last executing test programs: 1m42.949554168s ago: executing program 3 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400d6af1000010000000000000000000300000a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280060001400007000008000540fffffff80900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000540)=""/102400, 0x19000) 1m42.671106064s ago: executing program 3 (id=284): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00431b"], 0x28}}, 0x40000) r5 = socket$kcm(0x2, 0x3, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4], 0x80}}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x800) r7 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) (async) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r9, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x39, 0x9ee}}], 0x10}}], 0x1, 0x80) (async) listen(r8, 0x4) (async) close_range(r7, r8, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000140)='./file0\x00', r10, 0xee00) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101011500000000ffffffe30a0000030c0019800800010800000000b20001800c000280050001af6f1fd400"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24008854) 1m41.49966111s ago: executing program 3 (id=286): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x300000000000000, 0x0) 1m41.361780302s ago: executing program 3 (id=287): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @random="eda2d9671cf8", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0x6, [@rand_addr=0x64010101]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x7}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a40000000000800034000000040"], 0xdc}}, 0x0) 1m41.001358076s ago: executing program 3 (id=290): socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x3, 0x1, 0x4}, 0x38) r0 = timerfd_create(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="e8020010699ffe728482cbdf00", @ANYRESDEC=r2, @ANYBLOB="01002cbd7000fbdbdf254400000008000300", @ANYRES32=r4, @ANYRESOCT=r3], 0xf8}, 0x1, 0x0, 0x0, 0x400c001}, 0x4000) timerfd_settime(r0, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080)=0x0) ptrace$ARCH_GET_CPUID(0x1e, r7, 0x0, 0x1011) r8 = socket$inet6(0xa, 0x1, 0x100) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000002c0)={@local}, 0x14) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000004c0)={0x18, 0x0, {0x2, @local, 'syz_tun\x00'}}) sched_setscheduler(r7, 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x52, 0x1}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1m37.41801477s ago: executing program 3 (id=298): accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(r4, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0x0, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r9, 0x5501) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 1m28.548118794s ago: executing program 1 (id=321): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0xc000000}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x1f08, 0x4) sendmmsg$inet6(r0, &(0x7f0000006d40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='O', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000014c0)="4a3debedb2c957478b8dea7ae4d6e77b5fdcf7cac3235ad4cab0", 0x1a}], 0x1}}], 0x2, 0x48815) sendto$inet6(r0, &(0x7f0000000040)="911c07fd", 0x4, 0x801, 0x0, 0x0) 1m28.445453543s ago: executing program 1 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3e) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r1 = syz_io_uring_setup(0x189, &(0x7f0000000080)={0x0, 0x0, 0x11000, 0x10}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x14) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x5, r1, 0x1c, {0x9, 0x1}, 0x6}, 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000180)=ANY=[@ANYBLOB="67727071756f74615f626c6f636b5fddaeeb35b1059fbcd517e997bf4af44a0a668b56f22f78f1", @ANYRES16=r0, @ANYRES8=r0, @ANYBLOB="3c9bce701c8863ff1856e6b9e9b44617255b2c2a438c6030bd455110a7f7e92404c09e46ce35c7a1a5d91c5443cf879abc2fe32afbeda56d603cf02c95308284c03df3e16619d5f7785c7989f5cb2b215ebbd8960a5d98809f68910bfb9ec869526762f372a7255e703685cf5afef0f14835fd4142"]) 1m28.436311815s ago: executing program 4 (id=323): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x20, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303c30303030303030303030303030303034303030302c757365725f69643de29428324d88b434220d3dba58ff65b7479bb31aed03f7f66e1803ea7a7fa4cee621ff77ffffffffffffffff138e509087e3a87d6129f3ee0963a53735387e229eddcc8238d4", @ANYBLOB=',grou', @ANYRESDEC=0x0]) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) 1m27.463836812s ago: executing program 1 (id=325): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4000000000000008], 0x0, 0x20000080ffff, 0x36}}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x4, 0x1, 0x1eb}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x24040084) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) r8 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000f06030000000000000000000500000005"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1m25.470087514s ago: executing program 4 (id=327): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00959e9263"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0x2, 0x8f, {0x8f, 0x1, "89332fea1e40cf7499ca2bc9b1b655069a562dbb209c0aca49dff2332c5a517f46a0c69ddd98df9576753785f9dd06e184e1d18a3f505c0138ff14fadc6d084eb5c887544fb0340fbee57b587dd2dac8a6661abba99357061d6e4f99940ebe3ab71016778abea0a0a321fa65f63723f124dc9dc3b1b9ccb9c7332e19e2ef7b81c7f4ef29bf151471b6a7bfe269"}}, &(0x7f0000000140)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "71e35f1338ec4f3752c52dfe9729d1b44d63cb86b648253aba48d8fd91bba4090a16b9678af7d800c9e7677c5f1027295b05fe622c272448e89c73619a1ac8345d1e7351768cf60a4a966130c8b161d7b2a2fa5f8e2b504c5d077deef7d835c7067f521126e92805ae41cb4418684a75395f8d55ded47b1424339da352c3606a52d592bd652fd3575d59957af2afbaad9e873e515114f69c45b1a91e2f032d3fc866de341a6de5f7196948c40814c1484986a2ef8b209c309e4d6953392de7"}}, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x4, "73e5a727"}, @main=@item_4={0x3, 0x0, 0x8, "fdf94612"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9c, 0x3, 0x1, {0x22, 0x3bc}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x3, 0x45, "dc54bd6f56eff19babeb711d231cf081cfbcb976c845c5aeae9c045ac220ec618707bea27594da01cac2b7a423084b832b33ee23764682125dc1175ce7cc81bd69b11c5e23"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000003c0)={0x20, 0x1, 0x6e, "cb9cca73126b17d2ea18d2064fdd9a15bc00aaba061d57a5302ac7510eccdbadecd52a11605939206c9681298ced7e410bcd604acdaa7f7421b344a43c22f9491c9796cc8bd0b5b3b506ebbd7d15277f471699dda5aa47df865d6c34eaa8c5a220428fafd28dc930db36be399e3e"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xc}}) 1m23.505991671s ago: executing program 1 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000700000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) 1m23.417506011s ago: executing program 1 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb62ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 1m22.905805306s ago: executing program 1 (id=336): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x0) 1m22.242311705s ago: executing program 32 (id=298): accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(r4, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0x0, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r9, 0x5501) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 1m22.235116946s ago: executing program 4 (id=339): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x7, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000240)=0x200000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = io_uring_setup(0xc90, &(0x7f00000002c0)) r7 = io_uring_setup(0x63d3, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000001580)=[{0x4, 0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}], 0x1) 1m20.673965834s ago: executing program 4 (id=345): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) dup(r3) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) 1m20.154475628s ago: executing program 4 (id=347): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) syz_open_dev$video4linux(&(0x7f00000002c0), 0x5, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r7, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x22c00) 1m19.192207241s ago: executing program 4 (id=351): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x0) 1m7.872296614s ago: executing program 33 (id=336): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x0) 1m4.114198859s ago: executing program 34 (id=351): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x0) 22.225584266s ago: executing program 0 (id=482): socket$packet(0x11, 0x2, 0x300) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002bc0)={'gre0\x00', &(0x7f0000002b80)={'gre0\x00', 0x0, 0x7800, 0x80, 0x6, 0x5, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x64, 0x0, 0xc6, 0x2f, 0x0, @empty, @broadcast}}}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 20.97945145s ago: executing program 0 (id=485): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x8008af26, &(0x7f0000000680)={0x22f}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000bbbbbbabea1cf8bbbb08004500001c000000000401907800000000e00000011100907800000000ee849be35d39b54df0"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x4, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc044) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000580)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000500)={0x4d, 0x0, r8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 19.582652183s ago: executing program 0 (id=489): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="1c409f6876ab9c9420681ae40f68cd1e134c38ccabaf1e77fdb8cbb6e599de9e40a0cf9bd073505b4b7d8a30f65ad098ffb731e682b3580376fbbc476eed23d288eb5d743d61ff308bebd24cc8a6cf68d7ca516ca8a414028edb04c8895bd4b0ca2efd892513a579aa066f4c2965c8776325f5a4f604ed74604ce91c033b32e6c2a1420041967788f0acea76561aaa292b4dd8a81fb3c339b91275bfab1cd7fe0ca43b61d1039e1e178630f9529c6804f3c5c5f0091a6341c3b5f0d9af1e9152bb4842352290cf3f4146940e24e6f1a9be19ebcc74f161b3725d66f2f13f4c2ae3fbe6cfea2e203a7c22f35b84d1a2955f1f27bf76be37e7cc3296d748fd9fb205f8315a4db88e3ac9bd50234d0d9e69386b4448ce3ee37cf070da967f55d2cfbb4b86be17055f78344dc847320132c87a4f9a7da69c85d279d16501f0a28c0e6220b0bb74a29c79114281f52e32b28028422b634d52eddc100dc19b829325a1edbaaa9a82659bf0f6ce1790262e1d0b11932c577a1d7b235cfc32eafefa04f31d7cda3c49b8e2c84fa836c54c9d139341bbbf6c26b0740da025f1dd420bcf037a9d75cd7610d47dd85d17339d0baa3edab1ea87e395ce08d8193777a9fde60c3da7a98dfc514e0c8ddf0173a9372424f103dbab08f6d6110f02bb9673f286cf02e9441d33eec1e840a332ff127e54702faee3725d53d89569a67cd6d80afbf9bb4ca8aef7af9341e4f206173ac9afdbf96782b204441cc783954be744e258545c2b97cad52078c929a3e7ec0ab30178bc3c152df097669d0c6b1c42129de75097c18cb7f7bbee17a94970411839e2b5b694783bb0d353fd5c4ca294e6110dcfc0c8aaa20eeae70d452bf2d10350b138ed2586554aa1dc98a9c185fc2905cd5dabe12efccacb78c7a1e72d2845cf9304aa4f625cefa1bb58c40befa4b370709c7f9f2ffdce25e100f87272b9831274a6cdcc0a1d728a136258dd25a08e72bc746cd83b109a890e780e486561dd71744a32324c9f91e9c5ae5876fb05aedb1ee7c633031c41807fc6bef97812b01e1cb11dda9264d0f6287bfbb562dd1bea7d61156a10b476fc72f01c9a9fcf72410feebf813db2c95bf156f7d4cbb636cb1b6b243c9da442d3845e0e17a46fce368b176e48f70cbc36d4eb279095d82b57dee473a20cff5c10d1e2bfffc6a013b433476fbf8103762ea2ba4a4021b93eb8ece7ade8efc5f43e0d1dbaac70efa2847b453a051079e1f166d77e1fc17226d61f6d8374e49e5ba91a11e67209b8fd5ccd48ad465ed498509ef29907e81dcbd1def6245b0ad6ff8c1bcd9b45011dd765f098deab027d4fbb01f10eba0df54da9b4616077668c830d7a09316f6d4ccfab7dce07982fb62d16ad6b754032645be26592c60c6e955873b215568f3c48a3c26f60a285a02acdb68d1fecafd7bb1d7f21964f92a80874a47401d912e800e9c628571300f1f34a45044b09541248cc584d4c96680f390317677e36f84875ee5bf00d6effe7a59b19e59361c9ad176254058e00b2652afb7e1e158e598fa75780c70d9356156a5335a63b883cd69faa0eaeee93186d79b2097087ac50585b82ee93e64f309bf30a100691b30694b4d1fad9d871d2d0e69959bb907b650ccc25274edba999a1d435c146267c02b41b55e5ac650939fd558f8667483b09480157ae86958b9c97bbaa5389771a3ddae82fe434b160894d106736c9461c008b1145ffe1a287e7cdb12e60a524cab66b97519c0829af3595fa81a5dd4e52a3697734efe610e129695e3714cc76214534efb8135eeeffd2836e4faeb685915f695acd9126ef625ab01a928807cddefeb27772a53b94304e108c7d58be13946fb5f0ba41a27f7fe208a023c8c6c0f432fef6510c42b641721b29251ae0a38dd9db5e357e0623699317352124f919cbf137ab91d4e1dd77a30b8c66c525c2d6270c49e0bafd6d70d0ca37d4a360675c78068e279e59b823ecd5dec78e6f14a9577662ea5d12482068de8c1c6e45e220103e3823040bc27eb698fde507a3062643a2c8d0882c1b248a3d74833241b1885cc287b94496347d7a628bf9b87044248a2d7c6daa2a6fb671022f02ce0e4866de73b1e7646c65166b85285b48728b96d46f69f31ee4b66f0d0a2d4a1f9776563bc1354912e50b6bec0068ea53e167bb22630b55a9ab3c99014fd32a519fc5409f55b60382f28767c9e634270d91393c4b4b8222ef73432d60043ea22ac43454c7d311d21fd3698cee776014d5de1c50307aa1b8c06ce43ce19de8dfb23acd536494f9de571556b5119b8bda9625d32cb3f12071b92cf4dd699755d26b112f16e870d8a12d0693d67f0ace4f3c229660a4eef4ea17abc8b70a9171f7ad22d0de566fd8b7f0ec13fb8593d90a3b83d43cb0b895b8eb119e199420eb338b422b42fde24dd77f77c0349204ef7df4b9ee02e1b845754d2be564196e6c9cff49234bb83eff7747829b4187579c88bd5f8aae73ab99d8364016feb840bbe9a16fee8d4bf0c44f9f84eeef6d629ab4b267d37f9e3d18e3cfa770a703a7aabb74cbfba4950b92ef895a0cc6e712b609f398bcc6cbb19ab6e524796f347a1594cc315cefa8e29c1e2b182379c25b85e3807917d7be3f0800b92fb592f54caf74e04cff62842033b516af6cb6bf4fed979638cb2dbcbf628a054677b0662c2d13e26304d2df2b63c6ac4e5d43edf614ae917ea59eccd92a1a44ad8576de202d9715fd16c85e9a3f012cceec3bd333b68cd851afaabab5a557be1355a612bbb5fd04554ec5745b4a6a9ac88942242086b1584e18534e46c207d4ede891ffc9d893dd5b15670970dfe3ce054ed13af736fb0b14f27bc11b295d898fa3031f13730acea07f9aecabcf9de4f8becc97b626c28ca896313013c04d7cbaa8792de1e6cdf663f0304226f65d7a0325eb0a8ea0622cb9ef85d212783d19f9117dc8161485183cff9b397c98ff234b3be5f45dd55e0658c7305e12d5bb03e1883083f0a5a57bf6cf5399f3881ae6c49ba1935e370256480822c59075dc6053496e0693793e375b786b8273c3e47c8dad41979a533ba51b9f4f1d614d5339f07cbd472b983e72c5d36d72ddab4aeead3973ee3e340375324d47430053ff6e110bced8bc1368c6a5a4143eb393fc6c15c967419e954b23d78102b794cc04968fa5f3d97af3f2c3876501c427e8f00e68c3689bcd1914b574bbb955fe5af78f97bd5862acefe31ddcf349ea99d219499c8b2897f91daf8ea2dd2f538264bbae831153ec82e9b204b8eb94147eea40c43cee3b7d1c5fdb87e466d1e8879b44885f683e59772aa0ac4f04a8c4d189bfbfb53a98d4649fd2e4a2ea7247d255ce3f3949f325b04677cdf5e612202361753ff2d1f5931ea4570c4f766e90b1d757c2566c9e483d1aabcd51ed9e2d587fff376d193080bc9d6dd7f421431c1c29a809f6fce2bcad2f206c020b4832ba80786c5d693f19cd0f18b78a9d91ac7ade6579a3402fc09db3154f7494d26877b56aafdac8cb1dc553a9a191d361d3a13e9943e4c62f936fb278ae27a9602d1a5a7953f3d293e9ed298471692531daee422d9d94dea188c9652e12cc3d1a54940087c67cd2908c1938c734cd86adfe8ff1912d9f429ee44cf72204dc68518b9decfe8338c53673733441001d0c3adad786bf2dadceed0555b03d369c4c7041c86b6a4ad630a3368f7236b59ecac5c3ed2e124f62b95aab486f6e72643dd71e166f39c6fe06e0a94b72d31f64271626e170de2fe86bfed77aeb9bbbfd7fb894870f515be842772ce9a04664bdd7bfb0a59599f848eae2479542b5aad68f5bc0b51c4df344dbf13f920b367834326a5b0875845af48eed2fbe728b0f87dd36853495c4291444d38df7a0095d57975a62dd5316bdf848ce5e97048a0419fd55d49686bb26f1255dcae7aa58934e77c7c17b6d9469cfb119bf812c9b4a44d6970f863930dbd708cce0bdccdb605f14811aa7946e98d14aaa4c9f82fe6dd9e1c561928c5ea6f706843c7a971bf985df1fe657a1838d292b9eb06765f7c9651fd062c3c89428f0156abb1e6a65b1f256a26f9cc0fa01072f934f25739013a8e8b55f960777aeda8b5053c9f7fd104f94915a82d11ebcd851f36392fd778c0bf83b951022351a1e23e91b3655728022ce684030cb97b0c3279bee57894c9669659c903965554e32e0bf46e66726589449d62d15835b873d3801a18609d92b5e46538dbc7db5762bea210bd4167fda85f56de85c8c571b96b38c11a8a36e5b4af5c4b2e2dc8a83d729c98bfb05db7e265d1972fe3f8fb122d3e10bf907175a9e96a98141f3d9f2d30ecae7ce9ae426e7d58212edebb2d31b06c86a93d21b50f5327cf8cf114349609c6870a0492390403ab466a02bcf426c279af3eff24642a3e50d3a41d1f5775fbd148cd9ebd660ee97f9bfa4f0662907929d33214c7d32ef0cab366f238677d498bbac87eda85e9956e64550273517f179709d4becfbd979a11f2e47805556810ec56798d4fe949845d2131bd04fe2e90c283ecb738c0fcc921031ab9a166de1665d2b618e3eeb612e298abf4bb4b8088c8c07b554da8a966c67ed9d4e4a5a8d1ee14d135a293d53756c35fe9aad9de22ac19cf76fd27c593e89f4f7aee7405d0ddf75b2ef082b320aa66a487bd5d36db9705ecdb1afb10e811dcf8e4c32d48d1313741630804b8c08f1b1f6c54dce80c03e895959a96b031e5bb6a7b215c718ef94c00a9c3073e75094594ce5cf3b912efbff742a4e3c8d960f4bec5b51c068caf1819e478594b96ba688a8d63bc428797c96b875351b3786a67ff8d5cb3d31d4725afffcaddd46702752cbdebb58c27ee45b2e865a813f5eb779d1aece2d1d75b6ea3566e680b9988876d0ca0d7f8220bf2ccd909d64b368a796dbb0f93ff753c847a931257f666e02acf1a69c1e9c75b6839ff2a1e6d4168ebf9237fa8f4458e056feb2652a1e27c6e9bebc0b23ac8182744b8ae634358e0b7d5733b5cbc1cb45f7f26aeff44bc27ebac08e5faa67f9fc37ffff857191cf9bdfcf9dca07b32d0057c6f30944fbe5af3353ead3700d8eb4997def5cdf91e096ae2eab3c79b8a2cc12a0d9332f607006b842ffcdab7aa5013c6378f77b69ab037636d668a7645ab9f6044fa9749aa7080e8a7c0d74944ad5eb89b5a1242b63ece87c81c80ed3f3604b319c9b1df1b999946baba9e743fa3e052d1a4ca30fc269f6640e271cf52aee85a452169bbcf4c558a4a1f13a54b868a5dc7ba98a65c6d3c948c5416d3c96ac9918a4f18cfcad274b8641d900d19586e9932763148c11a571cf781e71b658223e7047503a3dbb5bdfe7c74eeb08b4f52c42fa8cdfcb3e560e6914138c3272e81a48491f7f7a08a2264ea6169fd8e90a116b7f7abc875cf32a55d6fc4011c5255dc53eeae7a0ba595a2b8356d2944034b6aba07ea0b062d24c829d44618feedcc8f4a72daf55fe169449db491ea3793ec48272568d6dea65fe662a3f2bb95a1bb32b6ba42a850f154bf20ba9d660d5b987a7b401b7f6b876965abd519a88a7beeb1b09002e2d1d15e3adc95048ce117cbaa4da089f3b4c7040468072c1d6d7ba49a15e8e33f3a31cb5dc344ab94bf02a62aff28ea431cc40b2b3f6625904463906ed621063f50c4f7b9f838a6ae7b82d640f4dbf2812a32d1f20517e0bd443ef85e54104a985b36470508bd1e0f09bb351c4cbc99099f5342d8db5f46c60be9e2a93297a467854b526d8779395acf19eb5abe5aed3e7219f7dd747e60df2a0", @ANYRESDEC=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC, @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r3) close(r4) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) mq_open(&(0x7f0000000100)='*\x00', 0x800, 0x10, &(0x7f0000000180)={0x10000, 0x2, 0x3, 0x10}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') 19.501813736s ago: executing program 2 (id=490): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r5 = fanotify_init(0x200, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x800, 0x8) fanotify_mark(r5, 0x455, 0x8000003, r6, 0x0) fanotify_mark(r5, 0x41, 0x8000038, r6, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = dup(r4) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fffffff, 0x0, 0x0, 0x0, 0xd, 0x22, 0x3, 0xe4}) 18.278613718s ago: executing program 0 (id=491): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8895}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0xc000) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x44, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "76026915a0f0baed8abbd7e60ae0ba20ffbd952aa03c555e17117064bf4e9d85"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0abb0a22ae6140e7ceed6800d2dd7dcd"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0d0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, r0, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r14 = dup(r13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r14, 0x2000) r15 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r15, 0x2007ffb) sendfile(r15, r15, 0x0, 0x1000000201005) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x82}, [@map_idx_val={0x18, 0xea061dfd2a29317d, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x6, 0x4, 0x1, 0x40, 0x10}, @tail_call, @ringbuf_query]}, &(0x7f0000000580)='GPL\x00', 0x4e, 0x1000, &(0x7f0000000ec0)=""/4096, 0x41000, 0x44, '\x00', r2, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0x5, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000b00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r12, r14, r15], &(0x7f0000000b40)=[{0x5, 0x2, 0xe, 0xb}, {0x3, 0x4, 0x2, 0x1}], 0x10, 0x2}, 0x94) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="6c90d17cf73b5ad4c41242281b3c2b533410eb2d5ee923ecc6e974ee9e7623224123baf279b7809e1056db7c0d200069292fd8668b07896785e5b06c89b0fe33bbdd3b149bddcf4c46f7f7daaca70ef4f800ab5ee7ce82a822cfa191a6111227164b9e4413f5b80408179d687774f442e7319bce4294779613f6e8a0085baea0e8e271b97a13e2", 0x87}, {&(0x7f0000000200)="288f7f0ba9789a610e77e98e214758bf1aa0aedfcf5624586208e850b457ab76ef8a9dd5d0dac58c85751bfb71b671d82d068309e677b92d890ff42c205d0f1fd9f281e2b96f8ac9e7daa94bfa740a983328b9a71565c25a8d03edf743913bca98a0d314533d3009613961e491676603f439858deb0a2e157760f41f4781197bc3089ac1fa70fd018b30eae776f9bc2ff0c771df86d1a3a2652d52758820f3eb5be27a", 0xa3}], 0x2) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) 18.203453026s ago: executing program 2 (id=492): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x30004001) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="c805d5e27736994d230dc520b51cdb2e4bddbe58fd7152bf29e526c3bcc1f3f92f3b75da34d2abc2003a7eb57c9ef0dea62e73d51d2569c47a72d698de90ae755a52a5b5cbddf83f38fc573151cc8417fbc043d8d90799ae8035be824ff378216efb7f8b", 0x64}, {&(0x7f00000001c0)="f5815a2e90c2c9b82702fc732870d31df805fee33b719cd6e7a5fb09a3ab6c6352e5d781560ea1388a87d876c2973f1f88bcb15177a2250a373e8b64cdbcd042cd4046d6e0e6be964c869bf9377baec16503b61e608b1d5f0b719f76451534e3b11d5c6170c6140688bb6cd46fc421cad8410444d14da5a38696476b105a1c0a26254a0a5db6aeea9ec2357e70198ae4c6f9f68d32a3d21bbf6cb6c384d213376115e2b1fe151501ef5f5d674b0b025d10461646da31b101b97c9cf00a7b3ce0b7f81bb36c1cba3a3c74", 0xca}, {&(0x7f00000002c0)="4efdb661d32e94f0d47917aea24c24b59463c11beecb92aba9e0a2a6f68585d288bb27919cd8f284c217c7bbd14dbc263deffa12043647e27bef5173689cfe", 0x3f}, {&(0x7f0000000040)="d3bc4281ef1c602ef15a6aaece0e2c19818b43e3891382d7755813bf080e6ed66df01ca1d3904a27aa04e1ab", 0x2c}, {&(0x7f0000000340)="56ac5a887335db3197bf34f65d876a7b1ff0c0b796b09ca5910e694c457aba8bcc", 0x21}, {&(0x7f0000000400)="fcf347f3ef70a2ca3300b0b875c9b1441e26cc18936a2199e93a395eb4afe25127b8625073cc6cd6d090c44b2c5485124b120a111fe0767e3a37f7d15da1412b9717f48d2ef873ca50302bfb14c19fad20c6cd471a7ad963d30ff5c0d711f0ec1b06f82fe4b7df76ac71fbca806e933970fe62b9ceb08844015a72ee127c63cd1225682e08ee378fdbb37c9505446aabcc67fd0821094b9e61f9a8a19e45129890a5b99790ae23f72afa04a36fe981afde77336dc78ae5f7abdbf554e30a7aeab5570c41c9f36bcc4046ac9eda8edcdde99854f07a17ae556af159daf3ed68b06079ac98e4d52a3aa02df1b599781a5508ffbc", 0xf3}, {&(0x7f0000000500)="408f24ee4a343346f3bc2bbf2070c28913672f81ec5661b30e2bfc9f9fb4564155794b8a0f52f0ff508abbe0bd0b381c26d3eb60dc5f68ecee6eb6f5753292400cb3acb07683e178db210c828db8d384e42d9c9bc314316812e1a2dc2c2971e016d02bc1f640029c7c0c82908bee12f3bcdda7a55d9a645ea838572b6115390adc29810a27aab51f31c9b8e1", 0x8c}, {&(0x7f0000000380)}, {&(0x7f00000008c0)="d234fd450ad2e8199196f87c6669041941dac89296f5a4c8131873ff66325061e53c2a5aa258c2ae899b21f67847a73eab9717bfdeab5de26825c53023285e148b9cb06f6c92acc60e6beb7003e5e2375eecef8d4081856163bb2010180cb38748eeb471a2aebfb56c87b69b92f6d9618182a9e1060de0b754a31b85d9bab96608dbe07607f08875ab471f4f611cf4c2353dae05d8edf7f1b41021762aae5415825af9e5bfe01cf15d4c2be5b63cfdd274ad81330bc37561a491260cf2c6376a3a172b9574a13072d2a9271fc73cd12aa857268f7d615b0fd4e9d01b9913aa4ad1dc796b09b3e19b324ea91e59348da517e103114a46afcff0ba7bd4e1a6e1acb9465553fe3b327cdbc3f337ce1412e5b6c9065be74bfd803085242675da3454496dd5dd5436a3c58fe0608e7a3f962371dafc016c9344ddb581ca06ae57bd53afa762972d72e5cee1cadf93e0ac6d606ffe8ac2ebcf5fbfec779af45f3a75bdeadb81f5d1ab2d52c861c3421963ab1580f08f53b6b447505b261e464ab5ee045c862618ca87bcbe2e8710e20fbfb16442fd2fc48181db3eccb889e942cde93408e2db8994b5cbe08a09009c8dd804be07db35ecd328917c6b09e40fbae0779dff66621bab26197d616085239833565b58844b5fdc675e5c31f319eaa9dba300ab94ae88438c8c58ae739e265def8cf6d4e02f696a5a3d9d7cef5ae13a7f077805f4416cfe38b566c565ed0e15ee598e5c2fc936ccda5d3eff697cc6bcb242af807ade37c3fa2c9f5d5cae95068caa5f1540add77ad04225551acf7281361c3dc8ce75616015cb9c08169603118a813f5dd65117b75e3b9eaff9b87d288b2b40946d439494d4e9f055e4f4005e6354b697b36d18ea7673406a3c60297469c49051aa4a32ab7963d0eb7d1d978ef1f49a9c734505c4276a24e4f3b7340b6ed33d00f26d9c562e48eaaab8298cce24044721f86f1b0a19162f9bab1a18a841604cadbb4dd79b93ddfe0321a577069342f91fa94769288cdd6d217ce55fdd529a5e3639fb534f65dc09a450427b069d9dd83d599986763a7e4169d0eac8d5b1040e51cec6ef4a874c9ae9a7d4101d38517c2687274d2f739a59f7eb72dfd44c5893a688c53dd7fd4c2fe7278843028dddea07a70a5c981f0901892d7848a8b1d67c3c8eabb78b5b6c7473fe3928a70edc341fcce0bfa710e5bc5684eb78a9f2363a85b22a5053e9db1661a23086913a70e20a9ac82be091541a76790a69da92b89e236d91c14e8d3b0321cacada690a8d356a4eacb7c5f0561952b583cbef4c45a341fe0b7377a9f64befc38798e079ce423b8bb4586cb6ed346144ac89c743e1ef23a3ed41c7386bdf905fed347b5457e03c3d0f048ce3e339252268ef2cf4989e7f46c111f1e44b0cf4325ff51e8fb6dc5c66fe7cd52aa4a9c22d398448efd2a6bb19e32d3c411b084b696d78a1d9700cea86bb9917dc04b7a3cdb78ff195d651e289a2d37348f0fbba7d0f0b132ba8b118f2e7a2a5355a7d220111321fa58d897eb5304de82578b8742753d53735a8ab5c6bf81612c8f9e864cde074a8ae87e1286038def85d76aa22439201660381936a4ee9f72bb027da80dd68ec39d4eaf15ce8d18b250c31b177240f11f685f2ceded1450b9291b2911df03d4b1086485604dfaf0ccc918d5f2fe8b99556708ba37a9316c2d1b347a545a740af230cb962af7f20492d55a7431856440bed1bfa79a291bcd7b73a79d61bf089629e40e4a98b8770ba7defb3cfb643baf7e1218e3412c44b85395c082fffac666b63f2ccb7cec90354aa1d154e61ecba08a94c37f39e2b35ed465271b7b3658215ba01251ec8375d562df5da07d94844bd23338ef6fa2af3ca5f51b61278a0dced5dad89dfeb14453607823ffece657c18cfbd7ecbe2183ca6886666e1885fef29873c43f979225b439e5f62e28f38defdadf92bad6950ad685292b76d959423674ebf97271b308cc0f577df0f0109206b7a16bff19866456aab2e0dbadfef6cb7c2cc012e5d8a88d067fe0525905719e459ecba6822e59f571db14ee4e31b6063888dab1056a5e46aabadc9a848752ed2e993eec3fc77aa00da816f1dbd23c01f9da5b91de633530a65f33e9aa1e6caf26d2b764ff7383e35abd30805853a0ea94326c4cf331d37c32f2fa8f7f2874546e43235074383226f0b985177930e75814b8b3b5b968c6dfc26b2320116a19afe6a11e2625cd73ce939112e002a423871b1bbd20d3cbc3be4afaa5dab44d796fb7c1389e646e9911a61ac2b022b07eac508a1633ae5c64578e8a46fb24bf5d79002f7482e7f35bc731fa21606b046c8cf93834b0e370b2321b1438e71eaa59f3692f671af1903d231f64ff50210133b4010079f3da7c9b42e8f23e682e133c5a4ed6a785e9a56a09b9860e669f370ccc193e0cee3c95bc497b5935b7027751cc7660920155e3f9d0f1ad3874a86b16267a6d4854bacce03cf0d0c33e642cc34b6a48f7498ee2c3fe69c17845b8bde31db78b6827b2fa7450bc7383338ee3fcf6519ceca3f634adf097677d5ed9f333668539e94e58763cc4fc4b2db6acdd819639d4604deec526324379f884ef19f03383f4eba6deacc92b9d9ede0e443e43919933ff0e4d287417540b8da5d57aa42f9ed48cb58af493e3c3776fb8defe60f93123f9502651ab48ccb595b2218ce0b919128161066dd8be968faaaf04ff504eb03217946382ad6827367550611c792fde31cd55cc45f3adab3354dc3688d2b0afd8fd38256e4703c95f6046fe1d15c4ce03063f280f5993ffafb4276a2d16e79bbbe8e383377c3162a6c01f1054bdd6a86fd313c46ebff9387fae28953a71cdc7e65c61eb1f239affe1ac613d6af84f782a5bed12277fca7e4a13d15b3a4c38bc8331ea561ceff62bc151c16544fa257f2c4de20e548b48bb640201e63cd0520fc4162915d3164a7d134d0988d8df7b7085763eb12405dc918753a2a34bc927164b59eb2a628023d8de1f3661f528d7c40580f23020a4a70a5e9afcce49cf1272b22500edcd2b849d489ed8e9b65685b1f4e9b2c8ed217da3ffe5b71c4b2cc75a2738a72e7a2c7c5fb96fad4338767b6a6d52fb502740e862dd11299dda8c20e106d021b4555799c86df3879ca535333ac60c9b9489b5c58e004a85065b8615f44285fe3273d68b8e11101f3bd6aa001fd06cdc54356987459b8ddec96a5826f61f7ad4b40181cf6e27cfdf39c8ee72de41da36ee76520c8d2e59da8469b537161fb035828c3129407cb0a30857f65576b9717e7002566b4f61786448c7116086013da3d5f8357ce5e3e8aa6cfc534abf4818c0f60600171b3051b1265c2439c477df051175226f9e09cd1c50865980b27e731cd59eb33ca76c01ae1a5eeb7a74a0a97736ee213c1e77ad64fff1b0544c6c007d772a8217dfcaff3bb66b5c805a1242c887ff2f74f79c84c4c11c8eb0cc45de1743f795ca0b2db7b3eb96ca1faf697ba013d43e94f3e072f6a4320a2b057dcc6b1658491b112816c275fdae6657342622fd3fc2828b23c27c01e704af3885a39c6c0b227d1b38b0150e8c155a323764c05ef1ad90cdbaebeefb329a2668b375471aa7af2d02c303f6581c799e4bcb8a0f95257a2b5bfd7547f79a3e734a2c5ed844ec1020c8f4a42ac02f4f92015facf4a5ec43c9120f7088c9069dc9d06925020285f16dfc940c7dd4deca2b311bb9f3e029910008c7a18f1c2e9b9c641054f12c913f90b9b1eb2856accf0603e458c929c584ef0e093d66e304745aa6b292b7dbb226dca010799391c053b018629526409d650f3b1cc4881485e6dd15d050f3fc8ddbb0fc5b4f28009a43950c1620f879d42b7e982a6429a9047e9e15206bbbc0b88b48e39eed414073448ced3a7eaa2831ecd653b0010088cc73606b30e6ef101ebd767260daeeb73ebe6ed6712cd216888782268ad6034d84f78fc79522c4f79fea007ddee489c977637b3d38d539ac7241678af64a90ab8d4fa45458571e895afb083ba6728b937db032b5c01a814c2b77ae31d913d0017a3f5f627e3bf12a1f7389649fee49f3112d93d95b3dd90394455f85bc633636b341986d0b42987a42262e2e52a235f8c155b1bc1455e77d5dba801d7a54f3705d0235cf7562d8db7030d440766d863df4650a6bd46668a0013f1cb088bae68fe51b02f831339b2c50b4804f9ccdfae448cfab44e4d572791efd79cac9779fbe6a1af6037f22f6973d10c2ea99d87e78948ee34ecea79299e1f499c090f3dd42f0c790f8edb7f5c4ba59bc9152fbc77be55cdd82ae096ede3f93b5130725abfb45ef7aa4a49870d9bc5282bfee4eb19a17a496e9333546a93634ede0f0d588bbc39278f8f9a3fb81e58d629f91c8c09e59f396e87a8b445e5bed763bfe128462a82cf8b8696c869c7ea882d6f1fe225c26c47196d74e8af2d7b03144508ed98c8d3786574e925870a2b1582299b2cb52a0418d63e70ae7bdf46d821ba3aa99d037449fde0aecaac38d8e7384b1952512bfef13956c6a08b51f4942d3c10f268cdbbe456380d678eea16f2ba0ccf69fb55a004c2eb23513b4bd50bd47e11bea197fd533cba9e60203b8afa72ba5e1ce4c7d702eea6c384ccc1c1c1edc1800bb82fcef25a5d1767354b0bea4ba4a2495ad96a0eff38e03f89339b994d955eb105d52b262bde3a1f5fca9f08000522f36464edaeb80d5ad1254f52aeabd1407f7c608a5b9b744ef060f347f287cce3215fc00507fa37793cc3d6ebbe112a0a2419d11ca5ed7cf599b631bc26fe706dcd9b31106f379e53b730f13f0df1dacf54ba753a69c06b99c361aecd82e1038da4850e00874cf3c783ecac20a3c5e7d3a6e489254a5e5cb059442b8fc99289e2f4e17906a0a6ff89c38d64b2bb05c9891969f521f5181c16d942828a8ade2b20b0247ba6f9790a169da0d3400f4e804033d4306f27d57714aaf65eadb8f0fea2714bb7f3181582181535fbe48bd118099621b4ea33fa44d3503ccfcf06c95399e3ebff7f75afa0c4a267483dd7f2d6520b47ab8a9a9112729205947b9f921a740cf591d0e075793561b04ea23bb5977f1dda06134ee5ab3cc344f65c815848592808c44fbe4885ed788e7f3de4fb9709b8506c3a1496d5b6d6876972b5d441e681e26e9ef5d0cd13e37daf6c0d5670cb2d81fa28bbba80256152f51a6b0bd5c6e9f534bfa8fcf4c00456c5fcac91ee5b1961be368f16e63280a245824a9de173dc8c84c393d20611f53f0202f38974b2281e634891263dc7f38a77ede02b25abafdbd63c3a628d04c606bd869ecfe719b878f8f40b6d622f9da8cbe9c238eaadf55ed9494566462690893c36cf732ba83f74bf01f0f9c44cc54e0de31cd7eb6a5ac21fa5238ac0e55fa23064fc42da4602b0a7e3d6aebc08528c7e3bf7e3c23f4e61e8b04c85b464addedb9f501ea4d816a4f2e50c9a13d9569d3b4814f514b463e4b10802f5a930098506b84942d8541157d7b7a91c5fed22c39a6a88889ee06491ba7a394d76153f0a2302bf4b32f2eb560e94cad30aec73ae1cb86d1379642f916fa9e1c814524bb1a5a4c63c4c54434a80905a1c4be420f79eb78478750fbbda66c630c69023f6578e049474a7058cada92ab010c89fc826fc290063f6414d5a2fd3802f7af5f8e5ca84debafa796624153ffda6fc506674", 0xfc0}, {&(0x7f00000005c0)="28638b6a7d57a05ce0c45aa926cc8d897824f5147ed01086c49a5f5a0b8b94904fc01524cd970bfa8eb3280f5281c71a2cffaad517cfe50247c9fa6cd8540d829ddc", 0x42}], 0xa, &(0x7f00000018c0)=[{0x88, 0x115, 0x7, "5c5edbaa28101b550c4cbf091ad386c294dac03fe77d26ee0943086c9dc150586e0592963e35a5bd8e8c05d797420d26fc0f95745d08993fd8e00ac373a03482b31b822d6027147b5c057d67aa5fc943d8d65a28e7fb4c9efa7d24ab1c77930a7f712e24c34882ea8d0155db48eeff3590b4"}, {0x40, 0x88, 0x7f, "7181d155fe76ed5dfd08952731b68861cc130d8f1de81d164118f6adb30cdf6dbe0c8f3d0a7e3dec010c85"}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x5) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000380)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r6, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x28, r1, 0xa52957411124feb5, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000000) 17.433884165s ago: executing program 0 (id=493): prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x1a0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) shutdown(r2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000300)={0x8, 0x8001, 0x5, 0x8, 0x1}) 17.334453694s ago: executing program 0 (id=494): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0) (async) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)=@in={0x2, 0x4e20, @private=0xa010102}, 0x80, 0x0, 0x0, &(0x7f0000000680)}, 0x40840) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="400d21000000de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) read$msr(r7, &(0x7f0000000680)=""/171, 0xb5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000719000018150000354d620e93b84c7414cfe5675938adbe4ffff62f3d97b75d7779eebbe0cda025380b56606f21101f21d06bf5626eddc6e44513876389c4c07f908873b06c9cc0f7a9830e68a683e683606b191b598f2ace11243fdc6208d93525413afb1d345c1b180b600a9af13ff112ce250a38", @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2e, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0xd, 0x0, &(0x7f00000003c0)="e002ccfa9e582f030000000000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8cae8405d3dacb8f50b51ffd767a04c2748d6ca1afddf620175d71d59545a62ea64d8f1416ad011fa8f396f1e56a15d72d7a2afb6ce8ce64e4147f095c570cce7039b621007374aa08b27b3bf0f5a86fabe08496ee5f11c34e2207d3472978464a905d02909032be24f799828f8ae4ba92f8d56223fefae7df09ec69f859fb80606e00c810154ba729c31a3c2b811cf4fefb69f1c1210da70130d3102cbccb", @ANYRESOCT=r11, @ANYRES8=r0, @ANYRES16=r2, @ANYRES16=r9], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r7, 0xc0bc5310, &(0x7f0000000880)) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x2000)=nil) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000040), 0x4) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r4, 0x0, 0x51) socket$inet_tcp(0x2, 0x1, 0x0) 17.27671598s ago: executing program 2 (id=495): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setrlimit(0x0, &(0x7f00000000c0)={0x7, 0xf}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf01000000000000000800000014"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_io_uring_setup(0x3f08, &(0x7f0000000140)={0x0, 0xa51e, 0x10, 0x3, 0x115}, &(0x7f00000001c0), &(0x7f0000000300)) open$dir(0x0, 0x1e9240, 0x180) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) 16.909918624s ago: executing program 2 (id=496): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x8008af26, &(0x7f0000000680)={0x22f}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000bbbbbbabea1cf8bbbb08004500001c000000000401907800000000e00000011100907800000000ee849be35d39b54df0"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x4, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc044) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000580)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000500)={0x4d, 0x0, r8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 15.572226845s ago: executing program 2 (id=497): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 15.538607223s ago: executing program 2 (id=498): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x3d, 0x8}}], 0x18}}], 0x1, 0x20000844) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dbdf25060000000e0001"], 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x40008040) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002f3ca708ec188831bc990102030109022400010000000009042f00010e01000709240202f1ff"], 0x0) 1.498968707s ago: executing program 35 (id=494): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0) (async) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)=@in={0x2, 0x4e20, @private=0xa010102}, 0x80, 0x0, 0x0, &(0x7f0000000680)}, 0x40840) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="400d21000000de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) read$msr(r7, &(0x7f0000000680)=""/171, 0xb5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000719000018150000354d620e93b84c7414cfe5675938adbe4ffff62f3d97b75d7779eebbe0cda025380b56606f21101f21d06bf5626eddc6e44513876389c4c07f908873b06c9cc0f7a9830e68a683e683606b191b598f2ace11243fdc6208d93525413afb1d345c1b180b600a9af13ff112ce250a38", @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2e, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0xd, 0x0, &(0x7f00000003c0)="e002ccfa9e582f030000000000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8cae8405d3dacb8f50b51ffd767a04c2748d6ca1afddf620175d71d59545a62ea64d8f1416ad011fa8f396f1e56a15d72d7a2afb6ce8ce64e4147f095c570cce7039b621007374aa08b27b3bf0f5a86fabe08496ee5f11c34e2207d3472978464a905d02909032be24f799828f8ae4ba92f8d56223fefae7df09ec69f859fb80606e00c810154ba729c31a3c2b811cf4fefb69f1c1210da70130d3102cbccb", @ANYRESOCT=r11, @ANYRES8=r0, @ANYRES16=r2, @ANYRES16=r9], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r7, 0xc0bc5310, &(0x7f0000000880)) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x2000)=nil) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000040), 0x4) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r4, 0x0, 0x51) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 36 (id=498): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x3d, 0x8}}], 0x18}}], 0x1, 0x20000844) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dbdf25060000000e0001"], 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x40008040) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002f3ca708ec188831bc990102030109022400010000000009042f00010e01000709240202f1ff"], 0x0) kernel console output (not intermixed with test programs): [ 76.160753][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 76.460953][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 76.460987][ T30] audit: type=1400 audit(1751424743.399:290): avc: denied { read } for pid=6054 comm="syz.2.34" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.752158][ T5862] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.810924][ T880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.839995][ T30] audit: type=1400 audit(1751424743.899:291): avc: denied { create } for pid=6061 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.923322][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.951042][ T880] usb 5-1: device descriptor read/64, error -71 [ 76.962097][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.982799][ T5862] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.004023][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.012592][ T30] audit: type=1400 audit(1751424744.069:292): avc: denied { ioctl } for pid=6063 comm="syz.0.37" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.044969][ T6064] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 77.051922][ T5862] usb 4-1: config 0 descriptor?? [ 77.185220][ T30] audit: type=1400 audit(1751424744.179:293): avc: denied { create } for pid=6063 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.320923][ T880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.529294][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 77.539396][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 77.590915][ T880] usb 5-1: device descriptor read/64, error -71 [ 77.601014][ T5862] usb 4-1: USB disconnect, device number 4 [ 77.724091][ T880] usb usb5-port1: attempt power cycle [ 77.915767][ T6075] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 78.470913][ T880] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.558112][ T880] usb 5-1: device descriptor read/8, error -71 [ 78.636115][ T6078] netlink: 256 bytes leftover after parsing attributes in process `syz.3.39'. [ 78.656701][ T6082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 78.663225][ T6082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.671623][ T6078] netlink: 72 bytes leftover after parsing attributes in process `syz.3.39'. [ 78.689883][ T6082] vhci_hcd vhci_hcd.0: Device attached [ 78.805761][ T30] audit: type=1400 audit(1751424745.849:294): avc: denied { create } for pid=6085 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.813390][ T6087] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 78.826149][ T30] audit: type=1400 audit(1751424745.859:295): avc: denied { setopt } for pid=6085 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.833187][ T880] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.859280][ T6083] vhci_hcd: connection closed [ 78.898058][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.920273][ T6087] team0: Port device bond0 added [ 78.961828][ T5859] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 79.086960][ T36] vhci_hcd: stop threads [ 79.091373][ T36] vhci_hcd: release socket [ 79.122769][ T36] vhci_hcd: disconnect device [ 79.131566][ T5862] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 79.140903][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.310904][ T880] usb 5-1: device not accepting address 6, error -71 [ 79.354465][ T5862] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 79.411075][ T880] usb usb5-port1: unable to enumerate USB device [ 79.422619][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.438005][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.455078][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 79.464387][ T5862] usb 4-1: config 0 has no interface number 0 [ 79.470506][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.481401][ T5862] usb 4-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 79.492703][ T10] usb 3-1: config 0 descriptor?? [ 79.498290][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.506696][ T30] audit: type=1400 audit(1751424746.559:296): avc: denied { cmd } for pid=6095 comm="syz.1.45" path="socket:[8318]" dev="sockfs" ino=8318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.530564][ T5862] usb 4-1: Product: syz [ 79.543940][ T5862] usb 4-1: Manufacturer: syz [ 79.548567][ T5862] usb 4-1: SerialNumber: syz [ 79.664419][ T5862] usb 4-1: config 0 descriptor?? [ 79.692049][ T5862] ums-datafab 4-1:0.138: USB Mass Storage device detected [ 79.718904][ T30] audit: type=1400 audit(1751424746.779:297): avc: denied { ioctl } for pid=6103 comm="syz.0.46" path="socket:[8324]" dev="sockfs" ino=8324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.754545][ T30] audit: type=1400 audit(1751424746.819:298): avc: denied { bind } for pid=6103 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.773669][ T30] audit: type=1400 audit(1751424746.819:299): avc: denied { accept } for pid=6103 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.804581][ T880] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 79.884064][ T5862] usb 4-1: USB disconnect, device number 5 [ 79.962617][ T880] usb 5-1: Invalid ep0 maxpacket: 16 [ 79.991246][ T5903] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.046557][ T6110] Bluetooth: MGMT ver 1.23 [ 80.055973][ T6110] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 80.149994][ T10] ath6kl: Failed to read usb control message: -32 [ 80.169299][ T10] ath6kl: Unable to read the bmi data from the device: -32 [ 80.191139][ T10] ath6kl: Unable to recv target info: -32 [ 80.203142][ T5903] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 80.211823][ T10] ath6kl: Failed to init ath6kl core: -32 [ 80.215879][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.218128][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 80.229464][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 80.238001][ T880] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 80.338580][ T6113] openvswitch: netlink: IP tunnel TTL not specified. [ 80.601788][ T880] usb 5-1: Invalid ep0 maxpacket: 16 [ 80.688603][ T880] usb usb5-port1: attempt power cycle [ 80.720976][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 80.755428][ T5903] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 80.781886][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.815768][ T5903] usb 1-1: Product: syz [ 80.831431][ T5903] usb 1-1: Manufacturer: syz [ 80.850299][ T5903] usb 1-1: SerialNumber: syz [ 80.872042][ T5903] usb 1-1: config 0 descriptor?? [ 80.890010][ T6104] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 81.131959][ T880] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 81.267613][ T6104] process 'syz.0.46' launched '/dev/fd/8' with NULL argv: empty string added [ 81.555041][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 82.158801][ T10] usb 3-1: USB disconnect, device number 2 [ 82.561341][ T880] usb 5-1: device descriptor read/8, error -71 [ 82.651983][ T6128] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 82.658499][ T6128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 82.853109][ T6128] vhci_hcd vhci_hcd.0: Device attached [ 82.911141][ T5903] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 82.932035][ T6130] vhci_hcd: connection closed [ 82.936296][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 82.936311][ T30] audit: type=1400 audit(1751424749.999:312): avc: denied { read } for pid=6134 comm="syz.4.55" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.938767][ T6136] syz.4.55 uses obsolete (PF_INET,SOCK_PACKET) [ 82.943623][ T30] audit: type=1400 audit(1751424749.999:313): avc: denied { open } for pid=6134 comm="syz.4.55" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.991888][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.016444][ T967] vhci_hcd: stop threads [ 83.028175][ T967] vhci_hcd: release socket [ 83.046908][ T5903] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 83.071024][ T967] vhci_hcd: disconnect device [ 83.112462][ T5862] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 83.113317][ C1] powermate: config urb returned -71 [ 83.122689][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.126532][ C1] powermate: config urb returned -71 [ 83.139118][ C1] powermate: config urb returned -71 [ 83.145528][ C1] powermate: config urb returned -71 [ 83.164849][ T5862] usb 37-1: enqueue for inactive port 0 [ 83.173556][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 83.185452][ T5903] usb 1-1: USB disconnect, device number 2 [ 83.262118][ T5862] vhci_hcd: vhci_device speed not set [ 83.321193][ T6136] sp0: Synchronizing with TNC [ 83.345676][ T30] audit: type=1400 audit(1751424750.399:314): avc: denied { write } for pid=6148 comm="syz.0.58" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.465399][ T30] audit: type=1400 audit(1751424750.409:315): avc: denied { wake_alarm } for pid=6148 comm="syz.0.58" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.520875][ T30] audit: type=1400 audit(1751424750.489:316): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.618170][ T30] audit: type=1400 audit(1751424750.489:317): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.640904][ T30] audit: type=1400 audit(1751424750.489:318): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.666207][ T30] audit: type=1400 audit(1751424750.489:319): avc: denied { read } for pid=5480 comm="dhcpcd" name="n101" dev="tmpfs" ino=2202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.688524][ T6156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6156 comm=syz.1.60 [ 83.712000][ T30] audit: type=1400 audit(1751424750.489:320): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.736965][ T30] audit: type=1400 audit(1751424750.489:321): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.768785][ T6158] 9pnet_virtio: no channels available for device syz [ 84.070074][ T5859] vhci_hcd: vhci_device speed not set [ 84.090768][ T6158] warning: `syz.2.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.248531][ T6164] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.879375][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.031118][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 85.067958][ T6162] ALSA: mixer_oss: invalid index 40000 [ 85.199642][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 85.971982][ T5889] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 86.537645][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 86.559160][ T5889] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 86.583721][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.595934][ T5889] usb 1-1: Product: syz [ 86.600182][ T5889] usb 1-1: Manufacturer: syz [ 86.607957][ T5889] usb 1-1: SerialNumber: syz [ 86.628854][ T5889] usb 1-1: config 0 descriptor?? [ 86.718500][ T5889] hub 1-1:0.0: bad descriptor, ignoring hub [ 86.724676][ T5889] hub 1-1:0.0: probe with driver hub failed with error -5 [ 86.743472][ T5889] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 86.755601][ T5889] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 87.297294][ T5889] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 87.394464][ T5889] usb 1-1: USB disconnect, device number 3 [ 87.513918][ T6181] netlink: 11 bytes leftover after parsing attributes in process `syz.2.66'. [ 87.785516][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.68'. [ 87.814405][ T6187] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 87.820914][ T6187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.118431][ T6187] vhci_hcd vhci_hcd.0: Device attached [ 88.197023][ T6192] vhci_hcd: connection closed [ 88.197258][ T36] vhci_hcd: stop threads [ 88.209023][ T6188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6188 comm=syz.2.68 [ 88.221797][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 88.221806][ T30] audit: type=1400 audit(1751424755.269:331): avc: denied { lock } for pid=6186 comm="syz.2.68" path="socket:[9316]" dev="sockfs" ino=9316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 88.251524][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.263333][ T36] vhci_hcd: release socket [ 88.280565][ T36] vhci_hcd: disconnect device [ 88.303538][ T9] vhci_hcd: vhci_device speed not set [ 88.468742][ T30] audit: type=1400 audit(1751424755.529:332): avc: denied { read write } for pid=6209 comm="syz.4.74" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.604892][ T30] audit: type=1400 audit(1751424755.529:333): avc: denied { open } for pid=6209 comm="syz.4.74" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.629736][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.951921][ T6225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.009144][ T6225] capability: warning: `syz.3.77' uses deprecated v2 capabilities in a way that may be insecure [ 89.066997][ T30] audit: type=1400 audit(1751424755.999:334): avc: denied { create } for pid=6217 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.396569][ T30] audit: type=1400 audit(1751424756.459:335): avc: denied { write } for pid=6228 comm="syz.4.78" name="vlan0" dev="proc" ino=4026533789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.571001][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 89.584829][ T6222] netlink: 68 bytes leftover after parsing attributes in process `syz.0.76'. [ 89.612395][ T6233] gtp0: entered promiscuous mode [ 89.617366][ T6233] gtp0: entered allmulticast mode [ 90.361152][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 90.409935][ T30] audit: type=1400 audit(1751424756.539:336): avc: denied { connect } for pid=6230 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.429173][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.517656][ T30] audit: type=1400 audit(1751424756.699:337): avc: denied { bind } for pid=6230 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.736600][ T30] audit: type=1400 audit(1751424757.529:338): avc: denied { sqpoll } for pid=6228 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.862483][ T30] audit: type=1400 audit(1751424757.529:339): avc: denied { create } for pid=6228 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 90.967703][ T30] audit: type=1400 audit(1751424757.539:340): avc: denied { sys_admin } for pid=6228 comm="syz.4.78" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 90.990531][ T6248] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.234765][ T6256] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 92.241310][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.260979][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 92.293577][ T6256] tipc: Started in network mode [ 92.298435][ T6256] tipc: Node identity 4, cluster identity 4711 [ 92.304630][ T6258] vhci_hcd: connection closed [ 92.304963][ T6256] tipc: Node number set to 4 [ 92.322228][ T3549] vhci_hcd: stop threads [ 92.360206][ T3549] vhci_hcd: release socket [ 92.400036][ T3549] vhci_hcd: disconnect device [ 92.440942][ T9] vhci_hcd: vhci_device speed not set [ 93.466506][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 93.466521][ T30] audit: type=1400 audit(1751424760.529:349): avc: denied { ioctl } for pid=6266 comm="syz.0.88" path="socket:[8697]" dev="sockfs" ino=8697 ioctlcmd=0x54dc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.778441][ T30] audit: type=1400 audit(1751424760.839:350): avc: denied { setopt } for pid=6269 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.704186][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 94.876339][ T30] audit: type=1400 audit(1751424761.919:351): avc: denied { setopt } for pid=6282 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.970116][ T5826] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 96.030493][ T1155] Bluetooth: hci5: Frame reassembly failed (-84) [ 96.190994][ T30] audit: type=1400 audit(1751424763.249:352): avc: denied { append } for pid=6292 comm="syz.3.93" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.229555][ T30] audit: type=1400 audit(1751424763.289:353): avc: denied { append } for pid=6292 comm="syz.3.93" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.238571][ T6293] loop6: detected capacity change from 0 to 63 [ 96.255726][ T30] audit: type=1400 audit(1751424763.319:354): avc: denied { write } for pid=6296 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.297656][ T30] audit: type=1400 audit(1751424763.359:355): avc: denied { map } for pid=6292 comm="syz.3.93" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.314523][ T6293] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.350603][ T6293] Buffer I/O error on dev loop6, logical block 1, async page read [ 96.373892][ T30] audit: type=1400 audit(1751424763.359:356): avc: denied { execute } for pid=6292 comm="syz.3.93" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.385734][ T6293] Buffer I/O error on dev loop6, logical block 2, async page read [ 96.428859][ T6300] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.453856][ T6293] Buffer I/O error on dev loop6, logical block 3, async page read [ 96.508633][ T6298] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.544613][ T6298] Buffer I/O error on dev loop6, logical block 1, async page read [ 96.577264][ T6298] Buffer I/O error on dev loop6, logical block 2, async page read [ 96.634819][ T6298] Buffer I/O error on dev loop6, logical block 3, async page read [ 96.643811][ T6298] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.652430][ T6298] Buffer I/O error on dev loop6, logical block 1, async page read [ 96.682635][ T6308] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 96.714456][ T6307] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 96.720966][ T6307] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.732533][ T6308] netlink: 'syz.4.99': attribute type 10 has an invalid length. [ 96.746791][ T6307] vhci_hcd vhci_hcd.0: Device attached [ 96.786435][ T30] audit: type=1400 audit(1751424763.849:357): avc: denied { create } for pid=6306 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.807620][ T6308] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.824625][ T6309] vhci_hcd: connection closed [ 96.833092][ T3494] vhci_hcd: stop threads [ 96.853649][ T30] audit: type=1400 audit(1751424763.869:358): avc: denied { getopt } for pid=6306 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.890928][ T3494] vhci_hcd: release socket [ 96.895380][ T3494] vhci_hcd: disconnect device [ 96.921980][ T9] vhci_hcd: vhci_device speed not set [ 97.740891][ T5859] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.911140][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 97.935577][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.011047][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.023893][ T5859] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 98.069636][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.071224][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 98.079755][ T5817] Bluetooth: hci5: command 0xfc11 tx timeout [ 98.197296][ T5859] usb 4-1: config 0 descriptor?? [ 98.607405][ T5859] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 98.616972][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 98.664841][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 98.664850][ T30] audit: type=1400 audit(1751424765.729:362): avc: denied { connect } for pid=6351 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.712293][ T30] audit: type=1400 audit(1751424765.779:363): avc: denied { write } for pid=6351 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.735476][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.741773][ T30] audit: type=1400 audit(1751424765.799:364): avc: denied { create } for pid=6354 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 98.820508][ T5859] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 98.946475][ T6355] block device autoloading is deprecated and will be removed. [ 99.019665][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 99.441162][ T5859] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 99.453885][ T5859] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 99.501286][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 99.532024][ T9] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.562703][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 99.613248][ T30] audit: type=1400 audit(1751424766.669:365): avc: denied { bind } for pid=6364 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.635340][ T30] audit: type=1400 audit(1751424766.669:366): avc: denied { setopt } for pid=6364 comm="syz.0.113" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.666648][ T30] audit: type=1400 audit(1751424766.669:367): avc: denied { connect } for pid=6364 comm="syz.0.113" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.695393][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.40 [ 99.713417][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.722112][ T9] usb 2-1: Product: syz [ 99.726283][ T9] usb 2-1: Manufacturer: syz [ 99.733542][ T9] usb 2-1: SerialNumber: syz [ 99.754129][ T6343] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.762522][ T6343] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.796200][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 99.816863][ T5859] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 99.854104][ T30] audit: type=1400 audit(1751424766.919:368): avc: denied { accept } for pid=6316 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 99.983957][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 100.097033][ T6379] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 100.103567][ T6379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.117872][ T6379] vhci_hcd vhci_hcd.0: Device attached [ 100.178812][ T6380] vhci_hcd: connection closed [ 100.180165][ T3494] vhci_hcd: stop threads [ 100.192413][ T3494] vhci_hcd: release socket [ 100.196866][ T3494] vhci_hcd: disconnect device [ 100.215029][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.262752][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.306224][ T30] audit: type=1326 audit(1751424767.369:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 100.544363][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 100.544628][ T30] audit: type=1326 audit(1751424767.369:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 100.575632][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 100.657476][ T6388] ======================================================= [ 100.657476][ T6388] WARNING: The mand mount option has been deprecated and [ 100.657476][ T6388] and is ignored by this kernel. Remove the mand [ 100.657476][ T6388] option from the mount to silence this warning. [ 100.657476][ T6388] ======================================================= [ 100.694096][ T30] audit: type=1326 audit(1751424767.369:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 100.701419][ T9] usb 2-1: USB disconnect, device number 2 [ 100.788939][ T6388] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.811149][ T6388] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 100.819479][ T880] IPVS: starting estimator thread 0... [ 101.011777][ T6395] IPVS: using max 42 ests per chain, 100800 per kthread [ 101.164949][ T6401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.123'. [ 101.461529][ T5875] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 101.603174][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 101.656611][ T6404] SET target dimension over the limit! [ 101.689341][ T5875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.714984][ T1536] usb 4-1: USB disconnect, device number 6 [ 101.730622][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 101.747634][ T5875] usb 2-1: can't read configurations, error -71 [ 101.811087][ T880] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 102.006356][ T880] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.026173][ T880] usb 1-1: config 0 has no interface number 0 [ 102.049336][ T880] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 102.066313][ T880] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 102.083736][ T880] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.113463][ T880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.125547][ T880] usb 1-1: config 0 descriptor?? [ 102.133886][ T6420] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 102.160554][ T880] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 102.364948][ T6436] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 102.660177][ T6442] netlink: 11 bytes leftover after parsing attributes in process `syz.1.136'. [ 103.703246][ T6448] veth0_to_team: entered promiscuous mode [ 103.709025][ T6448] veth0_to_team: entered allmulticast mode [ 103.922910][ T6451] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 103.929518][ T6451] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.971900][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 103.971915][ T30] audit: type=1400 audit(1751424770.999:422): avc: denied { bind } for pid=6452 comm="syz.2.138" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.999753][ T30] audit: type=1400 audit(1751424770.999:423): avc: denied { name_bind } for pid=6452 comm="syz.2.138" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.023311][ T30] audit: type=1400 audit(1751424770.999:424): avc: denied { node_bind } for pid=6452 comm="syz.2.138" saddr=fe80::aa src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 104.047680][ T6451] vhci_hcd vhci_hcd.0: Device attached [ 104.123253][ T6454] vhci_hcd: connection closed [ 104.123541][ T967] vhci_hcd: stop threads [ 104.151393][ T967] vhci_hcd: release socket [ 104.158273][ T967] vhci_hcd: disconnect device [ 104.201048][ T5859] vhci_hcd: vhci_device speed not set [ 104.571054][ T880] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 104.631717][ T1536] usb 1-1: USB disconnect, device number 4 [ 104.794332][ T880] usb 5-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 104.830773][ T880] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.856595][ T30] audit: type=1400 audit(1751424771.919:425): avc: denied { ioctl } for pid=6460 comm="syz.4.141" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.882764][ T6470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.142'. [ 104.967538][ T880] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice=65.00 [ 104.991604][ T880] usb 5-1: New USB device strings: Mfr=119, Product=0, SerialNumber=7 [ 105.001684][ T880] usb 5-1: Manufacturer: syz [ 105.010487][ T880] usb 5-1: SerialNumber: syz [ 105.066104][ T6471] netlink: 'syz.0.144': attribute type 4 has an invalid length. [ 105.132293][ T880] usb 5-1: config 0 descriptor?? [ 105.211526][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 105.220610][ T6471] openvswitch: netlink: Flow key attr not present in new flow. [ 105.583222][ T30] audit: type=1400 audit(1751424772.649:426): avc: denied { read write } for pid=6477 comm="syz.1.145" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.584585][ T6478] overlayfs: missing 'lowerdir' [ 105.668245][ T6478] lo speed is unknown, defaulting to 1000 [ 105.676195][ T6478] lo speed is unknown, defaulting to 1000 [ 105.683727][ T6478] lo speed is unknown, defaulting to 1000 [ 105.791111][ T6478] infiniband sz1: set active [ 105.795911][ T6478] infiniband sz1: added lo [ 105.806219][ T5903] lo speed is unknown, defaulting to 1000 [ 105.826228][ T6471] syz.0.144 (6471) used greatest stack depth: 21040 bytes left [ 105.849637][ T6478] RDS/IB: sz1: added [ 105.854006][ T6478] smc: adding ib device sz1 with port count 1 [ 105.860273][ T6478] smc: ib device sz1 port 1 has pnetid [ 105.868322][ T6478] lo speed is unknown, defaulting to 1000 [ 105.884430][ T5859] lo speed is unknown, defaulting to 1000 [ 105.910292][ T30] audit: type=1400 audit(1751424772.649:427): avc: denied { open } for pid=6477 comm="syz.1.145" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 106.030588][ T6478] lo speed is unknown, defaulting to 1000 [ 106.152845][ T6478] lo speed is unknown, defaulting to 1000 [ 106.272498][ T6478] lo speed is unknown, defaulting to 1000 [ 106.391533][ T6478] lo speed is unknown, defaulting to 1000 [ 106.510714][ T6478] lo speed is unknown, defaulting to 1000 [ 106.798931][ T30] audit: type=1400 audit(1751424772.949:428): avc: denied { read write } for pid=6477 comm="syz.1.145" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.881686][ T5859] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.029009][ T30] audit: type=1400 audit(1751424772.949:429): avc: denied { open } for pid=6477 comm="syz.1.145" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.052878][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 107.682700][ T5859] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.799173][ T30] audit: type=1400 audit(1751424774.859:430): avc: denied { mount } for pid=6491 comm="syz.2.147" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 107.892499][ T5859] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58415, setting to 1024 [ 108.080076][ T880] usb 5-1: USB disconnect, device number 11 [ 108.084096][ T5859] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 108.181001][ T5859] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.237847][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.254834][ T6482] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.324759][ T5859] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.332976][ T30] audit: type=1400 audit(1751424775.379:431): avc: denied { append } for pid=6498 comm="syz.4.150" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.380338][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.390916][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.547761][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 109.424768][ T5859] usb 2-1: USB disconnect, device number 5 [ 110.029103][ T30] audit: type=1400 audit(1751424776.799:432): avc: denied { map } for pid=6520 comm="syz.2.155" path="socket:[10212]" dev="sockfs" ino=10212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.251699][ T6521] lo speed is unknown, defaulting to 1000 [ 110.941049][ T24] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 111.105282][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.127550][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 111.146340][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 111.203316][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.240676][ T24] usb 5-1: config 0 descriptor?? [ 111.374640][ T6537] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.172719][ T30] audit: type=1400 audit(1751424779.209:433): avc: denied { bind } for pid=6536 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.602747][ T24] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0003/input/input9 [ 112.621230][ T30] audit: type=1400 audit(1751424779.209:434): avc: denied { node_bind } for pid=6536 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 112.751407][ T24] creative-sb0540 0003:041E:3100.0003: input,hidraw0: USB HID v0.05 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 113.141691][ T30] audit: type=1400 audit(1751424780.189:435): avc: denied { ioctl } for pid=6548 comm="syz.0.161" path="socket:[11297]" dev="sockfs" ino=11297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.255870][ T30] audit: type=1400 audit(1751424780.189:436): avc: denied { connect } for pid=6548 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.716253][ T30] audit: type=1400 audit(1751424780.779:437): avc: denied { bind } for pid=6562 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 113.768325][ T30] audit: type=1400 audit(1751424780.809:438): avc: denied { connect } for pid=6562 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 113.851129][ T5859] usb 5-1: reset full-speed USB device number 12 using dummy_hcd [ 114.120724][ T30] audit: type=1400 audit(1751424781.179:439): avc: denied { name_bind } for pid=6564 comm="syz.3.164" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 114.266004][ T30] audit: type=1400 audit(1751424781.329:440): avc: denied { append } for pid=6570 comm="syz.4.165" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.348839][ T30] audit: type=1400 audit(1751424781.359:441): avc: denied { create } for pid=6570 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.917414][ T5903] usb 5-1: USB disconnect, device number 12 [ 115.571023][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 115.571055][ T30] audit: type=1400 audit(1751424782.569:444): avc: denied { write } for pid=6580 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.437305][ T6599] bpq0: entered promiscuous mode [ 116.454571][ T30] audit: type=1400 audit(1751424783.519:445): avc: denied { ioctl } for pid=6593 comm="syz.3.172" path="socket:[11348]" dev="sockfs" ino=11348 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.607470][ T30] audit: type=1400 audit(1751424783.539:446): avc: denied { mounton } for pid=6560 comm="syz.2.162" path="/42/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.685017][ T6596] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 116.759938][ T30] audit: type=1400 audit(1751424783.809:447): avc: denied { map } for pid=6602 comm="syz.0.173" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.878116][ T30] audit: type=1400 audit(1751424783.809:448): avc: denied { execute } for pid=6602 comm="syz.0.173" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.970909][ T30] audit: type=1400 audit(1751424783.889:449): avc: denied { watch } for pid=6604 comm="syz.4.174" path="/30" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.226968][ T30] audit: type=1400 audit(1751424783.899:450): avc: denied { watch_sb watch_reads } for pid=6604 comm="syz.4.174" path="/30" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.283663][ T6614] Bluetooth: MGMT ver 1.23 [ 117.494426][ T30] audit: type=1400 audit(1751424784.549:451): avc: denied { ioctl } for pid=6612 comm="syz.3.175" path="socket:[11361]" dev="sockfs" ino=11361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.412292][ T30] audit: type=1400 audit(1751424785.469:452): avc: denied { mount } for pid=6627 comm="syz.3.179" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 118.415053][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 118.492563][ T30] audit: type=1400 audit(1751424785.479:453): avc: denied { mounton } for pid=6627 comm="syz.3.179" path="/28/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 118.717803][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 118.774775][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 119.044648][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.182'. [ 119.092933][ T6641] netlink: 64 bytes leftover after parsing attributes in process `syz.3.180'. [ 119.290495][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 119.500928][ T5862] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.152269][ T5862] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 120.171642][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.185311][ T5862] usb 3-1: config 0 descriptor?? [ 120.373808][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.751230][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 120.779560][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.041009][ T5862] usb 3-1: Cannot read MAC address [ 121.046550][ T5862] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 121.062019][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.098265][ T5862] usb 3-1: USB disconnect, device number 3 [ 121.106061][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.147622][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 121.310398][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.329281][ T10] usb 2-1: config 0 descriptor?? [ 121.882443][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 121.882460][ T30] audit: type=1400 audit(1751424788.509:457): avc: denied { read } for pid=6662 comm="syz.0.190" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.919594][ T30] audit: type=1400 audit(1751424788.509:458): avc: denied { open } for pid=6662 comm="syz.0.190" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.394819][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 122.404695][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.413687][ T6669] overlayfs: missing 'lowerdir' [ 122.425632][ T6669] rdma_rxe: rxe_newlink: failed to add lo [ 122.428249][ T10] usb 2-1: USB disconnect, device number 6 [ 122.730880][ T5903] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.772416][ T30] audit: type=1400 audit(1751424789.809:459): avc: denied { map } for pid=6679 comm="syz.0.193" path="socket:[10754]" dev="sockfs" ino=10754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 122.834854][ T30] audit: type=1400 audit(1751424789.899:460): avc: denied { append } for pid=6681 comm="syz.2.194" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 122.836828][ T6683] 9pnet_fd: Insufficient options for proto=fd [ 122.857928][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.885297][ T6660] syz.4.189 (6660): drop_caches: 2 [ 122.996924][ T5903] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.008090][ T5903] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58415, setting to 1024 [ 123.028709][ T5903] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 123.047000][ T5903] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.059832][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.083919][ T6672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.086795][ T30] audit: type=1400 audit(1751424790.149:461): avc: denied { read } for pid=6687 comm="syz.1.196" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 123.099681][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.116467][ T30] audit: type=1400 audit(1751424790.149:462): avc: denied { open } for pid=6687 comm="syz.1.196" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 123.371459][ T1536] usb 4-1: USB disconnect, device number 7 [ 123.382193][ T30] audit: type=1400 audit(1751424790.409:463): avc: denied { append } for pid=6667 comm="syz.3.191" name="midi3" dev="devtmpfs" ino=2867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.410118][ T30] audit: type=1400 audit(1751424790.419:464): avc: denied { ioctl } for pid=6687 comm="syz.1.196" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 123.736427][ T6697] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.003320][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.209436][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 124.444233][ T30] audit: type=1400 audit(1751424791.509:465): avc: denied { create } for pid=6700 comm="syz.3.200" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.509959][ T30] audit: type=1400 audit(1751424791.569:466): avc: denied { read } for pid=6700 comm="syz.3.200" name="file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.577928][ T6707] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20001 [ 124.728552][ T6711] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 125.262815][ T1536] IPVS: starting estimator thread 0... [ 125.265466][ T6711] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 125.377715][ T6714] IPVS: using max 39 ests per chain, 93600 per kthread [ 126.472488][ T6734] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.207'. [ 127.174897][ T6751] overlayfs: missing 'lowerdir' [ 127.183713][ T6751] rdma_rxe: rxe_newlink: failed to add lo [ 127.202350][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 127.202363][ T30] audit: type=1400 audit(1751424794.269:475): avc: denied { write } for pid=6735 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.239615][ T1536] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.272193][ T30] audit: type=1400 audit(1751424794.269:476): avc: denied { read } for pid=6735 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.428349][ T1536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.490949][ T1536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.501135][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.516046][ T30] audit: type=1326 audit(1751424794.579:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16498e929 code=0x7ffc0000 [ 127.541314][ T1536] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 127.551253][ T1536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.572964][ T30] audit: type=1326 audit(1751424794.579:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16498e929 code=0x7ffc0000 [ 127.596831][ T1536] usb 2-1: config 0 descriptor?? [ 127.604800][ T30] audit: type=1326 audit(1751424794.579:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff16498e929 code=0x7ffc0000 [ 127.718809][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.730149][ T30] audit: type=1326 audit(1751424794.579:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16498e929 code=0x7ffc0000 [ 127.825028][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58415, setting to 1024 [ 128.039350][ T1536] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 128.065329][ T30] audit: type=1326 audit(1751424794.579:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16498e929 code=0x7ffc0000 [ 128.101235][ T1536] steelseries 0003:1038:12B6.0004: item fetching failed at offset 5/7 [ 128.111347][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 128.127422][ T1536] steelseries 0003:1038:12B6.0004: probe with driver steelseries failed with error -22 [ 128.138208][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.244008][ T30] audit: type=1326 audit(1751424794.579:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff16498e929 code=0x7ffc0000 [ 128.268048][ T30] audit: type=1326 audit(1751424794.579:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16498e929 code=0x7ffc0000 [ 128.283739][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.342043][ T6753] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.355517][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.378359][ T30] audit: type=1326 audit(1751424794.579:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16498e929 code=0x7ffc0000 [ 128.568307][ T24] usb 1-1: USB disconnect, device number 5 [ 129.165588][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 130.179110][ T6796] vivid-004: kernel_thread() failed [ 130.424127][ T24] usb 2-1: USB disconnect, device number 7 [ 131.723222][ T6809] FAULT_INJECTION: forcing a failure. [ 131.723222][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 131.752780][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.811812][ T6809] CPU: 0 UID: 0 PID: 6809 Comm: syz.3.227 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 131.811837][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.811846][ T6809] Call Trace: [ 131.811852][ T6809] [ 131.811858][ T6809] dump_stack_lvl+0x16c/0x1f0 [ 131.811889][ T6809] should_fail_ex+0x512/0x640 [ 131.811911][ T6809] ? __kvmalloc_node_noprof+0x124/0x620 [ 131.811935][ T6809] should_failslab+0xc2/0x120 [ 131.811958][ T6809] __kvmalloc_node_noprof+0x137/0x620 [ 131.811980][ T6809] ? nf_tables_addchain.constprop.0+0x601/0x1c90 [ 131.812014][ T6809] ? nf_tables_addchain.constprop.0+0x601/0x1c90 [ 131.812040][ T6809] nf_tables_addchain.constprop.0+0x601/0x1c90 [ 131.812074][ T6809] ? nft_chain_lookup+0x204/0x3e0 [ 131.812096][ T6809] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 131.812147][ T6809] ? nla_strcmp+0xff/0x130 [ 131.812175][ T6809] ? nft_table_lookup.part.0+0x1e3/0x230 [ 131.812204][ T6809] nf_tables_newchain+0x1e0d/0x2a90 [ 131.812241][ T6809] ? __nla_validate_parse+0x600/0x2880 [ 131.812270][ T6809] ? __pfx_nf_tables_newchain+0x10/0x10 [ 131.812298][ T6809] ? __pfx___nla_validate_parse+0x10/0x10 [ 131.812341][ T6809] ? __nla_parse+0x40/0x60 [ 131.812370][ T6809] nfnetlink_rcv_batch+0x18ea/0x2330 [ 131.812404][ T6809] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 131.812445][ T6809] ? avc_has_perm_noaudit+0x149/0x3b0 [ 131.812499][ T6809] ? __nla_parse+0x40/0x60 [ 131.812528][ T6809] nfnetlink_rcv+0x3c1/0x430 [ 131.812549][ T6809] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 131.812575][ T6809] netlink_unicast+0x53d/0x7f0 [ 131.812596][ T6809] ? __pfx_netlink_unicast+0x10/0x10 [ 131.812620][ T6809] netlink_sendmsg+0x8d1/0xdd0 [ 131.812642][ T6809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.812669][ T6809] ____sys_sendmsg+0xa95/0xc70 [ 131.812688][ T6809] ? copy_msghdr_from_user+0x10a/0x160 [ 131.812712][ T6809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.812742][ T6809] ___sys_sendmsg+0x134/0x1d0 [ 131.812767][ T6809] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.812788][ T6809] ? __lock_acquire+0x622/0x1c90 [ 131.812850][ T6809] __sys_sendmsg+0x16d/0x220 [ 131.812874][ T6809] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.812915][ T6809] do_syscall_64+0xcd/0x4c0 [ 131.812942][ T6809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.812959][ T6809] RIP: 0033:0x7ff16498e929 [ 131.812973][ T6809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.812988][ T6809] RSP: 002b:00007ff16587f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.813005][ T6809] RAX: ffffffffffffffda RBX: 00007ff164bb5fa0 RCX: 00007ff16498e929 [ 131.813016][ T6809] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 131.813026][ T6809] RBP: 00007ff16587f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.813035][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.813045][ T6809] R13: 0000000000000000 R14: 00007ff164bb5fa0 R15: 00007ffc540bafe8 [ 131.813067][ T6809] [ 132.323639][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.329951][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.421069][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 132.687268][ T24] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 132.731639][ T24] usb 5-1: config 6 has no interface number 0 [ 132.786963][ T24] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 132.850848][ T24] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.889638][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 132.889653][ T30] audit: type=1400 audit(1751424799.949:513): avc: denied { map } for pid=6834 comm="syz.3.237" path="socket:[11788]" dev="sockfs" ino=11788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.918971][ T24] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 132.939834][ T24] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.959262][ T30] audit: type=1400 audit(1751424799.949:514): avc: denied { read write accept } for pid=6834 comm="syz.3.237" path="socket:[11788]" dev="sockfs" ino=11788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.959932][ T6837] netlink: 52 bytes leftover after parsing attributes in process `syz.0.236'. [ 133.005979][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 133.015901][ T24] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 133.034169][ T24] usb 5-1: Product: syz [ 133.048596][ T24] usb 5-1: Manufacturer: syz [ 133.053460][ T24] usb 5-1: SerialNumber: syz [ 133.066296][ T24] hso 5-1:6.2: Failed to find BULK IN ep [ 133.248897][ T6843] kvm: pic: non byte write [ 133.254699][ T6843] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 133.275235][ T10] usb 5-1: USB disconnect, device number 13 [ 133.280895][ T5859] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.301147][ T5862] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.444641][ T5859] usb 2-1: New USB device found, idVendor=0e41, idProduct=414a, bcdDevice=5f.6e [ 133.453926][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.462092][ T5859] usb 2-1: Product: syz [ 133.466303][ T5859] usb 2-1: Manufacturer: syz [ 133.470966][ T5859] usb 2-1: SerialNumber: syz [ 133.471230][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 133.484290][ T5859] usb 2-1: config 0 descriptor?? [ 133.484736][ T5862] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 133.494553][ T5859] snd_usb_podhd 2-1:0.0: Line 6 POD X3 found [ 133.506965][ T5862] usb 1-1: config 0 has no interface number 0 [ 133.507797][ T5859] usb 2-1: selecting invalid altsetting 1 [ 133.519040][ T5859] snd_usb_podhd 2-1:0.0: set_interface failed [ 133.526413][ T5859] snd_usb_podhd 2-1:0.0: Line 6 POD X3 now disconnected [ 133.531437][ T5862] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=c2.66 [ 133.533815][ T5859] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 133.553415][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.561778][ T5862] usb 1-1: Product: syz [ 133.566135][ T5862] usb 1-1: Manufacturer: syz [ 133.571134][ T5862] usb 1-1: SerialNumber: syz [ 133.577374][ T5862] usb 1-1: config 0 descriptor?? [ 133.584685][ T5862] option 1-1:0.98: GSM modem (1-port) converter detected [ 134.089004][ T6837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.125717][ T30] audit: type=1400 audit(1751424801.179:515): avc: denied { mount } for pid=6847 comm="syz.3.240" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.327284][ T30] audit: type=1400 audit(1751424801.369:516): avc: denied { write } for pid=6850 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.434349][ T24] usb 1-1: USB disconnect, device number 6 [ 134.582343][ T24] option 1-1:0.98: device disconnected [ 134.596367][ T30] audit: type=1400 audit(1751424801.649:517): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.728414][ T5889] usb 2-1: USB disconnect, device number 8 [ 134.776512][ T30] audit: type=1400 audit(1751424801.839:518): avc: denied { map } for pid=6855 comm="syz.4.244" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.711457][ T6874] Sensor A: ================= START STATUS ================= [ 135.729245][ T6874] Sensor A: Test Pattern: 75% Colorbar [ 135.738150][ T6874] Sensor A: Show Information: All [ 135.750953][ T6874] Sensor A: Vertical Flip: false [ 135.757779][ T6874] Sensor A: Horizontal Flip: false [ 135.763895][ T6874] Sensor A: Brightness: 128 [ 135.768506][ T6874] Sensor A: Contrast: 128 [ 135.779332][ T6874] Sensor A: Hue: 0 [ 135.788700][ T6874] Sensor A: Saturation: 128 [ 135.793936][ T6874] Sensor A: ================== END STATUS ================== [ 135.804358][ T30] audit: type=1400 audit(1751424802.859:519): avc: denied { read } for pid=6877 comm="syz.0.251" laddr=fe80::b lport=49877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.880918][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 136.029594][ T30] audit: type=1400 audit(1751424803.089:520): avc: denied { listen } for pid=6887 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.050225][ T5862] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 136.053174][ T24] usb 5-1: config 0 has no interfaces? [ 136.165786][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 136.253168][ T5862] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 136.271103][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.343009][ T24] usb 5-1: Product: syz [ 136.366472][ T24] usb 5-1: Manufacturer: syz [ 136.390085][ T24] usb 5-1: SerialNumber: syz [ 136.438351][ T24] usb 5-1: config 0 descriptor?? [ 136.455818][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.492617][ T5862] usb 4-1: config 0 descriptor?? [ 137.140362][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.152584][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.543645][ T24] usb 5-1: USB disconnect, device number 14 [ 138.316404][ T5903] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 138.583142][ T5903] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.640485][ T30] audit: type=1400 audit(1751424805.689:521): avc: denied { name_bind } for pid=6905 comm="syz.0.258" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 139.721125][ T5862] usb 4-1: USB disconnect, device number 8 [ 139.854585][ T6914] fido_id[6914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.955705][ T30] audit: type=1400 audit(1751424807.019:522): avc: denied { getopt } for pid=6924 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.201592][ T5862] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.361173][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 140.369722][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 140.382401][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.397512][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38432, setting to 1024 [ 140.410905][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 140.422208][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.437884][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.447986][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.521135][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 140.578461][ T30] audit: type=1400 audit(1751424807.639:523): avc: denied { read } for pid=6938 comm="syz.1.269" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 140.607156][ T30] audit: type=1400 audit(1751424807.669:524): avc: denied { ioctl } for pid=6938 comm="syz.1.269" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 140.733987][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.748734][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 140.760875][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.773086][ T24] usb 5-1: config 0 descriptor?? [ 140.887889][ T30] audit: type=1400 audit(1751424807.949:525): avc: denied { ioctl } for pid=6944 comm="syz.2.271" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.902592][ T6945] binder: BINDER_SET_CONTEXT_MGR already set [ 140.914344][ T30] audit: type=1400 audit(1751424807.949:526): avc: denied { set_context_mgr } for pid=6944 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 140.948656][ T6945] binder: 6944:6945 ioctl 4018620d 200000000040 returned -16 [ 140.972890][ T6945] netlink: 172 bytes leftover after parsing attributes in process `syz.2.271'. [ 141.147637][ T6952] netlink: 72 bytes leftover after parsing attributes in process `syz.3.262'. [ 141.416747][ T24] ath6kl: Unsupported hardware version: 0x0 [ 142.523339][ T24] ath6kl: Failed to init ath6kl core: -22 [ 142.529319][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 142.862105][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 143.885039][ T10] usb 5-1: USB disconnect, device number 15 [ 143.910720][ T1536] usb 4-1: USB disconnect, device number 9 [ 143.939828][ T30] audit: type=1400 audit(1751424810.999:527): avc: denied { call } for pid=6978 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.395127][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 144.856418][ T30] audit: type=1400 audit(1751424811.919:528): avc: denied { create } for pid=6984 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.713376][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 145.870407][ T30] audit: type=1400 audit(1751424812.929:529): avc: denied { listen } for pid=7004 comm="syz.0.289" lport=46097 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.065375][ T30] audit: type=1400 audit(1751424813.134:530): avc: denied { write } for pid=7009 comm="syz.3.290" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 146.220934][ T1536] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.374402][ T1536] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.401578][ T1536] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 146.442248][ T1536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.508727][ T1536] usb 3-1: config 0 descriptor?? [ 146.661887][ T7027] FAULT_INJECTION: forcing a failure. [ 146.661887][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 146.682032][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.0.292 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 146.682056][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.682066][ T7027] Call Trace: [ 146.682072][ T7027] [ 146.682078][ T7027] dump_stack_lvl+0x16c/0x1f0 [ 146.682107][ T7027] should_fail_ex+0x512/0x640 [ 146.682130][ T7027] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 146.682154][ T7027] should_failslab+0xc2/0x120 [ 146.682177][ T7027] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 146.682199][ T7027] ? skb_clone+0x190/0x3f0 [ 146.682227][ T7027] skb_clone+0x190/0x3f0 [ 146.682252][ T7027] nfnetlink_rcv_batch+0x1cf/0x2330 [ 146.682272][ T7027] ? kmem_cache_free+0x2d1/0x4d0 [ 146.682299][ T7027] ? __lock_acquire+0x622/0x1c90 [ 146.682327][ T7027] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 146.682364][ T7027] ? avc_has_perm_noaudit+0x149/0x3b0 [ 146.682395][ T7027] ? __asan_memset+0x23/0x50 [ 146.682420][ T7027] ? __nla_validate_parse+0x600/0x2880 [ 146.682450][ T7027] ? __pfx___nla_validate_parse+0x10/0x10 [ 146.682479][ T7027] ? cap_capable+0xb3/0x250 [ 146.682503][ T7027] ? __nla_parse+0x40/0x60 [ 146.682532][ T7027] nfnetlink_rcv+0x3c1/0x430 [ 146.682552][ T7027] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 146.682580][ T7027] netlink_unicast+0x53d/0x7f0 [ 146.682600][ T7027] ? __pfx_netlink_unicast+0x10/0x10 [ 146.682624][ T7027] netlink_sendmsg+0x8d1/0xdd0 [ 146.682645][ T7027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.682672][ T7027] ____sys_sendmsg+0xa95/0xc70 [ 146.682690][ T7027] ? copy_msghdr_from_user+0x10a/0x160 [ 146.682713][ T7027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.682742][ T7027] ___sys_sendmsg+0x134/0x1d0 [ 146.682766][ T7027] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.682788][ T7027] ? __lock_acquire+0x622/0x1c90 [ 146.682845][ T7027] __sys_sendmsg+0x16d/0x220 [ 146.682869][ T7027] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.682907][ T7027] do_syscall_64+0xcd/0x4c0 [ 146.682933][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.682951][ T7027] RIP: 0033:0x7f741fd8e929 [ 146.682965][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.682982][ T7027] RSP: 002b:00007f7420cb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.682998][ T7027] RAX: ffffffffffffffda RBX: 00007f741ffb5fa0 RCX: 00007f741fd8e929 [ 146.683010][ T7027] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 146.683020][ T7027] RBP: 00007f7420cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 146.683030][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.683039][ T7027] R13: 0000000000000000 R14: 00007f741ffb5fa0 R15: 00007ffc4e02c928 [ 146.683060][ T7027] [ 146.958001][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.281850][ T1536] ath6kl: Unsupported hardware version: 0x0 [ 147.294177][ T1536] ath6kl: Failed to init ath6kl core: -22 [ 147.300285][ T1536] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 149.834392][ T7056] input: syz0 as /devices/virtual/input/input13 [ 150.221434][ T24] usb 3-1: USB disconnect, device number 4 [ 150.246734][ T6961] Set syz1 is full, maxelem 65536 reached [ 150.385330][ T30] audit: type=1400 audit(1751424817.444:531): avc: denied { read open } for pid=7063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.487616][ T30] audit: type=1400 audit(1751424817.444:532): avc: denied { getattr } for pid=7063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.521044][ T1536] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.161007][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 151.740880][ T1536] usb 1-1: Using ep0 maxpacket: 16 [ 151.901399][ T1536] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.912627][ T30] audit: type=1400 audit(1751424818.974:533): avc: denied { add_name } for pid=7058 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.930871][ T1536] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.029715][ T1536] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.036569][ T1536] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 152.045759][ T1536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.055260][ T30] audit: type=1400 audit(1751424818.974:534): avc: denied { create } for pid=7058 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.080583][ T1536] usb 1-1: config 0 descriptor?? [ 152.126275][ T30] audit: type=1400 audit(1751424818.974:535): avc: denied { write } for pid=7058 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=3387 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.401095][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.407398][ T5862] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 152.540346][ T5862] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 152.640332][ T30] audit: type=1400 audit(1751424818.974:536): avc: denied { append } for pid=7058 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3387 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.863190][ T7090] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 152.869819][ T7090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.883731][ T7090] vhci_hcd vhci_hcd.0: Device attached [ 152.917091][ T7095] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(19) [ 152.923713][ T7095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.931970][ T7103] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 152.938574][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 152.947289][ T30] audit: type=1400 audit(1751424820.004:537): avc: denied { remove_name } for pid=7093 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3387 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.008549][ T30] audit: type=1400 audit(1751424820.004:538): avc: denied { unlink } for pid=7093 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3387 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.066677][ T1536] mcp2200 0003:04D8:00DF.0006: collection stack underflow [ 153.076582][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 153.099261][ T30] audit: type=1400 audit(1751424820.144:539): avc: denied { write } for pid=7106 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.106614][ T1536] mcp2200 0003:04D8:00DF.0006: item 0 4 0 12 parsing failed [ 153.133794][ T7095] vhci_hcd vhci_hcd.0: Device attached [ 153.140886][ T5889] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 153.221209][ T1536] mcp2200 0003:04D8:00DF.0006: can't parse reports [ 153.241169][ T1536] mcp2200 0003:04D8:00DF.0006: probe with driver mcp2200 failed with error -22 [ 153.341410][ T7090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 153.691538][ T7084] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(25) [ 153.698147][ T7084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 153.711737][ T7084] vhci_hcd vhci_hcd.0: Device attached [ 153.784611][ T7084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(27) [ 153.791240][ T7084] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 153.801265][ T7084] vhci_hcd vhci_hcd.0: Device attached [ 153.817031][ T7084] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(29) [ 153.823655][ T7084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 153.848553][ T7084] vhci_hcd vhci_hcd.0: Device attached [ 153.911187][ T880] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.997938][ T7090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.017938][ T7084] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(31) [ 154.024564][ T7084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.088040][ T7090] vhci_hcd vhci_hcd.0: port 0 already used [ 154.092094][ T880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.097836][ T7084] vhci_hcd vhci_hcd.0: Device attached [ 154.132874][ T880] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 154.150526][ T5924] usb 1-1: USB disconnect, device number 7 [ 154.165288][ T880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.189176][ T880] usb 3-1: config 0 descriptor?? [ 154.288522][ T7125] vhci_hcd: connection closed [ 154.288734][ T7128] vhci_hcd: connection closed [ 154.289858][ T967] vhci_hcd: stop threads [ 154.303770][ T7122] vhci_hcd: connection closed [ 154.304280][ T7104] vhci_hcd: connection closed [ 154.309136][ T7101] vhci_hcd: connection closed [ 154.317874][ T7097] vhci_hcd: connection reset by peer [ 154.331175][ T967] vhci_hcd: release socket [ 154.338543][ T967] vhci_hcd: disconnect device [ 154.349939][ T967] vhci_hcd: stop threads [ 154.354997][ T967] vhci_hcd: release socket [ 154.359571][ T967] vhci_hcd: disconnect device [ 154.364687][ T967] vhci_hcd: stop threads [ 154.368961][ T967] vhci_hcd: release socket [ 154.378248][ T967] vhci_hcd: disconnect device [ 154.386835][ T967] vhci_hcd: stop threads [ 154.391521][ T967] vhci_hcd: release socket [ 154.396594][ T967] vhci_hcd: disconnect device [ 154.401998][ T967] vhci_hcd: stop threads [ 154.408342][ T967] vhci_hcd: release socket [ 154.413985][ T967] vhci_hcd: disconnect device [ 154.419004][ T967] vhci_hcd: stop threads [ 154.428086][ T967] vhci_hcd: release socket [ 154.438871][ T967] vhci_hcd: disconnect device [ 154.607816][ T880] ath6kl: Unsupported hardware version: 0x0 [ 154.637095][ T880] ath6kl: Failed to init ath6kl core: -22 [ 154.657139][ T880] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 154.727798][ T30] audit: type=1400 audit(1751424821.794:540): avc: denied { connect } for pid=7147 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.783275][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 155.807770][ T5862] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 156.005098][ T7157] vivid-000: kernel_thread() failed [ 156.021476][ T5862] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 156.164187][ T7131] vhci_hcd: connection closed [ 156.169858][ T36] vhci_hcd: stop threads [ 156.215007][ T36] vhci_hcd: release socket [ 156.250948][ T36] vhci_hcd: disconnect device [ 156.572127][ T7177] overlayfs: missing 'lowerdir' [ 156.727340][ T7177] rdma_rxe: rxe_newlink: failed to add lo [ 156.975452][ T5924] usb 3-1: USB disconnect, device number 5 [ 157.191928][ T5903] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.363334][ T5903] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.403024][ T5903] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58415, setting to 1024 [ 157.420753][ T5903] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 157.447293][ T5903] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.480757][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.509138][ T7183] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.525696][ T5903] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.151276][ T5903] usb 5-1: USB disconnect, device number 16 [ 158.232522][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.244567][ T5862] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 158.319724][ T5889] vhci_hcd: vhci_device speed not set [ 158.332326][ T5862] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 158.419702][ T30] audit: type=1400 audit(1751424825.484:541): avc: denied { connect } for pid=7207 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.837931][ T7214] mkiss: ax0: crc mode is auto. [ 158.883814][ T7216] overlayfs: missing 'lowerdir' [ 158.890310][ T7216] rdma_rxe: rxe_newlink: failed to add lo [ 159.272519][ T5903] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.353227][ T7214] tmpfs: Unknown parameter 'grpquota_block_Ý®ë5±Ÿ¼Õé—¿JôJ [ 159.353227][ T7214] f‹Vò/xñ' [ 159.482526][ T5903] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.238105][ T5903] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58415, setting to 1024 [ 160.318299][ T5903] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 160.330073][ T30] audit: type=1400 audit(1751424826.614:542): avc: denied { setopt } for pid=7223 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.391162][ T5903] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.400285][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.471055][ T5817] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.471237][ T9] usb usb42-port1: attempt power cycle [ 160.495409][ T7219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.500068][ T5862] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 160.505352][ T5903] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.663813][ T5862] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 160.744758][ T5903] usb 5-1: USB disconnect, device number 17 [ 161.224264][ T9] usb usb42-port1: unable to enumerate USB device [ 161.750913][ T5903] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 161.890877][ T5903] usb 5-1: device descriptor read/64, error -71 [ 162.141016][ T5903] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 162.285555][ T30] audit: type=1400 audit(1751424829.354:543): avc: denied { write } for pid=7272 comm="syz.0.330" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.290953][ T5903] usb 5-1: device descriptor read/64, error -71 [ 162.583094][ T5903] usb usb5-port1: attempt power cycle [ 162.617309][ T7276] overlayfs: missing 'lowerdir' [ 162.625685][ T7276] rdma_rxe: rxe_newlink: failed to add lo [ 162.711303][ T5862] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 162.713107][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 162.725912][ T5862] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 162.930885][ T5859] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.963363][ T5903] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 163.003717][ T5903] usb 5-1: device descriptor read/8, error -71 [ 163.093246][ T5859] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.111173][ T5859] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58415, setting to 1024 [ 163.133454][ T5859] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 163.145468][ T5859] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.155824][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.168619][ T7279] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.177703][ T5859] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.188268][ T7285] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 163.197754][ T7285] usb usb8: usbfs: process 7285 (syz.0.332) did not claim interface 0 before use [ 163.340903][ T5903] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 163.398683][ T5859] usb 3-1: USB disconnect, device number 6 [ 163.421334][ T5903] usb 5-1: device descriptor read/8, error -71 [ 163.546468][ T5903] usb usb5-port1: unable to enumerate USB device [ 164.079447][ T30] audit: type=1400 audit(1751424831.144:544): avc: denied { setopt } for pid=7290 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.743354][ T7307] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 164.886770][ T7308] syz.4.339: attempt to access beyond end of device [ 164.886770][ T7308] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 164.930704][ T7308] syz.4.339: attempt to access beyond end of device [ 164.930704][ T7308] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 164.966923][ T7308] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.982118][ T7308] syz.4.339: attempt to access beyond end of device [ 164.982118][ T7308] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 165.058722][ T7308] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 165.098805][ T7308] syz.4.339: attempt to access beyond end of device [ 165.098805][ T7308] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 165.252937][ T30] audit: type=1400 audit(1751424832.294:545): avc: denied { mount } for pid=7309 comm="syz.2.340" name="/" dev="ramfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 165.297208][ T7308] syz.4.339: attempt to access beyond end of device [ 165.297208][ T7308] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 165.315419][ T7308] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 165.341796][ T7318] random: crng reseeded on system resumption [ 165.347662][ T30] audit: type=1400 audit(1751424832.414:546): avc: denied { append } for pid=7317 comm="syz.2.342" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.373761][ T7308] syz.4.339: attempt to access beyond end of device [ 165.373761][ T7308] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 165.392433][ T7308] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 165.409587][ T7308] syz.4.339: attempt to access beyond end of device [ 165.409587][ T7308] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 165.423334][ T7308] syz.4.339: attempt to access beyond end of device [ 165.423334][ T7308] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 165.436808][ T7308] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 165.446873][ T30] audit: type=1400 audit(1751424832.414:547): avc: denied { open } for pid=7317 comm="syz.2.342" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.470909][ T30] audit: type=1400 audit(1751424832.464:548): avc: denied { mount } for pid=7317 comm="syz.2.342" name="/" dev="configfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 165.560938][ T7308] syz.4.339: attempt to access beyond end of device [ 165.560938][ T7308] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 165.578515][ T7308] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 165.595082][ T7308] syz.4.339: attempt to access beyond end of device [ 165.595082][ T7308] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 165.610257][ T7308] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 165.622469][ T7308] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 165.632064][ T7308] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 165.651579][ T30] audit: type=1400 audit(1751424832.474:549): avc: denied { search } for pid=7317 comm="syz.2.342" name="/" dev="configfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.248462][ T30] audit: type=1400 audit(1751424833.314:550): avc: denied { mount } for pid=7324 comm="syz.0.344" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 166.600722][ T30] audit: type=1400 audit(1751424833.344:551): avc: denied { search } for pid=7324 comm="syz.0.344" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.670174][ T30] audit: type=1400 audit(1751424833.354:552): avc: denied { search } for pid=7324 comm="syz.0.344" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.718051][ T30] audit: type=1400 audit(1751424833.354:553): avc: denied { search } for pid=7324 comm="syz.0.344" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.934779][ T5817] Bluetooth: hci0: command tx timeout [ 167.068294][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.347'. [ 169.717341][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 169.747906][ T7366] bridge1: port 1(veth0_to_bond) entered blocking state [ 169.756574][ T7366] bridge1: port 1(veth0_to_bond) entered disabled state [ 169.764735][ T7366] veth0_to_bond: entered allmulticast mode [ 169.771453][ T7366] veth0_to_bond: entered promiscuous mode [ 169.783773][ T7366] vlan2: entered allmulticast mode [ 169.789304][ T7366] veth1: entered allmulticast mode [ 169.794810][ T5889] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.801093][ T7366] bridge1: port 2(vlan2) entered blocking state [ 169.808573][ T7366] bridge1: port 2(vlan2) entered disabled state [ 169.816695][ T7366] vlan2: entered promiscuous mode [ 169.821952][ T7366] veth1: entered promiscuous mode [ 169.829880][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 169.953667][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.980254][ T5889] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.001160][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.010233][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.021980][ T7364] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 170.040204][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.264289][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 170.264323][ T30] audit: type=1400 audit(1751424837.324:678): avc: denied { map } for pid=7376 comm="syz.2.358" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 170.323159][ T30] audit: type=1400 audit(1751424837.324:679): avc: denied { execute } for pid=7376 comm="syz.2.358" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 170.687234][ T5889] usb 1-1: USB disconnect, device number 8 [ 170.895223][ T7382] bio_check_eod: 2 callbacks suppressed [ 170.895234][ T7382] syz.2.359: attempt to access beyond end of device [ 170.895234][ T7382] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 170.914321][ T7382] qnx6: unable to read the first superblock [ 170.920312][ T7382] syz.2.359: attempt to access beyond end of device [ 170.920312][ T7382] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 170.933749][ T7382] qnx6: unable to read the first superblock [ 170.939635][ T7382] qnx6: unable to read the first superblock [ 171.886168][ T7396] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.902100][ T7396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 171.910589][ T7396] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.920900][ T7396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 172.384780][ T30] audit: type=1326 audit(1751424839.434:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.2.367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff3a38e929 code=0x0 [ 173.057899][ T7412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.133864][ T7412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.184065][ T7412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.214602][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 173.262227][ T7412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.306320][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 173.370554][ T7412] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.383846][ T7412] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.396092][ T7412] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.408378][ T7412] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.580697][ T30] audit: type=1400 audit(1751424840.644:681): avc: denied { bind } for pid=7424 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.590420][ T7425] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 175.089477][ T7441] netlink: 'syz.2.378': attribute type 4 has an invalid length. [ 175.319687][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 175.328653][ T7440] openvswitch: netlink: Flow key attr not present in new flow. [ 175.608355][ T30] audit: type=1400 audit(1751424842.674:682): avc: denied { view } for pid=7445 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 175.711183][ T5903] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.872439][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.883391][ T5903] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.892613][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.902195][ T5903] usb 3-1: config 0 descriptor?? [ 176.316182][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.325831][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.764401][ T30] audit: type=1400 audit(1751424843.834:683): avc: denied { getopt } for pid=7456 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 177.097124][ T7459] netlink: 'syz.0.384': attribute type 4 has an invalid length. [ 177.104971][ T7459] netlink: 152 bytes leftover after parsing attributes in process `syz.0.384'. [ 178.138285][ T30] audit: type=1400 audit(1751424845.204:684): avc: denied { ioctl } for pid=7464 comm="syz.0.386" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 178.869493][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 178.875570][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 178.885422][ T5903] usb 3-1: USB disconnect, device number 7 [ 179.103577][ T30] audit: type=1400 audit(1751424846.174:685): avc: denied { read } for pid=7471 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.240931][ T5903] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.390875][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 179.399161][ T5903] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 179.408452][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.417105][ T5903] usb 3-1: Product: syz [ 179.421521][ T5903] usb 3-1: Manufacturer: syz [ 179.426108][ T5903] usb 3-1: SerialNumber: syz [ 179.432761][ T5903] usb 3-1: config 0 descriptor?? [ 179.444876][ T5903] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 180.390159][ T7479] 9pnet_fd: Insufficient options for proto=fd [ 181.473406][ T5903] gspca_ov534_9: reg_r err -71 [ 181.539533][ T7483] evm: overlay not supported [ 181.611577][ T30] audit: type=1400 audit(1751424848.534:686): avc: denied { getopt } for pid=7468 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.800972][ T5903] gspca_ov534_9: Unknown sensor 0000 [ 181.801055][ T5903] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 181.851043][ T5903] usb 3-1: USB disconnect, device number 8 [ 182.385310][ T7491] FAULT_INJECTION: forcing a failure. [ 182.385310][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 182.398749][ T7491] CPU: 0 UID: 0 PID: 7491 Comm: syz.0.394 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 182.398773][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.398782][ T7491] Call Trace: [ 182.398788][ T7491] [ 182.398795][ T7491] dump_stack_lvl+0x16c/0x1f0 [ 182.398825][ T7491] should_fail_ex+0x512/0x640 [ 182.398848][ T7491] ? __kvmalloc_node_noprof+0x124/0x620 [ 182.398873][ T7491] should_failslab+0xc2/0x120 [ 182.398899][ T7491] __kvmalloc_node_noprof+0x137/0x620 [ 182.398919][ T7491] ? __pfx___might_resched+0x10/0x10 [ 182.398942][ T7491] ? fuse_dev_splice_read+0x10a/0x700 [ 182.398967][ T7491] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 182.398989][ T7491] ? fuse_dev_splice_read+0x10a/0x700 [ 182.399009][ T7491] fuse_dev_splice_read+0x10a/0x700 [ 182.399038][ T7491] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 182.399072][ T7491] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 182.399094][ T7491] do_splice_read+0x285/0x370 [ 182.399119][ T7491] splice_file_to_pipe+0x109/0x120 [ 182.399144][ T7491] do_splice+0x118c/0x1fc0 [ 182.399168][ T7491] ? __lock_acquire+0x622/0x1c90 [ 182.399203][ T7491] ? __pfx_do_splice+0x10/0x10 [ 182.399223][ T7491] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 182.399246][ T7491] ? find_held_lock+0x2b/0x80 [ 182.399269][ T7491] __do_splice+0x15d/0x360 [ 182.399294][ T7491] ? __pfx___do_splice+0x10/0x10 [ 182.399323][ T7491] __x64_sys_splice+0x187/0x250 [ 182.399350][ T7491] do_syscall_64+0xcd/0x4c0 [ 182.399377][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.399394][ T7491] RIP: 0033:0x7f741fd8e929 [ 182.399410][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.399426][ T7491] RSP: 002b:00007f7420c94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 182.399442][ T7491] RAX: ffffffffffffffda RBX: 00007f741ffb6080 RCX: 00007f741fd8e929 [ 182.399454][ T7491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 182.399463][ T7491] RBP: 00007f7420c94090 R08: 0000000000002000 R09: 0000000000000000 [ 182.399474][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.399484][ T7491] R13: 0000000000000000 R14: 00007f741ffb6080 R15: 00007ffc4e02c928 [ 182.399507][ T7491] [ 183.019664][ T30] audit: type=1400 audit(1751424850.084:687): avc: denied { shutdown } for pid=7503 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.187247][ T7523] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 185.195802][ T7523] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 185.204150][ T7523] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 185.212059][ T7523] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 186.162383][ T7534] FAULT_INJECTION: forcing a failure. [ 186.162383][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 186.176340][ T7534] CPU: 0 UID: 0 PID: 7534 Comm: syz.0.405 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 186.176364][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.176375][ T7534] Call Trace: [ 186.176381][ T7534] [ 186.176386][ T7534] dump_stack_lvl+0x16c/0x1f0 [ 186.176414][ T7534] should_fail_ex+0x512/0x640 [ 186.176439][ T7534] should_failslab+0xc2/0x120 [ 186.176461][ T7534] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 186.176485][ T7534] ? sidtab_sid2str_get+0x17a/0x680 [ 186.176512][ T7534] kmemdup_noprof+0x29/0x60 [ 186.176533][ T7534] sidtab_sid2str_get+0x17a/0x680 [ 186.176558][ T7534] sidtab_entry_to_string+0x33/0x110 [ 186.176581][ T7534] security_sid_to_context_core+0x35c/0x640 [ 186.176605][ T7534] avc_audit_post_callback+0x109/0x8f0 [ 186.176630][ T7534] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 186.176655][ T7534] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 186.176677][ T7534] ? skb_put+0x138/0x1b0 [ 186.176693][ T7534] ? audit_log_n_string+0x253/0x540 [ 186.176716][ T7534] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 186.176738][ T7534] common_lsm_audit+0x24b/0x300 [ 186.176765][ T7534] ? __pfx_common_lsm_audit+0x10/0x10 [ 186.176787][ T7534] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 186.176809][ T7534] ? avc_update_node.isra.0+0x4c0/0xb60 [ 186.176836][ T7534] slow_avc_audit+0x186/0x210 [ 186.176862][ T7534] ? __pfx_slow_avc_audit+0x10/0x10 [ 186.176889][ T7534] ? avc_denied+0x14a/0x190 [ 186.176915][ T7534] ? avc_has_perm_noaudit+0x306/0x3b0 [ 186.176943][ T7534] avc_has_perm+0x18b/0x1c0 [ 186.176960][ T7534] ? __pfx_avc_has_perm+0x10/0x10 [ 186.176975][ T7534] ? find_held_lock+0x2b/0x80 [ 186.176996][ T7534] ? avc_has_perm_noaudit+0x117/0x3b0 [ 186.177023][ T7534] inode_has_perm+0x168/0x1d0 [ 186.177042][ T7534] file_has_perm+0x2e4/0x350 [ 186.177060][ T7534] ? __pfx_file_has_perm+0x10/0x10 [ 186.177086][ T7534] file_map_prot_check+0x24e/0x360 [ 186.177105][ T7534] selinux_mmap_file+0x143/0x1b0 [ 186.177121][ T7534] ? __pfx_selinux_mmap_file+0x10/0x10 [ 186.177138][ T7534] ? trace_kmem_cache_alloc+0x28/0xc0 [ 186.177165][ T7534] ? lockdep_init_map_type+0x5c/0x280 [ 186.177193][ T7534] security_mmap_file+0x82a/0x990 [ 186.177217][ T7534] vm_mmap_pgoff+0xec/0x450 [ 186.177243][ T7534] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 186.177265][ T7534] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 186.177282][ T7534] ? hugetlbfs_get_inode+0x31f/0x730 [ 186.177307][ T7534] ksys_mmap_pgoff+0x1c8/0x5c0 [ 186.177336][ T7534] __x64_sys_mmap+0x125/0x190 [ 186.177362][ T7534] do_syscall_64+0xcd/0x4c0 [ 186.177387][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.177403][ T7534] RIP: 0033:0x7f741fd8e929 [ 186.177417][ T7534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.177432][ T7534] RSP: 002b:00007f7420cb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 186.177448][ T7534] RAX: ffffffffffffffda RBX: 00007f741ffb5fa0 RCX: 00007f741fd8e929 [ 186.177458][ T7534] RDX: 0000000001000005 RSI: 0000000000c00000 RDI: 0000200000400000 [ 186.177468][ T7534] RBP: 00007f7420cb5090 R08: ffffffffffffffff R09: 0000000000000000 [ 186.177477][ T7534] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000002 [ 186.177487][ T7534] R13: 0000000000000000 R14: 00007f741ffb5fa0 R15: 00007ffc4e02c928 [ 186.177509][ T7534] [ 186.189652][ T30] audit: type=1400 audit(1751424853.234:688): avc: denied { execute } for pid=7533 comm="syz.0.405" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14628 ssid=148 tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 189.874141][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'. [ 191.109519][ T7580] syzkaller1: entered promiscuous mode [ 191.129311][ T7580] syzkaller1: entered allmulticast mode [ 191.591756][ T7590] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 191.902637][ T30] audit: type=1400 audit(1751424858.944:689): avc: denied { mount } for pid=7583 comm="syz.2.417" name="/" dev="autofs" ino=15795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 192.693854][ T30] audit: type=1400 audit(1751424859.764:690): avc: denied { create } for pid=5808 comm="syz-executor" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.717745][ T30] audit: type=1400 audit(1751424859.764:691): avc: denied { link } for pid=5808 comm="syz-executor" name="#b" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.752405][ T30] audit: type=1400 audit(1751424859.764:692): avc: denied { rename } for pid=5808 comm="syz-executor" name="#c" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.946888][ T30] audit: type=1400 audit(1751424860.014:693): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 193.558953][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 193.569215][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.576660][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.586097][ T7602] bridge0: entered promiscuous mode [ 193.823625][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.830214][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.101889][ T7606] can0: slcan on ttyS3. [ 194.931726][ T7606] can0 (unregistered): slcan off ttyS3. [ 195.123975][ T7614] netlink: ct family unspecified [ 195.129041][ T7614] openvswitch: netlink: Actions may not be safe on all matching packets [ 195.169080][ T7614] pvfs2: Unknown parameter 'acÿÿ' [ 195.777033][ T7618] SELinux: policydb magic number 0x61637876 does not match expected magic number 0xf97cff8c [ 195.787417][ T7618] SELinux: failed to load policy [ 195.793135][ T30] audit: type=1400 audit(1751424862.844:694): avc: denied { load_policy } for pid=7615 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 200.440876][ T5924] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.591040][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 200.597592][ T5924] usb 1-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 200.607948][ T5924] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.617230][ T5924] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 200.627280][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.638797][ T5924] usb 1-1: config 0 descriptor?? [ 202.081071][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 202.250898][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 202.258940][ T24] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 202.268209][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.276254][ T24] usb 3-1: Product: syz [ 202.280407][ T24] usb 3-1: Manufacturer: syz [ 202.285023][ T24] usb 3-1: SerialNumber: syz [ 202.291117][ T24] usb 3-1: config 0 descriptor?? [ 202.297914][ T24] go7007 3-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 202.499573][ T24] usb 3-1: USB disconnect, device number 9 [ 202.985468][ T9] usb 1-1: USB disconnect, device number 9 [ 203.120338][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 203.129190][ T7662] bridge_slave_1: left allmulticast mode [ 203.134852][ T7662] bridge_slave_1: left promiscuous mode [ 203.140514][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.150999][ T7662] bridge_slave_0: left allmulticast mode [ 203.156672][ T7662] bridge_slave_0: left promiscuous mode [ 203.162518][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.420922][ T1536] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 205.590925][ T1536] usb 3-1: device descriptor read/64, error -71 [ 205.830997][ T1536] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 205.981245][ T1536] usb 3-1: device descriptor read/64, error -71 [ 206.103834][ T1536] usb usb3-port1: attempt power cycle [ 206.440852][ T1536] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 206.485481][ T1536] usb 3-1: device descriptor read/8, error -71 [ 206.910903][ T1536] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 206.931423][ T1536] usb 3-1: device descriptor read/8, error -71 [ 207.041484][ T1536] usb usb3-port1: unable to enumerate USB device [ 208.092271][ T30] audit: type=1400 audit(1751424875.154:695): avc: denied { bind } for pid=7698 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.144827][ T30] audit: type=1400 audit(1751424877.214:696): avc: denied { module_request } for pid=7716 comm="syz.0.452" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 210.261495][ T30] audit: type=1400 audit(1751424877.334:697): avc: denied { read } for pid=7721 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.566946][ T7726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.454'. [ 212.464217][ T7745] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.517462][ T7745] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.566379][ T7745] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.606838][ T7745] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.656499][ T7745] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.668640][ T7745] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.681004][ T7745] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.694721][ T7745] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.610885][ T5859] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 214.760882][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 214.773505][ T5859] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 214.785084][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.796697][ T5859] usb 3-1: Product: syz [ 214.801173][ T5859] usb 3-1: Manufacturer: syz [ 214.805902][ T5859] usb 3-1: SerialNumber: syz [ 214.818837][ T5859] usb 3-1: config 0 descriptor?? [ 214.830318][ T5859] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 215.257164][ T30] audit: type=1400 audit(1751424882.324:698): avc: denied { create } for pid=7767 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 215.277244][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.291595][ T30] audit: type=1400 audit(1751424882.324:699): avc: denied { getopt } for pid=7767 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 215.311136][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.854861][ T30] audit: type=1400 audit(1751424882.924:700): avc: denied { setcheckreqprot } for pid=7764 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 216.781292][ T7779] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.983062][ T7779] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.033875][ T7779] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.084121][ T7779] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.147082][ T7779] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.159872][ T7779] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.174709][ T7779] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.190159][ T7779] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.334969][ T5859] gspca_stk1135: reg_w 0x300 err -71 [ 217.342224][ T5859] gspca_stk1135: serial bus timeout: status=0x00 [ 217.348568][ T5859] gspca_stk1135: Sensor write failed [ 217.357294][ T5859] gspca_stk1135: serial bus timeout: status=0x00 [ 217.366365][ T5859] gspca_stk1135: Sensor write failed [ 217.372117][ T5859] gspca_stk1135: serial bus timeout: status=0x00 [ 217.378520][ T5859] gspca_stk1135: Sensor read failed [ 217.383800][ T5859] gspca_stk1135: serial bus timeout: status=0x00 [ 217.390129][ T5859] gspca_stk1135: Sensor read failed [ 217.395808][ T5859] gspca_stk1135: Detected sensor type unknown (0x0) [ 217.402621][ T5859] gspca_stk1135: serial bus timeout: status=0x00 [ 217.409036][ T5859] gspca_stk1135: Sensor read failed [ 217.414603][ T5859] gspca_stk1135: serial bus timeout: status=0x00 [ 217.421309][ T5859] gspca_stk1135: Sensor read failed [ 217.426548][ T5859] gspca_stk1135: serial bus timeout: status=0x00 [ 217.433554][ T5859] gspca_stk1135: Sensor write failed [ 217.438865][ T5859] gspca_stk1135: serial bus timeout: status=0x00 [ 217.445571][ T5859] gspca_stk1135: Sensor write failed [ 217.463822][ T5859] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 217.477885][ T5859] usb 3-1: USB disconnect, device number 14 [ 218.507541][ T30] audit: type=1400 audit(1751424885.574:701): avc: denied { getopt } for pid=7783 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.383066][ T30] audit: type=1400 audit(1751424886.454:702): avc: denied { read } for pid=7799 comm="syz.0.475" path="socket:[15104]" dev="sockfs" ino=15104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.685163][ T30] audit: type=1400 audit(1751424886.754:703): avc: denied { ioctl } for pid=7803 comm="syz.0.476" path="socket:[15113]" dev="sockfs" ino=15113 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.343787][ T7818] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 222.488103][ T7823] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 222.541911][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 222.718503][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00 [ 222.728143][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.755775][ T24] usb 3-1: config 0 descriptor?? [ 222.781366][ T5924] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.940927][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 222.947638][ T5924] usb 1-1: config 0 has no interfaces? [ 222.953869][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.962999][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.972924][ T5924] usb 1-1: config 0 descriptor?? [ 223.173768][ T24] wacom 0003:056A:0037.0007: unexpected long global item [ 223.181312][ T24] wacom 0003:056A:0037.0007: parse failed [ 223.187083][ T24] wacom 0003:056A:0037.0007: probe with driver wacom failed with error -22 [ 223.198840][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.207448][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.217570][ T5924] usb 1-1: string descriptor 0 read error: -71 [ 223.232280][ T5924] usb 1-1: USB disconnect, device number 10 [ 223.377507][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.386150][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.395064][ T7817] IPVS: length: 56 != 8 [ 223.650871][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.822401][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 223.830598][ T24] usb 1-1: config 0 has no interface number 0 [ 223.838465][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 223.846989][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=69.ee [ 223.856169][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.864222][ T24] usb 1-1: Product: syz [ 223.868385][ T24] usb 1-1: Manufacturer: syz [ 223.873055][ T24] usb 1-1: SerialNumber: syz [ 223.880309][ T24] usb 1-1: config 0 descriptor?? [ 223.888821][ T24] ttusbir 1-1:0.184: cannot find expected altsetting [ 224.090222][ T5924] usb 1-1: USB disconnect, device number 11 [ 224.732354][ T30] audit: type=1326 audit(1751424891.804:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 224.760584][ T30] audit: type=1326 audit(1751424891.804:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 224.785707][ T30] audit: type=1326 audit(1751424891.824:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 224.810538][ T30] audit: type=1326 audit(1751424891.824:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 224.836742][ T30] audit: type=1326 audit(1751424891.824:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 224.863065][ T30] audit: type=1326 audit(1751424891.824:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 224.891046][ T30] audit: type=1326 audit(1751424891.824:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 224.914973][ T30] audit: type=1326 audit(1751424891.824:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 225.000480][ T30] audit: type=1326 audit(1751424891.824:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 225.038262][ T30] audit: type=1326 audit(1751424891.824:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741fd8e929 code=0x7ffc0000 [ 225.311555][ T5924] usb 3-1: USB disconnect, device number 15 [ 227.630864][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 227.800916][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 227.808060][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 227.816533][ T24] usb 3-1: config 179 has no interface number 0 [ 227.822954][ T24] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 227.834222][ T24] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 227.845644][ T24] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.856866][ T24] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 227.866956][ T24] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 227.880313][ T24] usb 3-1: config 179 interface 65 has no altsetting 0 [ 227.887513][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 227.896598][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.918959][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15 [ 228.663627][ T7865] netlink: 36 bytes leftover after parsing attributes in process `syz.0.491'. [ 228.723575][ T5903] usb 3-1: USB disconnect, device number 16 [ 228.723608][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 228.757949][ T5903] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 229.278847][ T7876] syz.2.492: attempt to access beyond end of device [ 229.278847][ T7876] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 229.291805][ T7876] vxfs: unable to read disk superblock at 1 [ 229.297883][ T7876] syz.2.492: attempt to access beyond end of device [ 229.297883][ T7876] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 229.310614][ T7876] vxfs: unable to read disk superblock at 8 [ 229.316583][ T7876] vxfs: can't find superblock. [ 229.326133][ T7871] netlink: 512 bytes leftover after parsing attributes in process `syz.0.491'. [ 229.607323][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 229.881372][ T5903] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.060850][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 230.070177][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.079114][ T5903] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 230.088484][ T5903] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 230.099909][ T5903] usb 1-1: config 7 has no interface number 0 [ 230.107390][ T5903] usb 1-1: config 7 interface 187 has no altsetting 0 [ 230.117034][ T5903] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 230.129227][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.141081][ T5903] usb 1-1: Product: syz [ 230.146850][ T5903] usb 1-1: Manufacturer: syz [ 230.152145][ T5903] usb 1-1: SerialNumber: syz [ 230.380138][ T5903] usb 1-1: Not enough endpoints found in device, aborting! [ 255.193952][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.200255][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.631685][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 300.639265][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 300.647245][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.656125][ T31] task:kworker/0:1 state:D stack:24216 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 300.668192][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 300.674894][ T31] Call Trace: [ 300.678152][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 300.681420][ T31] __schedule+0x116a/0x5de0 [ 300.686293][ T31] ? __pfx___schedule+0x10/0x10 [ 300.691224][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 300.696614][ T31] ? find_held_lock+0x2b/0x80 [ 300.701344][ T31] ? schedule+0x2d7/0x3a0 [ 300.705691][ T31] schedule+0xe7/0x3a0 [ 300.709766][ T31] schedule_preempt_disabled+0x13/0x30 [ 300.715544][ T31] __mutex_lock+0x6c7/0xb90 [ 300.720069][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 300.726491][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 300.731706][ T31] ? irqentry_exit+0x3b/0x90 [ 300.741120][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 300.747494][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 300.766207][ T31] process_one_work+0x9cf/0x1b70 [ 300.772199][ T31] ? __pfx_process_one_work+0x10/0x10 [ 300.777596][ T31] ? assign_work+0x1a0/0x250 [ 300.795172][ T31] worker_thread+0x6c8/0xf10 [ 300.799815][ T31] ? __pfx_worker_thread+0x10/0x10 [ 300.805476][ T31] kthread+0x3c2/0x780 [ 300.809562][ T31] ? __pfx_kthread+0x10/0x10 [ 300.815511][ T31] ? rcu_is_watching+0x12/0xc0 [ 300.820303][ T31] ? __pfx_kthread+0x10/0x10 [ 300.825089][ T31] ret_from_fork+0x5d4/0x6f0 [ 300.829685][ T31] ? __pfx_kthread+0x10/0x10 [ 300.834326][ T31] ret_from_fork_asm+0x1a/0x30 [ 300.839094][ T31] [ 300.842305][ T31] INFO: task syz.3.298:7049 blocked for more than 143 seconds. [ 300.849829][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 300.857549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.866232][ T31] task:syz.3.298 state:D stack:25512 pid:7049 tgid:7049 ppid:5813 task_flags:0x400040 flags:0x00004006 [ 300.879564][ T31] Call Trace: [ 300.882931][ T31] [ 300.885884][ T31] __schedule+0x116a/0x5de0 [ 300.890404][ T31] ? __lock_acquire+0x622/0x1c90 [ 300.895391][ T31] ? __pfx___schedule+0x10/0x10 [ 300.900243][ T31] ? find_held_lock+0x2b/0x80 [ 300.905045][ T31] ? schedule+0x2d7/0x3a0 [ 300.909396][ T31] schedule+0xe7/0x3a0 [ 300.913513][ T31] schedule_preempt_disabled+0x13/0x30 [ 300.918975][ T31] __mutex_lock+0x6c7/0xb90 [ 300.923518][ T31] ? rfkill_unregister+0xec/0x2c0 [ 300.928542][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 300.933732][ T31] ? device_del+0x6b6/0x9f0 [ 300.938239][ T31] ? __pfx_device_del+0x10/0x10 [ 300.943267][ T31] ? rfkill_unregister+0xec/0x2c0 [ 300.948291][ T31] rfkill_unregister+0xec/0x2c0 [ 300.953316][ T31] nfc_unregister_device+0x94/0x330 [ 300.958519][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 300.964314][ T31] virtual_ncidev_close+0x4b/0xa0 [ 300.969343][ T31] __fput+0x402/0xb70 [ 300.973467][ T31] task_work_run+0x150/0x240 [ 300.978071][ T31] ? __pfx_task_work_run+0x10/0x10 [ 300.983876][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 300.989610][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 300.995056][ T31] do_syscall_64+0x3f6/0x4c0 [ 300.999656][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.005611][ T31] RIP: 0033:0x7ff16498e929 [ 301.010025][ T31] RSP: 002b:00007ffc540bb148 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 301.019683][ T31] RAX: 0000000000000000 RBX: 00007ff164bb7ba0 RCX: 00007ff16498e929 [ 301.027683][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 301.035720][ T31] RBP: 00007ff164bb7ba0 R08: 0000000000000218 R09: 0000001d540bb43f [ 301.043856][ T31] R10: 00007ff164bb7ac0 R11: 0000000000000246 R12: 0000000000024b57 [ 301.051916][ T31] R13: 00007ffc540bb240 R14: ffffffffffffffff R15: 00007ffc540bb260 [ 301.059894][ T31] [ 301.062957][ T31] [ 301.062957][ T31] Showing all locks held in the system: [ 301.070674][ T31] 3 locks held by kworker/0:1/10: [ 301.075752][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 301.086257][ T31] #1: ffffc900000f7d10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 301.099153][ T31] #2: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 301.110579][ T31] 1 lock held by khungtaskd/31: [ 301.115554][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 301.126241][ T31] 2 locks held by kworker/u8:6/1155: [ 301.131577][ T31] 2 locks held by getty/5573: [ 301.136243][ T31] #0: ffff8880369f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 301.146010][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 301.156151][ T31] 4 locks held by kworker/0:3/5862: [ 301.161500][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 301.171992][ T31] #1: ffffc900032d7d10 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 301.182421][ T31] #2: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 301.191967][ T31] #3: ffff88807b42d100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 301.201088][ T31] 2 locks held by syz.3.298/7049: [ 301.206101][ T31] #0: ffff88807b42d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 301.215863][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 301.225992][ T31] 2 locks held by syz.1.336/7301: [ 301.231044][ T31] #0: ffff8880250270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 301.240827][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 301.250786][ T31] 2 locks held by syz-executor/7319: [ 301.256062][ T31] #0: ffff888033863118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 301.265511][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 301.279034][ T31] 2 locks held by syz.4.351/7351: [ 301.284115][ T31] #0: ffff888029c750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 301.293890][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 301.303826][ T31] 2 locks held by syz-executor/7474: [ 301.309109][ T31] #0: ffff88807a8d4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 301.318534][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 301.328495][ T31] 2 locks held by syz-executor/7505: [ 301.333801][ T31] #0: ffff888028068918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 301.343246][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 301.353323][ T31] 2 locks held by syz-executor/7830: [ 301.358610][ T31] #0: ffff88802ad08118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 301.368041][ T31] #1: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 301.378007][ T31] 1 lock held by syz.0.494/7883: [ 301.383081][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.391559][ T31] 1 lock held by syz.0.494/7884: [ 301.396493][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.404980][ T31] 3 locks held by syz.0.494/7893: [ 301.409990][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.418432][ T31] #1: ffff8880285b9100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 301.428044][ T31] #2: ffffffff907edd28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 301.438264][ T31] 1 lock held by syz.2.498/7901: [ 301.443227][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.451673][ T31] 1 lock held by syz-executor/7904: [ 301.456855][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.465324][ T31] 1 lock held by syz-executor/7906: [ 301.470511][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.478965][ T31] 1 lock held by syz-executor/7908: [ 301.484191][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.492778][ T31] 1 lock held by syz-executor/7910: [ 301.497980][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.506449][ T31] 1 lock held by syz-executor/7912: [ 301.511765][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.520224][ T31] 1 lock held by syz-executor/7918: [ 301.525474][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 301.534051][ T31] [ 301.536364][ T31] ============================================= [ 301.536364][ T31] [ 301.546904][ T31] NMI backtrace for cpu 0 [ 301.546918][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 301.546940][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.546950][ T31] Call Trace: [ 301.546956][ T31] [ 301.546963][ T31] dump_stack_lvl+0x116/0x1f0 [ 301.546993][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 301.547014][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 301.547039][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 301.547060][ T31] watchdog+0xf70/0x12c0 [ 301.547084][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.547101][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 301.547126][ T31] ? __kthread_parkme+0x19e/0x250 [ 301.547150][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.547168][ T31] kthread+0x3c2/0x780 [ 301.547183][ T31] ? __pfx_kthread+0x10/0x10 [ 301.547200][ T31] ? rcu_is_watching+0x12/0xc0 [ 301.547221][ T31] ? __pfx_kthread+0x10/0x10 [ 301.547237][ T31] ret_from_fork+0x5d4/0x6f0 [ 301.547261][ T31] ? __pfx_kthread+0x10/0x10 [ 301.547277][ T31] ret_from_fork_asm+0x1a/0x30 [ 301.547306][ T31] [ 301.547312][ T31] Sending NMI from CPU 0 to CPUs 1: [ 301.666775][ C1] NMI backtrace for cpu 1 [ 301.666789][ C1] CPU: 1 UID: 0 PID: 3549 Comm: kworker/u8:8 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 301.666808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.666817][ C1] Workqueue: bat_events batadv_nc_worker [ 301.666838][ C1] RIP: 0010:rcu_is_watching+0x12/0xc0 [ 301.666857][ C1] Code: 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 03 83 2b 12 e8 ae 87 df 09 <48> c7 c3 28 12 ce 93 89 c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed [ 301.666871][ C1] RSP: 0018:ffffc9000cf37a98 EFLAGS: 00000286 [ 301.666882][ C1] RAX: 0000000000000001 RBX: ffffffff8e5c4940 RCX: 0000000000000002 [ 301.666891][ C1] RDX: 0000000000000000 RSI: ffffffff8c157c20 RDI: ffffffff8c157c60 [ 301.666900][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 301.666908][ C1] R10: 0000000000000400 R11: 0000000000000001 R12: 0000000000000000 [ 301.666917][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.666924][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 301.666938][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.666947][ C1] CR2: 00007ffe79c8efec CR3: 000000000e382000 CR4: 00000000003526f0 [ 301.666956][ C1] Call Trace: [ 301.666961][ C1] [ 301.666968][ C1] lock_acquire+0x2cd/0x350 [ 301.666988][ C1] ? batadv_nc_worker+0x895/0x1030 [ 301.667006][ C1] batadv_nc_worker+0x16a/0x1030 [ 301.667022][ C1] ? batadv_nc_worker+0x159/0x1030 [ 301.667038][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 301.667058][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 301.667077][ C1] ? rcu_is_watching+0x12/0xc0 [ 301.667093][ C1] process_one_work+0x9cf/0x1b70 [ 301.667110][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 301.667129][ C1] ? __pfx_process_one_work+0x10/0x10 [ 301.667145][ C1] ? assign_work+0x1a0/0x250 [ 301.667166][ C1] worker_thread+0x6c8/0xf10 [ 301.667182][ C1] ? __kthread_parkme+0x19e/0x250 [ 301.667200][ C1] ? __pfx_worker_thread+0x10/0x10 [ 301.667213][ C1] kthread+0x3c2/0x780 [ 301.667226][ C1] ? __pfx_kthread+0x10/0x10 [ 301.667238][ C1] ? rcu_is_watching+0x12/0xc0 [ 301.667253][ C1] ? __pfx_kthread+0x10/0x10 [ 301.667265][ C1] ret_from_fork+0x5d4/0x6f0 [ 301.667283][ C1] ? __pfx_kthread+0x10/0x10 [ 301.667294][ C1] ret_from_fork_asm+0x1a/0x30 [ 301.667313][ C1] [ 301.668063][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 301.912807][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 301.924612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.934653][ T31] Call Trace: [ 301.937916][ T31] [ 301.940834][ T31] dump_stack_lvl+0x3d/0x1f0 [ 301.945421][ T31] panic+0x71c/0x800 [ 301.949310][ T31] ? __pfx_panic+0x10/0x10 [ 301.953717][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 301.959082][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 301.965064][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 301.970427][ T31] ? watchdog+0xdda/0x12c0 [ 301.974832][ T31] ? watchdog+0xdcd/0x12c0 [ 301.979235][ T31] watchdog+0xdeb/0x12c0 [ 301.983466][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.988130][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 301.993333][ T31] ? __kthread_parkme+0x19e/0x250 [ 301.998362][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.003024][ T31] kthread+0x3c2/0x780 [ 302.007079][ T31] ? __pfx_kthread+0x10/0x10 [ 302.011655][ T31] ? rcu_is_watching+0x12/0xc0 [ 302.016407][ T31] ? __pfx_kthread+0x10/0x10 [ 302.020980][ T31] ret_from_fork+0x5d4/0x6f0 [ 302.025559][ T31] ? __pfx_kthread+0x10/0x10 [ 302.030132][ T31] ret_from_fork_asm+0x1a/0x30 [ 302.034894][ T31] [ 302.038097][ T31] Kernel Offset: disabled [ 302.042399][ T31] Rebooting in 86400 seconds..