor?? [ 195.889467][ T970] ldusb 1-1:0.0: Interrupt in endpoint not found [ 196.117190][ T6969] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 196.171927][ T970] usb 1-1: USB disconnect, device number 11 [ 197.241617][ T29] audit: type=1400 audit(1730051828.332:440): avc: denied { bind } for pid=7002 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.481815][ T29] audit: type=1400 audit(1730051828.332:441): avc: denied { name_bind } for pid=7002 comm="syz.1.265" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 197.967908][ T7009] syz.3.266 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 198.555071][ T6972] delete_channel: no stack [ 198.790912][ T7017] capability: warning: `syz.3.269' uses deprecated v2 capabilities in a way that may be insecure [ 198.801828][ T29] audit: type=1400 audit(1730051829.882:442): avc: denied { wake_alarm } for pid=7014 comm="syz.3.269" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 198.852702][ T29] audit: type=1326 audit(1730051829.942:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7014 comm="syz.3.269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95d2d7e719 code=0x0 [ 198.897526][ T970] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 199.023041][ T7016] kvm: emulating exchange as write [ 199.057384][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 199.064793][ T970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.084048][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.598066][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.899219][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.909079][ T970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.919643][ T970] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.937786][ T970] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 199.967774][ T970] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.975858][ T970] usb 2-1: Manufacturer: syz [ 199.984134][ T970] usb 2-1: config 0 descriptor?? [ 200.073656][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 200.169393][ T29] audit: type=1400 audit(1730051831.252:444): avc: denied { bind } for pid=7030 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.213320][ T7012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.267'. [ 200.230537][ T29] audit: type=1400 audit(1730051831.292:445): avc: denied { read } for pid=7010 comm="syz.1.267" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 200.288130][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.354793][ T29] audit: type=1400 audit(1730051831.292:446): avc: denied { open } for pid=7010 comm="syz.1.267" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 200.397357][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.533611][ T29] audit: type=1400 audit(1730051831.292:447): avc: denied { unlink } for pid=7038 comm="syz.0.274" name="#1" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 200.667053][ T29] audit: type=1400 audit(1730051831.352:448): avc: denied { mount } for pid=7038 comm="syz.0.274" name="/" dev="overlay" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 200.721045][ T7048] warning: `syz.4.277' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 200.810377][ T29] audit: type=1400 audit(1730051831.822:449): avc: denied { ioctl } for pid=7046 comm="syz.0.276" path="socket:[12570]" dev="sockfs" ino=12570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.957023][ T970] rc_core: IR keymap rc-hauppauge not found [ 201.963003][ T970] Registered IR keymap rc-empty [ 201.977841][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.024551][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.061511][ T970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 202.082709][ T970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 202.143852][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.177128][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.207292][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.224471][ T7055] Illegal XDP return value 4294967274 on prog (id 100) dev syz_tun, expect packet loss! [ 202.247109][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.267089][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.288569][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.307092][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.327195][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.367241][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.387088][ T970] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.410627][ T970] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 202.428790][ T970] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.456168][ T970] usb 2-1: USB disconnect, device number 15 [ 202.494725][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 203.761013][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.967154][ T970] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 204.756681][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.237507][ T7071] netlink: 'syz.0.284': attribute type 9 has an invalid length. [ 205.245253][ T7071] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.284'. [ 205.254928][ T7071] openvswitch: netlink: Port -524278 exceeds max allowable 65535 [ 212.144038][ T7092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7092 comm=syz.1.286 [ 212.244476][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 212.504670][ T7092] veth0_macvtap: left promiscuous mode [ 213.822791][ T7106] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 217.427632][ T7111] netlink: 'syz.1.291': attribute type 2 has an invalid length. [ 217.499164][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 217.499189][ T29] audit: type=1326 audit(1730051848.592:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825077e719 code=0x7fc00000 [ 218.072186][ T29] audit: type=1326 audit(1730051849.132:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f825077e719 code=0x7fc00000 [ 218.937252][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 218.943353][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 218.991521][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 218.997671][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 219.647708][ T5847] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 220.387662][ T7132] netlink: 'syz.3.289': attribute type 12 has an invalid length. [ 220.395781][ T7132] netlink: 'syz.3.289': attribute type 11 has an invalid length. [ 220.403701][ T7132] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.289'. [ 220.464313][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 220.492784][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.551871][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.562051][ T5863] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.689870][ T5847] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 220.749839][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.796022][ T5847] usb 3-1: config 0 descriptor?? [ 220.816550][ T7137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.830717][ T5863] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 220.867135][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.894423][ T5863] usb 1-1: config 0 descriptor?? [ 221.048390][ T7141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.058134][ T7141] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 221.070159][ T7141] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 221.141941][ T5863] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 221.141975][ T5863] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 221.158255][ T29] audit: type=1400 audit(1730051852.252:455): avc: denied { bind } for pid=7121 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.228678][ T5863] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 221.228718][ T5863] [drm] Initialized udl on minor 2 [ 221.353912][ T5863] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 221.375483][ T5863] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 221.620697][ T5847] kye 0003:0458:4018.000C: invalid report_count -1085070128 [ 221.620763][ T5847] kye 0003:0458:4018.000C: item 0 4 1 9 parsing failed [ 221.621427][ T5847] kye 0003:0458:4018.000C: parse failed [ 221.621524][ T5847] kye 0003:0458:4018.000C: probe with driver kye failed with error -22 [ 222.097050][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.146047][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 222.166402][ T5847] usb 1-1: USB disconnect, device number 13 [ 222.657172][ T9] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 222.797785][ T9] usb 4-1: device descriptor read/64, error -71 [ 223.037085][ T9] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 223.187175][ T9] usb 4-1: device descriptor read/64, error -71 [ 223.297599][ T9] usb usb4-port1: attempt power cycle [ 223.667144][ T9] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 223.712108][ T9] usb 4-1: device descriptor read/8, error -71 [ 223.967074][ T9] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 224.001681][ T9] usb 4-1: device descriptor read/8, error -71 [ 224.117738][ T9] usb usb4-port1: unable to enumerate USB device [ 225.294909][ T7165] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20003 [ 225.304614][ T7165] MPI: mpi too large (186688 bits) [ 225.318895][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.302'. [ 227.443910][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 227.617343][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 227.643609][ T9] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 227.656904][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 227.677725][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 227.695181][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 227.715009][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 227.734273][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 227.748430][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.756559][ T9] usb 2-1: Product: syz [ 227.766454][ T9] usb 2-1: Manufacturer: syz [ 227.773593][ T9] usb 2-1: SerialNumber: syz [ 227.798358][ T9] usb 2-1: config 0 descriptor?? [ 227.810351][ T7179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.823311][ T7179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 228.353526][ T29] audit: type=1400 audit(1730051859.442:456): avc: denied { bind } for pid=7180 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.783632][ T5863] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 228.945485][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 228.964443][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 228.980638][ T7186] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 228.990970][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 229.008298][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.031827][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 229.051338][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 50, changing to 9 [ 229.067277][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1792, setting to 1024 [ 229.091286][ T5863] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 229.106427][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.118145][ T5863] usb 4-1: Product: syz [ 229.122436][ T5863] usb 4-1: Manufacturer: syz [ 229.133955][ T5863] usb 4-1: SerialNumber: syz [ 229.145538][ T5863] usb 4-1: config 0 descriptor?? [ 229.168003][ T7181] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 229.185320][ T5863] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 229.411795][ T5863] usb 4-1: USB disconnect, device number 16 [ 232.066994][ T5847] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 232.246989][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 232.266900][ T5847] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.275078][ T5847] usb 4-1: config 0 has no interface number 0 [ 232.288409][ T5847] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 232.304067][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.314582][ T5847] usb 4-1: Product: syz [ 232.327202][ T5847] usb 4-1: Manufacturer: syz [ 232.331857][ T5847] usb 4-1: SerialNumber: syz [ 232.354471][ T5847] usb 4-1: config 0 descriptor?? [ 232.375857][ T5847] hub 4-1:0.1: bad descriptor, ignoring hub [ 232.386957][ T5847] hub 4-1:0.1: probe with driver hub failed with error -5 [ 232.404226][ T5847] usb 4-1: selecting invalid altsetting 1 [ 232.412863][ T5847] snd-usb-us122l 4-1:0.1: usb_set_interface error [ 232.431031][ T5847] snd-usb-us122l 4-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 232.718454][ T5847] usb 4-1: USB disconnect, device number 17 [ 237.086876][ C1] sched: DL replenish lagged too much [ 245.264579][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.279566][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.287790][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.296027][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.304626][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 245.327218][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.376938][ T29] audit: type=1400 audit(1730051876.452:457): avc: denied { mounton } for pid=7196 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 245.557906][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.581472][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.592354][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.608311][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.616818][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 245.625440][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.756209][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.775307][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.784166][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.797581][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.808370][ T5835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 245.816578][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.870808][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 245.883896][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 245.900518][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 245.912392][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 245.921491][ T5843] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 245.931405][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 247.379041][ T5843] Bluetooth: hci5: command tx timeout [ 247.697075][ T5843] Bluetooth: hci6: command tx timeout [ 247.856989][ T5843] Bluetooth: hci7: command tx timeout [ 248.027855][ T5843] Bluetooth: hci8: command tx timeout [ 248.723894][ T5835] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 248.738742][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 248.747817][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 248.756431][ T5835] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 248.764796][ T5835] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 248.777108][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 249.457710][ T5843] Bluetooth: hci5: command tx timeout [ 249.783424][ T5843] Bluetooth: hci6: command tx timeout [ 249.938305][ T5843] Bluetooth: hci7: command tx timeout [ 250.097605][ T5843] Bluetooth: hci8: command tx timeout [ 250.817361][ T5843] Bluetooth: hci9: command tx timeout [ 251.537148][ T5843] Bluetooth: hci5: command tx timeout [ 251.869869][ T5843] Bluetooth: hci6: command tx timeout [ 252.027327][ T5843] Bluetooth: hci7: command tx timeout [ 252.177837][ T5843] Bluetooth: hci8: command tx timeout [ 252.897110][ T5843] Bluetooth: hci9: command tx timeout [ 253.628785][ T5843] Bluetooth: hci5: command tx timeout [ 253.939703][ T5843] Bluetooth: hci6: command tx timeout [ 254.107123][ T5843] Bluetooth: hci7: command tx timeout [ 254.257902][ T5843] Bluetooth: hci8: command tx timeout [ 254.977100][ T5843] Bluetooth: hci9: command tx timeout [ 257.057162][ T5843] Bluetooth: hci9: command tx timeout [ 259.040295][ T7124] netlink: 52 bytes leftover after parsing attributes in process `syz.2.294'. [ 259.157857][ T9] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 259.165551][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 259.171733][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 259.263844][ T9] usb 2-1: USB disconnect, device number 16 [ 259.311252][ T9] mcba_usb 2-1:0.0 can0: device disconnected [ 260.988868][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.817554][ T7146] syz_tun (unregistering): left promiscuous mode [ 301.771296][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.632877][ T5919] usb 3-1: USB disconnect, device number 25 [ 303.769065][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.746179][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.079842][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.337981][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.380571][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.394330][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.403538][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.415592][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 306.423500][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.614734][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.625104][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.633444][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.641912][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.649962][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 306.662447][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.819314][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.829575][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.837976][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.846010][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.854455][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 306.863689][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.004241][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.013879][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.022849][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.042130][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.051160][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.059586][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.546966][ T11] bridge_slave_1: left allmulticast mode [ 307.553169][ T11] bridge_slave_1: left promiscuous mode [ 307.578734][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.628679][ T11] bridge_slave_0: left allmulticast mode [ 307.634396][ T11] bridge_slave_0: left promiscuous mode [ 307.649553][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.497161][ T5835] Bluetooth: hci0: command tx timeout [ 308.742529][ T5835] Bluetooth: hci2: command tx timeout [ 308.993793][ T5835] Bluetooth: hci3: command tx timeout [ 309.142009][ T5835] Bluetooth: hci4: command tx timeout [ 309.323549][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 309.337292][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 309.345231][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 309.353825][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 309.363272][ T5843] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 309.382311][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 309.685204][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.741459][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.796968][ T11] bond0 (unregistering): Released all slaves [ 310.577190][ T5843] Bluetooth: hci0: command tx timeout [ 310.816925][ T5843] Bluetooth: hci2: command tx timeout [ 311.057240][ T5843] Bluetooth: hci3: command tx timeout [ 311.216995][ T5843] Bluetooth: hci4: command tx timeout [ 311.457173][ T5843] Bluetooth: hci8: command tx timeout [ 312.656949][ T5843] Bluetooth: hci0: command tx timeout [ 312.896958][ T5843] Bluetooth: hci2: command tx timeout [ 313.136936][ T5843] Bluetooth: hci3: command tx timeout [ 313.296907][ T5843] Bluetooth: hci4: command tx timeout [ 313.536970][ T5843] Bluetooth: hci8: command tx timeout [ 314.737027][ T5843] Bluetooth: hci0: command tx timeout [ 314.981807][ T5843] Bluetooth: hci2: command tx timeout [ 315.217112][ T5843] Bluetooth: hci3: command tx timeout [ 315.377353][ T5843] Bluetooth: hci4: command tx timeout [ 315.617127][ T5843] Bluetooth: hci8: command tx timeout [ 317.703562][ T5843] Bluetooth: hci8: command tx timeout [ 322.427534][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.145842][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.159652][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.167879][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.180258][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.194839][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 368.206963][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.404100][ T5843] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 368.430126][ T5843] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 368.443476][ T5843] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 368.452095][ T5843] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 368.460303][ T5843] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 368.468137][ T5843] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 368.544809][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 368.556381][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 368.565028][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 368.575465][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 368.583844][ T5840] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 368.594228][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 368.680269][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 368.696087][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 368.704962][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 368.717471][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 368.725683][ T5840] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 368.741868][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 369.867535][ T5843] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 369.880811][ T5843] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 369.892497][ T5843] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 369.901163][ T5843] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 369.909084][ T5843] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 369.919230][ T5843] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 370.257071][ T5843] Bluetooth: hci1: command tx timeout [ 370.498335][ T5843] Bluetooth: hci10: command tx timeout [ 370.595792][ T5843] Bluetooth: hci7: command 0x0406 tx timeout [ 370.601919][ T5838] Bluetooth: hci6: command 0x0406 tx timeout [ 370.614809][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 370.656963][ T5840] Bluetooth: hci11: command tx timeout [ 370.817037][ T5840] Bluetooth: hci12: command tx timeout [ 372.018558][ T5840] Bluetooth: hci13: command tx timeout [ 372.337049][ T5840] Bluetooth: hci1: command tx timeout [ 372.577106][ T5840] Bluetooth: hci10: command tx timeout [ 372.736900][ T5840] Bluetooth: hci11: command tx timeout [ 372.897163][ T5840] Bluetooth: hci12: command tx timeout [ 374.096881][ T5840] Bluetooth: hci13: command tx timeout [ 374.427181][ T5840] Bluetooth: hci1: command tx timeout [ 374.657087][ T5840] Bluetooth: hci10: command tx timeout [ 374.817163][ T5840] Bluetooth: hci11: command tx timeout [ 374.977183][ T5840] Bluetooth: hci12: command tx timeout [ 375.703145][ T5840] Bluetooth: hci9: command 0x0406 tx timeout [ 376.177163][ T5840] Bluetooth: hci13: command tx timeout [ 376.497028][ T5840] Bluetooth: hci1: command tx timeout [ 376.736947][ T5840] Bluetooth: hci10: command tx timeout [ 376.897092][ T5840] Bluetooth: hci11: command tx timeout [ 377.057389][ T5840] Bluetooth: hci12: command tx timeout [ 378.257038][ T5840] Bluetooth: hci13: command tx timeout [ 383.863998][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.807170][ T29] audit: type=1400 audit(1730052016.902:458): avc: denied { recv } for pid=1218 comm="kworker/1:2" saddr=10.128.0.169 src=32834 daddr=10.128.1.10 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 396.394008][ T29] audit: type=1400 audit(1730052027.472:459): avc: denied { read } for pid=7260 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.485207][ T29] audit: type=1400 audit(1730052027.522:460): avc: denied { open } for pid=7260 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.595064][ T29] audit: type=1400 audit(1730052027.522:461): avc: denied { getattr } for pid=7260 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.901360][ T29] audit: type=1400 audit(1730052027.992:462): avc: denied { write } for pid=7259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.973599][ T29] audit: type=1400 audit(1730052028.012:463): avc: denied { add_name } for pid=7259 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.033645][ T29] audit: type=1400 audit(1730052028.012:464): avc: denied { create } for pid=7259 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.115291][ T29] audit: type=1400 audit(1730052028.012:465): avc: denied { write } for pid=7259 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.186844][ T29] audit: type=1400 audit(1730052028.032:466): avc: denied { append } for pid=7259 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.256955][ T29] audit: type=1400 audit(1730052028.252:467): avc: denied { remove_name } for pid=7271 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.326213][ T29] audit: type=1400 audit(1730052028.252:468): avc: denied { unlink } for pid=7271 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 428.393801][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 428.407137][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 428.417070][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 428.427227][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 428.435040][ T5842] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 428.447308][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 428.954243][ T5843] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 428.980796][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 429.007471][ T5850] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 429.017921][ T5850] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 429.028045][ T5850] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 429.036270][ T5850] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 429.043929][ T5850] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 429.058317][ T5850] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 429.067213][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 429.074700][ T5850] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 429.084970][ T5850] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 429.094531][ T5850] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 429.262784][ T5842] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 429.276826][ T5842] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 429.285294][ T5842] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 429.304902][ T5842] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 429.315193][ T5842] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 429.329491][ T5842] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 430.376311][ T5838] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 430.397741][ T5838] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 430.405850][ T5838] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 430.414496][ T5838] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 430.422431][ T5838] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 430.436367][ T5838] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 430.497047][ T5838] Bluetooth: hci8: command tx timeout [ 431.137189][ T7290] Bluetooth: hci14: command tx timeout [ 431.145782][ T5838] Bluetooth: hci15: command tx timeout [ 431.377184][ T5838] Bluetooth: hci16: command tx timeout [ 432.046819][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 432.052913][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 432.059049][ T7290] Bluetooth: hci0: command 0x0406 tx timeout [ 432.065115][ T7290] Bluetooth: hci3: command 0x0406 tx timeout [ 432.503251][ T5842] Bluetooth: hci17: command tx timeout [ 432.577005][ T5842] Bluetooth: hci8: command tx timeout [ 433.227195][ T5842] Bluetooth: hci15: command tx timeout [ 433.232744][ T5842] Bluetooth: hci14: command tx timeout [ 433.457097][ T5842] Bluetooth: hci16: command tx timeout [ 434.577047][ T5842] Bluetooth: hci17: command tx timeout [ 434.657062][ T5842] Bluetooth: hci8: command tx timeout [ 435.316882][ T5835] Bluetooth: hci15: command tx timeout [ 435.323905][ T5842] Bluetooth: hci14: command tx timeout [ 435.547302][ T5842] Bluetooth: hci16: command tx timeout [ 436.657199][ T5842] Bluetooth: hci17: command tx timeout [ 436.747101][ T5842] Bluetooth: hci8: command tx timeout [ 437.377003][ T5835] Bluetooth: hci15: command tx timeout [ 437.382595][ T5842] Bluetooth: hci14: command tx timeout [ 437.617145][ T5842] Bluetooth: hci16: command tx timeout [ 438.743377][ T5842] Bluetooth: hci17: command tx timeout [ 445.299282][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.257405][ T30] INFO: task syz-executor:7227 blocked for more than 143 seconds. [ 454.265305][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 454.304490][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.361813][ T30] task:syz-executor state:D stack:26112 pid:7227 tgid:7227 ppid:1 flags:0x00004004 [ 454.404220][ T30] Call Trace: [ 454.416882][ T30] [ 454.419880][ T30] __schedule+0xe55/0x5730 [ 454.424365][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 454.562404][ T30] ? lockdep_hardirqs_on_prepare+0x3c1/0x420 [ 454.613156][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 454.653431][ T30] ? __pfx___schedule+0x10/0x10 [ 454.673020][ T30] ? schedule+0x298/0x350 [ 454.706784][ T30] ? __pfx_lock_release+0x10/0x10 [ 454.711890][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 454.742672][ T30] ? lock_acquire+0x2f/0xb0 [ 454.786790][ T30] ? schedule+0x1fd/0x350 [ 454.791235][ T30] schedule+0xe7/0x350 [ 454.795362][ T30] schedule_preempt_disabled+0x13/0x30 [ 454.873480][ T30] __mutex_lock+0x5b8/0x9c0 [ 454.881503][ T30] ? add_one_compat_dev+0x112/0x720 [ 454.916790][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 454.922002][ T30] ? rdma_dev_init_net+0x2a7/0x530 [ 454.996866][ T30] ? add_one_compat_dev+0x112/0x720 [ 455.002170][ T30] add_one_compat_dev+0x112/0x720 [ 455.043422][ T30] rdma_dev_init_net+0x2b2/0x530 [ 455.095135][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 455.116983][ T30] ? __kmalloc_noprof+0x207/0x400 [ 455.122109][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 455.166804][ T30] ops_init+0x1df/0x5f0 [ 455.171054][ T30] setup_net+0x21f/0x860 [ 455.206792][ T30] ? __pfx_setup_net+0x10/0x10 [ 455.214861][ T30] ? down_read_killable+0xcc/0x380 [ 455.249201][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 455.254928][ T30] ? __raw_spin_lock_init+0x3a/0x110 [ 455.306804][ T30] ? debug_mutex_init+0x37/0x70 [ 455.311754][ T30] copy_net_ns+0x2b4/0x6b0 [ 455.316240][ T30] create_new_namespaces+0x3ea/0xad0 [ 455.354661][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 455.386796][ T30] ksys_unshare+0x45d/0xa40 [ 455.391405][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 455.396513][ T30] __x64_sys_unshare+0x31/0x40 [ 455.449892][ T30] do_syscall_64+0xcd/0x250 [ 455.454505][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.481682][ T30] RIP: 0033:0x7f9d2417ff17 [ 455.486170][ T30] RSP: 002b:00007ffeab5ff3a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 455.526780][ T30] RAX: ffffffffffffffda RBX: 00007f9d24335f40 RCX: 00007f9d2417ff17 [ 455.548858][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 455.576802][ T30] RBP: 00007f9d24336a38 R08: 0000000000000000 R09: 0000000000000000 [ 455.602343][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 455.625481][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 455.647137][ T30] [ 455.656265][ T30] INFO: task syz-executor:7229 blocked for more than 144 seconds. [ 455.686546][ T30] Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 455.702322][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.713177][ T30] task:syz-executor state:D stack:26112 pid:7229 tgid:7229 ppid:1 flags:0x00004006 [ 455.825111][ T30] Call Trace: [ 455.830735][ T30] [ 455.833936][ T30] __schedule+0xe55/0x5730 [ 455.844258][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 455.851224][ T30] ? lockdep_hardirqs_on_prepare+0x3c1/0x420 [ 455.866789][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 455.872062][ T30] ? __pfx___schedule+0x10/0x10 [ 455.884111][ T30] ? schedule+0x298/0x350 [ 455.888844][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.895317][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 455.907925][ T30] ? lock_acquire+0x2f/0xb0 [ 455.912524][ T30] ? schedule+0x1fd/0x350 [ 455.925784][ T30] schedule+0xe7/0x350 [ 455.931511][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.943411][ T30] __mutex_lock+0x5b8/0x9c0 [ 455.949759][ T30] ? add_one_compat_dev+0x112/0x720 [ 455.955033][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 455.966637][ T30] ? rdma_dev_init_net+0x2a7/0x530 [ 455.973441][ T30] ? add_one_compat_dev+0x112/0x720 [ 455.983947][ T30] add_one_compat_dev+0x112/0x720 [ 455.990672][ T30] rdma_dev_init_net+0x2b2/0x530 [ 456.002177][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 456.009298][ T30] ? __kmalloc_noprof+0x207/0x400 [ 456.014400][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 456.026205][ T30] ops_init+0x1df/0x5f0 [ 456.037767][ T30] setup_net+0x21f/0x860 [ 456.042166][ T30] ? __pfx_setup_net+0x10/0x10 [ 456.054288][ T30] ? down_read_killable+0xcc/0x380 [ 456.059760][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 456.065361][ T30] ? __raw_spin_lock_init+0x3a/0x110 [ 456.080106][ T30] ? debug_mutex_init+0x37/0x70 [ 456.085217][ T30] copy_net_ns+0x2b4/0x6b0 [ 456.095817][ T30] create_new_namespaces+0x3ea/0xad0 [ 456.107034][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 456.112736][ T30] ksys_unshare+0x45d/0xa40 [ 456.125312][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 456.130978][ T30] __x64_sys_unshare+0x31/0x40 [ 456.135824][ T30] do_syscall_64+0xcd/0x250 [ 456.150295][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.156265][ T30] RIP: 0033:0x7fa6d4d7ff17 [ 456.164457][ T30] RSP: 002b:00007ffc3e260cd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 456.177961][ T30] RAX: ffffffffffffffda RBX: 00007fa6d4f35f40 RCX: 00007fa6d4d7ff17 [ 456.185984][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 456.204859][ T30] RBP: 00007fa6d4f36a38 R08: 0000000000000000 R09: 0000000000000000 [ 456.214959][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 456.229907][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 456.240576][ T30] [ 456.243740][ T30] [ 456.243740][ T30] Showing all locks held in the system: [ 456.260278][ T30] 4 locks held by kworker/u8:0/11: [ 456.265445][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 456.292379][ T30] #1: ffffc90000107d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 456.308312][ T30] #2: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 456.321944][ T30] #3: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x13e/0xc10 [ 456.334418][ T30] 3 locks held by kworker/u8:1/12: [ 456.344077][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 456.358615][ T30] #1: ffffc90000117d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 456.377547][ T30] #2: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 456.386713][ T30] 3 locks held by kworker/1:0/25: [ 456.400122][ T30] 1 lock held by khungtaskd/30: [ 456.406430][ T30] #0: ffffffff8e1b8380 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 456.432764][ T30] 3 locks held by kworker/1:1/46: [ 456.438348][ T30] 3 locks held by kworker/u8:7/1102: [ 456.443697][ T30] #0: ffff88801b1ba148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 456.462251][ T30] #1: ffffc90003e97d80 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 456.477496][ T30] #2: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xd0/0x640 [ 456.496169][ T30] 1 lock held by dhcpcd/5500: [ 456.503676][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x26e/0x1e20 [ 456.520111][ T30] 2 locks held by getty/5587: [ 456.524980][ T30] #0: ffff8880316f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 456.541727][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 456.552421][ T30] 2 locks held by syz.1.308/7185: [ 456.566070][ T30] 2 locks held by syz-executor/7196: [ 456.571815][ T30] #0: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 456.590578][ T30] #1: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x790 [ 456.612376][ T30] 2 locks held by syz-executor/7198: [ 456.621667][ T30] #0: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 456.634039][ T30] #1: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x790 [ 456.650226][ T30] 2 locks held by syz-executor/7200: [ 456.655870][ T30] #0: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 456.668764][ T30] #1: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230 [ 456.684309][ T30] 2 locks held by syz-executor/7207: [ 456.692473][ T30] #0: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 456.705995][ T30] #1: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x790 [ 456.721791][ T30] 2 locks held by syz-executor/7221: [ 456.734060][ T30] #0: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 456.746636][ T30] #1: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x790 [ 456.762947][ T30] 5 locks held by syz-executor/7225: [ 456.773629][ T30] #0: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 456.786005][ T30] #1: ffffffff8fb1d590 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 456.799863][ T30] #2: ffffffff8fb1d310 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 456.813892][ T30] #3: ffff88802490cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 456.828747][ T30] #4: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x118/0xb50 [ 456.845582][ T30] 4 locks held by syz-executor/7227: [ 456.855791][ T30] #0: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 456.869382][ T30] #1: ffffffff8fb1d590 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 456.883226][ T30] #2: ffffffff8fb1d310 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 456.896190][ T30] #3: ffff88802490cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 456.915181][ T30] 4 locks held by syz-executor/7229: [ 456.920880][ T30] #0: ffffffff8fecd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 456.937014][ T30] #1: ffffffff8fb1d590 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 456.958648][ T30] #2: ffffffff8fb1d310 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 456.975876][ T30] #3: ffff88802490cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 456.993644][ T30] 1 lock held by syz-executor/7240: [ 456.999242][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.015471][ T30] 1 lock held by syz-executor/7244: [ 457.022410][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.038952][ T30] 1 lock held by syz-executor/7247: [ 457.044203][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.059944][ T30] 1 lock held by syz-executor/7249: [ 457.065186][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.081752][ T30] 1 lock held by syz-executor/7252: [ 457.090916][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.103457][ T30] 1 lock held by syz-executor/7278: [ 457.112833][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.126791][ T30] 1 lock held by syz-executor/7283: [ 457.132031][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.152851][ T30] 1 lock held by syz-executor/7284: [ 457.163773][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.175320][ T30] 1 lock held by syz-executor/7288: [ 457.187011][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.196520][ T30] 1 lock held by syz-executor/7292: [ 457.210096][ T30] #0: ffffffff8fee29a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 457.226546][ T30] [ 457.235779][ T30] ============================================= [ 457.235779][ T30] [ 457.247286][ T30] NMI backtrace for cpu 0 [ 457.251649][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 457.262194][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 457.272283][ T30] Call Trace: [ 457.275609][ T30] [ 457.278582][ T30] dump_stack_lvl+0x116/0x1f0 [ 457.283329][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 457.288318][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.294358][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 457.300400][ T30] watchdog+0xf0c/0x1240 [ 457.304702][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.309419][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.314677][ T30] ? __kthread_parkme+0x148/0x220 [ 457.319762][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.324481][ T30] kthread+0x2c1/0x3a0 [ 457.328604][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.333885][ T30] ? __pfx_kthread+0x10/0x10 [ 457.338533][ T30] ret_from_fork+0x45/0x80 [ 457.342987][ T30] ? __pfx_kthread+0x10/0x10 [ 457.347621][ T30] ret_from_fork_asm+0x1a/0x30 [ 457.352455][ T30] [ 457.356571][ T30] Sending NMI from CPU 0 to CPUs 1: [ 457.362252][ C1] NMI backtrace for cpu 1 [ 457.362266][ C1] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 457.362295][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 457.362311][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 457.362344][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 457.362385][ C1] Code: cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 74 5b 76 7e <65> 8b 05 75 5b 76 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 [ 457.362414][ C1] RSP: 0018:ffffc90000a18c90 EFLAGS: 00000246 [ 457.362432][ C1] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffffffff88fce4a4 [ 457.362449][ C1] RDX: ffff888020eb3c00 RSI: ffffffff88fce4ae RDI: 0000000000000005 [ 457.362465][ C1] RBP: ffff8880b87405a8 R08: 0000000000000005 R09: 0000000000000000 [ 457.362481][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b87405d0 [ 457.362497][ C1] R13: ffff8880b8740748 R14: 0000000000000000 R15: 0000000000000001 [ 457.362513][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 457.362536][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.362553][ C1] CR2: 0000000020032000 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 457.362569][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.362583][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.362599][ C1] Call Trace: [ 457.362605][ C1] [ 457.362613][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 457.362646][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 457.362684][ C1] ? nmi_handle+0x1a9/0x5c0 [ 457.362709][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 457.362747][ C1] ? default_do_nmi+0x6a/0x160 [ 457.362775][ C1] ? exc_nmi+0x170/0x1e0 [ 457.362802][ C1] ? end_repeat_nmi+0xf/0x53 [ 457.362841][ C1] ? process_backlog+0x214/0x15f0 [ 457.362876][ C1] ? process_backlog+0x21e/0x15f0 [ 457.362910][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 457.362948][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 457.362986][ C1] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 457.363023][ C1] [ 457.363030][ C1] [ 457.363037][ C1] process_backlog+0x249/0x15f0 [ 457.363075][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 457.363114][ C1] net_rx_action+0xa92/0x1010 [ 457.363150][ C1] ? tmigr_handle_remote+0x153/0xdd0 [ 457.363179][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 457.363234][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 457.363261][ C1] ? run_timer_base+0x119/0x190 [ 457.363305][ C1] ? run_timer_base+0x11e/0x190 [ 457.363339][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 457.363378][ C1] handle_softirqs+0x213/0x8f0 [ 457.363416][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 457.363446][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 457.363476][ C1] ? wg_packet_decrypt_worker+0x35d/0x530 [ 457.363508][ C1] do_softirq+0xb2/0xf0 [ 457.363536][ C1] [ 457.363543][ C1] [ 457.363552][ C1] __local_bh_enable_ip+0x100/0x120 [ 457.363582][ C1] wg_packet_decrypt_worker+0x35d/0x530 [ 457.363623][ C1] process_one_work+0x9c5/0x1ba0 [ 457.363671][ C1] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 457.363710][ C1] ? __pfx_process_one_work+0x10/0x10 [ 457.363740][ C1] ? assign_work+0x1a0/0x250 [ 457.363782][ C1] worker_thread+0x6c8/0xf00 [ 457.363815][ C1] ? __pfx_worker_thread+0x10/0x10 [ 457.363840][ C1] kthread+0x2c1/0x3a0 [ 457.363871][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.363906][ C1] ? __pfx_kthread+0x10/0x10 [ 457.363939][ C1] ret_from_fork+0x45/0x80 [ 457.363962][ C1] ? __pfx_kthread+0x10/0x10 [ 457.363995][ C1] ret_from_fork_asm+0x1a/0x30 [ 457.364041][ C1] [ 457.750890][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 457.757786][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 457.768323][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 457.778422][ T30] Call Trace: [ 457.781754][ T30] [ 457.784722][ T30] dump_stack_lvl+0x3d/0x1f0 [ 457.789393][ T30] panic+0x71d/0x800 [ 457.793355][ T30] ? __pfx_panic+0x10/0x10 [ 457.797830][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 457.803253][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.809300][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 457.814728][ T30] ? watchdog+0xd76/0x1240 [ 457.819188][ T30] ? watchdog+0xd69/0x1240 [ 457.823648][ T30] watchdog+0xd87/0x1240 [ 457.827970][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.832691][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.837950][ T30] ? __kthread_parkme+0x148/0x220 [ 457.843028][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.847747][ T30] kthread+0x2c1/0x3a0 [ 457.851881][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.857126][ T30] ? __pfx_kthread+0x10/0x10 [ 457.861764][ T30] ret_from_fork+0x45/0x80 [ 457.866221][ T30] ? __pfx_kthread+0x10/0x10 [ 457.870864][ T30] ret_from_fork_asm+0x1a/0x30 [ 457.875694][ T30] [ 457.879067][ T30] Kernel Offset: disabled [ 457.883414][ T30] Rebooting in 86400 seconds..