last executing test programs: 14.563271376s ago: executing program 0 (id=328): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x3f00, 0xb}) 13.807450291s ago: executing program 0 (id=329): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x21, 0x25, {0x25, 0x4, "857c3f011e57386849b973b9aeebf275aa57208c3932950e14187ca7294b3eefa1c644"}}, &(0x7f00000000c0)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "ae69c962c0c217a07339ce3ebb9a214bdcce9067fca62932148afd61d8c63c63bc74bc473c3cc2206bd8"}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@local=@item_012={0x0, 0x2, 0xa}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x8, "e961459e"}, @global=@item_4={0x3, 0x1, 0x0, "539702e6"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd2f, 0x27, 0x1, {0x22, 0x6c}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0x17, 0x5b, "8a47d37cdb107674470626bcf88ef07257c352ec81c4047c9717f4deaca8c4f0c850806b3febad9e2e72733912ea299749799e67510b27a8ba56edd62610d60361050b49f9976475402d4df859091c0f3f12d4c7cd8522fddd86f9"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x1, 0x2c, "b9560bd367bbdfccf4acde660c5cc6585406129c1aa0da4ebc2406129f96a0486dd8ceab867d24a6b3fc4d75"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x4, 0x6, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}]}}}, @hoplimit={{0x14}}, @hopopts={{0x38, 0x29, 0x36, {0x5e, 0x3, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x1, '+'}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0xb8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="00151f0000001f2200000000fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb70082634576ca2d408c3a93f930a03064e0c021317a9a98d359da364c97d2ce582a"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) socket(0x2c, 0x3, 0xe6) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12.640552277s ago: executing program 1 (id=331): unshare(0x68040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x36, &(0x7f0000000080)={0x39, 0x3ff, 0x2}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x700}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000004bfa200000000000007020000f8ffffffb70bfa0009000000000000000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1002}, 0x4) 11.538323047s ago: executing program 1 (id=333): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file1/../file0', [], 0xa, "008b3d5978e0"}, 0x1a) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) 11.004200671s ago: executing program 1 (id=337): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0x7, 0x4, {0x4, 0x21, "f999"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0x72b}}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x0, 0xa, 0x24, "3e04de62146e1a1c80b6d39bbd73f16744d810eab5853236ebab83d3a2af7f46e32fa492"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000400)={0x20, 0x1, 0xcd, "c88bc90ca5052f06a43efaea054e77456b8d5458476f6efbeed333e57eef50f22e13820dacb798e388a38e95f55f54095f2802586fb742cc496775fbe7adce53494187b9aef79de08f0d854599a40629e5921e2b088d15129aaaaff6cba5a7831b46212c233018b617f68442a3a48057db20902b3080d992391f6b2aef8485e79889e0f8cfad006f369331470772bb2e304a47ad6b35a7fe6c367b2ecafc9b7c21bc52f02892030b2187fc72c408ecc82e4b9196831b1125c65e7279d95b9df6fbfbc5f7ce98a91afbcb7265dc"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0xfb}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b23d7d00"}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000002c0)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x13, 0xe, &(0x7f00000003c0)=@raw=[@generic={0x9, 0x1, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc0000000001050500000000000000000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb1400040020010000000000000000000000000001080007400000000008000840000000000800154000000003380004803401"], 0xdc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000000020d0000052406000105240000000d240f01fffffffffeff00000206241a00000009058103000200000d0904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000200)='\xa0\x87\x06\x00\x00\x00\x00\x00\x00\x00\nx\xed\x7f\x05\t', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, @exit, @exit, @generic={0x5, 0x7, 0x6, 0xff, 0x1395}]}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x2d, &(0x7f00000004c0)=""/45, 0x0, 0x4c, '\x00', r11, @fallback=0x2b, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0xe, 0x9, 0x200}, 0x10, 0xffffffffffffffff, r6, 0x7, &(0x7f0000000540)=[r2], &(0x7f0000000580)=[{0x0, 0x4, 0x9, 0x2}, {0x2, 0x2, 0x9}, {0x3, 0x5, 0x10, 0x7}, {0x5, 0x2, 0x4, 0x6}, {0x0, 0x2, 0x5, 0x8}, {0x1, 0x5, 0x10, 0xc}, {0x5, 0x1, 0x5, 0x3}], 0x10, 0x352}, 0x94) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) 8.605684656s ago: executing program 0 (id=346): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r1, 0xffffffff, &(0x7f0000002080)="a4cce3d46ba78310689853fdcfba56504a8cad58eddacf5b4320045a906fd48fc3e0331d84b4df69ffc406596b943ff9494647319d8f662e858451751231281f35207e9db17e3c94f8969c840eac56b75994d18a012b23cc14999a10a0c2124f3e342dae187a12be510a022ff179acb309dca817c198b82b2a8497eedce28c495dd6c2453897650e5d88b4361b956f9d5c046148d7d176b564f6918984b9bcef2a2c2b65b14815332cbf1980faa20587c37c406f8092b8212e0a46b6ab82eb428da138d0441cdebea876d1c638873c0becefcf04e9cec6f870a3b196b6587be022ecad50aa6ddeea7ace2f27aa623528f6af697479b5168a2ecf226357b6e401bd608ac02453fade6ec105ed3c1306320a24619816bdf86286b3a5bcbd9eab964cca5d609fec35a51daf52806a81cd190537a367ae0f112797d23d4c2c3b3cbe3446b190ac84e47fc322a46dc61a5b470c6c558215ca9ea5e96b25751e1f5412a8d881258a7a8017ceda670e2ac9969c26d33ac929d09666b5c1d3763af5ba3811b0be85d14bc81d7acd80754516ea32274725bc254459d7933abc82debaf8e1069a1df202f8ab4606b4d5815bb983c2ce98296d43ec3e210859691af5064ee730d1e721643ea7fa65d4f8acb1f60ef3b31cd4c897079957c2f4da2b0340bf07b4027a594fef9d8367d2da6a6d9858f3e693916d6152eaae4a282319ec20f64a58fc22785981db4a37a5c7e28d47b3c9dc0d7b8ee20dabe75c433cfcd7d248ea2f393576ff47171667d6fd2b321c884d01d4d12c01aa180d1b024a1b6a072d24beddf183553b638fb0ad3f680200e83d648b7eb0ea3986b0a1537ad9497556ff14f041c02a98db073d3d69f52f746f9f9f56316f005ad5c337d234f77eff595a7d59f1be7d093a952abc1a3f0a79ee047f59e15c1437794da1cb4393a76d351f53a5e5d63a62d9526d2fbeca2e34725275d8251f1d26c5c0dfa0c475446e09c2f7fc4642e856ab902b0a895a94a2b958c4d8e9a9ba1c6ad27ffcc2d58f3e406cca76610c60fc15f6e0772af5c172de1c0c164b512bc6a50179f95c5f232987831f12f843b57686166e63a91dbbf2a8b9c7996ca20a12a309557d5c72657889416a14debfabc1cb545e2e09748313de34dafe3d1e45c64087ba186db383aefdab3aaf247c99df9493db4b29f47e9f2f24d328516a396cc5915fd210971fe601a59def4ba304e517f471a741b7ed4fa861247689577e23fa62bae3f92693db0abb6afcb7d05b3600f37389539f794c185e9221c1a0ce8f30d2676808477a4638234a30ea8ee1f9b73c6f453909ad03b5428ca828faa0d807c3be93a5dde983471a2bf7feb0999d3d939a47aeef3fdb0a2f9631c670137ebc6151ff80c3504edbca08835ebbf4823ae4a0ff7208eb797167b3f0328751bad3a9319cf909b0ba54e5b72a084d4ad70cabb64f7bb818a7ec561b49803c30f4978e70d77d9e240adad88baebad0e1b20c08de4d2a0e69746c3c5d3fdd75c644198e49385a0db5431b923754588d0ee349a85a9483da4cdca1e43ecb1c86ce838edfbcfe65161575ea8821f5a0aaec15b6fd3727b49eded3b0ddb3187e2eb0b0cc7437aea31889353ad79a59ed899f953a6238b70e2c431c280c903b28b87b74431cf5bda5bda6a770d73c83a516dc311fe07fa7d10a4763849daec8e1d4c767a95890ea1f827f0302ca33cd6852937cdf45002788d5525922e6705c67fe0a6f617565cf3e2cee9935888987f044794d14e71d6c3e8b3d3e525a24eadf72f36dcfdcb0e39219752199c40d99c76ce92a0d41d9f067283e220dc9bddc4926740f97ec4b7bc4bf262269e352628b6992db84c399f9311141dd629fb1755874ec4b848c05a122ba4ca9e037b3bf4b3e71db3bf905732d1c80945f27a982a68453b4e5c3a1b6f3a703d45fc0f6370ed2fd549afc42651c2109bd2fb1218d98abbd901e0c7b93991a1668141bf291d729f07c052aa34123272c676a14d6d878324fdf1df47ba56b92da40c762bcb5b7c29810081f681fb1235dd6cb43ff8eeddf83a1c37eb2903ff0f14908218df96be5b9df5c1bffd1a20cd227652740bc24e7768ede9a28fa4e1cb05c158ce3272dc3340a62d4ffb96eb87806f7c7aa4b28bfd3a91f7c4f26b4b9d276629c8a0e79c16baaaa3f22eaed3f1c2a64256c35946845f1edcbd47ece51ab863c38c1bb8ce3c4b2a23233fa6a039a3151ff1518d29fe84e3dd6c31abd81601ca86b220f304cf72630248b77a90e33bd119428e5469cf944856d96ff7dded6d4791652b2cff05c605f9b121c6e0c4fef2a7a0a77733fc695e20ad3bf04402be395ba60dc5d7a5dc999fc59a6a1038e83a4725ad0069e6e090b4e63fd4ed86b47faa1692f65861598877789ff7fb76e7c24062ed83b864626efc41ecd35c698485eed39a039daf4399ffaa5672e1dc4a226bc390b271c96865393caa3ea2b420dffff812e45c37db0f0165237269138d869a5c80ce0a83778265892a476145fe9dd344b4f6104f0f38a9f242031fc1c561310656be3412815033b29416d6d431ff597f2d58827e42536eef35d5320aace6dad9428ba9753252708017227599ccfb9db87055c4becfc355a4302a5fac0b276cc56028123bac603e0081e901f2fcc811f2def5230c706865e5efe27bc00e49e37f39bd844fff44cab17d6db952eb9d37ddd96e0061a4b587c0405d1451e8e824730b8514ac5e1559e9d7c60edad6ebb5831a60e7879aa0311c1911ace6dca6fa4230fb4b93bfa5b292e7ca6838bce3d1b3d3daa38dae123312a3bee3f84c7f9807ad14bf66a12461a8d3f824585d8bd194d113517999bb1f6d5edcb1693ac22d6d8f96095a39aa46cbcbdc901d2003b255b7fce78b940978f7843c7d4eb2b2cddc2392ee4a6b4723d2f631122452578a109d1519c208531030dcb4e3f94a846355417bcfeb5c2bf5fe84179037dc05a50d5c1ebeea2b6fa27c1702aa05f94976326b0c430f50c798581f8bb7870224f00dbcfc3edce640525caf55dad4a94f2ee55c1589721b5d25adc2c4fd3423d1c5ff2807e9df6a22680a682da76c680b9e896af35c85557221c96c1863161c6faa55660054871f506e116478a94abbe02e33d784307bcff189a113f6ff1a3e6e1c156f30010199a966e469d89f673b6494792b17c71cebdecf7f12e7c19221a825a5cd84ca8bf030f9fc12f4310c92a4a18e954afa321a5e914f423c6365e8d4e8b063d80762d2b122d6b3c75387ef70669fe9605159fa905b55cad0a601c4918657dfb13231e46ae18a45e80d5c46ce2b2ac31eee7237418fba7f7f7914d94a8c86399da3aafa6d911960fd3b1dce765225cb56a2366c80e8ccb38848a893dc8e2b388b5b5247fab9da6b2f4d8cf8432b46cbe11ec03d2a02f673862a1cc3f2ce4c3dde83cbd58a3c5b82f4cfaa1afeab088ad17d1c31daa27f2cddb77467f5c41eef2fa22c58bb2661e3cbc47e4d79250a7d884bf0e74d60effa766ba612dde30d390a90a0e425d769938fb6fd5411dd55d2f3700056646ad442232b8af463426dd73b897bd2639f0fcc3739aa8a561b213ae22118a15a2ad1c211cf07f85827cbef8cc294e24b7aba50ff23301cd32719bbaf7bb70895440aa12bf0106bb1244a6a9cfe0f6c2da2ff14aec8e2716ca9237c9f17e3664613c5827a406ae82852fc4e249") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40000000}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.552203536s ago: executing program 3 (id=347): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x54, r6, 0x1, 0x0, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$dsp(r2, &(0x7f00000004c0), 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000280)) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) 7.476021372s ago: executing program 0 (id=348): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) 7.381943164s ago: executing program 4 (id=349): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpgid(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x3d08009, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='wg0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r6}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x7) dup3(r7, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0x4) copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100026829104024040499ced1010203010902240500070108010904cc810203000007090508032000070809090504032000090304c9c8e9ab8825387090f6f5e07c95865492be1c5ff054813846f6a90132e3d88867ae0951c79870f13af7e7396a0ed6cc4ec90b22b9edf60bdf8a8fc77aa01979a144b5446b152ccc50e0cc0accf777e7e42d7d38"], 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) getpgrp(r8) 7.277653315s ago: executing program 0 (id=350): getpid() syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000de83e1ace4c8810be0000000006241a050000152412"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_delroute={0x494, 0x19, 0x4, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x60, 0xff, 0x4, 0xfd, 0x7, 0x3800}, [@RTA_PREF={0x5}, @RTA_EXPIRES={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x101, 0xc, 0x0, r3}}, @RTA_ENCAP={0x418, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x414, 0x1, {{0x1, {0x0, 0xe, 0x4, 0x7, 0x9, 0x8, 0x2, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @mcast2]}}, [@empty, @loopback, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, @local, @ipv4={'\x00', '\xff\xff', @empty}, @empty, @dev={0xfe, 0x80, '\x00', 0x1f}, @local, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @empty, @private0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @local, @private2={0xfc, 0x2, '\x00', 0x51}, @private0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast2, @mcast1, @empty, @local, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @remote, @loopback, @loopback, @mcast2, @private2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2a}]}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_GATEWAY={0x14, 0x5, @local}, @RTA_IIF={0x8, 0x3, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x849, 0xa, 0x5, r3}}]}, 0x494}}, 0x20000000) fanotify_mark(0xffffffffffffffff, 0x80, 0x28000018, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) open_by_handle_at(r2, &(0x7f00000000c0)=@ocfs2={0xc, 0x1, {0x4, 0x9, 0x9fa}}, 0x100) 7.136627261s ago: executing program 3 (id=351): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000400)={{r2, r3/1000+60000}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000014000780080012404b3762bc080008400000003716000300686173683a6e65742c706f72742c6e6574000000050005000a00000005000400000000000900020073797a31000080000500010007"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x804) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x1010c0, 0x6d, 0x6}, 0x18) 6.680479007s ago: executing program 3 (id=352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x4a301, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x5, &(0x7f0000000dc0)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10040}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsmount(0xffffffffffffffff, 0x1, 0x9bc3621305d57592) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x8001) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/159, 0x9f}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000540)=""/18, 0x12}, {&(0x7f0000000580)=""/31, 0x1f}], 0x8, &(0x7f00000005c0)=""/14, 0xe}, 0x40028100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.472731727s ago: executing program 1 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007200c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100afc2c1c811b8ded38e567f3de1bbfc5e5af8295b784c3692f221be"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) 6.269150533s ago: executing program 1 (id=355): bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100040000000000000000000085000000000000000000030000000080000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r1, 0x400454dc, &(0x7f0000001700)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x8000000000000001}) (async) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x8000000000000001}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8000000160085020000000000000000ac1e0001000000000000000000000000e000000200000000000000000100000000000000000000000000000000000040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000"], 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8000000160085020000000000000000ac1e0001000000000000000000000000e000000200000000000000000100000000000000000000000000000000000040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000"], 0xf8}}, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) (async) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) 5.672674643s ago: executing program 3 (id=356): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {}, 0xffffffe4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 5.662817125s ago: executing program 0 (id=357): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x2, 0x3a1}) r1 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0xfffffffe}}]}}, 0x0, 0x32}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) readv(r3, &(0x7f00000001c0), 0x0) r4 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000040)='contention_end\x00'}, 0x18) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x4, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x6) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @ioapic={0x100000, 0x2, 0x100, 0x10, 0x0, [{0xff, 0x2e, 0xa4, '\x00', 0x9}, {0xff, 0x5, 0x80, '\x00', 0x4}, {0xf2, 0x2, 0x69, '\x00', 0x3}, {0x7, 0x4, 0xf9}, {0xba, 0x7, 0xc, '\x00', 0xc2}, {0x5, 0xcb, 0x8f, '\x00', 0x5}, {0x1, 0x5, 0x40, '\x00', 0xc7}, {0x9, 0x9, 0x1, '\x00', 0x78}, {0x8, 0x9, 0x6, '\x00', 0x1}, {0x2d, 0x0, 0x7, '\x00', 0x7}, {0x3, 0x1, 0xb, '\x00', 0x8}, {0x0, 0x20}, {0x9, 0xb7, 0x8, '\x00', 0x7}, {0x9, 0x9, 0xf4, '\x00', 0xff}, {0x7f, 0x9, 0xe, '\x00', 0x8}, {0xd1, 0x5, 0x6, '\x00', 0x3}, {0x4, 0x7c, 0x9}, {0x8, 0x2, 0x7, '\x00', 0xa5}, {0x6, 0x4, 0x8, '\x00', 0x4}, {0x8, 0x5, 0x10, '\x00', 0x6}, {0x0, 0x93, 0x10, '\x00', 0x5}, {0x1, 0x3, 0x2, '\x00', 0x5}, {0x60, 0x1, 0x6, '\x00', 0x9}, {0xb, 0x0, 0x7, '\x00', 0x7e}]}}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r8, &(0x7f00000035c0)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000440)=""/238, 0xee}], 0x3, &(0x7f0000000580)=""/132, 0x84}, 0x16b}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/130, 0x82}], 0x1}, 0x9}, {{&(0x7f0000000740)=@rc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f0000000840)=""/84, 0x54}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f00000009c0)=""/121, 0x79}, {&(0x7f0000000a40)=""/12, 0xc}, {&(0x7f0000000a80)=""/70, 0x46}], 0x6, &(0x7f0000000b80)=""/206, 0xce}, 0x1}, {{&(0x7f0000000c80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d00)=""/234, 0xea}, {&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000000f00)=""/170, 0xaa}, {&(0x7f0000000fc0)=""/121, 0x79}, {&(0x7f0000001040)=""/219, 0xdb}, {&(0x7f0000001240)=""/254, 0xfe}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/245, 0xf5}], 0x8, &(0x7f0000002440)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003440)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003580)=[{&(0x7f00000011c0)=""/56, 0x38}, {&(0x7f00000034c0)=""/140, 0x8c}], 0x2}, 0xfffffff6}], 0x5, 0x1, &(0x7f0000003700)={0x0, 0x989680}) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.731708691s ago: executing program 3 (id=358): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socket(0x25, 0x5, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3d, 0x0, &(0x7f0000001000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x276) ioctl$FBIOBLANK(r6, 0x4611, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) syz_open_procfs(0x0, &(0x7f00000007c0)='children\x00') sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r5}) r7 = add_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000100)="d75423ee7470c11a1c45fd8d0c0033f4ec8e982764f9995a40d64215f0fe16e2a887a2e7e45171d5bcebcc9bdacf92198c15b5", 0x33, 0x0) keyctl$set_timeout(0xf, r7, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) 4.543332324s ago: executing program 4 (id=359): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x1) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$binfmt_elf32(r3, 0x0, 0x69) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) write$cgroup_pid(r3, &(0x7f0000000380)=r4, 0x12) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x35a}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400c1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) 3.812867555s ago: executing program 2 (id=360): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) 3.737409275s ago: executing program 2 (id=361): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x2, 0x0, {0x4e23, 0x4e20, [0x0, 0x0, 0xcdc9], [0x0, 0xfffffffc, 0x6], 0x0, [0x0, 0x1]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 3.576911259s ago: executing program 4 (id=362): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) (async, rerun: 32) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x8, 0xfffffffd, {0xffffffffffffffff}, {}, 0x27f6, 0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000100)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) syz_open_dev$MSR(0x0, 0x0, 0x0) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x14000000) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) (rerun: 64) uname(0xfffffffffffffffc) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x476a4dd3) (rerun: 64) 3.436599684s ago: executing program 2 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) read$FUSE(r3, 0x0, 0x9) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x24040892) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee6, 0x3ff, 0x7fff, 0xe, "9921d1580ac5e831efc5657266017db016b6a9"}) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r4) sendmsg$nl_route_sched(r0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x14, 0x3, 0x1ef, &(0x7f0000000340)="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"}) dup(r5) 3.410053314s ago: executing program 4 (id=364): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xbf\xd2\xc4UFW\xcb\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f0000000080)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8}) 2.659981359s ago: executing program 2 (id=366): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) clock_gettime(0xfffffff2, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.52050364s ago: executing program 1 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/169, 0xa9) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x64, 0x1, [@m_mirred={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x3, r6}}]}, {0x12, 0xa, "bd29bff4de7a9c8d0000f48d112e"}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x2000a804) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100000000000000000a000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x600000, 0x0) ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f0000000240)={0x72, 0xfffffffffffffffe, 0x0, 0x2}) r9 = syz_open_dev$evdev(&(0x7f0000000280), 0x5, 0x193540) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r11, &(0x7f0000000000), 0xfffffecc) splice(r10, 0x0, r12, 0x0, 0xbfd1, 0x0) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000000040)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.577654081s ago: executing program 2 (id=368): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x707, 0x14}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.55807809s ago: executing program 3 (id=369): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpgid(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x3d08009, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='wg0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r6}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x7) dup3(r7, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0x4) copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100026829104024040499ced1010203010902240500070108010904cc810203000007090508032000070809090504032000090304c9c8e9ab8825387090f6f5e07c95865492be1c5ff054813846f6a90132e3d88867ae0951c79870f13af7e7396a0ed6cc4ec90b22b9edf60bdf8a8fc77aa01979a144b5446b152ccc50e0cc0accf777e7e42d7d38"], 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) getpgrp(r8) 1.160359951s ago: executing program 2 (id=370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x28040842) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x7, 0x10, 0xfffffff7, 0x5, {{0x16, 0x4, 0x2, 0x3a, 0x58, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0xf, 0x37, [@local, @rand_addr=0x64010101, @private=0xa010100]}, @rr={0x7, 0xf, 0xee, [@multicast2, @private=0xa010102, @rand_addr=0x64010102]}, @generic={0x88, 0x10, "0e6c0bce1b03f58dfd8242abf84e"}, @end, @timestamp={0x44, 0x14, 0x49, 0x0, 0x2, [0x8, 0x6, 0x8, 0xda]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000001f80)={0x334, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdabe}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8}, {0x4}}]}, 0x334}, 0x1, 0x0, 0x0, 0x20040051}, 0xc34ff24e00621542) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r10, 0x0, r4, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) unshare(0x22020600) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=371): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8041, 0x1c3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x22c240, 0x0) r1 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000bc0)={{r0}, "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"}) open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x43f00, 0x5) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff3}]}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): e_1: entered promiscuous mode [ 65.101059][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.118437][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.125646][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.132735][ T5807] bridge_slave_0: entered allmulticast mode [ 65.140086][ T5807] bridge_slave_0: entered promiscuous mode [ 65.147668][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.154787][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.162045][ T5807] bridge_slave_1: entered allmulticast mode [ 65.169357][ T5807] bridge_slave_1: entered promiscuous mode [ 65.176995][ T5806] team0: Port device team_slave_0 added [ 65.199661][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.220154][ T5806] team0: Port device team_slave_1 added [ 65.235434][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.261537][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.272792][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.298446][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.317110][ T5826] team0: Port device team_slave_0 added [ 65.349323][ T5812] hsr_slave_0: entered promiscuous mode [ 65.355930][ T5812] hsr_slave_1: entered promiscuous mode [ 65.363127][ T5826] team0: Port device team_slave_1 added [ 65.378442][ T5807] team0: Port device team_slave_0 added [ 65.391385][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.398613][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.425054][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.437088][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.444035][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.470115][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.488993][ T5807] team0: Port device team_slave_1 added [ 65.496198][ T5818] team0: Port device team_slave_0 added [ 65.514903][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.521854][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.547897][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.560035][ T5818] team0: Port device team_slave_1 added [ 65.585986][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.593028][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.619154][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.638510][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.645531][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.672193][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.709436][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.716462][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.742765][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.779195][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.786311][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.812346][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.824251][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.831594][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.858194][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.858265][ T5823] Bluetooth: hci1: command tx timeout [ 65.874862][ T52] Bluetooth: hci2: command tx timeout [ 65.889530][ T5806] hsr_slave_0: entered promiscuous mode [ 65.895612][ T5806] hsr_slave_1: entered promiscuous mode [ 65.901442][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 65.907491][ T5806] Cannot create hsr debugfs directory [ 65.914935][ T52] Bluetooth: hci0: command tx timeout [ 65.920655][ T5823] Bluetooth: hci3: command tx timeout [ 65.945302][ T5807] hsr_slave_0: entered promiscuous mode [ 65.951463][ T5807] hsr_slave_1: entered promiscuous mode [ 65.957525][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 65.963245][ T5807] Cannot create hsr debugfs directory [ 65.986433][ T5826] hsr_slave_0: entered promiscuous mode [ 65.992448][ T5826] hsr_slave_1: entered promiscuous mode [ 65.999069][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 66.004777][ T5823] Bluetooth: hci4: command tx timeout [ 66.010207][ T5826] Cannot create hsr debugfs directory [ 66.097629][ T5818] hsr_slave_0: entered promiscuous mode [ 66.103657][ T5818] hsr_slave_1: entered promiscuous mode [ 66.109790][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 66.115698][ T5818] Cannot create hsr debugfs directory [ 66.353040][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.364357][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.382240][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.400710][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.461775][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.474115][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.484050][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.495209][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.562098][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.577894][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.592563][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.602326][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.617137][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.659072][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.697306][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.704536][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.718552][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.730755][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.740368][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.749872][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.784059][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.791235][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.878233][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.893512][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.915894][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.929552][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.948095][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.955666][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.965468][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.982032][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.022049][ T30] audit: type=1400 audit(1764628098.816:86): avc: denied { sys_module } for pid=5812 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.049491][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.056656][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.067962][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.075109][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.097746][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.130658][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.137802][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.168319][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.175553][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.206488][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.260608][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.308667][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.351966][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.359115][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.373801][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.380913][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.411215][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.458462][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.513203][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.520346][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.537771][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.544882][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.553116][ T5812] veth0_vlan: entered promiscuous mode [ 67.588120][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.601153][ T5812] veth1_vlan: entered promiscuous mode [ 67.618810][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.708846][ T5812] veth0_macvtap: entered promiscuous mode [ 67.750182][ T5812] veth1_macvtap: entered promiscuous mode [ 67.784086][ T5806] veth0_vlan: entered promiscuous mode [ 67.838836][ T5806] veth1_vlan: entered promiscuous mode [ 67.871010][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.908986][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.921968][ T5823] Bluetooth: hci1: command tx timeout [ 67.926565][ T52] Bluetooth: hci2: command tx timeout [ 67.971494][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.992589][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.995018][ T52] Bluetooth: hci3: command tx timeout [ 68.003220][ T5823] Bluetooth: hci0: command tx timeout [ 68.021240][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.030974][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.051836][ T5806] veth0_macvtap: entered promiscuous mode [ 68.070977][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.078379][ T5823] Bluetooth: hci4: command tx timeout [ 68.093265][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.104409][ T5806] veth1_macvtap: entered promiscuous mode [ 68.164091][ T5807] veth0_vlan: entered promiscuous mode [ 68.173366][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.202059][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.217866][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.226501][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.234052][ T5807] veth1_vlan: entered promiscuous mode [ 68.245671][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.279462][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.288511][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.308493][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.321249][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.326826][ T5818] veth0_vlan: entered promiscuous mode [ 68.334718][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.353335][ T5826] veth0_vlan: entered promiscuous mode [ 68.363354][ T5807] veth0_macvtap: entered promiscuous mode [ 68.376783][ T5818] veth1_vlan: entered promiscuous mode [ 68.384262][ T30] audit: type=1400 audit(1764628100.176:87): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.R1kwKm/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.417319][ T5826] veth1_vlan: entered promiscuous mode [ 68.435692][ T5807] veth1_macvtap: entered promiscuous mode [ 68.458014][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.471360][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.498694][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.521344][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 68.521359][ T30] audit: type=1400 audit(1764628100.316:99): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.533273][ T5826] veth0_macvtap: entered promiscuous mode [ 68.558162][ T30] audit: type=1400 audit(1764628100.316:100): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.583355][ T30] audit: type=1400 audit(1764628100.316:101): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.648400][ T5818] veth0_macvtap: entered promiscuous mode [ 68.666033][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.675000][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.683703][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.710973][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.725506][ T5826] veth1_macvtap: entered promiscuous mode [ 68.736030][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.743386][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.768685][ T5818] veth1_macvtap: entered promiscuous mode [ 68.780996][ T30] audit: type=1400 audit(1764628100.576:102): avc: denied { read } for pid=5923 comm="syz.2.3" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.809719][ T30] audit: type=1400 audit(1764628100.576:103): avc: denied { open } for pid=5923 comm="syz.2.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.822342][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.857306][ T30] audit: type=1400 audit(1764628100.646:104): avc: denied { prog_load } for pid=5923 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.883760][ T30] audit: type=1400 audit(1764628100.656:105): avc: denied { bpf } for pid=5923 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.907457][ T30] audit: type=1400 audit(1764628100.676:106): avc: denied { create } for pid=5923 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.929324][ T30] audit: type=1400 audit(1764628100.676:107): avc: denied { getopt } for pid=5923 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.935302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.074044][ T30] audit: type=1400 audit(1764628100.856:108): avc: denied { perfmon } for pid=5923 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.081447][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.250972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.268969][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.306362][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.322895][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.337141][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.367125][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.381883][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.405379][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.424930][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.462132][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.486432][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.503293][ T5823] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 69.513354][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 69.513378][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.513390][ T5823] Workqueue: hci2 hci_rx_work [ 69.513418][ T5823] Call Trace: [ 69.513423][ T5823] [ 69.513430][ T5823] dump_stack_lvl+0x16c/0x1f0 [ 69.513448][ T5823] sysfs_warn_dup+0x7f/0xa0 [ 69.513472][ T5823] sysfs_create_dir_ns+0x24b/0x2b0 [ 69.513494][ T5823] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 69.513516][ T5823] ? find_held_lock+0x2b/0x80 [ 69.513541][ T5823] ? do_raw_spin_unlock+0x172/0x230 [ 69.513562][ T5823] kobject_add_internal+0x2c4/0x9b0 [ 69.513585][ T5823] kobject_add+0x16e/0x240 [ 69.513604][ T5823] ? __pfx_kobject_add+0x10/0x10 [ 69.513623][ T5823] ? do_raw_spin_unlock+0x172/0x230 [ 69.513644][ T5823] ? kobject_put+0xab/0x5a0 [ 69.513666][ T5823] device_add+0x288/0x1aa0 [ 69.513688][ T5823] ? __pfx_dev_set_name+0x10/0x10 [ 69.513709][ T5823] ? __pfx_device_add+0x10/0x10 [ 69.513732][ T5823] ? mgmt_send_event_skb+0x2fb/0x460 [ 69.513763][ T5823] hci_conn_add_sysfs+0x17e/0x230 [ 69.513789][ T5823] le_conn_complete_evt+0x1260/0x2150 [ 69.513822][ T5823] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 69.513847][ T5823] ? hci_event_packet+0x459/0x11c0 [ 69.513882][ T5823] hci_le_conn_complete_evt+0x23c/0x370 [ 69.513911][ T5823] hci_le_meta_evt+0x357/0x5e0 [ 69.513937][ T5823] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 69.513961][ T5823] hci_event_packet+0x685/0x11c0 [ 69.513984][ T5823] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 69.514006][ T5823] ? __pfx_hci_event_packet+0x10/0x10 [ 69.514031][ T5823] ? kcov_remote_start+0x3c9/0x6d0 [ 69.514052][ T5823] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.514073][ T5823] hci_rx_work+0x2c9/0xeb0 [ 69.514099][ T5823] process_one_work+0x9cf/0x1b70 [ 69.514128][ T5823] ? __pfx_process_one_work+0x10/0x10 [ 69.514156][ T5823] ? assign_work+0x1a0/0x250 [ 69.514174][ T5823] worker_thread+0x6c8/0xf10 [ 69.514205][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 69.514224][ T5823] kthread+0x3c5/0x780 [ 69.514241][ T5823] ? __pfx_kthread+0x10/0x10 [ 69.514260][ T5823] ? rcu_is_watching+0x12/0xc0 [ 69.514282][ T5823] ? __pfx_kthread+0x10/0x10 [ 69.514301][ T5823] ret_from_fork+0x675/0x7d0 [ 69.514317][ T5823] ? __pfx_kthread+0x10/0x10 [ 69.514333][ T5823] ret_from_fork_asm+0x1a/0x30 [ 69.514371][ T5823] [ 69.514394][ T5823] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.764083][ T5823] Bluetooth: hci2: failed to register connection device [ 69.815664][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.828578][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.888034][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.917562][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.928603][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.995052][ T5823] Bluetooth: hci1: command tx timeout [ 69.996860][ T52] Bluetooth: hci2: command tx timeout [ 70.011505][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 70.059216][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.074800][ T52] Bluetooth: hci3: command tx timeout [ 70.076217][ T5823] Bluetooth: hci0: command tx timeout [ 70.082133][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.112484][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.128431][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.155324][ T5823] Bluetooth: hci4: command tx timeout [ 70.179406][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.198996][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.213691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.231764][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.347232][ T5953] loop8: detected capacity change from 0 to 8 [ 70.391442][ T5953] Dev loop8: unable to read RDB block 8 [ 70.404912][ T5953] loop8: unable to read partition table [ 70.412977][ T5953] loop8: partition table beyond EOD, truncated [ 70.434064][ T5953] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 70.464851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.935125][ T5968] netlink: 'syz.1.12': attribute type 2 has an invalid length. [ 70.944977][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 70.962061][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.975205][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.034074][ T5968] nbd: must specify at least one socket [ 71.064765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.073361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.094875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.264621][ T5823] Bluetooth: hci1: command tx timeout [ 72.270052][ T5823] Bluetooth: hci2: command tx timeout [ 72.275138][ T52] Bluetooth: hci3: command tx timeout [ 72.276880][ T5813] Bluetooth: hci0: command tx timeout [ 72.280907][ T52] Bluetooth: hci4: command tx timeout [ 72.525023][ T5986] block nbd0: shutting down sockets [ 72.564809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.573469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.581999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.590868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 72.600366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.992457][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 73.086808][ T6001] loop8: detected capacity change from 0 to 8 [ 73.107290][ T6001] Dev loop8: unable to read RDB block 8 [ 73.112849][ T6001] loop8: unable to read partition table [ 73.165946][ T6001] loop8: partition table beyond EOD, truncated [ 73.207524][ T6001] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 73.412576][ T6017] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 73.533283][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 73.533298][ T30] audit: type=1400 audit(1764628105.326:160): avc: denied { read } for pid=6020 comm="syz.4.30" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.579204][ T30] audit: type=1400 audit(1764628105.356:161): avc: denied { open } for pid=6020 comm="syz.4.30" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.579250][ T30] audit: type=1400 audit(1764628105.366:162): avc: denied { ioctl } for pid=6020 comm="syz.4.30" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.656272][ T48] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.974613][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 73.977845][ T48] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 73.977873][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.996919][ T48] usb 2-1: config 0 descriptor?? [ 74.024916][ T48] usb 2-1: selecting invalid altsetting 3 [ 74.024941][ T48] comedi comedi5: could not set alternate setting 3 in high speed [ 74.024951][ T48] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 74.028603][ T48] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 74.126150][ T6028] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 74.510149][ T48] usb 2-1: USB disconnect, device number 2 [ 75.185453][ T6032] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 75.222424][ T6032] batman_adv: batadv0: Adding interface: veth3 [ 75.229817][ T6032] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.267539][ T6032] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 75.577136][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 75.940063][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 75.966263][ T30] audit: type=1400 audit(1764628107.366:163): avc: denied { write } for pid=6036 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.986843][ T30] audit: type=1400 audit(1764628107.376:164): avc: denied { nlmsg_read } for pid=6036 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.987882][ T6041] block nbd0: shutting down sockets [ 76.220092][ T6047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6047 comm=syz.1.36 [ 76.425231][ T30] audit: type=1400 audit(1764628108.216:165): avc: denied { ioctl } for pid=6045 comm="syz.3.37" path="socket:[9096]" dev="sockfs" ino=9096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.628875][ T30] audit: type=1400 audit(1764628108.426:166): avc: denied { getopt } for pid=6053 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.336293][ T6056] tipc: Started in network mode [ 77.341353][ T6056] tipc: Node identity ac1414aa, cluster identity 4711 [ 77.348938][ T6056] tipc: Enabled bearer , priority 10 [ 78.474937][ T5819] tipc: Node number set to 2886997162 [ 78.779362][ T30] audit: type=1400 audit(1764628110.576:167): avc: denied { read write } for pid=6079 comm="syz.0.47" name="radio0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.353635][ T30] audit: type=1400 audit(1764628110.606:168): avc: denied { open } for pid=6079 comm="syz.0.47" path="/dev/radio0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.380860][ T6083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 79.416832][ T6084] loop8: detected capacity change from 0 to 8 [ 79.434748][ T6084] Dev loop8: unable to read RDB block 8 [ 79.453384][ T6084] loop8: unable to read partition table [ 79.462828][ T6084] loop8: partition table beyond EOD, truncated [ 79.490368][ T6084] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 80.445023][ T30] audit: type=1400 audit(1764628112.246:169): avc: denied { bind } for pid=6092 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.311322][ T10] cfg80211: failed to load regulatory.db [ 81.318715][ T30] audit: type=1400 audit(1764628112.286:170): avc: denied { write } for pid=6092 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.369888][ T30] audit: type=1400 audit(1764628113.156:171): avc: denied { watch watch_reads } for pid=6092 comm="syz.3.51" path="/10" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.397478][ T6105] FAULT_INJECTION: forcing a failure. [ 81.397478][ T6105] name failslab, interval 1, probability 0, space 0, times 1 [ 81.420069][ T30] audit: type=1400 audit(1764628113.186:172): avc: denied { append } for pid=6104 comm="syz.0.55" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.446680][ T30] audit: type=1400 audit(1764628113.216:173): avc: denied { create } for pid=6107 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.466120][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(full) [ 81.466137][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.466142][ T6105] Call Trace: [ 81.466146][ T6105] [ 81.466151][ T6105] dump_stack_lvl+0x16c/0x1f0 [ 81.466165][ T6105] should_fail_ex+0x512/0x640 [ 81.466178][ T6105] ? fs_reclaim_acquire+0xae/0x150 [ 81.466192][ T6105] should_failslab+0xc2/0x120 [ 81.466205][ T6105] __kmalloc_noprof+0xdd/0x880 [ 81.466220][ T6105] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 81.466235][ T6105] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 81.466247][ T6105] tomoyo_realpath_from_path+0xc2/0x6e0 [ 81.466260][ T6105] ? tomoyo_profile+0x47/0x60 [ 81.466275][ T6105] tomoyo_path_number_perm+0x245/0x580 [ 81.466285][ T6105] ? tomoyo_path_number_perm+0x237/0x580 [ 81.466295][ T6105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 81.466306][ T6105] ? find_held_lock+0x2b/0x80 [ 81.466330][ T6105] ? find_held_lock+0x2b/0x80 [ 81.466343][ T6105] ? hook_file_ioctl_common+0x145/0x410 [ 81.466359][ T6105] ? __fget_files+0x20e/0x3c0 [ 81.466372][ T6105] security_file_ioctl+0x9b/0x240 [ 81.466386][ T6105] __x64_sys_ioctl+0xb7/0x210 [ 81.466402][ T6105] do_syscall_64+0xcd/0xfa0 [ 81.466413][ T6105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.466429][ T6105] RIP: 0033:0x7fa06a58f749 [ 81.466438][ T6105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.466448][ T6105] RSP: 002b:00007fa06b4c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.466458][ T6105] RAX: ffffffffffffffda RBX: 00007fa06a7e5fa0 RCX: 00007fa06a58f749 [ 81.466464][ T6105] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 81.466470][ T6105] RBP: 00007fa06b4c9090 R08: 0000000000000000 R09: 0000000000000000 [ 81.466476][ T6105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.466481][ T6105] R13: 00007fa06a7e6038 R14: 00007fa06a7e5fa0 R15: 00007ffee78209c8 [ 81.466494][ T6105] [ 81.466894][ T6105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.791033][ T6112] mmap: syz.4.57 (6112) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.894620][ T30] audit: type=1400 audit(1764628113.676:174): avc: denied { read write } for pid=6113 comm="syz.3.59" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.941920][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 81.979590][ T30] audit: type=1400 audit(1764628113.676:175): avc: denied { open } for pid=6113 comm="syz.3.59" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 82.017600][ T6116] veth0_macvtap: left promiscuous mode [ 82.612639][ T30] audit: type=1400 audit(1764628114.126:176): avc: denied { mount } for pid=6115 comm="syz.2.58" name="/" dev="rpc_pipefs" ino=9270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 82.635499][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.574574][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.613708][ T6139] netlink: 'syz.2.65': attribute type 2 has an invalid length. [ 83.631468][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 83.640403][ T6139] nbd: must specify at least one socket [ 83.744607][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 84.049717][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.111973][ T48] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.985172][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.043704][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 85.043715][ T30] audit: type=1400 audit(1764628116.836:193): avc: denied { create } for pid=6149 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.071792][ T48] usb 1-1: config 0 descriptor?? [ 85.099293][ T6146] tipc: Enabling of bearer rejected, already enabled [ 85.145934][ T6148] tipc: Started in network mode [ 85.150827][ T6148] tipc: Node identity ac1414aa, cluster identity 4711 [ 85.158386][ T6148] tipc: Enabled bearer , priority 10 [ 85.214596][ T30] audit: type=1400 audit(1764628116.936:194): avc: denied { ioctl } for pid=6149 comm="syz.2.70" path="socket:[9336]" dev="sockfs" ino=9336 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.240886][ T30] audit: type=1400 audit(1764628117.026:195): avc: denied { write } for pid=6149 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.283354][ T30] audit: type=1400 audit(1764628117.076:196): avc: denied { connect } for pid=6149 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.311091][ T48] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 85.365586][ T30] audit: type=1400 audit(1764628117.146:197): avc: denied { create } for pid=6149 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.484761][ T30] audit: type=1400 audit(1764628117.156:198): avc: denied { bind } for pid=6149 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.074600][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.137745][ T10] usb 1-1: USB disconnect, device number 2 [ 86.153643][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 86.169361][ T6167] netlink: 'syz.4.73': attribute type 5 has an invalid length. [ 86.177902][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 86.349196][ T5896] usb 4-1: device descriptor read/64, error -71 [ 86.387989][ T6167] geneve2: entered promiscuous mode [ 86.393550][ T6167] geneve2: entered allmulticast mode [ 86.856449][ T9] tipc: Node number set to 2886997162 [ 86.875070][ T60] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 86.919055][ T60] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 86.952676][ T6177] netlink: 'syz.2.77': attribute type 2 has an invalid length. [ 86.955799][ T60] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 86.970087][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.77'. [ 86.974241][ T60] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 86.979575][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.996052][ T6177] nbd: must specify at least one socket [ 87.106119][ T30] audit: type=1400 audit(1764628118.896:199): avc: denied { bind } for pid=6179 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.130496][ T30] audit: type=1400 audit(1764628118.896:200): avc: denied { setopt } for pid=6179 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.180505][ T30] audit: type=1400 audit(1764628118.896:201): avc: denied { accept } for pid=6179 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.203406][ T5896] usb 4-1: device descriptor read/64, error -71 [ 87.335039][ T5896] usb usb4-port1: attempt power cycle [ 87.367582][ T30] audit: type=1400 audit(1764628118.896:202): avc: denied { write } for pid=6179 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.616320][ T6190] 9pnet: Could not find request transport: fd0x0000000000000003 [ 88.154557][ T5896] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.175007][ T5896] usb 4-1: device descriptor read/8, error -71 [ 88.259582][ T6203] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.424674][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.459168][ T5896] usb 4-1: device descriptor read/8, error -71 [ 88.623249][ T5896] usb usb4-port1: unable to enumerate USB device [ 88.630966][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.746311][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.813894][ T6218] syz.0.88 uses obsolete (PF_INET,SOCK_PACKET) [ 90.080875][ T6207] netlink: 48 bytes leftover after parsing attributes in process `syz.2.83'. [ 90.090417][ T10] usb 5-1: no configurations [ 90.095047][ T10] usb 5-1: can't read configurations, error -22 [ 90.124606][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 90.124624][ T30] audit: type=1400 audit(1764628120.816:213): avc: denied { mounton } for pid=6216 comm="syz.0.88" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 90.204558][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 90.211569][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.239318][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 90.248698][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.378380][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.406470][ T9] usb 2-1: Product: syz [ 90.418036][ T9] usb 2-1: Manufacturer: syz [ 90.447654][ T9] usb 2-1: SerialNumber: syz [ 90.460779][ T9] usb 2-1: config 0 descriptor?? [ 90.545221][ T10] usb 5-1: no configurations [ 90.550200][ T10] usb 5-1: can't read configurations, error -22 [ 90.558406][ T10] usb usb5-port1: attempt power cycle [ 90.684534][ T5819] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.838598][ T5819] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.849843][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.862159][ T5819] usb 1-1: Product: syz [ 90.867365][ T5819] usb 1-1: Manufacturer: syz [ 90.872592][ T5819] usb 1-1: SerialNumber: syz [ 90.878075][ T9] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 90.885981][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 90.904610][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.935941][ T10] usb 5-1: no configurations [ 90.940831][ T10] usb 5-1: can't read configurations, error -22 [ 91.074647][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.155328][ T10] usb 5-1: no configurations [ 91.160140][ T10] usb 5-1: can't read configurations, error -22 [ 91.169226][ T10] usb usb5-port1: unable to enumerate USB device [ 91.568109][ T6235] tipc: Enabling of bearer rejected, already enabled [ 91.739447][ T5819] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 91.984739][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.212373][ T5819] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 92.226718][ T5819] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 92.238651][ T5819] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 92.272335][ T5879] usb 2-1: USB disconnect, device number 3 [ 92.319834][ T5819] usb 1-1: USB disconnect, device number 3 [ 92.437239][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.439753][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 92.457273][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 92.457300][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.457312][ T52] Workqueue: hci0 hci_rx_work [ 92.457342][ T52] Call Trace: [ 92.457348][ T52] [ 92.457356][ T52] dump_stack_lvl+0x16c/0x1f0 [ 92.457375][ T52] sysfs_warn_dup+0x7f/0xa0 [ 92.457401][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 92.457427][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 92.457448][ T52] ? find_held_lock+0x2b/0x80 [ 92.457477][ T52] ? do_raw_spin_unlock+0x172/0x230 [ 92.457500][ T52] kobject_add_internal+0x2c4/0x9b0 [ 92.457524][ T52] kobject_add+0x16e/0x240 [ 92.457544][ T52] ? __pfx_kobject_add+0x10/0x10 [ 92.457564][ T52] ? do_raw_spin_unlock+0x172/0x230 [ 92.457584][ T52] ? kobject_put+0xab/0x5a0 [ 92.457631][ T52] device_add+0x288/0x1aa0 [ 92.457656][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 92.457682][ T52] ? __pfx_device_add+0x10/0x10 [ 92.457708][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 92.457745][ T52] hci_conn_add_sysfs+0x17e/0x230 [ 92.457765][ T52] le_conn_complete_evt+0x1260/0x2150 [ 92.457799][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 92.457824][ T52] ? hci_event_packet+0x459/0x11c0 [ 92.457859][ T52] hci_le_conn_complete_evt+0x23c/0x370 [ 92.457890][ T52] hci_le_meta_evt+0x357/0x5e0 [ 92.457918][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 92.457949][ T52] hci_event_packet+0x685/0x11c0 [ 92.457976][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 92.458006][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 92.458036][ T52] ? kcov_remote_start+0x3c9/0x6d0 [ 92.458059][ T52] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.458083][ T52] hci_rx_work+0x2c9/0xeb0 [ 92.458114][ T52] process_one_work+0x9cf/0x1b70 [ 92.458145][ T52] ? __pfx_process_one_work+0x10/0x10 [ 92.458173][ T52] ? assign_work+0x1a0/0x250 [ 92.458193][ T52] worker_thread+0x6c8/0xf10 [ 92.458225][ T52] ? __pfx_worker_thread+0x10/0x10 [ 92.458244][ T52] kthread+0x3c5/0x780 [ 92.458263][ T52] ? __pfx_kthread+0x10/0x10 [ 92.458282][ T52] ? rcu_is_watching+0x12/0xc0 [ 92.458305][ T52] ? __pfx_kthread+0x10/0x10 [ 92.458324][ T52] ret_from_fork+0x675/0x7d0 [ 92.458339][ T52] ? __pfx_kthread+0x10/0x10 [ 92.458356][ T52] ret_from_fork_asm+0x1a/0x30 [ 92.458395][ T52] [ 92.458419][ T52] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 92.459451][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.467898][ T52] Bluetooth: hci0: failed to register connection device [ 92.739588][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 92.812993][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 92.822633][ T6249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.97'. [ 92.832236][ T6249] overlayfs: missing 'lowerdir' [ 92.876709][ T30] audit: type=1400 audit(1764628124.676:214): avc: denied { ioctl } for pid=6245 comm="syz.4.98" path="socket:[9574]" dev="sockfs" ino=9574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.914767][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 92.920434][ T30] audit: type=1400 audit(1764628124.676:215): avc: denied { connect } for pid=6245 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.923787][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 92.943236][ T30] audit: type=1400 audit(1764628124.706:216): avc: denied { mounton } for pid=6254 comm="syz.2.100" path="/22/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.954782][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.989710][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.998749][ T24] usb 4-1: Product: syz [ 93.002907][ T24] usb 4-1: Manufacturer: syz [ 93.007568][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.015516][ T24] usb 4-1: SerialNumber: syz [ 93.074573][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.164593][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 93.176451][ T5848] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.189327][ T5848] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.201748][ T5848] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 93.211586][ T5848] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 93.228478][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 93.238093][ T5848] usb 1-1: Product: syz [ 93.238219][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.244968][ T5879] usb 2-1: config 1 has an invalid interface number: 137 but max is 0 [ 93.252796][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.260118][ T5848] usb 1-1: Manufacturer: syz [ 93.271706][ T5879] usb 2-1: config 1 has no interface number 0 [ 93.284979][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 93.294182][ T5879] usb 2-1: config 1 interface 137 has no altsetting 0 [ 93.307731][ T5848] hub 1-1:4.0: USB hub found [ 93.317131][ T24] usb 4-1: USB disconnect, device number 6 [ 93.328499][ T5879] usb 2-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 93.339475][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.347711][ T5879] usb 2-1: Product: syz [ 93.351960][ T5879] usb 2-1: Manufacturer: syz [ 93.357151][ T5879] usb 2-1: SerialNumber: syz [ 93.506149][ T5848] hub 1-1:4.0: 2 ports detected [ 93.574489][ T30] audit: type=1400 audit(1764628125.366:217): avc: denied { ioctl } for pid=6241 comm="syz.1.95" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.574556][ T6244] binder: 6241:6244 ioctl c0306201 0 returned -14 [ 93.639064][ T30] audit: type=1400 audit(1764628125.436:218): avc: denied { set_context_mgr } for pid=6241 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.669730][ T30] audit: type=1400 audit(1764628125.466:219): avc: denied { execute } for pid=6241 comm="syz.1.95" name="file2" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.670344][ T6244] process 'syz.1.95' launched './file2' with NULL argv: empty string added [ 93.702890][ T30] audit: type=1400 audit(1764628125.496:220): avc: denied { execute_no_trans } for pid=6241 comm="syz.1.95" path="/19/file2" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.724806][ T5879] pl2303 2-1:1.137: required interrupt-in endpoint missing [ 93.743610][ T5879] usb 2-1: USB disconnect, device number 4 [ 93.834648][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 93.940123][ T5848] usb 1-1: USB disconnect, device number 4 [ 94.016016][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 94.025900][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 94.034210][ T24] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 94.049842][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.059992][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.070072][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 94.080342][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.091534][ T24] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.104578][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.117898][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.127134][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.131398][ T30] audit: type=1400 audit(1764628125.926:221): avc: denied { mounton } for pid=6264 comm="syz.4.103" path="/18/file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.370990][ T6269] tipc: Enabling of bearer rejected, already enabled [ 94.385869][ T30] audit: type=1400 audit(1764628126.186:222): avc: denied { connect } for pid=6238 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.410384][ T24] usb 4-1: usb_control_msg returned -71 [ 94.457585][ T24] usbtmc 4-1:16.0: can't read capabilities [ 94.497212][ T6271] Zero length message leads to an empty skb [ 94.600366][ T24] usb 4-1: USB disconnect, device number 7 [ 95.213798][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.107'. [ 96.722063][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.110'. [ 96.793479][ T6292] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'. [ 96.813491][ T6292] overlayfs: missing 'lowerdir' [ 97.430673][ T6310] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 97.459377][ T6310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.101878][ T6310] bond1: (slave veth3): Enslaving as an active interface with a down link [ 98.161727][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 98.161742][ T30] audit: type=1400 audit(1764628129.956:225): avc: denied { unlink } for pid=5807 comm="syz-executor" name="file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.163296][ T6312] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 98.405870][ T6325] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 98.464533][ T6327] netlink: 'syz.2.120': attribute type 2 has an invalid length. [ 98.472404][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 98.482535][ T6327] nbd: must specify at least one socket [ 98.584032][ T6330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=6330 comm=syz.2.121 [ 98.612449][ T6316] macvtap0: refused to change device tx_queue_len [ 98.649685][ T6329] vlan2: entered allmulticast mode [ 98.715686][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 98.926952][ T30] audit: type=1400 audit(1764628130.726:226): avc: denied { setopt } for pid=6337 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.503138][ T30] audit: type=1400 audit(1764628130.746:227): avc: denied { write } for pid=6337 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.711836][ T6338] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.848131][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.130'. [ 100.859951][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.130'. [ 101.317677][ T6373] loop8: detected capacity change from 0 to 8 [ 101.326880][ T30] audit: type=1400 audit(1764628133.106:228): avc: denied { ioctl } for pid=6369 comm="syz.0.127" path="socket:[9825]" dev="sockfs" ino=9825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.351127][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.359747][ T6373] Dev loop8: unable to read RDB block 8 [ 101.392599][ T6373] loop8: unable to read partition table [ 101.423085][ T6373] loop8: partition table beyond EOD, truncated [ 101.430716][ T30] audit: type=1400 audit(1764628133.236:229): avc: denied { sys_module } for pid=6369 comm="syz.0.127" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.451561][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.490474][ T6373] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 101.551830][ T6363] team0 (unregistering): Port device team_slave_0 removed [ 101.642319][ T6363] team0 (unregistering): Port device team_slave_1 removed [ 101.877354][ T6384] netlink: 156 bytes leftover after parsing attributes in process `syz.1.134'. [ 101.887406][ T6384] netlink: 156 bytes leftover after parsing attributes in process `syz.1.134'. [ 101.970521][ T30] audit: type=1400 audit(1764628133.666:230): avc: denied { mount } for pid=6379 comm="syz.1.134" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.318165][ T6388] bond0: (slave wg0): Error: Device can not be enslaved while up [ 102.407049][ T30] audit: type=1400 audit(1764628134.116:231): avc: denied { ioctl } for pid=6386 comm="syz.0.136" path="socket:[10910]" dev="sockfs" ino=10910 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.590000][ T30] audit: type=1400 audit(1764628134.236:232): avc: denied { ioctl } for pid=6386 comm="syz.0.136" path="socket:[10911]" dev="sockfs" ino=10911 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.728288][ T6393] loop7: detected capacity change from 0 to 16384 [ 102.815134][ T5819] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.874536][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 102.956657][ T6394] loop7: detected capacity change from 16384 to 0 [ 102.968964][ C1] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 102.975865][ T5819] usb 1-1: config index 0 descriptor too short (expected 1316, got 36) [ 102.988050][ T5819] usb 1-1: config 7 has an invalid interface number: 204 but max is -1 [ 103.016616][ T5819] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 103.029274][ T5819] usb 1-1: config 7 has no interface number 0 [ 103.037329][ T5819] usb 1-1: config 7 interface 204 has no altsetting 0 [ 103.047065][ T5896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.072110][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.098334][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.109809][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.128214][ T5819] usb 1-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 103.146033][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.168742][ T5819] usb 1-1: Product: syz [ 103.172939][ T5819] usb 1-1: Manufacturer: syz [ 103.185386][ T5819] usb 1-1: SerialNumber: syz [ 103.191033][ T5896] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.200854][ T5896] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.228249][ T5896] usb 4-1: Manufacturer: syz [ 103.234193][ T30] audit: type=1400 audit(1764628135.026:233): avc: denied { mount } for pid=6396 comm="syz.1.139" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.265528][ T5896] usb 4-1: config 0 descriptor?? [ 103.518485][ T5848] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.919612][ T5819] smsc95xx v2.0.0 [ 103.923629][ T5819] smsc95xx 1-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 103.948214][ T5819] smsc95xx 1-1:7.204: probe with driver smsc95xx failed with error -22 [ 103.969038][ T5819] usbhid 1-1:7.204: couldn't find an input interrupt endpoint [ 103.985425][ T5819] usb 1-1: USB disconnect, device number 5 [ 104.142882][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 104.159144][ T5848] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 104.199811][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.211938][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 104.235830][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.244999][ T5848] usb 2-1: config 0 descriptor?? [ 104.261114][ T6405] tipc: Started in network mode [ 104.266086][ T6405] tipc: Node identity ac1414aa, cluster identity 4711 [ 104.273709][ T6405] tipc: Enabled bearer , priority 10 [ 104.324165][ T5896] usb 4-1: USB disconnect, device number 8 [ 104.340545][ T30] audit: type=1400 audit(1764628136.136:234): avc: denied { create } for pid=6406 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.404712][ T30] audit: type=1400 audit(1764628136.136:235): avc: denied { setopt } for pid=6406 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.434579][ T6411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.461310][ T30] audit: type=1400 audit(1764628136.256:236): avc: denied { bind } for pid=6406 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.698371][ T6415] overlayfs: missing 'lowerdir' [ 105.094564][ T5819] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.264608][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 105.277411][ T5819] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 105.285076][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 105.302060][ T5819] usb 5-1: can't read configurations, error -61 [ 105.384609][ T5896] tipc: Node number set to 2886997162 [ 105.737104][ T10] usb 1-1: device descriptor read/64, error -71 [ 105.891740][ T5819] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.007912][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 106.385008][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 106.404595][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 106.423039][ T5819] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 106.455090][ T5819] usb 5-1: can't read configurations, error -61 [ 106.478519][ T5819] usb usb5-port1: attempt power cycle [ 106.516951][ T30] audit: type=1400 audit(1764628138.316:238): avc: denied { getopt } for pid=6437 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.536523][ T10] usb 1-1: device descriptor read/64, error -71 [ 106.543281][ T30] audit: type=1400 audit(1764628138.316:237): avc: denied { getopt } for pid=6437 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.677205][ T10] usb usb1-port1: attempt power cycle [ 106.724198][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.152'. [ 106.785801][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.152'. [ 106.825717][ T5819] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.878453][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 106.915409][ T5819] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 106.926742][ T5819] usb 5-1: can't read configurations, error -61 [ 106.968341][ T5848] usbhid 2-1:0.0: can't add hid device: -71 [ 106.986438][ T30] audit: type=1400 audit(1764628138.786:239): avc: denied { create } for pid=6446 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.990004][ T5848] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 107.037737][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 107.042451][ T5848] usb 2-1: USB disconnect, device number 5 [ 107.057649][ T6447] loop2: detected capacity change from 0 to 7 [ 107.066751][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.076037][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.084243][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.093401][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.101421][ T5819] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.103453][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.110346][ T30] audit: type=1400 audit(1764628138.806:240): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.118549][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.156008][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 107.161249][ T10] usb 1-1: device descriptor read/8, error -71 [ 107.171768][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.181166][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.192024][ T30] audit: type=1400 audit(1764628138.806:241): avc: denied { write } for pid=6446 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.194637][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.212155][ T5819] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 107.220551][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.229199][ T5819] usb 5-1: can't read configurations, error -61 [ 107.242717][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.251949][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.262693][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.268376][ T30] audit: type=1400 audit(1764628138.846:242): avc: denied { append } for pid=6446 comm="syz.2.153" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.271920][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.306102][ T6447] ldm_validate_partition_table(): Disk read failed. [ 107.314509][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.323644][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.337170][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.346367][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.355110][ T5819] usb usb5-port1: unable to enumerate USB device [ 107.372523][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 107.388358][ T6447] Dev loop2: unable to read RDB block 0 [ 107.397817][ T6447] loop2: unable to read partition table [ 107.403713][ T6447] loop2: partition table beyond EOD, truncated [ 107.426245][ T6447] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 107.464575][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 107.472139][ T1213] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.586026][ T10] usb 1-1: device descriptor read/8, error -71 [ 107.664546][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 107.671582][ T1213] usb 3-1: config 3 has an invalid interface number: 136 but max is 0 [ 107.684096][ T1213] usb 3-1: config 3 has no interface number 0 [ 107.690670][ T1213] usb 3-1: config 3 interface 136 has no altsetting 0 [ 107.699128][ T10] usb usb1-port1: unable to enumerate USB device [ 107.704577][ T5848] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.709626][ T1213] usb 3-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice= 0.4b [ 107.782401][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 107.800925][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.156'. [ 107.810442][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.824155][ T1213] usb 3-1: Product: syz [ 107.836302][ T6456] overlayfs: missing 'lowerdir' [ 107.900247][ T1213] usb 3-1: Manufacturer: syz [ 107.907185][ T1213] usb 3-1: SerialNumber: syz [ 107.982838][ T5848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 108.068376][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 108.081760][ T5848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 108.099200][ T5848] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 108.110990][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.134757][ T5848] usb 2-1: Product: syz [ 108.134821][ T5848] usb 2-1: Manufacturer: syz [ 108.134876][ T5848] usb 2-1: SerialNumber: syz [ 108.155109][ T5848] usb 2-1: config 0 descriptor?? [ 108.155747][ T6450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.155849][ T6450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.173825][ T5848] usb 2-1: ucan: probing device on interface #0 [ 108.315654][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 108.315670][ T30] audit: type=1400 audit(1764628140.116:246): avc: denied { listen } for pid=6446 comm="syz.2.153" laddr=fe80::13 lport=37074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.426037][ T1213] ums-realtek 3-1:3.136: USB Mass Storage device detected [ 108.438263][ T30] audit: type=1400 audit(1764628140.146:247): avc: denied { accept } for pid=6446 comm="syz.2.153" laddr=fe80::13 lport=37074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.493806][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 108.517362][ T6465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.592716][ T30] audit: type=1400 audit(1764628140.306:248): avc: denied { connect } for pid=6460 comm="syz.0.158" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.824816][ T1213] usb 3-1: USB disconnect, device number 2 [ 108.849578][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 108.906840][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'. [ 108.908275][ T30] audit: type=1400 audit(1764628140.706:249): avc: denied { ioctl } for pid=6468 comm="syz.4.160" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10009 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.055256][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.063427][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.180659][ T30] audit: type=1400 audit(1764628140.976:250): avc: denied { unlink } for pid=5812 comm="syz-executor" name="file2" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.186506][ T6471] bridge0: entered allmulticast mode [ 109.203189][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.238748][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 109.275121][ T6473] bridge_slave_1: left allmulticast mode [ 109.281012][ T6473] bridge_slave_1: left promiscuous mode [ 109.290495][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.386198][ T6473] bridge_slave_0: left allmulticast mode [ 109.514337][ T1213] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 109.621409][ T6480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6480 comm=syz.2.162 [ 109.728202][ T6473] bridge_slave_0: left promiscuous mode [ 109.784745][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.834887][ T5848] ucan 2-1:0.0: probe with driver ucan failed with error -110 [ 110.334404][ T1213] usb 1-1: config 6 has an invalid interface number: 11 but max is 2 [ 110.363966][ T1213] usb 1-1: config 6 has an invalid interface number: 153 but max is 2 [ 110.383608][ T1213] usb 1-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 110.393979][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 110.448734][ T1213] usb 1-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 110.459544][ T1213] usb 1-1: config 6 has no interface number 0 [ 110.467904][ T1213] usb 1-1: config 6 has no interface number 1 [ 110.474107][ T1213] usb 1-1: config 6 interface 153 altsetting 95 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 110.492845][ T1213] usb 1-1: config 6 interface 11 has no altsetting 0 [ 110.500900][ T1213] usb 1-1: config 6 interface 153 has no altsetting 0 [ 110.624649][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.733649][ T5848] usb 2-1: USB disconnect, device number 6 [ 110.799510][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 110.806719][ T30] audit: type=1400 audit(1764628142.596:251): avc: denied { read } for pid=6493 comm="syz.4.167" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.835311][ T5896] usb 4-1: no configurations [ 110.839964][ T5896] usb 4-1: can't read configurations, error -22 [ 110.847806][ T30] audit: type=1400 audit(1764628142.596:252): avc: denied { open } for pid=6493 comm="syz.4.167" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.871662][ T30] audit: type=1400 audit(1764628142.596:253): avc: denied { ioctl } for pid=6493 comm="syz.4.167" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 111.909509][ T5896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 112.100258][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 112.157558][ T5896] usb 4-1: no configurations [ 112.179747][ T5896] usb 4-1: can't read configurations, error -22 [ 112.211531][ T5896] usb usb4-port1: attempt power cycle [ 112.752213][ T6505] capability: warning: `syz.4.169' uses deprecated v2 capabilities in a way that may be insecure [ 112.794277][ T1213] usb 1-1: New USB device found, idVendor=0458, idProduct=701f, bcdDevice=d3.55 [ 112.830672][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.870256][ T1213] usb 1-1: Product: Ї [ 112.874389][ T1213] usb 1-1: Manufacturer: й [ 112.898695][ T1213] usb 1-1: can't set config #6, error -71 [ 112.916289][ T1213] usb 1-1: USB disconnect, device number 10 [ 113.121890][ T5896] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 113.402179][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 113.564606][ T1213] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.585548][ T30] audit: type=1400 audit(1764628145.356:254): avc: denied { watch } for pid=6539 comm="syz.2.179" path="/44/file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.608384][ T5814] Bluetooth: hci2: ACL packet for unknown connection handle 1225 [ 113.608446][ T910] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 113.636280][ T30] audit: type=1400 audit(1764628145.376:255): avc: denied { watch_sb watch_reads } for pid=6539 comm="syz.2.179" path="/44/file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.661364][ T5896] usb 4-1: device descriptor read/all, error -71 [ 113.754953][ T910] usb 5-1: Using ep0 maxpacket: 16 [ 113.767910][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.779837][ T910] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 113.788185][ T6552] 9pnet_fd: Insufficient options for proto=fd [ 113.789004][ T910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.853967][ T910] usb 5-1: config 0 descriptor?? [ 114.175258][ T1213] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 114.184417][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.193187][ T1213] usb 1-1: Product: syz [ 114.199189][ T1213] usb 1-1: Manufacturer: syz [ 114.204163][ T1213] usb 1-1: SerialNumber: syz [ 114.536180][ T910] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 114.752412][ T6566] trusted_key: syz.3.187 sent an empty control message without MSG_MORE. [ 114.877369][ T30] audit: type=1400 audit(1764628146.676:256): avc: denied { mount } for pid=6534 comm="syz.4.177" name="/" dev="ramfs" ino=11331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.898986][ T1213] rtl8150 1-1:1.0: couldn't reset the device [ 114.899454][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.912913][ T1213] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 114.928694][ T1213] usb 1-1: USB disconnect, device number 11 [ 115.183961][ T5896] usb 5-1: USB disconnect, device number 11 [ 116.096542][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 116.106268][ T6577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.190'. [ 116.115890][ T6577] overlayfs: missing 'lowerdir' [ 116.986628][ T30] audit: type=1326 audit(1764628147.876:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a58f749 code=0x7ffc0000 [ 117.070664][ T6574] 9pnet: Could not find request transport: fd0x0000000000000003 [ 117.078613][ T30] audit: type=1326 audit(1764628147.876:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a58f749 code=0x7ffc0000 [ 117.102105][ T30] audit: type=1326 audit(1764628147.876:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a58f749 code=0x7ffc0000 [ 117.125500][ T30] audit: type=1326 audit(1764628147.876:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a58f749 code=0x7ffc0000 [ 117.148672][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.174575][ T30] audit: type=1326 audit(1764628147.876:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa06a58f749 code=0x7ffc0000 [ 117.197821][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.270231][ T30] audit: type=1326 audit(1764628147.876:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a58f749 code=0x7ffc0000 [ 117.311099][ T30] audit: type=1326 audit(1764628147.876:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a58f749 code=0x7ffc0000 [ 117.482681][ T6591] netlink: 48 bytes leftover after parsing attributes in process `syz.4.192'. [ 117.633633][ T6600] 9pnet_virtio: no channels available for device syz [ 118.008617][ T6599] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.197'. [ 118.945528][ T6612] loop8: detected capacity change from 0 to 8 [ 118.964127][ T6612] Dev loop8: unable to read RDB block 8 [ 118.985944][ T6612] loop8: unable to read partition table [ 119.094879][ T6612] loop8: partition table beyond EOD, truncated [ 119.101149][ T6612] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 119.196686][ T6618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.202'. [ 119.294608][ T6618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 119.409854][ T6621] netlink: 156 bytes leftover after parsing attributes in process `syz.3.203'. [ 119.419383][ T6621] netlink: 156 bytes leftover after parsing attributes in process `syz.3.203'. [ 119.731901][ T6618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.202'. [ 119.742490][ T6618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.202'. [ 119.765584][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 119.765601][ T30] audit: type=1400 audit(1764628151.556:368): avc: denied { ioctl } for pid=6623 comm="syz.2.204" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 119.822478][ T30] audit: type=1400 audit(1764628151.596:369): avc: denied { write } for pid=6613 comm="syz.1.201" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.894165][ T30] audit: type=1400 audit(1764628151.596:370): avc: denied { ioctl } for pid=6613 comm="syz.1.201" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.977963][ T30] audit: type=1400 audit(1764628151.606:371): avc: denied { setattr } for pid=6613 comm="syz.1.201" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 120.074075][ T6624] Bluetooth: MGMT ver 1.23 [ 120.104154][ T30] audit: type=1400 audit(1764628151.866:372): avc: denied { write } for pid=6623 comm="syz.2.204" path="socket:[11412]" dev="sockfs" ino=11412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.127824][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.094519][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.377926][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 122.492428][ T30] audit: type=1400 audit(1764628154.256:373): avc: denied { append } for pid=6643 comm="syz.2.209" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.739676][ T10] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 122.748038][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.760043][ T10] usb 5-1: config 0 has no interface number 0 [ 122.781115][ T10] usb 5-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.797874][ T10] usb 5-1: config 0 interface 2 has no altsetting 0 [ 123.116925][ T10] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 123.133937][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.167436][ T10] usb 5-1: Product: syz [ 123.209835][ T10] usb 5-1: Manufacturer: syz [ 123.215610][ T10] usb 5-1: SerialNumber: syz [ 123.255011][ T6664] block nbd0: shutting down sockets [ 123.257055][ T10] usb 5-1: config 0 descriptor?? [ 123.482374][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.491095][ T10] usb 5-1: invalid MIDI in EP 0 [ 123.526309][ T6668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 123.569935][ T6668] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 123.579984][ T6668] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 124.440507][ T6679] bond0: (slave wg0): Error: Device can not be enslaved while up [ 124.789560][ T30] audit: type=1400 audit(1764628156.586:374): avc: denied { listen } for pid=6669 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.176835][ T10] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 125.205557][ T10] usb 5-1: USB disconnect, device number 12 [ 125.268726][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.445758][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 125.616739][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 125.716036][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.728268][ T9] usb 2-1: config 1 has no interface number 0 [ 125.753499][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.784635][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 125.846179][ T10] usb 5-1: config index 0 descriptor too short (expected 1316, got 36) [ 125.854831][ T10] usb 5-1: config 7 has an invalid interface number: 204 but max is -1 [ 125.869417][ T9] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 125.878875][ T10] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 126.309685][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 126.322136][ T10] usb 5-1: config 7 has no interface number 0 [ 126.328613][ T10] usb 5-1: config 7 interface 204 has no altsetting 0 [ 126.335589][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 126.349183][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 126.359787][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.368424][ T10] usb 5-1: Product: syz [ 126.373263][ T10] usb 5-1: Manufacturer: syz [ 126.378171][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.387658][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.396089][ T10] usb 5-1: SerialNumber: syz [ 126.402928][ T9] usb 2-1: Product: syz [ 126.416027][ T9] usb 2-1: Manufacturer: syz [ 126.421138][ T9] usb 2-1: SerialNumber: syz [ 126.435141][ T6681] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.444601][ T5896] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 126.610885][ T5896] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 126.612657][ T6699] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 126.620546][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.638910][ T5896] usb 4-1: Product: syz [ 126.660917][ T6699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.669232][ T6681] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.679737][ T6681] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.684493][ T5896] usb 4-1: Manufacturer: syz [ 126.698833][ T5896] usb 4-1: SerialNumber: syz [ 126.705305][ T6682] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.734270][ T5896] usb 4-1: config 0 descriptor?? [ 126.745873][ T6699] bond1: (slave veth3): Enslaving as an active interface with a down link [ 126.823831][ T10] smsc95xx v2.0.0 [ 126.834033][ T10] smsc95xx 5-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 126.847157][ T6701] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 126.895448][ T10] smsc95xx 5-1:7.204: probe with driver smsc95xx failed with error -22 [ 126.911370][ T10] usbhid 5-1:7.204: couldn't find an input interrupt endpoint [ 126.924980][ T9] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 126.931021][ T9] cdc_ncm 2-1:1.1: bind() failure [ 126.946053][ T10] usb 5-1: USB disconnect, device number 13 [ 126.980686][ T5896] peak_usb 4-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 127.132641][ T30] audit: type=1400 audit(1764628158.926:375): avc: denied { create } for pid=6705 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.160826][ T30] audit: type=1400 audit(1764628158.936:376): avc: denied { ioctl } for pid=6705 comm="syz.0.227" path="socket:[12594]" dev="sockfs" ino=12594 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.188275][ T6692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.200778][ T6692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.233821][ T5896] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 127.248748][ T5896] peak_usb 4-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 127.310599][ T5896] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 127.330881][ T5896] usb 4-1: USB disconnect, device number 13 [ 127.634669][ T6733] ipip0: entered promiscuous mode [ 127.654596][ T6733] ipip0: entered allmulticast mode [ 128.064764][ T5896] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 128.424540][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 128.431361][ T5896] usb 1-1: config 0 has an invalid interface number: 149 but max is 0 [ 128.439617][ T5896] usb 1-1: config 0 has no interface number 0 [ 128.446046][ T5896] usb 1-1: config 0 interface 149 has no altsetting 0 [ 128.454301][ T5896] usb 1-1: New USB device found, idVendor=12d1, idProduct=b18c, bcdDevice=ae.ff [ 128.858508][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.867349][ T5896] usb 1-1: Product: syz [ 128.871523][ T5896] usb 1-1: Manufacturer: syz [ 128.876722][ T5896] usb 1-1: SerialNumber: syz [ 128.883876][ T5896] usb 1-1: config 0 descriptor?? [ 128.892466][ T5848] usb 2-1: USB disconnect, device number 7 [ 128.893491][ T5896] option 1-1:0.149: GSM modem (1-port) converter detected [ 128.923466][ T5896] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 128.939766][ T6749] loop8: detected capacity change from 0 to 8 [ 128.961894][ T6749] Dev loop8: unable to read RDB block 8 [ 128.969110][ T6749] loop8: unable to read partition table [ 128.976454][ T6749] loop8: partition table beyond EOD, truncated [ 128.983870][ T6749] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 129.166919][ T5896] usb 1-1: USB disconnect, device number 12 [ 129.230926][ T5896] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 129.253272][ T30] audit: type=1400 audit(1764628160.906:377): avc: denied { mount } for pid=6735 comm="syz.0.231" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 129.273771][ T5896] option 1-1:0.149: device disconnected [ 129.275817][ T30] audit: type=1400 audit(1764628160.916:378): avc: denied { search } for pid=6735 comm="syz.0.231" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.407605][ T30] audit: type=1400 audit(1764628160.916:379): avc: denied { search } for pid=6735 comm="syz.0.231" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.905840][ T30] audit: type=1400 audit(1764628160.916:380): avc: denied { search } for pid=6735 comm="syz.0.231" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.928605][ T30] audit: type=1400 audit(1764628160.916:381): avc: denied { search } for pid=6735 comm="syz.0.231" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.331113][ T30] audit: type=1400 audit(1764628162.116:382): avc: denied { create } for pid=6755 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.143932][ T6769] netlink: 156 bytes leftover after parsing attributes in process `syz.1.240'. [ 131.153000][ T6769] netlink: 156 bytes leftover after parsing attributes in process `syz.1.240'. [ 131.200409][ T30] audit: type=1400 audit(1764628162.126:383): avc: denied { bind } for pid=6755 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.324594][ T30] audit: type=1400 audit(1764628162.126:384): avc: denied { write } for pid=6755 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.344015][ T30] audit: type=1400 audit(1764628163.076:385): avc: denied { map } for pid=6755 comm="syz.2.238" path="socket:[11635]" dev="sockfs" ino=11635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.546908][ T6776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.241'. [ 131.571398][ T6776] overlayfs: missing 'lowerdir' [ 131.691745][ T30] audit: type=1400 audit(1764628163.076:386): avc: denied { read } for pid=6755 comm="syz.2.238" path="socket:[11635]" dev="sockfs" ino=11635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.919279][ T6786] bond0: (slave wg0): Error: Device can not be enslaved while up [ 131.926171][ T6787] loop8: detected capacity change from 0 to 8 [ 132.233168][ T6791] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.265297][ T30] audit: type=1400 audit(1764628164.046:387): avc: denied { name_bind } for pid=6785 comm="syz.0.246" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 132.571799][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.583385][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.606083][ T5810] Dev loop8: unable to read RDB block 8 [ 132.661960][ T5810] loop8: unable to read partition table [ 132.748113][ T5810] loop8: partition table beyond EOD, truncated [ 133.830777][ T5879] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.350565][ T5879] usb 2-1: config index 0 descriptor too short (expected 1316, got 36) [ 134.374908][ T5879] usb 2-1: config 7 has an invalid interface number: 204 but max is -1 [ 134.402550][ T5879] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 134.527929][ T5879] usb 2-1: config 7 has no interface number 0 [ 134.538191][ T5879] usb 2-1: config 7 interface 204 has no altsetting 0 [ 135.016233][ T30] audit: type=1400 audit(1764628166.806:388): avc: denied { create } for pid=6806 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.042636][ T5879] usb 2-1: string descriptor 0 read error: -71 [ 135.060061][ T5879] usb 2-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 135.090071][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.121891][ T5879] usb 2-1: can't set config #7, error -71 [ 135.139542][ T5879] usb 2-1: USB disconnect, device number 8 [ 135.235597][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 135.373713][ T30] audit: type=1400 audit(1764628167.166:389): avc: denied { mounton } for pid=6823 comm="syz.1.256" path="/51/file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.618812][ T6824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.772539][ T6838] Illegal XDP return value 4294967294 on prog (id 62) dev N/A, expect packet loss! [ 135.793056][ T6827] nfs4: Unknown parameter 'dev/fuse' [ 135.817867][ T30] audit: type=1400 audit(1764628167.586:390): avc: denied { mounton } for pid=6823 comm="syz.1.256" path="/51/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 135.840118][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.871332][ T6840] sd 0:0:1:0: device reset [ 138.244522][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.356837][ T6880] tipc: Started in network mode [ 138.361722][ T6880] tipc: Node identity ac1414aa, cluster identity 4711 [ 138.368996][ T6880] tipc: Enabled bearer , priority 10 [ 138.549726][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 138.981717][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.997848][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.017374][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.065528][ T9] usb 3-1: config 0 descriptor?? [ 139.081873][ T6887] netlink: 'syz.4.273': attribute type 21 has an invalid length. [ 139.132596][ T6090] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.143525][ T6090] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.216480][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 139.264502][ T6090] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.367199][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 139.371307][ T6090] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.533630][ T48] tipc: Node number set to 2886997162 [ 139.561074][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 139.571964][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 141.829201][ T10] usb 3-1: USB disconnect, device number 3 [ 141.845922][ T6924] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 142.040509][ T30] audit: type=1400 audit(1764628173.806:391): avc: denied { ioctl } for pid=6925 comm="syz.0.285" path="socket:[11944]" dev="sockfs" ino=11944 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.822080][ T6924] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 142.876937][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 143.025393][ T6946] overlay: Unknown parameter 'fowner<00000000000000000000' [ 143.165821][ T6952] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 143.181338][ T6953] Invalid logical block size (536870912) [ 143.428991][ T30] audit: type=1400 audit(1764628175.226:392): avc: denied { ioctl } for pid=6947 comm="syz.4.289" path="socket:[11979]" dev="sockfs" ino=11979 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 143.454638][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.627185][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 143.640908][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.836050][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.855907][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.895629][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.927986][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.046890][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 144.157262][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 144.195622][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.249831][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 144.293983][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.334567][ T10] usb 3-1: config 0 descriptor?? [ 144.353738][ T6946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.395612][ T910] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 144.407944][ T6969] ALSA: mixer_oss: invalid OSS volume '' [ 144.414342][ T6969] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 144.450399][ T6969] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 144.808476][ T6969] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 144.817358][ T6969] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 144.831338][ T910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.843056][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.851356][ T910] usb 5-1: Product: syz [ 144.855738][ T910] usb 5-1: Manufacturer: syz [ 144.991831][ T910] usb 5-1: SerialNumber: syz [ 145.188603][ T30] audit: type=1326 audit(1764628176.786:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.2.288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4d9f8f749 code=0x0 [ 145.374881][ T30] audit: type=1400 audit(1764628177.176:396): avc: denied { create } for pid=6987 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.401532][ T6988] syzkaller0: entered promiscuous mode [ 145.421167][ T6988] syzkaller0: entered allmulticast mode [ 145.474298][ C1] usblp0: nonzero read bulk status received: -71 [ 145.490589][ T6986] usblp0: error -71 reading from printer [ 145.497810][ C1] usblp0: nonzero read bulk status received: -71 [ 145.506476][ T910] usb 5-1: 0:2 : does not exist [ 145.518704][ T910] usb 5-1: USB disconnect, device number 14 [ 145.566804][ T30] audit: type=1400 audit(1764628177.176:397): avc: denied { write } for pid=6947 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.589479][ T30] audit: type=1400 audit(1764628177.266:398): avc: denied { read write } for pid=6945 comm="syz.2.288" name="lp0" dev="devtmpfs" ino=2878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 145.616625][ T30] audit: type=1400 audit(1764628177.266:399): avc: denied { open } for pid=6945 comm="syz.2.288" path="/dev/usb/lp0" dev="devtmpfs" ino=2878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 145.642004][ T30] audit: type=1400 audit(1764628177.346:400): avc: denied { name_connect } for pid=6987 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 145.665964][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.695733][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 146.782906][ T910] usb 3-1: USB disconnect, device number 4 [ 146.788982][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 146.835684][ T910] usblp0: removed [ 147.147862][ T7008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'. [ 147.207967][ T7012] loop8: detected capacity change from 0 to 8 [ 147.222646][ T7012] Dev loop8: unable to read RDB block 8 [ 147.245272][ T7012] loop8: unable to read partition table [ 147.258086][ T7012] loop8: partition table beyond EOD, truncated [ 147.264716][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 147.295118][ T7012] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 147.439597][ T24] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 147.452956][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 147.452973][ T30] audit: type=1400 audit(1764628179.236:402): avc: denied { bind } for pid=7024 comm="syz.3.313" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.481214][ T30] audit: type=1400 audit(1764628179.236:403): avc: denied { name_bind } for pid=7024 comm="syz.3.313" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 147.507162][ T24] usb 5-1: config 0 has no interface number 0 [ 147.523999][ T30] audit: type=1400 audit(1764628179.236:404): avc: denied { node_bind } for pid=7024 comm="syz.3.313" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 147.552054][ T24] usb 5-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.602845][ T24] usb 5-1: config 0 interface 235 has no altsetting 0 [ 148.481228][ T7037] netlink: 'syz.0.317': attribute type 58 has an invalid length. [ 148.520721][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 148.563930][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 148.584797][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.610772][ T24] usb 5-1: Product: syz [ 148.641579][ T24] usb 5-1: Manufacturer: syz [ 148.684692][ T24] usb 5-1: SerialNumber: syz [ 148.704389][ T24] usb 5-1: config 0 descriptor?? [ 148.763226][ T24] keyspan 5-1:0.235: Keyspan 1 port adapter converter detected [ 148.871354][ T7048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.321'. [ 148.929295][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 87 [ 148.963467][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.991154][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.025844][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 7 [ 149.040261][ T7049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.320'. [ 149.078477][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.088126][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 149.109034][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 81 [ 149.117979][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 1 [ 149.126269][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 85 [ 149.136157][ T24] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 149.291908][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'. [ 149.324859][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.374706][ T7056] erspan0: entered promiscuous mode [ 149.388289][ T7056] erspan0: left promiscuous mode [ 151.178452][ T10] usb 5-1: USB disconnect, device number 15 [ 151.226336][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 151.248376][ T10] keyspan 5-1:0.235: device disconnected [ 152.038151][ T30] audit: type=1400 audit(1764628183.456:405): avc: denied { watch_sb } for pid=7068 comm="syz.1.325" path="/66" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.333783][ T30] audit: type=1400 audit(1764628184.126:406): avc: denied { read write } for pid=7076 comm="syz.4.327" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.539015][ T30] audit: type=1400 audit(1764628184.156:407): avc: denied { open } for pid=7076 comm="syz.4.327" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.578403][ T30] audit: type=1400 audit(1764628184.376:408): avc: denied { read write } for pid=7083 comm="syz.0.329" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.214560][ T910] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.370976][ T30] audit: type=1400 audit(1764628184.376:409): avc: denied { open } for pid=7083 comm="syz.0.329" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.402571][ T30] audit: type=1400 audit(1764628184.376:410): avc: denied { ioctl } for pid=7083 comm="syz.0.329" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.466259][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.476331][ T910] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 153.486555][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.530486][ T910] usb 1-1: config 0 descriptor?? [ 154.617430][ T7098] loop8: detected capacity change from 0 to 8 [ 154.644015][ T910] lenovo 0003:17EF:6047.0002: bogus close delimiter [ 154.653128][ T7098] Dev loop8: unable to read RDB block 8 [ 154.680299][ T7098] loop8: unable to read partition table [ 154.684729][ T910] lenovo 0003:17EF:6047.0002: item 0 0 2 10 parsing failed [ 154.702921][ T910] lenovo 0003:17EF:6047.0002: hid_parse failed [ 154.725757][ T910] lenovo 0003:17EF:6047.0002: probe with driver lenovo failed with error -22 [ 154.747567][ T7098] loop8: partition table beyond EOD, truncated [ 154.760287][ T7102] tipc: Enabling of bearer rejected, already enabled [ 154.778191][ T7098] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 155.053957][ T7108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.337'. [ 155.143680][ T7115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.789271][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 155.806190][ T910] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.863598][ T7124] loop8: detected capacity change from 0 to 8 [ 155.881349][ T7124] Dev loop8: unable to read RDB block 8 [ 155.887729][ T7124] loop8: unable to read partition table [ 155.915246][ T7124] loop8: partition table beyond EOD, truncated [ 155.934781][ T7124] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 155.986641][ T910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.998199][ T910] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 156.011016][ T9] usb 5-1: device descriptor read/64, error -71 [ 156.099026][ T7128] netlink: 156 bytes leftover after parsing attributes in process `syz.3.340'. [ 156.108438][ T7128] netlink: 156 bytes leftover after parsing attributes in process `syz.3.340'. [ 156.245613][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 156.404636][ T9] usb 5-1: device descriptor read/64, error -71 [ 156.465919][ T910] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.475783][ T910] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.496112][ T910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.514530][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.522561][ T910] usb 2-1: Product: syz [ 156.534858][ T9] usb usb5-port1: attempt power cycle [ 156.544621][ T910] usb 2-1: Manufacturer: syz [ 156.549257][ T910] usb 2-1: SerialNumber: syz [ 156.764528][ T30] audit: type=1400 audit(1764628188.546:411): avc: denied { open } for pid=7132 comm="syz.3.343" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 156.844731][ T30] audit: type=1400 audit(1764628188.556:412): avc: denied { ioctl } for pid=7132 comm="syz.3.343" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 156.884805][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 157.199053][ T9] usb 5-1: device descriptor read/8, error -71 [ 157.407506][ T6541] usb 1-1: USB disconnect, device number 13 [ 157.508669][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 157.545187][ T9] usb 5-1: device descriptor read/8, error -71 [ 158.097683][ T9] usb usb5-port1: unable to enumerate USB device [ 158.168943][ T7143] 9pnet_virtio: no channels available for device syz [ 158.521477][ T7108] batman_adv: batadv0: Adding interface: gretap1 [ 158.573828][ T7108] batman_adv: batadv0: Interface activated: gretap1 [ 158.677268][ T7151] tipc: Enabling of bearer rejected, already enabled [ 158.846730][ T7156] bond0: (slave wg0): Error: Device can not be enslaved while up [ 159.244663][ T6541] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.316182][ T7163] overlayfs: missing 'lowerdir' [ 159.366583][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 159.486389][ T6541] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 159.505839][ T6541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.530643][ T6541] usb 1-1: config 0 descriptor?? [ 159.549704][ T9] usb 5-1: config index 0 descriptor too short (expected 1316, got 36) [ 159.570593][ T6541] rndis_host 1-1:0.0: skipping garbage [ 159.584754][ T9] usb 5-1: config 7 has an invalid interface number: 204 but max is -1 [ 159.598488][ T6541] usb 1-1: bad CDC descriptors [ 159.606129][ T9] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 159.624541][ T9] usb 5-1: config 7 has no interface number 0 [ 159.631996][ T9] usb 5-1: config 7 interface 204 has no altsetting 0 [ 159.645031][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 159.654300][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.674356][ T9] usb 5-1: Product: syz [ 159.681681][ T7167] nbd: must specify at least one socket [ 159.689835][ T9] usb 5-1: Manufacturer: syz [ 159.695068][ T9] usb 5-1: SerialNumber: syz [ 159.753432][ T30] audit: type=1400 audit(1764628191.546:413): avc: denied { setopt } for pid=7169 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.784109][ T6541] usb 1-1: USB disconnect, device number 14 [ 159.937325][ T9] smsc95xx v2.0.0 [ 159.944102][ T9] smsc95xx 5-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 160.014794][ T9] smsc95xx 5-1:7.204: probe with driver smsc95xx failed with error -22 [ 160.037223][ T9] usbhid 5-1:7.204: couldn't find an input interrupt endpoint [ 160.057417][ T9] usb 5-1: USB disconnect, device number 20 [ 161.044685][ T30] audit: type=1400 audit(1764628192.816:414): avc: denied { bind } for pid=7182 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.360874][ T30] audit: type=1400 audit(1764628193.136:415): avc: denied { read } for pid=7182 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.480661][ T30] audit: type=1400 audit(1764628193.266:416): avc: denied { create } for pid=7188 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 162.028100][ T7186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.253658][ T30] audit: type=1400 audit(1764628194.046:417): avc: denied { write } for pid=7188 comm="syz.3.358" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 162.294698][ T7186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.444778][ T7186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.812461][ T30] audit: type=1400 audit(1764628194.486:418): avc: denied { create } for pid=7204 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.832066][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.115359][ T910] cdc_ncm 2-1:1.0: bind() failure [ 163.128715][ T7186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.165742][ T30] audit: type=1400 audit(1764628194.966:419): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.187994][ T910] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -32 [ 163.230158][ T910] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -32 [ 163.254197][ T30] audit: type=1400 audit(1764628194.986:420): avc: denied { search } for pid=5478 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.284328][ T910] usbtest 2-1:1.1: probe with driver usbtest failed with error -32 [ 163.371706][ T5879] usb 2-1: USB disconnect, device number 9 [ 163.456744][ T30] audit: type=1400 audit(1764628194.986:421): avc: denied { search } for pid=5478 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.512264][ T30] audit: type=1400 audit(1764628194.986:422): avc: denied { read } for pid=5478 comm="dhcpcd" name="n101" dev="tmpfs" ino=3647 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.534007][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.698418][ T1315] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.706805][ T1315] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.777272][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 164.462898][ T2979] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.536988][ T2979] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.709875][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 165.858006][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 165.858022][ T30] audit: type=1400 audit(1764628197.636:427): avc: denied { add_name } for pid=7211 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.983286][ T30] audit: type=1400 audit(1764628197.636:428): avc: denied { create } for pid=7211 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.038020][ T30] audit: type=1400 audit(1764628197.636:429): avc: denied { write } for pid=7211 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3680 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.063962][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.078265][ T30] audit: type=1400 audit(1764628197.636:430): avc: denied { append } for pid=7211 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3680 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.084353][ T5879] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 166.102251][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.104679][ T30] audit: type=1400 audit(1764628197.696:431): avc: denied { remove_name } for pid=7249 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3680 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.139959][ T30] audit: type=1400 audit(1764628197.696:432): avc: denied { unlink } for pid=7249 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3680 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.162853][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.193057][ T5814] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 166.206805][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 166.206834][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.206846][ T5814] Workqueue: hci1 hci_rx_work [ 166.206877][ T5814] Call Trace: [ 166.206884][ T5814] [ 166.206892][ T5814] dump_stack_lvl+0x16c/0x1f0 [ 166.206912][ T5814] sysfs_warn_dup+0x7f/0xa0 [ 166.206938][ T5814] sysfs_create_dir_ns+0x24b/0x2b0 [ 166.206965][ T5814] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 166.206993][ T5814] ? find_held_lock+0x2b/0x80 [ 166.207022][ T5814] ? do_raw_spin_unlock+0x172/0x230 [ 166.207047][ T5814] kobject_add_internal+0x2c4/0x9b0 [ 166.207070][ T5814] kobject_add+0x16e/0x240 [ 166.207089][ T5814] ? __pfx_kobject_add+0x10/0x10 [ 166.207109][ T5814] ? do_raw_spin_unlock+0x172/0x230 [ 166.207128][ T5814] ? kobject_put+0xab/0x5a0 [ 166.207153][ T5814] device_add+0x288/0x1aa0 [ 166.207177][ T5814] ? __pfx_dev_set_name+0x10/0x10 [ 166.207202][ T5814] ? __pfx_device_add+0x10/0x10 [ 166.207225][ T5814] ? mgmt_send_event_skb+0x2fb/0x460 [ 166.207259][ T5814] hci_conn_add_sysfs+0x17e/0x230 [ 166.207279][ T5814] le_conn_complete_evt+0x1260/0x2150 [ 166.207312][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 166.207338][ T5814] ? hci_event_packet+0x459/0x11c0 [ 166.207372][ T5814] hci_le_conn_complete_evt+0x23c/0x370 [ 166.207405][ T5814] hci_le_meta_evt+0x357/0x5e0 [ 166.207434][ T5814] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 166.207465][ T5814] hci_event_packet+0x685/0x11c0 [ 166.207489][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 166.207560][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 166.207591][ T5814] ? kcov_remote_start+0x3c9/0x6d0 [ 166.207617][ T5814] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.207642][ T5814] hci_rx_work+0x2c9/0xeb0 [ 166.207673][ T5814] process_one_work+0x9cf/0x1b70 [ 166.207704][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 166.207732][ T5814] ? assign_work+0x1a0/0x250 [ 166.207753][ T5814] worker_thread+0x6c8/0xf10 [ 166.207783][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 166.207803][ T5814] kthread+0x3c5/0x780 [ 166.207822][ T5814] ? __pfx_kthread+0x10/0x10 [ 166.207841][ T5814] ? rcu_is_watching+0x12/0xc0 [ 166.207865][ T5814] ? __pfx_kthread+0x10/0x10 [ 166.207885][ T5814] ret_from_fork+0x675/0x7d0 [ 166.207900][ T5814] ? __pfx_kthread+0x10/0x10 [ 166.207920][ T5814] ret_from_fork_asm+0x1a/0x30 [ 166.207960][ T5814] [ 166.207984][ T5814] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 166.365957][ T5879] usb 4-1: config index 0 descriptor too short (expected 1316, got 36) [ 166.367939][ T5814] Bluetooth: hci1: failed to register connection device [ 166.380749][ T5879] usb 4-1: config 7 has an invalid interface number: 204 but max is -1 [ 166.387640][ T5814] ================================================================== [ 166.387656][ T5814] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80 [ 166.387692][ T5814] Read of size 8 at addr ffff88807c81b480 by task kworker/u9:4/5814 [ 166.387709][ T5814] [ 166.387718][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 166.387740][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.387752][ T5814] Workqueue: hci1 hci_rx_work [ 166.387779][ T5814] Call Trace: [ 166.387786][ T5814] [ 166.387793][ T5814] dump_stack_lvl+0x116/0x1f0 [ 166.387810][ T5814] print_report+0xcd/0x630 [ 166.387831][ T5814] ? __virt_addr_valid+0x81/0x610 [ 166.387857][ T5814] ? __phys_addr+0xe8/0x180 [ 166.387883][ T5814] ? l2cap_connect_cfm+0xdb9/0xf80 [ 166.387908][ T5814] kasan_report+0xe0/0x110 [ 166.387928][ T5814] ? l2cap_connect_cfm+0xdb9/0xf80 [ 166.387955][ T5814] l2cap_connect_cfm+0xdb9/0xf80 [ 166.387983][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 166.388010][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 166.388035][ T5814] le_conn_complete_evt+0x1ba6/0x2150 [ 166.388064][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 166.388088][ T5814] ? hci_event_packet+0x459/0x11c0 [ 166.388114][ T5814] hci_le_conn_complete_evt+0x23c/0x370 [ 166.388142][ T5814] hci_le_meta_evt+0x357/0x5e0 [ 166.388170][ T5814] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 166.388197][ T5814] hci_event_packet+0x685/0x11c0 [ 166.388223][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 166.388252][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 166.388278][ T5814] ? kcov_remote_start+0x3c9/0x6d0 [ 166.388303][ T5814] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.388323][ T5814] hci_rx_work+0x2c9/0xeb0 [ 166.388349][ T5814] process_one_work+0x9cf/0x1b70 [ 166.388371][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 166.388389][ T5814] ? assign_work+0x1a0/0x250 [ 166.388404][ T5814] worker_thread+0x6c8/0xf10 [ 166.388425][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 166.388441][ T5814] kthread+0x3c5/0x780 [ 166.388456][ T5814] ? __pfx_kthread+0x10/0x10 [ 166.388472][ T5814] ? rcu_is_watching+0x12/0xc0 [ 166.388491][ T5814] ? __pfx_kthread+0x10/0x10 [ 166.388505][ T5814] ret_from_fork+0x675/0x7d0 [ 166.388520][ T5814] ? __pfx_kthread+0x10/0x10 [ 166.388534][ T5814] ret_from_fork_asm+0x1a/0x30 [ 166.388560][ T5814] [ 166.388573][ T5814] [ 166.709411][ T5814] Allocated by task 5814: [ 166.713713][ T5814] kasan_save_stack+0x33/0x60 [ 166.718375][ T5814] kasan_save_track+0x14/0x30 [ 166.723029][ T5814] __kasan_kmalloc+0xaa/0xb0 [ 166.727598][ T5814] l2cap_chan_create+0x44/0x920 [ 166.732428][ T5814] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 166.738208][ T5814] l2cap_sock_new_connection_cb+0x101/0x240 [ 166.744077][ T5814] l2cap_connect_cfm+0x4c7/0xf80 [ 166.748999][ T5814] le_conn_complete_evt+0x1ba6/0x2150 [ 166.754350][ T5814] hci_le_conn_complete_evt+0x23c/0x370 [ 166.759877][ T5814] hci_le_meta_evt+0x357/0x5e0 [ 166.764621][ T5814] hci_event_packet+0x685/0x11c0 [ 166.769540][ T5814] hci_rx_work+0x2c9/0xeb0 [ 166.773944][ T5814] process_one_work+0x9cf/0x1b70 [ 166.778864][ T5814] worker_thread+0x6c8/0xf10 [ 166.783432][ T5814] kthread+0x3c5/0x780 [ 166.787479][ T5814] ret_from_fork+0x675/0x7d0 [ 166.792043][ T5814] ret_from_fork_asm+0x1a/0x30 [ 166.796810][ T5814] [ 166.799116][ T5814] Freed by task 7257: [ 166.803068][ T5814] kasan_save_stack+0x33/0x60 [ 166.807727][ T5814] kasan_save_track+0x14/0x30 [ 166.812383][ T5814] __kasan_save_free_info+0x3b/0x60 [ 166.817574][ T5814] __kasan_slab_free+0x5f/0x80 [ 166.822316][ T5814] kfree+0x2b8/0x6d0 [ 166.826191][ T5814] l2cap_chan_put+0x216/0x2c0 [ 166.830847][ T5814] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 166.836372][ T5814] l2cap_sock_release+0x69/0x250 [ 166.841298][ T5814] __sock_release+0xb3/0x270 [ 166.845873][ T5814] sock_close+0x1c/0x30 [ 166.850009][ T5814] __fput+0x402/0xb70 [ 166.853972][ T5814] task_work_run+0x150/0x240 [ 166.858547][ T5814] exit_to_user_mode_loop+0xec/0x130 [ 166.863833][ T5814] do_syscall_64+0x426/0xfa0 [ 166.868398][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.874268][ T5814] [ 166.876571][ T5814] The buggy address belongs to the object at ffff88807c81b000 [ 166.876571][ T5814] which belongs to the cache kmalloc-2k of size 2048 [ 166.890685][ T5814] The buggy address is located 1152 bytes inside of [ 166.890685][ T5814] freed 2048-byte region [ffff88807c81b000, ffff88807c81b800) [ 166.904630][ T5814] [ 166.906938][ T5814] The buggy address belongs to the physical page: [ 166.913321][ T5814] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c818 [ 166.922062][ T5814] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 166.930554][ T5814] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 166.938105][ T5814] page_type: f5(slab) [ 166.942082][ T5814] raw: 00fff00000000040 ffff88813ffa7000 ffffea0000d2ac00 dead000000000002 [ 166.950641][ T5814] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 166.959204][ T5814] head: 00fff00000000040 ffff88813ffa7000 ffffea0000d2ac00 dead000000000002 [ 166.967852][ T5814] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 166.976587][ T5814] head: 00fff00000000003 ffffea0001f20601 00000000ffffffff 00000000ffffffff [ 166.985338][ T5814] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 166.993992][ T5814] page dumped because: kasan: bad access detected [ 167.000384][ T5814] page_owner tracks the page as allocated [ 167.006089][ T5814] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (syz-executor), ts 64111968577, free_ts 59649315467 [ 167.027443][ T5814] post_alloc_hook+0x1af/0x220 [ 167.032206][ T5814] get_page_from_freelist+0x10a3/0x3a30 [ 167.037737][ T5814] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 167.043658][ T5814] alloc_pages_mpol+0x1fb/0x550 [ 167.048513][ T5814] new_slab+0x24a/0x360 [ 167.052676][ T5814] ___slab_alloc+0xd79/0x1a50 [ 167.057426][ T5814] __slab_alloc.constprop.0+0x63/0x110 [ 167.062873][ T5814] __kmalloc_noprof+0x501/0x880 [ 167.067708][ T5814] ops_init+0x77/0x5f0 [ 167.071776][ T5814] setup_net+0x100/0x390 [ 167.076010][ T5814] copy_net_ns+0x2f8/0x690 [ 167.080423][ T5814] create_new_namespaces+0x3ea/0xa90 [ 167.085696][ T5814] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 167.091315][ T5814] ksys_unshare+0x45b/0xa40 [ 167.095813][ T5814] __x64_sys_unshare+0x31/0x40 [ 167.100568][ T5814] do_syscall_64+0xcd/0xfa0 [ 167.105137][ T5814] page last free pid 5796 tgid 5796 stack trace: [ 167.111447][ T5814] __free_frozen_pages+0x7df/0x1160 [ 167.116644][ T5814] __folio_put+0x329/0x450 [ 167.121049][ T5814] skb_release_data+0x81a/0x9e0 [ 167.125886][ T5814] __kfree_skb+0x4f/0x70 [ 167.130119][ T5814] tcp_ack+0x1d37/0x5fc0 [ 167.134338][ T5814] tcp_rcv_established+0x749/0x3700 [ 167.139533][ T5814] tcp_v4_do_rcv+0xc65/0x10a0 [ 167.144188][ T5814] __release_sock+0x361/0x450 [ 167.148845][ T5814] __sk_flush_backlog+0x27/0xc0 [ 167.153678][ T5814] tcp_sendmsg_locked+0x3990/0x42e0 [ 167.158955][ T5814] tcp_sendmsg+0x2e/0x50 [ 167.163178][ T5814] inet_sendmsg+0xb9/0x140 [ 167.167574][ T5814] sock_write_iter+0x509/0x610 [ 167.172320][ T5814] vfs_write+0x7d3/0x11d0 [ 167.176715][ T5814] ksys_write+0x1f8/0x250 [ 167.181020][ T5814] do_syscall_64+0xcd/0xfa0 [ 167.185501][ T5814] [ 167.187824][ T5814] Memory state around the buggy address: [ 167.193449][ T5814] ffff88807c81b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.201492][ T5814] ffff88807c81b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.209534][ T5814] >ffff88807c81b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.217748][ T5814] ^ [ 167.221792][ T5814] ffff88807c81b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.229831][ T5814] ffff88807c81b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.237957][ T5814] ================================================================== [ 167.246037][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.258702][ T5814] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.265911][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 167.275440][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.285484][ T5814] Workqueue: hci1 hci_rx_work [ 167.290171][ T5814] Call Trace: [ 167.293428][ T5814] [ 167.296338][ T5814] dump_stack_lvl+0x3d/0x1f0 [ 167.300909][ T5814] vpanic+0x640/0x6f0 [ 167.304880][ T5814] panic+0xca/0xd0 [ 167.308592][ T5814] ? __pfx_panic+0x10/0x10 [ 167.313004][ T5814] ? l2cap_connect_cfm+0xdb9/0xf80 [ 167.318104][ T5814] ? preempt_schedule_common+0x44/0xc0 [ 167.323579][ T5814] ? preempt_schedule_thunk+0x16/0x30 [ 167.328943][ T5814] check_panic_on_warn+0xab/0xb0 [ 167.333859][ T5814] end_report+0x107/0x170 [ 167.338432][ T5814] kasan_report+0xee/0x110 [ 167.342832][ T5814] ? l2cap_connect_cfm+0xdb9/0xf80 [ 167.347934][ T5814] l2cap_connect_cfm+0xdb9/0xf80 [ 167.352952][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 167.358397][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 167.364026][ T5814] le_conn_complete_evt+0x1ba6/0x2150 [ 167.369384][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 167.375264][ T5814] ? hci_event_packet+0x459/0x11c0 [ 167.380368][ T5814] hci_le_conn_complete_evt+0x23c/0x370 [ 167.385918][ T5814] hci_le_meta_evt+0x357/0x5e0 [ 167.390671][ T5814] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 167.396722][ T5814] hci_event_packet+0x685/0x11c0 [ 167.401731][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 167.407003][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 167.412381][ T5814] ? kcov_remote_start+0x3c9/0x6d0 [ 167.417485][ T5814] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.422698][ T5814] hci_rx_work+0x2c9/0xeb0 [ 167.427129][ T5814] process_one_work+0x9cf/0x1b70 [ 167.432164][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 167.437524][ T5814] ? assign_work+0x1a0/0x250 [ 167.442118][ T5814] worker_thread+0x6c8/0xf10 [ 167.446866][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 167.451958][ T5814] kthread+0x3c5/0x780 [ 167.456092][ T5814] ? __pfx_kthread+0x10/0x10 [ 167.460669][ T5814] ? rcu_is_watching+0x12/0xc0 [ 167.465426][ T5814] ? __pfx_kthread+0x10/0x10 [ 167.470000][ T5814] ret_from_fork+0x675/0x7d0 [ 167.474568][ T5814] ? __pfx_kthread+0x10/0x10 [ 167.479138][ T5814] ret_from_fork_asm+0x1a/0x30 [ 167.483894][ T5814] [ 167.487262][ T5814] Kernel Offset: disabled [ 167.491564][ T5814] Rebooting in 86400 seconds..