last executing test programs: 10.674969442s ago: executing program 0 (id=381): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x360c0) dup(r2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x1, 0xffda}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x801, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x3, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffffd, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x1000071, 0x7, 0x7, 0x80000001, 0x0, 0x5, 0x3c, 0x91, 0x7, 0x0, 0x3, 0x5, 0x7, 0x8, 0x0, 0x7e, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x1, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8001, 0x9, 0x1, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x19, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0xc681, 0x2, 0x7fff, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10005, 0x4, 0x1, 0x7, 0xb, 0xf, 0x48c93690, 0x3, 0xff], [0x4, 0x4, 0x0, 0x64e, 0x3e8, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x6, 0x5, 0x5, 0x2, 0x1ef, 0x5, 0x8, 0x86, 0xf, 0x665, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0xff, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x1004, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x8001, 0x6, 0x81, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8ad, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x40060a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x9, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0xe, 0x1, 0x10000, 0x1, 0x800008, 0x2b91, 0xa1f, 0x7ff, 0x3, 0x1, 0x6c1b, 0x0, 0xb, 0x5, 0x200c, 0x1, 0x200, 0xffff3441, 0xffff0001]}, 0x45c) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) read$FUSE(r3, 0x0, 0x0) 10.128606594s ago: executing program 1 (id=382): socket$kcm(0x21, 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) syz_usbip_server_init(0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8501, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e11", @ANYRES64=r1], 0xfc) 10.02063386s ago: executing program 4 (id=383): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x360c0) dup(r2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x1, 0xffda}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x801, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x3, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffffd, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x1000071, 0x7, 0x7, 0x80000001, 0x0, 0x5, 0x3c, 0x91, 0x7, 0x0, 0x3, 0x5, 0x7, 0x8, 0x0, 0x7e, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x1, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8001, 0x9, 0x1, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x19, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0xc681, 0x2, 0x7fff, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10005, 0x4, 0x1, 0x7, 0xb, 0xf, 0x48c93690, 0x3, 0xff], [0x4, 0x4, 0x0, 0x64e, 0x3e8, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x6, 0x5, 0x5, 0x2, 0x1ef, 0x5, 0x8, 0x86, 0xf, 0x665, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0xff, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x1004, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x8001, 0x6, 0x81, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x8ad, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x40060a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x9, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0xe, 0x1, 0x10000, 0x1, 0x800008, 0x2b91, 0xa1f, 0x7ff, 0x3, 0x1, 0x6c1b, 0x0, 0xb, 0x5, 0x200c, 0x1, 0x200, 0xffff3441, 0xffff0001]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 9.572040184s ago: executing program 4 (id=385): socket$kcm(0x10, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000), 0x4) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x4a, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x13, r4, 0x80000000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) 9.531932998s ago: executing program 0 (id=387): socket$kcm(0x21, 0x2, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x822b01) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 9.065461558s ago: executing program 1 (id=389): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x820800, &(0x7f0000000040)=ANY=[]) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x40001f00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000f00cc0002000600009a0618cb11a4d9176c140005000000", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)}, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000040002b06fefffffffdffffff017c0000040042801400018010000400cab1891c20b8d2a93521800a040002800d738831d7f13ea1bc1438caca1ae70349f831422301675a9027e41c97b4cc2b72def03e9be474ed7d449d43821afe07863cd03c9d76ecf9bd58f8602a3f842000407a62d6488d4a7a906790f8b064acc6c7a52599bf3aa1b4268785fd7fae6ec5db6c48f8e8666195844539b6e14d6e33e7915050ec35f6e3a5bc6a76940c42af69004549f174fc13173e8607e0e70f3a0453bbe73fece367fa64ee640d0e6b8bfc2e391387168f7765b3301516ab01"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7.623033162s ago: executing program 4 (id=391): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000080)={0xfffffffffffffe6a, 0x0, 0x1, 0x0, 0x0, 0x7}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x404042, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x7f, 0x1, 0x4, 0x0, 0x7}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008a}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f00000003c0)={0x40, 0x11, 0x86, {0x86, 0x2, "54595fe527c6887f63ee0a1a4394ff8083ae91ce74edf0ffd211fe9184696ac03e3cb7baac5f9a33c883cc2a3b054b7b458a9c186f39089ab7fad39ee0f4ca039a2fb69eada44c6157152ced2798498cfd063067aef461613ff5ff4bdc6a425fab5c92404ac372e3dc6fe17b2d2427ef297880f883dcedf7fcc0d98c9ad19c2985cf482c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe5, 0x60, 0x6, 0x7, "37dfb35f", "a49dbba5"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x80, 0xa, 0x9, 0x2, 0x8, 0x1ff}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xf8, "81fba33e3676e318ea0b47124e76d3b4fe9cb4c9726c916d7657f90f7d680adf378fe12393f44502eab4e07e153915ec1d2f8e9330ef14e0ba0c123ff688ea03448db3a4e3fc2947f55ce8d190c78c5f16fea304ec1dec415c8a9feffb501d555d1e52322d9c6068ab453f2c1482478d0e70f29718b777f960d781bac76383b282f782dfc225c878ac7e3cd6d704c440902f2c8de16f742b7a52ca81ade8df92f456ad48142ceb306b2f293115463e51b6027bfdf90493f64c0f97f56434257d8298582c8e8ef1a252061e7741f4ca18bc44831dec53eb3e5d5cacb381ed9a0d2f41ebca8ed7ec4c92b1ca67339a3b7cd879b3ef991e1f15"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0x0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x44}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "c19c"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000940)={0x40, 0x13, 0x6, @local}, &(0x7f0000000980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "1996"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x3}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 7.512526716s ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9, 0x3400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r4, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 7.205952604s ago: executing program 0 (id=395): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0002, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x57d, 0x5, 0x28, 0xf234}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x11) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.960193028s ago: executing program 0 (id=397): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x820800, &(0x7f0000000040)=ANY=[]) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x40001f00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000f00cc0002000600009a0618cb11a4d9176c140005000000", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)}, 0x11) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000040002b06fefffffffdffffff017c0000040042801400018010000400cab1891c20b8d2a93521800a040002800d738831d7f13ea1bc1438caca1ae70349f831422301675a9027e41c97b4cc2b72def03e9be474ed7d449d43821afe07863cd03c9d76ecf9bd58f8602a3f842000407a62d6488d4a7a906790f8b064acc6c7a52599bf3aa1b4268785fd7fae6ec5db6c48f8e8666195844539b6e14d6e33e7915050ec35f6e3a5bc6a76940c42af69004549f174fc13173e8607e0e70f3a0453bbe73fece367fa64ee640d0e6b8bfc2e391387168f7765b3301516ab01"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.871606988s ago: executing program 2 (id=399): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 5.087389735s ago: executing program 1 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000084) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xffffffff, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x1ff, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x64, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000702, r6, &(0x7f00000004c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x64, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 5.084809087s ago: executing program 3 (id=401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) 4.992431853s ago: executing program 2 (id=402): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c"], 0xc) r3 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) 3.800372988s ago: executing program 3 (id=403): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f00000006c0)=ANY=[], 0x174}, {&(0x7f0000000700)={0x12c0, 0x3b, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x119d, 0x13a, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @u32=0xe}, @generic="bd11f4d86c10f5507a139074d8a8e5bcc27eace58ba504ec26157c1daf9dec2334bd6dc35a2aa2a58b233a5985d8b6ab8e5b928d060c4d3eed8b30cb4d0e27543a5b1683398ea9aa4015d376eb69b58b43da92af8eaaf66d1fc6681ae424ae7c95e79647dcfe07ee10d86efc58fba983995ade65c45fe738ed0db2c2f7ca69c2eab815132bcc9ed3e4766f108aa699df304fa219522a0bbd0616adcfe7c3b89db52b00f26dd9bcae52e3c482d9d76a64afbe6cbeab6d2999bc12886ae1d5", @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="a235021fdd171dfe055653cd4989ab308d68fca94923bf5890b402d251c145730698c5e01b30ea8a46202be82f807f38d567bb7800d7ad51c2aa0deeb43888105c9b2b136f9f0342a9428109c37a1d34bc7979a5afc04f674551dc2b90a92af7f988d3edc79b21da553dd34a5bfde141ac796ef93abc3ca5bcb66d189759d617e4a416531859fe4f621584bb850ab910417f347cd0bec493afa9b58b1b13fc4fd92a013d5e1384cc1c27b29867dd5ae5016414f8fa1e56f96478510ceaea7a4e", @generic="231d2433d9494999866a3753746da71b390a87b98863d5d3c6f9c56beeac0c8fa96dae714a627102e919f3b38f1f541a6498aa8f213716df2ac93874079bb3573297c6a6175793101a05bd41961e8bd1592a6b01787b6bcac16b7a070268c8c1a3bb3e8566936ef2b127361f4a590ace6878e62aab3e1e8f6d97d04213bb6fc02646f0c22eceaafc3b2858a9c8c39b88872ee74843a11a1e277f57cbfee86bb13e23adf9c335d2db632c48e418e933433ac2f0c0840d1b13ea706c5d41cccca32cb74cb11412cdacbe92abea4af08c8ad3169705e3db081a71e29b86d6c0df6b57b08d2b88eeda4c5b163e4e56d4b1e1adcbbaa612d22974f185f20e2632108c69325534da33f321fb4d00bef03ad0dc1066f7b6e268f44006a5319f6e58915598cff21e006461dcc2d7d2336846a7b61342c88dd70fc2583ad726a67686eabedc4f51c0a24c04b4b30e3fa78591424c3762e669c069829ece201b6a107de1436e0e556bf3e6542779144e3e8adc3f3326527aaa431100978c6e39bf8a2c2f5e6ff09deb9407288f308a825d982cc3f7b69b84561491a868aad776184cfdc5bb659f4be64d99f5e768b02a885967e515fa62e305897838a42d2572bbeab0ae135e6aac7b06a53803436befa433a88844a304649d73bf1fbb60f61bbb47e61ba0f97219d9af255d11ddec00cf425039851a18fff471d9cb05dc04413647dfa89fa948ed95fb4fa674d0ee6634ba9fa009c7256ffbf191a00bb8552317a2955123f569644619f8edb0c6115f41e1ed8d0e26569386cdaa1aecf8d5d3210d9348e51426c694aaffc15ac018320ba8db9ae2b8fba64a241a9e109f9d898e0eac16656a5b95c0b20903090905748fd7b8991b4ef6c7ddcfc9ba1b213e803ceb976ce8a0d4c4c50db414eab08022c8dfdf4794f71980bf22aae7525869fe8af84c84f68e7d429baea8a2c26e67180d36d7cf1fe5d0a0c461b964b752e2b82df0222888d038e74999f86ae9cc6445bc14f47f178c459457b92534a69a13ad0360a369ae8a93c6936c1ebb5ae3b8a0e47fe26ea3cee1ba5c7bc944849035b8feb8ae0178a8c811c32a43b52f3224e8591f7a22e261990872a3166290e43c4ca8018642ccc113d7840ebe3d5e9d633f6e072e1f24398c6f482121125e9361973602c059e4beb4821b75a7f6750337232af6be74f5b1cfccd966d373b3e0b326583eb86803150e30817d173c995da05b79c8de8827cc61127829a74a0aae3aa5e2e8690e31ea4114c84230a67cf2f472e883934d7f2a68629cd4cf0d4ec2d726984ec99d24e348d9220b265f9a619711841c3b98bb5875e60205304771e289d2298a181b3e2d3a3c94aab6e0ddcba12143092f564eda4be32a5b9a90f6570523cfe94353ef082a30295fe1b465301d704530239a1f490feadb241487653259d1ede2459ed34219c708f670b0ac35bbbd11659dc3fcda8bce9b3b63e8e354a4e0d30ace8e804d0d150f17dc1aa6fcd4e17f5089cbe6d126b04a432e7a9d55b91f875423ce199652651e6d7e32f04a9330da863b4674fdbea9f3f540add279446d6b099f5e1d3e9e64c8280c4843a147e7e0f7dec22f29840a22121e23f4ef81b8fe0f19027d9131a72b711657101b0e7c86cf757734877ec7e2725c1d9f51c6167f7bcc7862a6f1fc0c9b9629ce67f4e3cf74e8ac551f8a93fe3da937fe38ea25203032a00316ee35990c083950775618a9e124346a34f5180b5e64d1021b4bde0cdb7518f6239f10f0df6f84417679cd02ae30d74b0988e953d347340dcf2fa76991b419299c8baa9983c7d7f5cd4a6608c4b16483a4e2dd29c15a27038eeee8ad348e259435c2d56794a54cb4479a61f5c789e51bc6e265cf344c82b4b9a9d74123b938567998b91d68fe895d56f69d9e69c3c79dfa51afe1e7b202c3260291e88888b4ee3c0e81d437aa6fe0f7629e8de52b81bfb7471107de8b9d2d80eeefe86739ab8343000918e1507dc1582fefbf2c2e3d3b0a0079c94c8475ea71b3457f47285a35e90a993c8a68d121d675f00c3eefc2293172ca63e00f490a818d4c2287dcecc164500b11167943949f9464eefeb95a6d6428675e405612e88b1c380012ef551eab49bd5a3b04e1c3f68d34629f29f4425f853be4c0edbd47199d121ccc4c54bb93e3aaf57a33e295a4e0b3c3a42a6f729e838eafc9ca38b97e9f74f120e0f092bee07688dfa237f3a4af32f2dd8add00df18ec3001249ca4ba6b694a381b79ed45f60bc5b0e9b1b2d22aef0765bdd982656473de31ef64bbb727e380e4089609b6c259a551985f387ee314f7854c848f7a0baabd37208ec484d735a85c74accfcdcd5728e3f8319901616e3f72331f7da9f44b4c465beed27a77b644e3fb48d48e6f1ee7487f74c07da28dccba8d9c57f492fd8f7d383b4b6644e0f9ab9c0d00c8953bf3702853eb51686e4400490c15456e721e2f396e3216579273070036eb9f0c54d87598662ef708a208768924dd9c732c2fb759a433890c0daf2e178b9a345c92d77aeabb253bfc6c870578a1744526e1e89fb1321a7fca00e4f6452d8661d41c9ab8031baf1096485615544a2587d6ebd4edb0a4523f82bc0d67f581009fef09cc9f8665121e876e187a106682762f49df0ce5f680e2799381bb7fe6750e10fdf7a509e431061e30a832488c3bec94eb1aff799bed2667914986abe0b9514f723e6383d5d55ee5ccfd32428f72b1339c8b7465adea43d8a291f9aa8999156211b34bcfb945c918162008aa9842253d51069a4b429ac30f8a16546f7cd9667566353aed1833ae04d2c6242d5cc548d99c197e0e55d3da4051d67eaccc4f164e86536facfac6620517bfa2453c40eb18d5a05ceb82d8e13c87ea30d0bf0de736b0b798897b7aa879194c9ff041bc0dffbf72e6c4f43cb3881ef364f13906c45138f861e246d1afe4b9ff9d50b292afc9335cf0cbeca6cb49975b466b73f66e453127d9ce749be073e45b365c38e086dbd3c9b95dce7eb030a33a64ceccfa652124c312ef7a9b61963d38ac2bf185f89cc0c7c2dec363d07a10508822db4a1b631dcbbc366c3f9d585a6fd463acbfd23e807462ff288f41c82f0519ab30d569bdf94d7426187f1433df074ed22ceffd884043a3af8b706dac98fa289eb44f047ee3a29ef983c17ed8071062d9fef6e410339d56c8b29c0ae4ac2f3ad1fd2a929f017f12afa85634487fc3099d297643619bcdaf5d7f753e184afbbbea1acbb00a001d20d1ab007a6f094277cd27b3a0e5c52eefd4d5e1bf8972c5e8adf1095248f2309a39b045a521cd1f3c70077f74366f6732cf155c284257c000d43c519e03a1a8f557f9e4af6e510de46b4810699b75e9817d01fda7ee231273c1f76d3c18b24eb374820a7b1cb8a8b2064212214609c3754409fa66627a347ddab25359153678cbdd8dd3f919d126a5d347632107380a7c6189acc25a66c26555634baedb0a1ffbc7124616afe0aa16802da604b29c06326ba7faf9a8b49b8635483afffb80e64c88e0918f9d55ca43b4daa0e3f099e21c3ae7aa2910218dbc42934f46574e96212b9e1182d7e2df71c943ae5e2e2b76e5c09aeb2fd7d9796e92373ed95515e69d68a2488d553852a6532c400901119a69636c6e1005855eb1f3a78d29071aff1b080783e5925097f245723ae2ee62713ef00d8a85f7f84bcc09c01dcefa8ade142d9677623f01f9063c15276a74a4fe93772fdb21365882dda4782f461a520d72fcf8aa77c03ac203b57e056dfc8a9913a7b135929a101c9aec0c0763593f6ba6bb15b9df1f621884306c611c8c722743b784591d9174179119c9b6a8522e11d9f0fc6a1fa6b59c1e9e35ea2782a5c37dc946c277baea4479e37b92c72876aef5ad06099136e060c778ba41d6bfc242c40febb10c9feedeec1efff50401bb561988798402837ff5f06802658dc6cbb0964abadfd9b2ddfb8aa19eac6b577ba09dfd3faf1f0fde284b9a8235c71a98b99528d910f5264f60f15aa231beeca4b093ec25ea461716e737afea8c9d5ca570c7cea5116892c18a69ef7004dae46e7520e64741d205ba01e8f680047f6ac8393c93a2d590ac3abce42107c6326b91c5d03f78aa4a2a79d050055719140c4842e147ddb734ea86236ff5bed04d602c25d3c4ed57575fba4d8ca16c803dd3c1713bbc173dfb36e062ecc0820a65be35677e3d9c33c86e9e5982d92933511d3baf8fdbeea45842b9295e160b7202dad1583800d3c2df2f639d4abcf59cd9d0ecebf2ffa86c6c0b6a5d3a79cc13560d388d2052e3e5caddc694b1348120fc3c0b37b7a2343bde6845e44b54b4b14198e6c778a990d18fba5cf47cb748a35f075ead0b45f83957d3aa655d94d581304700e44176ba68ad4bf19315cbfb862158cfc0ea7a964efb68a4d22acaff30e3ebf3c79c65df27e94a713254ac9ecf33055b5335bbd27618ac7e289420355959955065a2dfdc302ac8ffe010116111c84305fb283cae88afd0882ac4f79281202f0c644ae8cbc34984817869e22fa0bfb0d16a15e04e724e4fab86564dbf3a7ac8b1d59ed1347a7dfd30e79e02e8ec7e0abcc9dfae18bd6a21f07cfdfb09704da42baeab888665659205bddedd1b796e8d73e500ea36665cef4bfd8a56c358f6183b93a707b8878cce24ef8ea7dbe8a0c9347c45a5ab00763ff558ad7bea2a732b4ee527b40c54e294056483803edb34e65c6391be6c088c79fed5d7f7490fccd6b6535b114e896f373471de17d5ac41f38ac4f42d27c6089b29deb214c1ff87ddaee84964ff99d27a5e953b2c308df7af9c8a115645b9d9c746fbd4f3590a27aea5f851756af185f7d4cac31655fd73f14ee68d7befd2577929f13bb34220fd6cf499e74d27f59fc6b8bfdaaf8330dec5a0d332effa34560b0fea68d9e709852e25f2515c2221780951937dd6513ea44201ee6941a6c427b7ba1408a6c81b5810cf8d08575963e7e4f1418155141d7c95e60cf58940ba4febb574b29dae69d99ab247a9ee418ec6163cd89ff6d7012bb789774fbf45b4bd6c3010b010b141a7d630b2b9e1d8746f14997731d6ae3b47afdaddc0155864969bbe647a8ef241b5053f946364814b38ef174991cc9422e0b8c2a853037eba95da956febaa2b2cb97a80aa16d812f2a4cf2fda123435bd3b9314668a7ea0de02175fa9e9efdd7226dd771433a228d47336bcc3b31c96b912855cb03e4aaec2c5305c325e9998864573d6905c47e49d1d480d3fbd36396478cc2dde147e9c225d4498e28adadf671cd28c3c391217e47ec83d639707a91a0ee0815bad24d33bcdf632e5b4b230aad4f5a8a3cd4571d18d2698ca2569b7905f5d0bf8c9b7df08346f0eb63914d7354d88fa31f5c14d8a3ed1641e57e13e6d19aa05c827f8618fdd719d93255e3152c9dd8c28488339c3b1ee53cf1399fd304b63a00f61d29f4395609196723b47fbdf725d8665467bbdf79b599d42960861ce29eb407e9acbdd3a84eda1a054258a3b1c4b69b00b8a0a89b9ca2316c793ccf5edf6c64fc2d888319927dd55fc5ea8e98a783c1a97d28273087be22a28ca1158824008d39faab44e720b93bafd2c628fc8d9b7c28cd31efaf9a13a4a3345da79cf38cbbd830eec384626bf537e36c14227b4764313176e9dbcd9d30fbb68d717b85c9e927fcbf1acc5c41257f112d0c9b4d9d3d018155832a2c0f5fc09afa39c22db351fbc17c94ab618d37d6889b5fd53f6f345f1ac7fcfec2fe965bc44b5faed5c2c21f0f5a3954dbbccf83eeb"]}, @generic="19d9992f051b6a779dd694cacbf669ef47607b6b025c76dbb455401bf1a966ba35872787a112ec8759c391c67f5310a600caa8ac100b3af0ffe1fb8170952ec02892f4775d8c977755", @generic="939b29f6c04777b9ca7a34c8083aa325a0afa82836479dca1059b40438a657c467385272fc681e316cf6711c6980179816a46c54eae3a365bb9d604f200d1b51712cba404769f990688de5765fff54f97a4fa3cf76b2bc682138f3883c7154568d3ff4e3f21985fd65c3c3ed2d8eb48ecc8f40ba543e276888772fedaa24562564171d7fdada888fd41e8e948ff41772b2377d0359351158f5d50ab7cd01812a320b71e11409c367cfbac4452461878729963f38d4746bd3b153d4a159faa41d9b4a7bf8"]}, 0x12c0}, {&(0x7f00000019c0)={0xcec, 0x19, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@generic="27c4bca64c8cf875155d303f9b0ccb68ed785d198b0149988d90500603920a82ebc8c91e2ecfeddc1e62b97136cb89dd1331f8539e43350281476ccca72e618394fb001818b54bcd7fcd2ff30478ceae8c797d37aa03d8953e3832256791065bf285da5b2967bb2238454bd023c3b47f54784255ed4bc0ca127b58a84ce3457735523125fbcc93a8d7c766652101e08feb8dff8610f596a02feb6ea2b033fc43745b503aed2fdd26a4f19dd4d42aca1e52d46f09c44f3d70bb8bf0927b3817495340780f2936a1751f884fb1c69d3bdf762c1c3b19e425bc150a2981392fe50844e67222ae7df06b629050b78a91c011c37d3dbe94a6728e5553a40b8b9fe7b4904ee36a66a93f58ac0cc592562620a2976b79b793a9b919650a00c58d57d9c4a6d83bf95928586ee2a769e93509ad75fa899e5ee9fac557cc66c334dd3827ffb9c887396f8fec9bbcb7ce945348414e0bedbf92de98085b738097d7a01583099f8c5a79b81b98075567ca269dc41e9ed247d61c20bd02e418f88dc28aed3ee8475db2e57a8dfb69f349c3f5735d3cfa7b6df889e96305e51ad33085978ef851ac540e171e279902f41ace12086cd15c9394686c8c5f5c9867eb5a97643cb7af94b2d3c3033f9fe03f323dacfb9d710bd28fb2cd65b675955911a2d5af2b60fecca3bad0c9e6736676694951e9c2a614f6ef0bc84813950eeb3c6bd9465fb04fa65372553047deef91af88b6638174f16c5d50649499b5b03ac01689fa26e1e4e7bbcd013fbd3ff8513a7f6c983faaad65ffd2df16f472d366678f39b44ac37a0f1bfb699b589301338c3a4a481461ec2d25db3a85824a4ce27f21c5cb91236812c8940c1ed60d1db9a3bf33e46c7d7081fca5e67b02b32597a66dcdb8a84709669c6605ec0e992146d26ac38d14cb521a40b15129af8f7cb060156b24d4e0d1f57b85113e343184b24ac734fd663d84cb2a8bb91af7bcd83b264036a30ec7c3e26df092d4478194ddb2bc7e5a18bc0c28d707c00fc309b15c98da898f4114a65d03b5ae99f95e4c5dc077c4d78fbb4b8ccc29cac56086a351e50cfa85e5061b70472af8f7253a390088114003117d0224155c37a56eb79a7a824204ee7bcac832e56c799b350fd4398a72dc263505571104f7e6e5657955037bbbb99b7d47ef94d822815d075fd464b71e19ca755c87f84dd98f100de6e954d898c6ea2fc9f13b118f42e3c5dbf658a71278eceb33bad48c7f27b5d7f07328b9694d8abd302449bdf5fe0ed37095cc018fa3d7661d419305fa5000b1656587090647fcb413841aa17920e0154b4c347ff469b46623ecbeb40e64aa4790a5044a22674a816fdc1126a444d4b2ff1240054dddfbc1ac9a0ab98a104fd62b9a8d6a75466b98010369dbbd824e0a2cfdfb208d4de7cc3b9014568c9f119fde79208d460f52cfe168a09be348f15f627bbd20f81466564199b0d9b4b65753bda1245b1f767cbbc012b5f7d96076444ff7ccb82e3da25f869c58e4b2d23010cb68e5db6021088734d2fbcbd4c1cc59cbefbf4ccda57b42923edf9fa06a94f2164b11d09065787bc502db6ba20ad7effd7898dd8efc475e21354f8c7524db997616b76f300c9eced01b76a18dbfe4f5cf41ada726018c356b96241c9d0cf281a7d7fc5b3b44ed9ae02d5d8e6f95a993b399f2c2544e5c5da141aaf5dbffa22b622dcb5645bffad7ce36b453c02c3bb7654949c47e06d3c7f1f1d9b70d1f4687d897b9add3068543cb133771be771fe9f8726cf72d025a36ea1b431a2ce632de87dd5d108bb222c79d300c9a67cbd3432391c3e7c144759054ac932c54fd40ae389ea2fd579c232e192407a06c88fdd9e89b54e0d97a8e39c8e8eabcb8e82380f6ac8fa642be7fb605e4a00d924bcc8f5d29295da037b1c4d2c19e25969a2153fc1dd5cc47538a825e038609989890ce2b16d322109476f67de91838a247798e8978fadbe27c781127531abc06115aea6db0a02a4b5742a425e11f6d8773245e4bd3bd6960c17fd424ff6e469dfa1352550c8e1b7506ba4a22d97a371e7fa3907d07718b883e7e254fdc523a38bfc57e21bad5dece32ab2e91a2c2347a76032b2b8d03b21108c303eb3bafcfb51bf3b71da5984850aa6ca3845e1831c2bf29844f7f7c723f29b76ebb04bcbc3a0dfc7e2abb5d517a3f1845b45ce51afe111264e928dce54f0bc5e56d65d3387028b03fc178a3efda525ed0c924dd92b1bb5f29737505c92744138f3c32c4a83f06f2507df1cc1df3298aba471a3b2caca4eaaa097eb6706cf307922c725c816d87fa84ceb93ecee0aea9cc1c0edd3abff0eb4d705071f3988d50370933e1f198198cc8855530281884dbfeae7f37cc8f36222653538b014c53de777621adf42f54ccf04e0a208b0edc041212039f0eb032ed299d67dc1f80ed817f4cfd441d41f56ea10816e5ff87d09d9f5a9f68c85e13583b94d92a06ea6d017c49084450f35f6cd36dd83529b39e3e2e9a0f574cdba89d9a8e1a01d48d3e454dd1e2ed87c76b53dc1e4141d1c19b8758b065fa97bcdd385eacf611a3117416e77b68afa6463ac977ad32ed5aec23d3b7d7461ce057b7b089d67a2676f660952ae300969b09d0a5579cdf6c33cc827bfeab7f4cf08e71e4792eda0257cf15f127eb53b4a2f880e80e3ccc6577b4e1835b3fc09fb17fae36332270b7956a03ddc3f024ae49c2bdc9d4e9c4314a6e27c61820f4ef9ad9bb99827514fb73e7983ae1e34e8dca185bc67f4f7db02c38fd17b1381546438f50a8c90e23d667de995f6215980d38a64100183f7189edb4f7e4ff696535e765bb84f71903f1c77bffe1c4f2755b6ed9b9fec5eb3403755d2d11275e6976ccc318bdb7a72a4296eb3372632e0856f447effbf2a71d3577da478967274b190b076afbd0e48fcdca0f3fc0d63503a03357815b5a1981d4e0d6bda2a8893e9c2a1d4a65f405b0e5ff63af27bff28616d2fc4b6fcd2f6fc3772162041a88fc32585b3255f4d61952ab5d83f13602673c87fd8bf00f358b2c7c97e85ba583d16db3b40ae4d13718b2b5837ac7f1c113f80fda30edf8acc56092e8c9d4a6e7cdb65f0522e63d49ee8d588f81b7024ae49c2fa1cc0c16744132ee9c715282fc1e7b396f0306cffe05ed1c1f3f8f44249497b4cb89d477834cf1b71587657b70f2d3cc28928e7068b165227a042eed324b56cd00f2840a4c4a2c0a4b57fe90442942eba5fce0521877354fc93ca488480b5ea5218f080cc2c7b65073f0458567ce17072634189959833db6645bc6d6656b695b01760b04e6c98f549aacde1b759dccff46afbdef334388bf4dd73aecb0ce8e8f89891ed3cd3bda989da1dec1ce4ad3f17b99e6fde7304350b667b0d5fc7584f9c3ae0f733518ea1446e4dca19cfdfff96435e99c05472f3ef0adcfd70d3277b4ed7e82920325729ed857329e37ddf450c78abac472d23c57f37ef3b8a77d69c02faa79831db62259db0a7f628297d42ba186463af1769901048d983ed5b0c173ba5712439c647da2fea29bcf04c346176201bdf7e83ae25cbbf24b56a01f3c9689f266783599fbd449411d4fe122e630899974f91e48bd13a28639e2ded1f45a476b7b2fcfc9a36e4de1eddc9e8f4eedf5c958162f992e94e9d2525a1d7406be48274d580be371f1ad495a303b9a53cf16856e2508d7910a547c71d190d10ca6b84575a82437b8e6ec5ffe9856279a51a74740c5fd0fd2c6cc0f040dc9253e1ae0778c8d1b1da81d973fced72116818b64bf7ef30202e3f95307bb11a53c30567bc090021ed92705fb93565915aa5c95ff53728843e824d54eff1625254eb0f19b3658e933354a5eb9f8987bb4d9d6c4f3849e509c6f617fddcc4182cabf1fd2b691957bc51df230ea60331c0f4363767e9f28495b4f19011cc5935ce2fcd3204850fa69bd48ccca258f993224567f41b87030b067c2f28b55014468337e5187fd95b0e93b51375984f40835015a0b635d4e3b7a35bce5c2aedd25117135431a77ca40dc622150441c4f4ec34df1402f50d798b60a7105ebf6dc378c7b916853c19a8fbb6f34e1dc62530cb6fbd2bdb1a298978e205a87822290e847a3b5ccbbe1b053028db46045b611946bdbe02c654ff911e61058d30d795e1534438b71820270c464bd91577ea6322231ae713b770638b0c345a79874dd367f0727a339e61e1e2640c31d81c1772cc0e56ff83f2c8b81343f1a778600c56acd95f138d39a7302f7d3698684a864b96dde80cab983089f2e9ac2f55ce2deba37414f87f751f400312c6eceedf1584f64cb3ad64c9aaa02146c3cf99fc048184740b08e17aeeb31f44d66891ccd95d563c70008a9f20e43d0a15fd4533be71d32dde6c2cdc6ba6f91d7deb35ee36549ac2ad5b74ca61c35c22816447e0c3767a6eee28987ca22b74fcd5005454f2d142b19ae62c1f2ed3694ae032c4884629c35eb87ef2d051d1ec86757c4c9d463106d86d6f2a3c2843ac6839bbb484918086cb2dfe29e758c9c521cc9824a8156d48e50ce965a88077095cc3c4e9cacfa1803b302bb18f4bd7be1d4fbfe8d84d4dbced62ec2f5e12e5ee4244f95e44dd17b3a8a0aae1320a3170e4f5dc2941d3f9441efab72c4375af1f6fad64c80d8b0"]}, 0xcec}], 0x4, 0x0, 0x0, 0x40101}, 0x40004) 3.571685667s ago: executing program 2 (id=404): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="05"], 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1) 3.551398296s ago: executing program 0 (id=405): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x820800, &(0x7f0000000040)=ANY=[]) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x40001f00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000f00cc0002000600009a0618cb11a4d9176c140005000000", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)}, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000040002b06fefffffffdffffff017c0000040042801400018010000400cab1891c20b8d2a93521800a040002800d738831d7f13ea1bc1438caca1ae70349f831422301675a9027e41c97b4cc2b72def03e9be474ed7d449d43821afe07863cd03c9d76ecf9bd58f8602a3f842000407a62d6488d4a7a906790f8b064acc6c7a52599bf3aa1b4268785fd7fae6ec5db6c48f8e8666195844539b6e14d6e33e7915050ec35f6e3a5bc6a76940c42af69004549f174fc13173e8607e0e70f3a0453bbe73fece367fa64ee640d0e6b8bfc2e391387168f7765b3301516ab01"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.46348051s ago: executing program 2 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9, 0x3400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r3, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 3.46254303s ago: executing program 1 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xc, @string={0xc, 0x3, "a1b0c90f2503f8303346"}}, 0x0, 0x0}, 0x0) 3.422838885s ago: executing program 3 (id=408): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f00000006c0)=ANY=[], 0x174}, {&(0x7f0000000700)={0x12c0, 0x3b, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x119d, 0x13a, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @u32=0xe}, @generic="bd11f4d86c10f5507a139074d8a8e5bcc27eace58ba504ec26157c1daf9dec2334bd6dc35a2aa2a58b233a5985d8b6ab8e5b928d060c4d3eed8b30cb4d0e27543a5b1683398ea9aa4015d376eb69b58b43da92af8eaaf66d1fc6681ae424ae7c95e79647dcfe07ee10d86efc58fba983995ade65c45fe738ed0db2c2f7ca69c2eab815132bcc9ed3e4766f108aa699df304fa219522a0bbd0616adcfe7c3b89db52b00f26dd9bcae52e3c482d9d76a64afbe6cbeab6d2999bc12886ae1d5", @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="a235021fdd171dfe055653cd4989ab308d68fca94923bf5890b402d251c145730698c5e01b30ea8a46202be82f807f38d567bb7800d7ad51c2aa0deeb43888105c9b2b136f9f0342a9428109c37a1d34bc7979a5afc04f674551dc2b90a92af7f988d3edc79b21da553dd34a5bfde141ac796ef93abc3ca5bcb66d189759d617e4a416531859fe4f621584bb850ab910417f347cd0bec493afa9b58b1b13fc4fd92a013d5e1384cc1c27b29867dd5ae5016414f8fa1e56f96478510ceaea7a4e", @generic="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"]}, @generic="19d9992f051b6a779dd694cacbf669ef47607b6b025c76dbb455401bf1a966ba35872787a112ec8759c391c67f5310a600caa8ac100b3af0ffe1fb8170952ec02892f4775d8c977755", @generic="939b29f6c04777b9ca7a34c8083aa325a0afa82836479dca1059b40438a657c467385272fc681e316cf6711c6980179816a46c54eae3a365bb9d604f200d1b51712cba404769f990688de5765fff54f97a4fa3cf76b2bc682138f3883c7154568d3ff4e3f21985fd65c3c3ed2d8eb48ecc8f40ba543e276888772fedaa24562564171d7fdada888fd41e8e948ff41772b2377d0359351158f5d50ab7cd01812a320b71e11409c367cfbac4452461878729963f38d4746bd3b153d4a159faa41d9b4a7bf8"]}, 0x12c0}, {&(0x7f00000019c0)={0x76c, 0x19, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@generic="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"]}, 0x76c}], 0x4, 0x0, 0x0, 0x40101}, 0x40004) 3.362563715s ago: executing program 4 (id=409): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x24}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 3.171111301s ago: executing program 3 (id=410): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24040092}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x38c, 0x0, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r2, 0x0, 0x0, 0x0, 0x80800}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x11) listen(r2, 0x5) syz_open_dev$ttys(0xc, 0x2, 0x0) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 2.550856901s ago: executing program 2 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9, 0x3400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r4, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 2.444912326s ago: executing program 4 (id=412): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.059522186s ago: executing program 3 (id=413): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) syz_open_dev$sg(&(0x7f0000000100), 0x80, 0x40000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x240080e4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x1) ioctl$LOOP_SET_FD(r4, 0x4c03, r4) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x200000c, 0x200000006c832, 0xffffffffffffffff, 0x0) 648.111311ms ago: executing program 0 (id=414): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c"], 0xc) r3 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) 597.944163ms ago: executing program 4 (id=415): socket$kcm(0x21, 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) syz_usbip_server_init(0x6) openat$sysfs(0xffffff9c, &(0x7f0000002480)='/sys/power/disk', 0x0, 0x20) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e11", @ANYRES64=r1], 0xfc) 411.473722ms ago: executing program 3 (id=416): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0xc57ffffc) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2400e084}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000006c0)=""/245, &(0x7f00000000c0)=""/77, &(0x7f0000000480)=""/57, 0xa000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 51.096556ms ago: executing program 1 (id=417): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x24}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 0s ago: executing program 2 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x4a0232ac, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0xf0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 54.460525][ T30] audit: type=1400 audit(1768432993.307:62): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.483893][ T30] audit: type=1400 audit(1768432993.337:63): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.486199][ T5797] cgroup: Unknown subsys name 'net' [ 54.514410][ T30] audit: type=1400 audit(1768432993.367:64): avc: denied { unmount } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.693457][ T5797] cgroup: Unknown subsys name 'cpuset' [ 54.700942][ T5797] cgroup: Unknown subsys name 'rlimit' [ 54.860298][ T30] audit: type=1400 audit(1768432993.707:65): avc: denied { setattr } for pid=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.884012][ T30] audit: type=1400 audit(1768432993.707:66): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.918705][ T30] audit: type=1400 audit(1768432993.717:67): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 54.951214][ T30] audit: type=1400 audit(1768432993.717:68): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.964049][ T5800] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 54.980162][ T30] audit: type=1400 audit(1768432993.737:69): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.005503][ T30] audit: type=1400 audit(1768432993.737:70): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.029194][ T30] audit: type=1400 audit(1768432993.827:71): avc: denied { relabelto } for pid=5800 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 55.924764][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.887748][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.896374][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.904073][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.911881][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.920845][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.929850][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.937300][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.946523][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.954206][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.962791][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.970287][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.977823][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.981858][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.985008][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.993558][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.999482][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.013150][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.015685][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.026347][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.028162][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.035339][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.045571][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.056350][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.075195][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.083163][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.547795][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 58.561749][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 58.614724][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 58.688288][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 58.762772][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 58.786244][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.794099][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.801429][ T5811] bridge_slave_0: entered allmulticast mode [ 58.808078][ T5811] bridge_slave_0: entered promiscuous mode [ 58.832817][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.839997][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.847252][ T5811] bridge_slave_1: entered allmulticast mode [ 58.853896][ T5811] bridge_slave_1: entered promiscuous mode [ 58.913173][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.920310][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.927503][ T5808] bridge_slave_0: entered allmulticast mode [ 58.934273][ T5808] bridge_slave_0: entered promiscuous mode [ 58.949612][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.958815][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.966421][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.973616][ T5815] bridge_slave_0: entered allmulticast mode [ 58.980224][ T5815] bridge_slave_0: entered promiscuous mode [ 58.987064][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.994376][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.001533][ T5808] bridge_slave_1: entered allmulticast mode [ 59.008156][ T5808] bridge_slave_1: entered promiscuous mode [ 59.026236][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.035445][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.042975][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.050106][ T5815] bridge_slave_1: entered allmulticast mode [ 59.057118][ T5815] bridge_slave_1: entered promiscuous mode [ 59.102411][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.109953][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.117756][ T5819] bridge_slave_0: entered allmulticast mode [ 59.124512][ T5819] bridge_slave_0: entered promiscuous mode [ 59.153770][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.163818][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.170897][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.178836][ T5819] bridge_slave_1: entered allmulticast mode [ 59.185669][ T5819] bridge_slave_1: entered promiscuous mode [ 59.200158][ T5811] team0: Port device team_slave_0 added [ 59.207683][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.218282][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.235136][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.242399][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.249920][ T5818] bridge_slave_0: entered allmulticast mode [ 59.256815][ T5818] bridge_slave_0: entered promiscuous mode [ 59.264767][ T5811] team0: Port device team_slave_1 added [ 59.272908][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.294926][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.302215][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.309334][ T5818] bridge_slave_1: entered allmulticast mode [ 59.316168][ T5818] bridge_slave_1: entered promiscuous mode [ 59.344645][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.376009][ T5808] team0: Port device team_slave_0 added [ 59.384023][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.400696][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.408045][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.434276][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.447160][ T5815] team0: Port device team_slave_0 added [ 59.453853][ T5808] team0: Port device team_slave_1 added [ 59.468451][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.483571][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.490505][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.516844][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.528771][ T5815] team0: Port device team_slave_1 added [ 59.549564][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.579848][ T5819] team0: Port device team_slave_0 added [ 59.601721][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.608675][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.635429][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.647632][ T5819] team0: Port device team_slave_1 added [ 59.662442][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.669398][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.695332][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.706595][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.713851][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.740066][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.764546][ T5818] team0: Port device team_slave_0 added [ 59.770622][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.777648][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.803711][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.832902][ T5818] team0: Port device team_slave_1 added [ 59.844131][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.851150][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.877491][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.892004][ T5811] hsr_slave_0: entered promiscuous mode [ 59.898117][ T5811] hsr_slave_1: entered promiscuous mode [ 59.913692][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.920642][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.946694][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.983958][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.990939][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.017266][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.054440][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.061821][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.061925][ T5810] Bluetooth: hci3: command tx timeout [ 60.088287][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.107828][ T5808] hsr_slave_0: entered promiscuous mode [ 60.114086][ T5808] hsr_slave_1: entered promiscuous mode [ 60.120022][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 60.126244][ T5808] Cannot create hsr debugfs directory [ 60.134975][ T5815] hsr_slave_0: entered promiscuous mode [ 60.141159][ T5815] hsr_slave_1: entered promiscuous mode [ 60.141653][ T5810] Bluetooth: hci2: command tx timeout [ 60.147248][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 60.152410][ T5814] Bluetooth: hci4: command tx timeout [ 60.157954][ T52] Bluetooth: hci1: command tx timeout [ 60.169001][ T5817] Bluetooth: hci0: command tx timeout [ 60.174598][ T5815] Cannot create hsr debugfs directory [ 60.242760][ T5819] hsr_slave_0: entered promiscuous mode [ 60.248907][ T5819] hsr_slave_1: entered promiscuous mode [ 60.255041][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 60.260767][ T5819] Cannot create hsr debugfs directory [ 60.316577][ T5818] hsr_slave_0: entered promiscuous mode [ 60.322945][ T5818] hsr_slave_1: entered promiscuous mode [ 60.328794][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 60.335145][ T5818] Cannot create hsr debugfs directory [ 60.610596][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.633678][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.643926][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.657331][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.685744][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.700819][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.722235][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.732438][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.783025][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.796981][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.809780][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.819042][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.895968][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.910270][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.924371][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.938239][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.006410][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.017903][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.033764][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.045136][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.056066][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.098978][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.121903][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.153579][ T2055] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.160747][ T2055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.172320][ T2055] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.179394][ T2055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.200613][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.211491][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.237127][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.244205][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.264511][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.271619][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.284911][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.309723][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.316914][ T2123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.348703][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.355816][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.377440][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.416378][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.437158][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 61.437173][ T30] audit: type=1400 audit(1768433000.287:84): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.450791][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.502485][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.509594][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.524263][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.538408][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.545573][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.587600][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.594790][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.617216][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.624344][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.752353][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.823267][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.898858][ T5811] veth0_vlan: entered promiscuous mode [ 61.936670][ T5811] veth1_vlan: entered promiscuous mode [ 61.968319][ T5808] veth0_vlan: entered promiscuous mode [ 61.979082][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.014154][ T5808] veth1_vlan: entered promiscuous mode [ 62.053877][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.070849][ T5811] veth0_macvtap: entered promiscuous mode [ 62.085351][ T5811] veth1_macvtap: entered promiscuous mode [ 62.114035][ T5808] veth0_macvtap: entered promiscuous mode [ 62.124193][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.140171][ T5808] veth1_macvtap: entered promiscuous mode [ 62.146749][ T52] Bluetooth: hci3: command tx timeout [ 62.170130][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.177908][ T5819] veth0_vlan: entered promiscuous mode [ 62.215057][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.222571][ T5817] Bluetooth: hci2: command tx timeout [ 62.222639][ T52] Bluetooth: hci4: command tx timeout [ 62.232386][ T5817] Bluetooth: hci0: command tx timeout [ 62.238795][ T52] Bluetooth: hci1: command tx timeout [ 62.239633][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.261076][ T5819] veth1_vlan: entered promiscuous mode [ 62.290901][ T3537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.310357][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.324669][ T3537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.334870][ T3537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.347548][ T3537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.358237][ T5818] veth0_vlan: entered promiscuous mode [ 62.370952][ T3537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.381020][ T3537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.393832][ T3537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.403368][ T3537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.424266][ T5818] veth1_vlan: entered promiscuous mode [ 62.478210][ T5819] veth0_macvtap: entered promiscuous mode [ 62.508792][ T5819] veth1_macvtap: entered promiscuous mode [ 62.527278][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.539716][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.553825][ T5815] veth0_vlan: entered promiscuous mode [ 62.569576][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.591710][ T5818] veth0_macvtap: entered promiscuous mode [ 62.608141][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.620173][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.620765][ T5818] veth1_macvtap: entered promiscuous mode [ 62.632629][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.653524][ T5815] veth1_vlan: entered promiscuous mode [ 62.681817][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.702288][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.707031][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.717747][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.726137][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.735068][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.744492][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.761374][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.770282][ T30] audit: type=1400 audit(1768433001.617:85): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.IGQ08o/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.791149][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.798432][ T30] audit: type=1400 audit(1768433001.617:86): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.832326][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.841279][ T30] audit: type=1400 audit(1768433001.617:87): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.IGQ08o/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.876761][ T30] audit: type=1400 audit(1768433001.617:88): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.876927][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.905189][ T30] audit: type=1400 audit(1768433001.617:89): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.IGQ08o/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.951991][ T30] audit: type=1400 audit(1768433001.617:90): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.IGQ08o/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.989590][ T30] audit: type=1400 audit(1768433001.627:91): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.992236][ T1143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.018480][ T30] audit: type=1400 audit(1768433001.657:92): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.050891][ T1143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.075899][ T30] audit: type=1400 audit(1768433001.657:93): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=7039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.089865][ T1143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.175157][ T1143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.325144][ T5815] veth0_macvtap: entered promiscuous mode [ 63.335487][ T3946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.354620][ T5815] veth1_macvtap: entered promiscuous mode [ 63.362435][ T3946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.926514][ T2123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.934690][ T2123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.970039][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.999418][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.008904][ T3946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.142051][ T3946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.221251][ T52] Bluetooth: hci3: command tx timeout [ 64.311163][ T5817] Bluetooth: hci0: command tx timeout [ 64.316603][ T5817] Bluetooth: hci4: command tx timeout [ 64.322023][ T5814] Bluetooth: hci2: command tx timeout [ 64.327788][ T52] Bluetooth: hci1: command tx timeout [ 64.456014][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.480547][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.541648][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.602819][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.819959][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.976259][ T2123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.984483][ T2123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.175475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.297198][ T3946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.482341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.558639][ T3946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.701186][ T4210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.733378][ T4210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.334688][ T5817] Bluetooth: hci3: command tx timeout [ 66.382189][ T5817] Bluetooth: hci2: command tx timeout [ 66.382197][ T52] Bluetooth: hci0: command tx timeout [ 66.393459][ T5817] Bluetooth: hci4: command tx timeout [ 66.398195][ T52] Bluetooth: hci1: command tx timeout [ 66.474999][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 66.475013][ T30] audit: type=1400 audit(1768433005.327:127): avc: denied { setopt } for pid=5958 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 66.534374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.811560][ T5961] nbd2: detected capacity change from 0 to 63 [ 66.826500][ T5968] block nbd2: NBD_DISCONNECT [ 66.848889][ T30] audit: type=1400 audit(1768433005.367:128): avc: denied { read write } for pid=5963 comm="syz.0.10" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.881876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.891866][ T5968] block nbd2: Disconnected due to user request. [ 66.911386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.916981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 66.945895][ T5968] block nbd2: shutting down sockets [ 66.981203][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.990855][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 67.009452][ T30] audit: type=1400 audit(1768433005.367:129): avc: denied { open } for pid=5963 comm="syz.0.10" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.073328][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.082837][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 67.090826][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.100306][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 67.108066][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.117520][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 67.125387][ T5801] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.168208][ T5801] Buffer I/O error on dev nbd2, logical block 0, async page read [ 67.205000][ T30] audit: type=1400 audit(1768433005.367:130): avc: denied { ioctl } for pid=5963 comm="syz.0.10" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.230659][ T5801] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.241275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.288057][ T5801] Buffer I/O error on dev nbd2, logical block 1, async page read [ 67.501341][ T5801] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.531929][ T30] audit: type=1400 audit(1768433005.387:131): avc: denied { read } for pid=5963 comm="syz.0.10" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.711103][ T5801] Buffer I/O error on dev nbd2, logical block 2, async page read [ 67.718918][ T5801] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.779159][ T5801] Buffer I/O error on dev nbd2, logical block 3, async page read [ 67.811987][ T5985] o2cb: This node has not been configured. [ 67.817902][ T5985] o2cb: Cluster check failed. Fix errors before retrying. [ 67.825189][ T5985] (syz.2.12,5985,1):user_dlm_register:674 ERROR: status = -22 [ 67.832721][ T5985] (syz.2.12,5985,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 67.849919][ T5985] o2cb: This node has not been configured. [ 67.856339][ T5985] o2cb: Cluster check failed. Fix errors before retrying. [ 67.863575][ T5985] (syz.2.12,5985,1):user_dlm_register:674 ERROR: status = -22 [ 67.871103][ T5985] (syz.2.12,5985,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 68.061962][ T30] audit: type=1400 audit(1768433005.387:132): avc: denied { open } for pid=5963 comm="syz.0.10" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.070730][ T5801] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.097569][ T5801] Buffer I/O error on dev nbd2, logical block 0, async page read [ 68.109382][ T5801] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.119130][ T5801] Buffer I/O error on dev nbd2, logical block 1, async page read [ 68.140202][ T5801] ldm_validate_partition_table(): Disk read failed. [ 68.148310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.161180][ T5801] Dev nbd2: unable to read RDB block 0 [ 68.223893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.225023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.504667][ T5801] nbd2: unable to read partition table [ 68.568209][ T5801] ldm_validate_partition_table(): Disk read failed. [ 68.568560][ T5801] Dev nbd2: unable to read RDB block 0 [ 68.569026][ T5801] nbd2: unable to read partition table [ 68.641283][ T30] audit: type=1400 audit(1768433005.407:133): avc: denied { read } for pid=5965 comm="syz.4.5" path="socket:[8377]" dev="sockfs" ino=8377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.641322][ T30] audit: type=1400 audit(1768433005.427:134): avc: denied { ioctl } for pid=5965 comm="syz.4.5" path="socket:[8377]" dev="sockfs" ino=8377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.641357][ T30] audit: type=1400 audit(1768433005.467:135): avc: denied { bind } for pid=5965 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.641391][ T30] audit: type=1400 audit(1768433006.657:136): avc: denied { write } for pid=5978 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.374389][ T2149] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.388584][ T5998] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 69.388601][ T5998] PKCS7: Only support pkcs7_signedData type [ 69.601265][ T2149] usb 3-1: Using ep0 maxpacket: 32 [ 69.772013][ T2149] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 69.773774][ T2149] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 69.773800][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 69.773819][ T2149] usb 3-1: Product: syz [ 69.773832][ T2149] usb 3-1: Manufacturer: syz [ 69.773844][ T2149] usb 3-1: SerialNumber: syz [ 69.796771][ T2149] usb 3-1: config 0 descriptor?? [ 69.798010][ T5993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.800678][ T2149] hub 3-1:0.0: bad descriptor, ignoring hub [ 69.800707][ T2149] hub 3-1:0.0: probe with driver hub failed with error -5 [ 70.474796][ T2149] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.491789][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.544493][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.671141][ T2149] usb 2-1: Using ep0 maxpacket: 32 [ 70.692577][ T2149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.720177][ T2149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.744443][ T2149] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.788672][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.816030][ T2149] usb 2-1: config 0 descriptor?? [ 70.835667][ T2149] hub 2-1:0.0: USB hub found [ 70.947683][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.954267][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.144082][ T4210] raw-gadget.0 gadget.2: failed to queue suspend event [ 71.182182][ T6016] raw-gadget.0 gadget.2: failed to queue disconnect event [ 71.192200][ T5960] usb 3-1: USB disconnect, device number 2 [ 71.202177][ T2149] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 71.464207][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 71.492395][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 71.514462][ T5954] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.521602][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 71.528478][ T5954] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.532909][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 71.532920][ T30] audit: type=1400 audit(1768433010.377:162): avc: denied { write } for pid=6019 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.541955][ T5954] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.547058][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 71.569511][ T5954] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.615048][ T2149] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 71.801567][ T2149] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 72.128714][ T2149] usb 2-1: USB disconnect, device number 2 [ 72.648645][ T6029] fido_id[6029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 72.666093][ T30] audit: type=1400 audit(1768433011.497:163): avc: denied { create } for pid=6030 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.695859][ T30] audit: type=1400 audit(1768433011.497:164): avc: denied { bind } for pid=6030 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.733174][ T30] audit: type=1400 audit(1768433011.497:165): avc: denied { setopt } for pid=6030 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.754311][ T30] audit: type=1400 audit(1768433011.497:166): avc: denied { accept } for pid=6030 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.778924][ T30] audit: type=1400 audit(1768433011.497:167): avc: denied { write } for pid=6030 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.805663][ T30] audit: type=1400 audit(1768433011.497:168): avc: denied { read } for pid=6030 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.891477][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.931152][ T2149] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.021410][ T5930] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.040953][ T30] audit: type=1400 audit(1768433011.887:169): avc: denied { read } for pid=6037 comm="syz.0.28" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 73.289687][ T2149] usb 2-1: Using ep0 maxpacket: 32 [ 73.318063][ T2149] usb 2-1: device descriptor read/all, error -71 [ 73.327424][ T30] audit: type=1400 audit(1768433011.887:170): avc: denied { open } for pid=6037 comm="syz.0.28" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 73.335197][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 73.360127][ T30] audit: type=1400 audit(1768433011.887:171): avc: denied { ioctl } for pid=6037 comm="syz.0.28" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 73.430287][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.458778][ T5930] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.464419][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.469902][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.480332][ T9] usb 5-1: Product: syz [ 73.486939][ T5930] usb 4-1: config 0 descriptor?? [ 73.494486][ T9] usb 5-1: Manufacturer: syz [ 73.499245][ T9] usb 5-1: SerialNumber: syz [ 73.538093][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 73.663355][ T5892] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 74.453100][ T5930] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 74.470666][ T5930] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input5 [ 74.560070][ T5930] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 74.913191][ T5930] usb 5-1: USB disconnect, device number 2 [ 74.932036][ T6055] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 74.983090][ T6059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 74.993589][ T6059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 75.004034][ T6059] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 75.014102][ T6059] UDF-fs: Scanning with blocksize 512 failed [ 75.020699][ T6059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 75.030476][ T6059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 75.040039][ T6059] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 75.048038][ T6059] UDF-fs: Scanning with blocksize 1024 failed [ 75.055029][ T6059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 75.064789][ T6059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 75.074444][ T6059] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 75.082026][ T6059] UDF-fs: Scanning with blocksize 2048 failed [ 75.088484][ T6059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 75.098151][ T6059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 75.108925][ T6059] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 75.116571][ T6059] UDF-fs: Scanning with blocksize 4096 failed [ 75.122824][ T6059] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 75.163195][ T9] usb 4-1: USB disconnect, device number 2 [ 75.581205][ T5892] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 75.594652][ T5892] ath9k_htc: Failed to initialize the device [ 75.602652][ T5930] usb 5-1: ath9k_htc: USB layer deinitialized [ 76.195196][ T48] cfg80211: failed to load regulatory.db [ 76.558251][ T6102] syz.1.51 uses obsolete (PF_INET,SOCK_PACKET) [ 76.671087][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.891165][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 76.941087][ T5892] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 76.959591][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.986384][ T5892] usb 4-1: config 0 has no interfaces? [ 77.006264][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 77.031205][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.068874][ T5892] usb 4-1: config 0 descriptor?? [ 77.228455][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 77.228470][ T30] audit: type=1400 audit(1768433016.077:185): avc: denied { ioctl } for pid=6086 comm="syz.0.47" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9655 ioctlcmd=0xaee2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.526817][ T30] audit: type=1400 audit(1768433016.237:186): avc: denied { create } for pid=6114 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.513651][ T30] audit: type=1400 audit(1768433017.077:187): avc: denied { bind } for pid=6114 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.666741][ T6123] rdma_op ffff88805345e9f0 conn xmit_rdma 0000000000000000 [ 78.979457][ T30] audit: type=1400 audit(1768433017.517:188): avc: denied { write } for pid=6114 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.105240][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 79.113826][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 79.125450][ T52] Bluetooth: hci0: hardware error 0x00 [ 79.505934][ T30] audit: type=1400 audit(1768433017.797:189): avc: denied { create } for pid=6111 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.572541][ T30] audit: type=1400 audit(1768433018.097:190): avc: denied { create } for pid=6113 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.574041][ T5858] usb 4-1: USB disconnect, device number 3 [ 79.593434][ T30] audit: type=1400 audit(1768433018.107:191): avc: denied { getopt } for pid=6113 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.661785][ T48] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.896092][ T5930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.901829][ T6138] trusted_key: encrypted_key: insufficient parameters specified [ 80.081140][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 80.345049][ T6140] ceph: No mds server is up or the cluster is laggy [ 80.408593][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 80.543442][ T5930] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.781968][ T48] usb 3-1: device descriptor read/all, error -71 [ 80.789472][ T5930] usb 5-1: config 0 has no interface number 0 [ 80.800580][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 80.824832][ T5930] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 80.838441][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 80.856311][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.873551][ T5930] usb 5-1: Product: syz [ 80.878516][ T5930] usb 5-1: Manufacturer: syz [ 80.887037][ T5930] usb 5-1: SerialNumber: syz [ 81.044359][ T5930] usb 5-1: config 0 descriptor?? [ 81.122176][ T30] audit: type=1400 audit(1768433019.957:192): avc: denied { read } for pid=6146 comm="syz.2.63" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.405770][ T5930] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 81.415046][ T5930] usb 5-1: selecting invalid altsetting 1 [ 81.420785][ T5930] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 81.431907][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 81.443862][ T5930] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 81.458914][ T5930] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 81.509866][ T5930] usb 5-1: media controller created [ 81.514980][ T30] audit: type=1400 audit(1768433019.957:193): avc: denied { open } for pid=6146 comm="syz.2.63" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.584872][ T30] audit: type=1400 audit(1768433019.967:194): avc: denied { create } for pid=6146 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.622486][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.876240][ T52] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 82.247159][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 82.247178][ T30] audit: type=1400 audit(1768433021.077:201): avc: denied { setopt } for pid=6166 comm="syz.1.72" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.299770][ T30] audit: type=1400 audit(1768433021.077:202): avc: denied { execute } for pid=6166 comm="syz.1.72" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 82.342361][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.441381][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 82.447518][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 82.485799][ T6171] ceph: No mds server is up or the cluster is laggy [ 82.531456][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 82.538425][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.551654][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.561908][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.575242][ T48] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 82.585895][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.598084][ T48] usb 4-1: config 0 descriptor?? [ 82.702706][ T6128] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 82.733480][ T5930] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 82.756155][ T5930] zl10353_read_register: readreg error (reg=127, ret==-32) [ 82.791619][ T5930] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 82.976614][ T6179] trusted_key: encrypted_key: insufficient parameters specified [ 83.437566][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.472750][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.483591][ T5930] usb 5-1: USB disconnect, device number 3 [ 83.490307][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.499597][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.509615][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.517359][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.517712][ T30] audit: type=1400 audit(1768433022.367:203): avc: denied { ioctl } for pid=6178 comm="syz.1.75" path="socket:[9827]" dev="sockfs" ino=9827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.525057][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.525100][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.693795][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.701738][ T48] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 83.714042][ T48] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 84.219853][ T30] audit: type=1400 audit(1768433022.647:204): avc: denied { create } for pid=6181 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.249573][ T6193] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 84.266991][ T30] audit: type=1400 audit(1768433022.667:205): avc: denied { connect } for pid=6181 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.712335][ T30] audit: type=1400 audit(1768433022.667:206): avc: denied { write } for pid=6181 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.732928][ T30] audit: type=1400 audit(1768433022.737:207): avc: denied { shutdown } for pid=6181 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.775266][ T30] audit: type=1400 audit(1768433022.797:208): avc: denied { create } for pid=6181 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.267059][ T6186] netlink: 36 bytes leftover after parsing attributes in process `syz.4.78'. [ 85.338592][ T30] audit: type=1400 audit(1768433022.817:209): avc: denied { connect } for pid=6181 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.580644][ T30] audit: type=1400 audit(1768433024.397:210): avc: denied { read } for pid=6197 comm="syz.2.79" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.742355][ T9] usb 4-1: USB disconnect, device number 4 [ 85.753293][ T6193] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.805794][ T6195] batadv_slave_0: entered promiscuous mode [ 85.977062][ T6210] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 85.983728][ T6210] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 86.004986][ T6210] vhci_hcd vhci_hcd.0: Device attached [ 86.015148][ T52] Bluetooth: hci3: unexpected subevent 0x0c length: 248 > 5 [ 86.113560][ T6211] vhci_hcd: connection closed [ 86.114992][ T12] vhci_hcd vhci_hcd.2: stop threads [ 86.138199][ T12] vhci_hcd vhci_hcd.2: release socket [ 86.159811][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 86.431780][ T6227] Invalid source name [ 87.813108][ T6238] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 87.862703][ T6238] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.181143][ T5939] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.462490][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 88.462520][ T30] audit: type=1400 audit(1768433027.217:221): avc: denied { create } for pid=6243 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.259159][ T30] audit: type=1400 audit(1768433027.227:222): avc: denied { setopt } for pid=6243 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.281429][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 89.291443][ T5939] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 89.301129][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 89.310850][ T5939] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 89.644416][ T6257] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 89.650955][ T6257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.688120][ T6257] vhci_hcd vhci_hcd.0: Device attached [ 89.705876][ T52] Bluetooth: hci1: unexpected subevent 0x0c length: 248 > 5 [ 89.715794][ T30] audit: type=1400 audit(1768433028.487:223): avc: denied { create } for pid=6256 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.741662][ T6258] vhci_hcd: connection closed [ 89.746190][ T4210] vhci_hcd vhci_hcd.3: stop threads [ 89.767168][ T5939] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 89.777769][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.787161][ T4210] vhci_hcd vhci_hcd.3: release socket [ 89.793584][ T5939] usb 2-1: config 0 descriptor?? [ 89.813468][ T4210] vhci_hcd vhci_hcd.3: disconnect device [ 90.230312][ T5939] hdpvr 2-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 90.230312][ T5939] 4(r¥ý [ 90.230312][ T5939] d×Å2}±dæ~ýýŠÙ­^r¤ [ 90.445339][ T5939] hdpvr 2-1:0.0: device init failed [ 90.450977][ T5939] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 91.123072][ T5939] usb 2-1: USB disconnect, device number 5 [ 91.194291][ T30] audit: type=1400 audit(1768433030.047:224): avc: denied { create } for pid=6280 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.388740][ T5930] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.096145][ T30] audit: type=1400 audit(1768433030.067:225): avc: denied { create } for pid=6280 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.117653][ T30] audit: type=1400 audit(1768433030.337:226): avc: denied { open } for pid=6280 comm="syz.4.105" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 92.232022][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.247018][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.247186][ T30] audit: type=1400 audit(1768433030.827:227): avc: denied { ioctl } for pid=6282 comm="syz.0.106" path="socket:[10041]" dev="sockfs" ino=10041 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.258160][ T5930] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.346575][ T5930] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 92.382550][ T5930] usb 4-1: Manufacturer: syz [ 92.412713][ T5930] usb 4-1: config 0 descriptor?? [ 92.626739][ T6292] process 'syz.4.108' launched '/dev/fd/9' with NULL argv: empty string added [ 92.668829][ T30] audit: type=1400 audit(1768433031.477:228): avc: denied { execute } for pid=6287 comm="syz.4.108" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.977602][ T30] audit: type=1400 audit(1768433031.487:229): avc: denied { execute_no_trans } for pid=6287 comm="syz.4.108" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.464155][ T5930] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 93.487352][ T5930] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 93.498371][ T5930] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 93.518886][ T5930] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 93.526749][ T5930] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 93.547098][ T5930] usb 4-1: USB disconnect, device number 5 [ 93.691218][ T5871] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.101001][ T30] audit: type=1400 audit(1768433032.947:230): avc: denied { name_connect } for pid=6313 comm="syz.1.114" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 94.155128][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.190076][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.200799][ T5871] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 94.210192][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.305991][ T5871] usb 5-1: config 0 descriptor?? [ 94.993787][ T5871] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 95.588006][ T30] audit: type=1400 audit(1768433034.437:231): avc: denied { setopt } for pid=6328 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.768722][ T6301] IPv6: sit1: Disabled Multicast RS [ 95.801792][ T6301] sit1: entered allmulticast mode [ 96.272832][ T5871] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 96.285007][ T5871] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 97.130319][ T5871] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 97.187203][ T5871] usb 5-1: USB disconnect, device number 4 [ 97.424948][ T6348] trusted_key: encrypted_key: insufficient parameters specified [ 98.204905][ T30] audit: type=1400 audit(1768433037.027:232): avc: denied { create } for pid=6349 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.226611][ T30] audit: type=1400 audit(1768433037.027:233): avc: denied { write } for pid=6349 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.262201][ T30] audit: type=1400 audit(1768433037.047:234): avc: denied { bind } for pid=6349 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.297815][ T30] audit: type=1400 audit(1768433037.057:235): avc: denied { setopt } for pid=6349 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.319497][ T6356] Bluetooth: MGMT ver 1.23 [ 98.348944][ T30] audit: type=1400 audit(1768433037.057:236): avc: denied { read } for pid=6349 comm="syz.4.124" path="socket:[10221]" dev="sockfs" ino=10221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.731473][ T30] audit: type=1400 audit(1768433037.447:237): avc: denied { mounton } for pid=6361 comm="syz.2.127" path="/19/file0" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.331966][ T5976] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 99.544932][ T5976] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 99.555807][ T5976] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 99.567102][ T5976] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 99.580015][ T5976] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.587668][ T5976] usb 4-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 99.596761][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.606254][ T5976] usb 4-1: config 0 descriptor?? [ 99.612376][ T6368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.834433][ T6391] trusted_key: encrypted_key: insufficient parameters specified [ 100.852053][ T6392] trusted_key: encrypted_key: insufficient parameters specified [ 101.329257][ T5976] hid_parser_main: 24 callbacks suppressed [ 101.329277][ T5976] ntrig 0003:1B96:0011.0006: unknown main item tag 0x0 [ 101.346467][ T5976] ntrig 0003:1B96:0011.0006: unknown main item tag 0x0 [ 101.353390][ T5976] ntrig 0003:1B96:0011.0006: unknown main item tag 0x0 [ 101.360859][ T5976] ntrig 0003:1B96:0011.0006: unknown main item tag 0x0 [ 101.368009][ T5976] ntrig 0003:1B96:0011.0006: unknown main item tag 0x0 [ 101.475252][ T5976] ntrig 0003:1B96:0011.0006: hidraw0: USB HID v0.04 Device [HID 1b96:0011] on usb-dummy_hcd.3-1/input0 [ 101.490793][ T5976] usb 4-1: USB disconnect, device number 6 [ 102.020597][ T6408] fido_id[6408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.097308][ T52] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 104.690136][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 104.753100][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 104.763374][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 104.763398][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.763409][ T52] Workqueue: hci1 hci_rx_work [ 104.763435][ T52] Call Trace: [ 104.763440][ T52] [ 104.763447][ T52] dump_stack_lvl+0x16c/0x1f0 [ 104.763472][ T52] sysfs_warn_dup+0x7f/0xa0 [ 104.763492][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 104.763513][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 104.763532][ T52] ? find_held_lock+0x2b/0x80 [ 104.763560][ T52] ? do_raw_spin_unlock+0x172/0x230 [ 104.763591][ T52] kobject_add_internal+0x2c4/0x9d0 [ 104.763618][ T52] kobject_add+0x16e/0x240 [ 104.763641][ T52] ? __pfx_kobject_add+0x10/0x10 [ 104.763667][ T52] ? kobject_put+0xaf/0x6f0 [ 104.763687][ T52] ? _raw_spin_unlock+0x28/0x50 [ 104.763713][ T52] device_add+0x288/0x1980 [ 104.763733][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 104.763754][ T52] ? __pfx_device_add+0x10/0x10 [ 104.763774][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 104.763798][ T52] hci_conn_add_sysfs+0x1a8/0x260 [ 104.763819][ T52] le_conn_complete_evt+0x11ed/0x1fa0 [ 104.763843][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 104.763868][ T52] hci_le_conn_complete_evt+0x23c/0x3a0 [ 104.763893][ T52] hci_le_meta_evt+0x357/0x610 [ 104.763913][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 104.763935][ T52] hci_event_packet+0x685/0x1210 [ 104.763954][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 104.763975][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 104.763997][ T52] ? kcov_remote_start+0x399/0x680 [ 104.764015][ T52] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.764041][ T52] hci_rx_work+0x2c9/0x1020 [ 104.764065][ T52] process_one_work+0x9ba/0x1b20 [ 104.764098][ T52] ? __pfx_process_one_work+0x10/0x10 [ 104.764129][ T52] ? assign_work+0x1a0/0x250 [ 104.764152][ T52] worker_thread+0x6c8/0xf10 [ 104.764187][ T52] ? __pfx_worker_thread+0x10/0x10 [ 104.764209][ T52] kthread+0x3c5/0x780 [ 104.764230][ T52] ? __pfx_kthread+0x10/0x10 [ 104.764253][ T52] ? rcu_is_watching+0x12/0xc0 [ 104.764269][ T52] ? __pfx_kthread+0x10/0x10 [ 104.764291][ T52] ret_from_fork+0x983/0xb10 [ 104.764311][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 104.764332][ T52] ? __switch_to+0x7af/0x10d0 [ 104.764357][ T52] ? __pfx_kthread+0x10/0x10 [ 104.764379][ T52] ret_from_fork_asm+0x1a/0x30 [ 104.764419][ T52] [ 104.764492][ T52] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 105.022537][ T52] Bluetooth: hci1: failed to register connection device [ 105.748965][ T6464] trusted_key: encrypted_key: insufficient parameters specified [ 106.003750][ T30] audit: type=1400 audit(1768433044.857:238): avc: denied { read write } for pid=6465 comm="syz.3.155" dev="sockfs" ino=11448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.728903][ T5817] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 109.872987][ T5939] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.082917][ T6510] Invalid source name [ 110.110350][ T52] Bluetooth: hci4: link tx timeout [ 110.121512][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.130902][ T5817] Bluetooth: hci4: link tx timeout [ 110.140214][ T5817] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.149834][ T5817] Bluetooth: hci4: link tx timeout [ 110.157648][ T5817] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.165406][ T5817] Bluetooth: hci4: link tx timeout [ 110.171126][ T5817] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.190740][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 110.207022][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.239612][ T6509] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 110.260830][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.303494][ T5939] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.329980][ T6509] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.345768][ T5939] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 110.375004][ T5939] usb 1-1: Manufacturer: syz [ 110.407108][ T5939] usb 1-1: config 0 descriptor?? [ 110.584151][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 111.179766][ T5817] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 111.189568][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 111.189591][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.189602][ T5817] Workqueue: hci3 hci_rx_work [ 111.189627][ T5817] Call Trace: [ 111.189632][ T5817] [ 111.189638][ T5817] dump_stack_lvl+0x16c/0x1f0 [ 111.189659][ T5817] sysfs_warn_dup+0x7f/0xa0 [ 111.189677][ T5817] sysfs_create_dir_ns+0x24b/0x2b0 [ 111.189697][ T5817] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 111.189715][ T5817] ? find_held_lock+0x2b/0x80 [ 111.189743][ T5817] ? do_raw_spin_unlock+0x172/0x230 [ 111.189766][ T5817] kobject_add_internal+0x2c4/0x9d0 [ 111.189796][ T5817] kobject_add+0x16e/0x240 [ 111.189819][ T5817] ? __pfx_kobject_add+0x10/0x10 [ 111.189846][ T5817] ? kobject_put+0xaf/0x6f0 [ 111.189865][ T5817] ? _raw_spin_unlock+0x28/0x50 [ 111.189890][ T5817] device_add+0x288/0x1980 [ 111.189902][ T5817] ? __pfx_dev_set_name+0x10/0x10 [ 111.189915][ T5817] ? __pfx_device_add+0x10/0x10 [ 111.189927][ T5817] ? mgmt_send_event_skb+0x2fb/0x460 [ 111.189942][ T5817] hci_conn_add_sysfs+0x1a8/0x260 [ 111.189960][ T5817] le_conn_complete_evt+0x11ed/0x1fa0 [ 111.189985][ T5817] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 111.190010][ T5817] hci_le_conn_complete_evt+0x23c/0x3a0 [ 111.190033][ T5817] hci_le_meta_evt+0x357/0x610 [ 111.190045][ T5817] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 111.190059][ T5817] hci_event_packet+0x685/0x1210 [ 111.190070][ T5817] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 111.190083][ T5817] ? __pfx_hci_event_packet+0x10/0x10 [ 111.190097][ T5817] ? kcov_remote_start+0x399/0x680 [ 111.190114][ T5817] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.190140][ T5817] hci_rx_work+0x2c9/0x1020 [ 111.190162][ T5817] process_one_work+0x9ba/0x1b20 [ 111.190185][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 111.190201][ T5817] ? assign_work+0x1a0/0x250 [ 111.190214][ T5817] worker_thread+0x6c8/0xf10 [ 111.190230][ T5817] ? __kthread_parkme+0x19e/0x250 [ 111.190243][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 111.190262][ T5817] kthread+0x3c5/0x780 [ 111.190288][ T5817] ? __pfx_kthread+0x10/0x10 [ 111.190308][ T5817] ? rcu_is_watching+0x12/0xc0 [ 111.190322][ T5817] ? __pfx_kthread+0x10/0x10 [ 111.190335][ T5817] ret_from_fork+0x983/0xb10 [ 111.190347][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 111.190360][ T5817] ? __switch_to+0x7af/0x10d0 [ 111.190374][ T5817] ? __pfx_kthread+0x10/0x10 [ 111.190391][ T5817] ret_from_fork_asm+0x1a/0x30 [ 111.190429][ T5817] [ 111.190451][ T5817] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 111.448698][ T5817] Bluetooth: hci3: failed to register connection device [ 111.636687][ T6523] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 111.643321][ T6523] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 111.679567][ T6523] vhci_hcd vhci_hcd.0: Device attached [ 111.701315][ T6524] vhci_hcd: connection closed [ 111.701618][ T36] vhci_hcd vhci_hcd.2: stop threads [ 111.721835][ T5939] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 111.730753][ T5939] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 111.764631][ T6530] trusted_key: encrypted_key: insufficient parameters specified [ 111.817412][ T36] vhci_hcd vhci_hcd.2: release socket [ 111.831481][ T5939] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 111.856526][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 111.878796][ T5939] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 111.970306][ T5939] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 112.083557][ T5939] usb 1-1: USB disconnect, device number 2 [ 112.222917][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 112.369614][ T6536] trusted_key: encrypted_key: insufficient parameters specified [ 112.414791][ T6537] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 112.421331][ T6537] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 112.760674][ T6537] vhci_hcd vhci_hcd.0: Device attached [ 112.774286][ T52] Bluetooth: hci1: unexpected subevent 0x0e length: 248 > 15 [ 112.782342][ T52] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 112.796817][ T6538] vhci_hcd: connection closed [ 112.804583][ T3946] vhci_hcd vhci_hcd.3: stop threads [ 112.865600][ T3946] vhci_hcd vhci_hcd.3: release socket [ 112.887759][ T3946] vhci_hcd vhci_hcd.3: disconnect device [ 114.007061][ T5939] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.241836][ T6559] trusted_key: encrypted_key: insufficient parameters specified [ 114.823200][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.846242][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.866263][ T5939] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.171174][ T5939] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 115.179196][ T5939] usb 1-1: Manufacturer: syz [ 115.198382][ T5939] usb 1-1: config 0 descriptor?? [ 115.988745][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 116.853460][ T6587] trusted_key: encrypted_key: insufficient parameters specified [ 117.084390][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.358501][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.388360][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.388408][ T5939] uclogic 0003:256C:006D.0008: v1 frame probing failed: -71 [ 117.409872][ T5939] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 117.419799][ T5939] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 117.438483][ T5878] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 117.453414][ T5939] usb 1-1: USB disconnect, device number 3 [ 117.661112][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.687765][ T5878] usb 2-1: config 0 descriptor?? [ 119.664472][ T5878] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 119.687671][ T5878] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 119.708967][ T5878] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 120.236594][ T5878] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -5 [ 120.470001][ T5878] usb 2-1: USB disconnect, device number 6 [ 120.991860][ T52] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 121.298060][ T6649] trusted_key: encrypted_key: insufficient parameters specified [ 121.312929][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 121.441961][ T30] audit: type=1400 audit(1768433060.257:239): avc: denied { write } for pid=6650 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.445775][ T30] audit: type=1400 audit(1768433062.297:240): avc: denied { create } for pid=6660 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.977065][ T30] audit: type=1400 audit(1768433062.317:241): avc: denied { listen } for pid=6660 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.013142][ T30] audit: type=1400 audit(1768433062.317:242): avc: denied { accept } for pid=6660 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.410357][ T30] audit: type=1400 audit(1768433063.257:243): avc: denied { write } for pid=6676 comm="syz.4.213" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 124.521247][ T5960] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.685426][ T30] audit: type=1400 audit(1768433063.257:244): avc: denied { open } for pid=6676 comm="syz.4.213" path="/42/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 124.735485][ T30] audit: type=1400 audit(1768433063.387:245): avc: denied { ioctl } for pid=6676 comm="syz.4.213" path="/42/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 124.749980][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.811865][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.830265][ T5960] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 124.853303][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.871798][ T5960] usb 2-1: config 0 descriptor?? [ 124.927700][ T6685] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 124.934240][ T6685] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.974972][ T6685] vhci_hcd vhci_hcd.0: Device attached [ 124.985084][ T52] Bluetooth: hci2: unexpected subevent 0x0e length: 248 > 15 [ 124.991065][ T6691] vhci_hcd: connection closed [ 125.001200][ T52] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 125.001234][ T3537] vhci_hcd vhci_hcd.4: stop threads [ 125.035424][ T3537] vhci_hcd vhci_hcd.4: release socket [ 125.040936][ T3537] vhci_hcd vhci_hcd.4: disconnect device [ 125.928145][ T5960] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 126.080597][ T5960] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 126.097317][ T5960] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 126.136486][ T5960] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -5 [ 126.322258][ T5939] usb 2-1: USB disconnect, device number 7 [ 126.353807][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 128.419121][ T30] audit: type=1400 audit(1768433067.267:246): avc: denied { write } for pid=6737 comm="syz.2.230" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.501295][ T52] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 128.519112][ T30] audit: type=1400 audit(1768433067.297:247): avc: denied { open } for pid=6737 comm="syz.2.230" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.644793][ T30] audit: type=1400 audit(1768433067.467:248): avc: denied { read write } for pid=6734 comm="syz.1.228" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 129.051188][ T5858] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.107586][ T30] audit: type=1400 audit(1768433067.467:249): avc: denied { open } for pid=6734 comm="syz.1.228" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 129.132614][ T30] audit: type=1400 audit(1768433067.477:250): avc: denied { getopt } for pid=6734 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.151936][ T30] audit: type=1400 audit(1768433067.697:251): avc: denied { create } for pid=6737 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.172224][ T30] audit: type=1400 audit(1768433067.707:252): avc: denied { connect } for pid=6737 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.194814][ T30] audit: type=1400 audit(1768433067.717:253): avc: denied { getopt } for pid=6737 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.215054][ T30] audit: type=1400 audit(1768433067.717:254): avc: denied { ioctl } for pid=6737 comm="syz.2.230" path="/dev/sg0" dev="devtmpfs" ino=743 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.393018][ T6749] trusted_key: encrypted_key: insufficient parameters specified [ 129.893341][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.930536][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.992127][ T5858] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.011275][ T5858] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 130.024448][ T5858] usb 4-1: Manufacturer: syz [ 130.042103][ T5858] usb 4-1: config 0 descriptor?? [ 130.103736][ T6753] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 130.110364][ T6753] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 130.252227][ T6753] vhci_hcd vhci_hcd.0: Device attached [ 130.291930][ T6756] vhci_hcd: connection closed [ 130.301759][ T3537] vhci_hcd vhci_hcd.2: stop threads [ 130.335383][ T3537] vhci_hcd vhci_hcd.2: release socket [ 130.340884][ T3537] vhci_hcd vhci_hcd.2: disconnect device [ 130.621103][ T5976] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.898080][ T52] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 131.002494][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 131.014068][ T5976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 131.030872][ T5976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.046192][ T5976] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 131.055649][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.068671][ T5976] usb 1-1: config 0 descriptor?? [ 131.256630][ T5976] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 131.303264][ T5858] uclogic 0003:256C:006D.000B: v1 frame probing failed: -71 [ 131.417854][ T5976] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 131.421413][ T5858] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 131.441240][ T5858] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 131.467099][ T5858] usb 4-1: USB disconnect, device number 7 [ 132.385006][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.396170][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.744882][ T6804] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 132.751416][ T6804] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.788426][ T6804] vhci_hcd vhci_hcd.0: Device attached [ 132.804351][ T6808] vhci_hcd: connection closed [ 132.805563][ T3467] vhci_hcd vhci_hcd.4: stop threads [ 132.835870][ T3467] vhci_hcd vhci_hcd.4: release socket [ 132.849976][ T3467] vhci_hcd vhci_hcd.4: disconnect device [ 133.183398][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 133.396882][ T5976] usb 1-1: USB disconnect, device number 4 [ 133.983526][ T6831] trusted_key: encrypted_key: insufficient parameters specified [ 135.797292][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 136.081214][ T5939] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.974498][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.005762][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.023467][ T5939] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 137.051052][ T5939] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 137.147718][ T5939] usb 3-1: Manufacturer: syz [ 137.164212][ T5939] usb 3-1: config 0 descriptor?? [ 137.222929][ T5858] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.393807][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 137.426854][ T5858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 137.663260][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 137.718247][ T5858] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 137.720294][ T30] audit: type=1400 audit(1768433076.567:255): avc: denied { write } for pid=6877 comm="syz.4.268" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 137.738471][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.818942][ T5858] usb 1-1: config 0 descriptor?? [ 137.854310][ T5858] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 137.914268][ T6886] trusted_key: encrypted_key: insufficient parameters specified [ 138.348879][ T5858] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 138.570568][ T5939] uclogic 0003:256C:006D.000C: v1 frame probing failed: -71 [ 138.589955][ T5939] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 138.609302][ T5939] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 138.633722][ T5939] usb 3-1: USB disconnect, device number 5 [ 139.850709][ T6905] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 139.858357][ T6905] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 139.870587][ T6905] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 140.022262][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 140.040356][ T5960] usb 1-1: USB disconnect, device number 5 [ 141.151581][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 142.416071][ T6944] trusted_key: encrypted_key: insufficient parameters specified [ 143.841117][ T5939] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.882990][ T6947] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.991203][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.820664][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.849035][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.859738][ T5939] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 144.870950][ T6947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.897701][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.911506][ T6947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.936164][ T5939] usb 2-1: config 0 descriptor?? [ 144.957331][ T6947] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 144.976995][ T6947] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 144.985656][ T6947] usb 1-1: Manufacturer: syz [ 144.994009][ T6947] usb 1-1: config 0 descriptor?? [ 145.005496][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 145.015729][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 145.029940][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 145.040303][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 145.050584][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.062986][ T10] usb 5-1: config 0 descriptor?? [ 145.078107][ T10] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 145.087970][ T10] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 145.432345][ T5939] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 145.771327][ T5939] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 145.826200][ T5939] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 145.881729][ T5939] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 145.949378][ T6947] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 145.965821][ T5939] usb 2-1: USB disconnect, device number 8 [ 145.992092][ T6947] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 146.000190][ T6947] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 146.025843][ T6947] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 146.037604][ T6947] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 146.057592][ T6947] usb 1-1: USB disconnect, device number 6 [ 147.057573][ T10] usb 5-1: USB disconnect, device number 5 [ 147.521346][ T6990] trusted_key: encrypted_key: insufficient parameters specified [ 149.264200][ T6998] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 149.287181][ T7005] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 149.311135][ T6998] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 149.803526][ T7005] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.242491][ T6947] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 150.381075][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 150.404234][ T6947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.417991][ T6947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.431110][ T6947] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 150.447552][ T6947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.459521][ T6947] usb 4-1: config 0 descriptor?? [ 150.519943][ T7022] trusted_key: encrypted_key: insufficient parameters specified [ 150.569716][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.581806][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.596546][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.611739][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 150.620109][ T10] usb 2-1: Manufacturer: syz [ 150.658408][ T10] usb 2-1: config 0 descriptor?? [ 151.312350][ T6947] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 151.948190][ T10] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 151.967217][ T6947] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 151.969389][ T7033] IPv6: sit1: Disabled Multicast RS [ 151.988805][ T10] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 152.001319][ T6947] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 152.009053][ T10] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 152.019979][ T6947] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -5 [ 152.028596][ T10] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 152.028712][ T7033] sit1: entered allmulticast mode [ 152.038608][ T10] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 152.061277][ T10] usb 2-1: USB disconnect, device number 9 [ 152.169220][ T6947] usb 4-1: USB disconnect, device number 8 [ 152.171138][ T5878] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.332535][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.343519][ T48] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.351070][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.361371][ T5878] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 152.370430][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.380022][ T5878] usb 1-1: config 0 descriptor?? [ 152.524027][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.536914][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.547928][ T48] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 152.557629][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.567391][ T48] usb 5-1: config 0 descriptor?? [ 152.573494][ T7044] trusted_key: encrypted_key: insufficient parameters specified [ 153.047529][ T5878] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 153.281931][ T48] pyra 0003:1E7D:2CF6.0012: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 153.632892][ T7034] IPv6: sit1: Disabled Multicast RS [ 153.655514][ T7034] sit1: entered allmulticast mode [ 154.906703][ T7038] IPv6: sit1: Disabled Multicast RS [ 154.936209][ T7038] sit1: entered allmulticast mode [ 155.092267][ T5878] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 155.119408][ T5878] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 155.137494][ T5878] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 155.151170][ T48] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 155.165315][ T48] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 155.173193][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 155.192496][ T48] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -71 [ 155.201215][ T5878] usb 1-1: USB disconnect, device number 7 [ 155.261339][ T48] usb 5-1: USB disconnect, device number 6 [ 159.180292][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 161.122148][ T7125] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.320'. [ 161.411108][ T30] audit: type=1400 audit(1768433100.247:256): avc: denied { create } for pid=7123 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.493122][ T30] audit: type=1400 audit(1768433100.347:257): avc: denied { write } for pid=7123 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.707696][ T7141] trusted_key: encrypted_key: insufficient parameters specified [ 162.365908][ T52] Bluetooth: hci4: link tx timeout [ 162.371402][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.379869][ T52] Bluetooth: hci4: link tx timeout [ 162.385089][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.392881][ T52] Bluetooth: hci4: link tx timeout [ 162.398030][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.405824][ T52] Bluetooth: hci4: link tx timeout [ 162.410966][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.421176][ T52] Bluetooth: hci4: link tx timeout [ 162.426292][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.434044][ T52] Bluetooth: hci4: link tx timeout [ 162.439158][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.492778][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 162.864133][ T30] audit: type=1400 audit(1768433101.717:258): avc: denied { create } for pid=7163 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 163.158924][ T30] audit: type=1400 audit(1768433101.987:259): avc: denied { ioctl } for pid=7163 comm="syz.0.339" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.627561][ T7175] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.342'. [ 163.681652][ T30] audit: type=1400 audit(1768433102.537:260): avc: denied { create } for pid=7178 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.838964][ T30] audit: type=1400 audit(1768433102.567:261): avc: denied { bind } for pid=7178 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.171738][ T30] audit: type=1400 audit(1768433102.657:262): avc: denied { setopt } for pid=7178 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.226277][ T30] audit: type=1400 audit(1768433102.657:263): avc: denied { write } for pid=7178 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.253806][ T30] audit: type=1400 audit(1768433102.827:264): avc: denied { create } for pid=7180 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.274116][ T30] audit: type=1400 audit(1768433102.857:265): avc: denied { setopt } for pid=7180 comm="syz.1.345" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.295328][ T7190] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 164.301831][ T7190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 164.323504][ T52] Bluetooth: hci2: unexpected subevent 0x0e length: 248 > 15 [ 164.331070][ T52] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 164.341845][ T7190] vhci_hcd vhci_hcd.0: Device attached [ 164.350599][ T7191] vhci_hcd: connection closed [ 164.351163][ T12] vhci_hcd vhci_hcd.4: stop threads [ 164.381222][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 164.388943][ T12] vhci_hcd vhci_hcd.4: release socket [ 164.436837][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 165.388597][ T5817] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 167.256615][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 167.369052][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 168.258576][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 168.678785][ T7253] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 168.685329][ T7253] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 168.715581][ T7253] vhci_hcd vhci_hcd.0: Device attached [ 168.727469][ T7254] vhci_hcd: connection closed [ 168.727699][ T141] vhci_hcd vhci_hcd.2: stop threads [ 168.739825][ T141] vhci_hcd vhci_hcd.2: release socket [ 168.747956][ T141] vhci_hcd vhci_hcd.2: disconnect device [ 168.780823][ T52] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 170.631102][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 171.678431][ T7296] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 171.695409][ T7296] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 171.717353][ T7296] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 171.980467][ T5817] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 171.992236][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 172.038765][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 172.761261][ T7319] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 172.767800][ T7319] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 172.804529][ T5817] Bluetooth: hci4: unexpected subevent 0x0e length: 248 > 15 [ 172.812269][ T5817] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 172.824390][ T7319] vhci_hcd vhci_hcd.0: Device attached [ 172.851114][ T7320] vhci_hcd: connection closed [ 172.851384][ T3946] vhci_hcd vhci_hcd.1: stop threads [ 172.872613][ T3946] vhci_hcd vhci_hcd.1: release socket [ 173.145581][ T3946] vhci_hcd vhci_hcd.1: disconnect device [ 173.201300][ T7327] netlink: 'syz.3.384': attribute type 72 has an invalid length. [ 175.221712][ T5817] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 175.531075][ T5919] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.550892][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 175.728463][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.740910][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.751152][ T5919] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 175.760198][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.770145][ T5919] usb 5-1: config 0 descriptor?? [ 176.870138][ T7368] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.396'. [ 176.895384][ T5817] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 177.204351][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 177.241750][ T5919] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 177.653594][ T7353] IPv6: sit1: Disabled Multicast RS [ 177.659750][ T7353] sit1: entered allmulticast mode [ 177.760304][ T5919] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 177.781692][ T5919] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 177.803235][ T5919] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71 [ 177.819199][ T5919] usb 5-1: USB disconnect, device number 7 [ 179.049566][ T7389] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 179.114225][ T7392] trusted_key: encrypted_key: insufficient parameters specified [ 179.297166][ T5817] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 179.623993][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 180.291321][ T5919] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.514355][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.550369][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 180.556564][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 180.562927][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 180.619326][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.683269][ T5919] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 180.707848][ T5919] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 180.725688][ T5919] usb 2-1: Manufacturer: syz [ 180.745149][ T5919] usb 2-1: config 0 descriptor?? [ 180.803702][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 181.270290][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 182.109526][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 182.157462][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 182.183314][ T5919] usb 2-1: USB disconnect, device number 10 [ 182.341199][ T7428] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 182.347745][ T7428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.381156][ T7428] vhci_hcd vhci_hcd.0: Device attached [ 182.391561][ T7429] vhci_hcd: connection closed [ 182.391784][ T50] vhci_hcd vhci_hcd.4: stop threads [ 182.438964][ T50] vhci_hcd vhci_hcd.4: release socket [ 182.449517][ T50] vhci_hcd vhci_hcd.4: disconnect device [ 288.920961][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 288.927934][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3537/1:b..l [ 288.936125][ C1] rcu: (detected by 1, t=10502 jiffies, g=16349, q=387 ncpus=2) [ 288.943807][ C1] task:kworker/u8:12 state:R running task stack:24600 pid:3537 tgid:3537 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 288.957587][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 288.965374][ C1] Call Trace: [ 288.968624][ C1] [ 288.971526][ C1] ? __schedule+0x10b9/0x6150 [ 288.976179][ C1] __schedule+0x1139/0x6150 [ 288.980657][ C1] ? find_held_lock+0x2b/0x80 [ 288.985311][ C1] ? veth_xmit+0x6a8/0xe60 [ 288.989735][ C1] ? __pfx___schedule+0x10/0x10 [ 288.994565][ C1] ? mark_held_locks+0x49/0x80 [ 288.999298][ C1] preempt_schedule_irq+0x51/0x90 [ 289.004290][ C1] irqentry_exit+0x1d8/0x8c0 [ 289.008853][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.014800][ C1] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 289.020061][ C1] Code: 3e 3d 8e e8 d2 89 3e 03 e9 51 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 ff 05 73 9d 0f 12 e8 7e 4c d5 09 48 c7 c3 e8 [ 289.039638][ C1] RSP: 0018:ffffc9000cf379c0 EFLAGS: 00000297 [ 289.045683][ C1] RAX: 0000000000000000 RBX: ffffffff8e3c96a0 RCX: 0000000000000002 [ 289.053622][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c96a0 [ 289.061561][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 289.069511][ C1] R10: 0000000000000400 R11: ffff888032aa2ff0 R12: 0000000000000000 [ 289.077462][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.085407][ C1] lock_acquire+0x2cd/0x330 [ 289.089883][ C1] ? batadv_iv_ogm_schedule_buff+0x780/0x14c0 [ 289.095924][ C1] batadv_iv_ogm_schedule_buff+0x5d0/0x14c0 [ 289.101789][ C1] ? batadv_iv_ogm_schedule_buff+0x5bf/0x14c0 [ 289.107826][ C1] ? ww_mutex_lock+0x81/0x160 [ 289.112477][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 289.118775][ C1] ? batadv_send_skb_packet+0x597/0x6f0 [ 289.124292][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 289.131296][ C1] process_one_work+0x9ba/0x1b20 [ 289.136210][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 289.143723][ C1] ? __pfx_process_one_work+0x10/0x10 [ 289.149074][ C1] ? assign_work+0x1a0/0x250 [ 289.153637][ C1] worker_thread+0x6c8/0xf10 [ 289.158201][ C1] ? __kthread_parkme+0x19e/0x250 [ 289.163194][ C1] ? __pfx_worker_thread+0x10/0x10 [ 289.168273][ C1] kthread+0x3c5/0x780 [ 289.172321][ C1] ? __pfx_kthread+0x10/0x10 [ 289.176881][ C1] ? rcu_is_watching+0x12/0xc0 [ 289.181613][ C1] ? __pfx_kthread+0x10/0x10 [ 289.186170][ C1] ret_from_fork+0x983/0xb10 [ 289.190728][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 289.195816][ C1] ? __switch_to+0x7af/0x10d0 [ 289.200462][ C1] ? __pfx_kthread+0x10/0x10 [ 289.205028][ C1] ret_from_fork_asm+0x1a/0x30 [ 289.209770][ C1] [ 289.212766][ C1] rcu: rcu_preempt kthread starved for 10527 jiffies! g16349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 289.223927][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 289.233865][ C1] rcu: RCU grace-period kthread stack dump: [ 289.239725][ C1] task:rcu_preempt state:R running task stack:28776 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 289.253166][ C1] Call Trace: [ 289.256414][ C1] [ 289.259316][ C1] ? __schedule+0x10b9/0x6150 [ 289.263962][ C1] __schedule+0x1139/0x6150 [ 289.268433][ C1] ? __lock_acquire+0x436/0x2890 [ 289.273340][ C1] ? __mod_timer+0x8f2/0xd30 [ 289.277903][ C1] ? __pfx___schedule+0x10/0x10 [ 289.282725][ C1] ? find_held_lock+0x2b/0x80 [ 289.287373][ C1] ? schedule+0x2d7/0x3a0 [ 289.291671][ C1] schedule+0xe7/0x3a0 [ 289.295710][ C1] schedule_timeout+0x123/0x290 [ 289.300525][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 289.305868][ C1] ? __pfx_process_timeout+0x10/0x10 [ 289.311131][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 289.316920][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 289.322358][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 289.327104][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 289.332360][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.337530][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 289.342435][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 289.347262][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 289.353046][ C1] rcu_gp_kthread+0x26d/0x380 [ 289.357692][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 289.362859][ C1] ? rcu_is_watching+0x12/0xc0 [ 289.367592][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.372761][ C1] ? __kthread_parkme+0x19e/0x250 [ 289.377751][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 289.382919][ C1] kthread+0x3c5/0x780 [ 289.386967][ C1] ? __pfx_kthread+0x10/0x10 [ 289.391538][ C1] ? rcu_is_watching+0x12/0xc0 [ 289.396276][ C1] ? __pfx_kthread+0x10/0x10 [ 289.400840][ C1] ret_from_fork+0x983/0xb10 [ 289.405409][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 289.410489][ C1] ? __switch_to+0x7af/0x10d0 [ 289.415144][ C1] ? __pfx_kthread+0x10/0x10 [ 289.419702][ C1] ret_from_fork_asm+0x1a/0x30 [ 289.424445][ C1] [ 289.427431][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 289.433719][ C1] Sending NMI from CPU 1 to CPUs 0: [ 289.438898][ C0] NMI backtrace for cpu 0 [ 289.438908][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 289.438922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.438929][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 289.438947][ C0] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 289.438958][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 289.438969][ C0] RAX: 000000000096c935 RBX: 0000000000000000 RCX: ffffffff8b7866d9 [ 289.438977][ C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480 [ 289.438985][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 289.438992][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 289.438999][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 289.439007][ C0] FS: 0000000000000000(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000 [ 289.439020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.439028][ C0] CR2: 0000001b2fe0eff8 CR3: 000000000e184000 CR4: 00000000003526f0 [ 289.439035][ C0] Call Trace: [ 289.439039][ C0] [ 289.439043][ C0] default_idle+0x13/0x20 [ 289.439060][ C0] default_idle_call+0x6c/0xb0 [ 289.439076][ C0] do_idle+0x38d/0x510 [ 289.439094][ C0] ? __pfx_do_idle+0x10/0x10 [ 289.439113][ C0] cpu_startup_entry+0x4f/0x60 [ 289.439129][ C0] rest_init+0x16b/0x2b0 [ 289.439140][ C0] ? acpi_subsystem_init+0x133/0x180 [ 289.439153][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 289.439166][ C0] start_kernel+0x3ef/0x4d0 [ 289.439178][ C0] x86_64_start_reservations+0x18/0x30 [ 289.439190][ C0] x86_64_start_kernel+0x130/0x190 [ 289.439202][ C0] common_startup_64+0x13e/0x148 [ 289.439220][ C0]