last executing test programs: 40.856367924s ago: executing program 3 (id=158): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00', @ANYRESHEX=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000003c0), 0x8000, 0x381440) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000000)={0x20, 0xe, 0x2b, {0x2b, 0x2b, "095f9f179bce2559e3718c452f943225a14929d715df8a4389ca7f0a6ba686d8251dda914ab5562e82"}}, &(0x7f00000000c0)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "bb1ae2a4328c8631be4611fbf19bbc42516f94355ae0d4d2b5ef44830b300c49b56ec5ee4de80c1c761580cd8a087a933223e3c4af2ff7cbd57712555f44e478dd90089b1a5951ff1050f0ee426f1e14e093d7a41f93f0096b19b6aeb1717f5caabc812649e82ef4d229a2fdb143736c7fa462ebb5831d906ead925c11c40b72076a4abd2037c300b4"}}}, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0x15, 0xa, "5c82f44e4dc0eaa595a2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000280)={0x20, 0x0, 0x5d, {0x5b, "930e0e8d1f8357059da04d057ca4178a409da5d5b2eab90d99319c434fdcc0f27b6e5b3e10d4792da765c1e5148f2dec12a4212871fd55344f225736fc97a696cd3732d694aa056e5f665432b5e7e09df2f0eceb43285cb4e7a538"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x2}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.state\x00', 0x275a, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x18000, 0x100000500) syz_usb_control_io$hid(r0, &(0x7f0000000b40)={0x24, &(0x7f0000000a00)={0x60, 0x22, 0x86, {0x86, 0x22, "9d9d76860b1faeec75622ecc729b896558b2a0b497e3be87f1ea79c6edf46833fb134d661a13bdace141f837fb1f5aef3254a4ecca7fdb4a783866174fdae1578a5a60a807b6bbdb987dd4153b35fe9ef49f6bbf122c5ea6c49ab9d782144f06a96e79d998c0c51fc8774f062052db1e725a2d0d3cfdb692e0700298c69240c96b9fec87"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f0000000ac0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "483ca4d2"}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x575}}}}, &(0x7f0000000e40)={0x2c, &(0x7f0000000b80)={0x20, 0x16, 0xde, "67d378708ba80c44acbb619f6bb4d98f399da9e079a1f59fcc1b5fcf819467aac944cdd8ef07f598bcb261b94b245a137f80959d05ca6bec68eb01257bdc434cf3a78d71e8a6148963dca34080a65799cdccb8c1f507c28c2c70690fabf773d56fbad044a5e69e6ab2df78b8701e3399c4d1b358fa5f14037410e411bcf186181327b68b361fac7131c96136f25590b91a86f25129c53fe81350f1454aab27ccec3e00d8d22ddc9f1f2c18c8ec9ad2cdffb989b95438d07309194d5abf403e240896d48d1ebc15af3b2bcf0509fb990e565e9576731d9b0286afd9d03cb1"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x9e}, &(0x7f0000000d00)={0x20, 0x1, 0xd0, "dd2ba20edf9054233d3fce95c9429758eff4df9d3a9e561a9751826c7ca1375e2a6e88c6e50c59379eb6fd9d5a90cb3b41034843947cb01a4162a6bec1123f89018272b7ae8b71398f4f15631defa54b9cde4300135c789f39d57ac36c7f56188b8ffd7a2dabe2d329a0df6776e932f1d76393947296993b1a56a85a016b2b51c38f7cb96e8b246109a6ed803c2c833e19b4f4d4e29d65d35b8d8a8ea7c492de08105429ada5b790dfb6d69821220255a3eb4b03ca79d7cbd2d8e32fc37115c05572fcec2094f6b2ddd9f909e4d1cded"}, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0x7}}) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000001c0)="5eff", 0x2}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x10}, 0x81) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x490, 0x278, 0x0, 0x310, 0x0, 0x310, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, &(0x7f0000000480), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x4, 0xb, [0x2c, 0xa, 0x25, 0x16, 0x5, 0x33, 0x0, 0x1f, 0x16, 0x35, 0x21, 0x32, 0xb, 0x6, 0x2e, 0x2a], 0x1, 0x1, 0x5}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @remote, 0xff, 0xffffffff, 'sit0\x00', 'ipvlan1\x00', {0xff}, {0x17e}, 0x0, 0x2, 0x15}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffff00, 'xfrm0\x00', 'erspan0\x00', {}, {}, 0x5c, 0x0, 0x12}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x42, 0xe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) 38.472803843s ago: executing program 0 (id=167): r0 = socket$inet(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001900010000000000000000000218000000"], 0x30}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85ead19197f5bb494e52b92a095e84bfbf0b4dbb1d381df80a5aeb2593fc7e8c756d0a4ade7d6f0567e650b62b6d1ea2a47d603030d2dc1d8d8c5c87e9c489e09c654592c2e9fccbf0f15e46d8536c09a9f07ea1f12d3a17e1d94458bd8448011c6e13fb3c957d3b8499524f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f746561ed000000aaaaaaf991bb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba3160000000000000000000800000000eb560000000000892f0700636f6e6e6c6162656c000000000000000000e5ffffff00000000000020000000080000000000000000000000000000004e465154455545000000000000000000000000000000000080000000000000000800000000000000000800000000000400000000000000000000000080000000000000000000000001fcffffffffffff0000000001000000ffffffff000000000000000000000000000400000000efff000000000000000000000000000000000000000001000000feffffff010000000b00006b90088754ea234d6f6e6430000000000000000000000074489c4c2c0000000000000000000000626f6e64300000ff000000000000000076657468315f744d8abdc76964676500aaaaaaaaaabb0000000000e7feffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d3c964de64039918d16289341524b00000000208279030000000000000000000000000008040000"]}, 0x2a7) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f02142dadffffffffee0200000000000000000000070000000000", 0x21) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 38.15193289s ago: executing program 2 (id=169): sigaltstack(&(0x7f00000004c0)={&(0x7f0000000740)=""/4096, 0x0, 0x1000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) r4 = socket$unix(0x1, 0x1, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10000000000401, 0x1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$P9_RSYMLINK(r5, &(0x7f0000000040)={0x14}, 0x14) fallocate(r5, 0x0, 0x0, 0x1000f4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000100), &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r0, @fallback, r5, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x10, 0x0, 0x21c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, r3, r5], &(0x7f0000000440)=[{0x0, 0x3, 0xa, 0xc}, {0x4, 0x3, 0xe, 0x9}, {0x0, 0x3, 0x4, 0xb}, {0x1, 0x4, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94) sigaltstack(&(0x7f0000000540)={0x0, 0x80000002}, &(0x7f0000000640)={0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,', 0x0}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x46142, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f00000000c0)=0x1ff) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x200, 0xa040, 0x16a, 0x0, 0x1, 0x0, 0x9a, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x1ba, 0x8001, 0x2, 0x7}}, {0x4}}]}]}, 0xc8}}, 0xc0) fchdir(r8) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r14, 0x0) statx(r9, &(0x7f0000008f00)='./bus/file0\x00', 0x4000, 0x200, &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = accept4$inet6(r3, &(0x7f0000009040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000009080)=0x1c, 0x80000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000090c0)=0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009280)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000000680)="e0229920a463c2c21644a358ed057ef1e70ab3378caecda3f3c96d3d31c36ca5a58d67db822fa53e7f39b27909205d505c0b3c69bcb04c0c8aae6bb869227acd70fa26d55c639be0d8d93dcad385cd0e36873ae0e2eb77db84e9ae6289797bed2934bc585d1a367188c88c67000bba5e3e575ff89f8620a596b35399072f49c0050485eb05ddf0cc29a45d6a37dc41ec31da9ac00709527d125580cd7b9af1f083e0b04f2f7697919213", 0xaa}, {&(0x7f0000000480)="bc57a321f9dfe08ff75f2181226ddadf2a4a", 0x12}, {&(0x7f00000027c0)="4524b904e634ba99e97be8abab61571c43a6d92f77ffbc4c1d6e527b152ee3cf0c636c0b1f81657e5806d16a1a95cb399ad6dd27be6ec46153fe1613a500ecbfaa8944d2d802c56d3d50af04a57abedaed193d2b1cd5a2e859054926d7d6bf961df22d132f", 0x65}, {&(0x7f0000002000)="32d07aed3f88450d2d836298daf3eb7980b1facc2fd466eafde4d684b816bd4f3013143e5a44312e27be1035f067fb03db07894bac427796b76e8a3e036c861df1be78a01cbbb3ddc8642dd33cf49c6ca571aedae485bf6573d1cbbf429c2048457e8bcb7ea22a269bd45b", 0x6b}, {&(0x7f0000002080)="321d57275146b3c4d2d4f178336bd292d34f432e807d1376ef4a144abcfc26ad25b9dd45342e280c1e7287ecfbbe5ca08cc09e549720439a3dd7a5bb140976837711137e941e1b08bcca0255c61932150f73ae0aebcc2880d1230b534ba58cf007d6f756e2d50bb1b156082d3987675f3864eda65be8ab73f710f534394ed2e6188c160021a4572a41176fa7230bf02134875089be1df3a6af212e3e543b75db40061b622fbbfd3e7c54e790697ae058f2653ec1843a2e320b915dea00188bed22896b883ae9e93a66ca4ecb", 0xcc}, {&(0x7f0000002180)="06ab9f5cc80d083c944c2bce441d57e1f736f45a2281e446c2491bb84a94d211bc2e4ee5af910b2a4191fbce308117cccd4a8c00afa00599ee9c51fcf737f6bb59a670e82bad1e54e94b0db4d363aa47567c81b1cca7fb6a3daaaca27165f26eae75b221de51ef8d67637e6a26731b63f353e059a684e1e0499ec2c2ab9905d59f27d57b4b5ad50a4de2578a095f1996456b90412aa4ddbcac6081723ac9e2361e033ff20a133a782dab9137972499a8e882a53eccd1a6ed6cd93d35ae391f828c800207feaccc06af4685be48d79a0aac6d52f6a304d34cd675bb859a4a74bddb59990dedcc4a50c977162bc5b727e9a5b9456455d5293b", 0xf8}, {&(0x7f0000002280)="1ba1bdd91a515b5fd91a8cdf64a71554e38cf73ea89aef05a4a5eee5defc2a6a1dfb574d14f16368c4d50fc16d8bcf779e1ae26ec5fd36ae00e07bc1df912b8fe0a5b43a2e891d7b9f15edfb4aca1dc4100d2d275eb75c817872765a60cc80037c3e116717cd746d3f2a6dc4b71e1a7211cf44a1e70a1b1b23cfb835744dccd64f36e5b5b7833b985ee47203830b6f39971d861ad208bd7ffdcd910d9add21d3cfbd7531ab6a94aebfc1a7b854acf674cc2e37ef90", 0xb5}, {&(0x7f0000002340)="8527393c46979f327e3255803935a921fad6ed14402a447ef949b8afa3fa9d93809b1dc7d4c37948db85620aaf1a201c5ce2702d541df9810fd040d664c4b251f0efc2d8fc01207f44654c1f872109a7ebc03d819d322be8e954ef8fbf32dd7260fabee409a5bf84fb0797e760dd22408e63c2e18b8e1e58a97237cd2855f87ecaf4900dffe9e0b6080895c3c6b7637470841aaaf4eb238879e0bd3f2850128803daffd635b1956b9032e0252e0a56b849857ab3eeadf74e479996f35e4dc1ce8fc10fb3860139d2bda5a2565e155901cab5dbe27705499b06d14db18202103c", 0xe0}, {&(0x7f0000002440)="0bf2205c6b30ce1441737878a6aaaaebe6f6e5ead5a73368bc8827ec467b66bd12f5fe5998e63121a59e060df9bed616c7a3a9150a58f14db9748c1502c77fb7ce5edeed0729924f8e4fcad019deda712814b71a03523a9ff94f1aab614700bf2dd9b49f6bbbd8b376f46803a45b032a3b06a793571768fef4070ac74873bc662aee766f60972374721c4035e4710cc7c5934f2b7ecdd3a1a294ce2f18e493370eb70149a4f3f3e6f4a882ee056b973ee0d677ff0b7cbf307e6880fdc7ca45ae55c5e6a13e2936b9d89083b0eca290ba637e4a0579f8877188c01d0ffa5d376a59b01918144a9fe6aae4", 0xea}, {&(0x7f0000002540)="a39f827c3f5678d8ec9f13685495c45ae14676bb74a2942940bb0b7c3b9f7daf5136fa35d60fe46d785df673f8cff9f01821054cb377e96614b99a7f8afd952b71e82b74310f716a682bd309afb92131c9770c8a146f8065403da7053daf2573e73a823bd9cd178424afac21960c49cde770e70b05368beac1c76c4b63e4c86a22efb813d9d0", 0x86}], 0xa, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x840}}, {{&(0x7f00000029c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002a40)="baece6a55983905d0b", 0x9}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f0000003a80)="396da250760bc2a08e5bd2853c855047aa8670eabba365dbb7f9b7cdfe85d6d2cd6fd729dcc205c07e80d2890ce4c19438059de157366c60d1cc557848312c3f35ec355fc6c1f6", 0x47}, {&(0x7f0000003b00)="633e851d5b390450386c42573efb56c5b086668c65768465ad6e518d403d090a4117e1bd2fc7c7f317ddfcd0fa1820c3e764aa07980585152558909b6cca1bd80ce48adc12c705ce0581c5f4e51f6d363fd34099ecfaba2742b2b2d06b6884dd5594f4e353abf19997fbab680c441830e1cf12", 0x73}, {&(0x7f0000003b80)="0e364f66312a993e7be55a4dd2e06868e1658bb6ccca9cc9541f9c185b1367e2cb01bd0abe9fd8c2b610fb8bd2dfa4f7226d421b53bf8c23871158ba227af33d392e40df6f86cf780c083912f2ba13fc58a4f325dd243288b821f13e84225ba14fe1f8a1983cdeeac5600095377d4f23c8", 0x71}, {&(0x7f0000003c00)="6a2a2c68abb023d45d2ddee822e38b99206ec58b19c9f5ea1a9eecb4b1e9a968f312906e7a1d1f75522ece4161e4c5528241b060ae3ee25ec269b0784d35a0f3de6ec8c8deb36e24d9f1fa73d3aeac5329c63dbbccaa1a5d696635ce880d559310", 0x61}], 0x6, &(0x7f0000007e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000d7e5d2e15d06f17500000100000001000000", @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40084}}, {{&(0x7f0000007ec0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000008040)=[{&(0x7f0000007f40)="f2a11805c484f0c326c87d483e48882d7c233574edb8e4257ac483b0b7eeb51e804226d4fbda4eef4a34d500771b63edf69b79b72362a08eb457192740f0b7dceeba67afe672841e138d2e95d2f76c288ff28307", 0x54}, {&(0x7f0000007fc0)="5a0a7c5ead700b42aa9ea4906ab0d0a50f07137615d74e45b557aa8fa851cec81db726379977e93445c2975d028afb7af1b3ab4b246fc66a0864bb5d874109d68b9efb497ed48e63325080b44260bab11ddd6a32cccdbb4cdadc4306b8117531dc150aaecf35b98d30979ae4abf257ad013242", 0x73}], 0x2, &(0x7f0000008080), 0x0, 0x4}}, {{&(0x7f00000080c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000008380)=[{&(0x7f0000008140)="f9a06e51d89e2830b317759e6b719b5380df0c0529946a88149b8004ddc122e4068f82f18bbf7fce37a41eb661c288a4d713a8e4f440feb8cd8b2d40c1627563356c9f32c0a4ed39c3826e9d912b911b956f0af23e52344c99035e77344fb54ed4a365241029b859e7453cb0246a2b577a64c531b451f3388327edd5f69105f4bcc9d40d40646ce598a9b17250f83f7c4d68d6210caa2c4c84e181e518493c6569654559e873ca96c2615f9c8b3c099bb142d0b6d4b1d20e1f02317e5aed188aef8f2480da63b985c120d20550d48b3b", 0xd0}, {&(0x7f0000008240)="8a943b9380942fad8dd4139234dbb9bbdd381aec79b892b45feae71e7d984280ec6ad711f0ebc7021ac2012de7a4b145fb38626645096147a05904c4c8d9f25374d0bb90548b88094d4c48e6c1fe0c2367d55c6b6a8a7ff40be99ecce459c75711102a02ea05cbb31021cdbe4f43b041e9272444543af5c04e3831d5e1b11b908861c2c38020f1661f20743b46dcd86a20378e2ab2da8a44079f00c2d98fcf213b8019fe854c3c37dec82a2eaf473d8a8eaefc903cc1b1a4100a6a7ebdd9e2449991f01b5b9bb72a", 0xc8}, {&(0x7f0000008340)="f319cb3cb30af70d2148af71d81c5fd06c9e05f8199c720fb4ba4e9f4f1a043b237c1fd0", 0x24}], 0x3, &(0x7f0000002840)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r7, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESDEC=r18, @ANYRES32=r9, @ANYRES32=r2, @ANYRESOCT=r10], 0x40}}, {{&(0x7f0000008400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000087c0)=[{&(0x7f0000008480)="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", 0xfa}, {&(0x7f0000008580)="0df74cae125707042f1c7f26db0f2a751d5413d444b1b1f152c7874badaada42fdab0c2c6122b2c7ea", 0x29}, {&(0x7f00000085c0)="269f5315ea480d50e3e34a9a51e30ba97b7fb08d366166b7b944a77e24719bcbf68806c9668a971b117ac34ee999eaccc173591f8e63bc270f7a00f16ea8656bd0b95ededf89564cf7db7ea0de5ddc73855f03f4b7f20e752e13eb468d9dfc4b8c2a6e555708173fec5d862575868b6a60a1a76457e471c005004aa301cebc92de1bebd2ab37d8f7cd52dfc592994acba9a31332594e261e2f04", 0x9a}, {&(0x7f0000008680)="770a6a5752f0e2b91fb68fc2dec7a63e4bd0dcafba948264fd34ca30905716a356da483c78574506c8cb93aeb03c7d1ded228705f98effe0d099bd9b225dfee2fc78e3da55c53d3a69fcf691cbe6104b7a196fe0f7c3fb8b95835fb3f4ff481ecaec9c214f85fc2cd8a0", 0x6a}, {&(0x7f00000026c0)="1e44cad6fc4992ba3d7b877e9d769bf5c879f485e80a57315180cbeeb78ceb48d00bada9222a6d139ae44160ef06d2b169d4c0db3769f8c36e9fa1446e10a9079714e3019c3a", 0x46}, {&(0x7f0000008780)="902bdb3932657e102041c94ef7299a3f501066b3d010f026bf2e28a91201", 0x1e}], 0x6, &(0x7f0000003d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r8, r4, r17, r1, r5]}}, @rights={{0x34, 0x1, 0x1, [r4, r8, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r8, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r3, r4, r10]}}, @rights={{0x24, 0x1, 0x1, [r4, r17, r2, r17, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r16}}}, @rights={{0x28, 0x1, 0x1, [r5, r8, r1, r17, r6, r18]}}], 0x158, 0x20000040}}], 0x5, 0x4001) r19 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r19, &(0x7f0000000f80)=""/4096, 0x1000) 36.764545682s ago: executing program 2 (id=172): io_setup(0x2003, &(0x7f00000002c0)=0x0) r1 = memfd_create(&(0x7f0000000080)='$(}]#\\\x00', 0x7) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0xfffd, @any, 0xd, 0x1}, 0x3) connect$bt_l2cap(r5, &(0x7f0000000040), 0xe) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)='#\\\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) prctl$PR_SET_SECUREBITS(0x1c, 0x2) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file0/file0\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000900, 0x0, &(0x7f00000000c0)) 36.685329991s ago: executing program 3 (id=174): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={r4, r5, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x18840) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsetxattr$trusted_overlay_nlink(r7, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1, 0x2}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_DMA(r6, 0xc0406429, &(0x7f0000000280)={r10, 0x3, &(0x7f0000000100)=[0x6, 0x7bfe06c, 0xb56], &(0x7f0000000140)=[0x2], 0x21, 0x2, 0xadf, &(0x7f0000000200)=[0x1, 0xffff0ac3], &(0x7f0000000240)=[0x3, 0x5]}) 35.638192006s ago: executing program 0 (id=176): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) fsopen(0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpgrp(0x0) fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2, r9}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000003040)=ANY=[@ANYBLOB="da0000000480374549cf52510c8a8db9b9bd153b05139e9916b51fffcecc523dedb9b94ddc8acc54e5b78af81da3d440ed33b13eaa9efe87944fd435e5ef200a572489daa9a92c7ab7106d3005629f133e", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf250e00000008000300", @ANYRESOCT=r4, @ANYBLOB="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"], 0xf20}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 34.604506467s ago: executing program 1 (id=177): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{}, {}, {}, {0x0, 0x8}, {0x0, 0x7}, {0xfffffffd, 0x5f, 0x1}], '\x00', 0x1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = creat(0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000800)=0x0) process_vm_writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000000900)=""/195, 0xc3}], 0x3, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/93, 0x5d}], 0x2, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000001740)=[0x0]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x89f0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg(r2, &(0x7f0000000bc0)={&(0x7f0000000240)=@tipc, 0x80, &(0x7f0000000640)=[{&(0x7f0000004200)=""/4105, 0x1009}, {0x0}, {0x0}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000100)=""/14, 0xe}, {0x0}], 0x8, &(0x7f00000006c0)=""/229, 0xe5}, 0x10000) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, 0x0) read$dsp(r7, 0x0, 0x0) 33.943349532s ago: executing program 3 (id=178): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001d4f1731503f260102030109021200011a000000090700000083008f00000000ba0f850dce323a34f1ce9b2e937695092bb34519dce0975d6e353eb31c70e26b930ae49f15f1c2229a9e71db2a8bf8a0f3abeda4a773a884a4aecd9194e3eeeecca53a3c11d1b70cd3fe9a59bc833c9e0eeb5836c16afe0b474324545280de304be11abc2151e65b2e4b18bdd12f778b02819fb3e1cbe6e7260e5c1d743724f8bc9e3dfe1a4bb8f4db117304b0e1a5ec5e084273a16365bf11dfdb7543968f51baf3c033787f18adb5cc30d5509e8217362d6e8400604f965f755012e2eff27586a40cd3100e70e186c0e35d2776bf88d7e6256ea316b4e5a15d744018c6ab108ea8cbff3b7b09119ed02df4ab8af83acd0654b4b81d89bc399d8257d82a901cea1d92fb143b03d50055c0495d21fc3f5b243d0971bf5c2c536223222659d88db205a9b0acd1def9f7de74c651553c2d0f6e708df396cd8517022be92254ba9f7f1c6245ce9a338671c64d23198236bdd76a9835ae3534e784239affd43e0d816c74428371b9f98e3a72"], 0x0) r1 = memfd_secret(0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x94c, &(0x7f0000000980)={0x0, 0xe931, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) accept4$ax25(r1, 0x0, &(0x7f0000000040), 0x80800) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup2(r7, r7) accept4$bt_l2cap(r8, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000480)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r10}}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x56, 0x0, @fd=r6, 0x3, {0x0, r1}, 0x5, 0x0, 0x1, {0x0, r10, r1}}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000400)={0x1d, r11, 0x1, {0x1, 0x1, 0x3}}, 0x18) 33.734309292s ago: executing program 0 (id=179): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b442, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r2, &(0x7f00000004c0)="e2", 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0x4122, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) 33.595190701s ago: executing program 2 (id=180): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) accept$netrom(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x1f9, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) io_setup(0x6, &(0x7f0000000240)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x2, &(0x7f0000000f40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xb93c, 0xffffffffffffffff, 0x0}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x3, 0x4, r0, 0x0, 0x0, 0x5, 0x0, 0x1}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) listen(r8, 0x0) 33.565505712s ago: executing program 1 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x60}, 0x4) read$alg(r3, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x40001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x80, 0x9, 0x0, 0x7ff, 0x6c, 0x4}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0xffffff80, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$MAP_CREATE(0x0, 0x0, 0xffffffc4) rt_sigaction(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00') 33.181166036s ago: executing program 2 (id=182): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000780)="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", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x45c, 0x7f], 0x0, 0x0, 0x2, 0x1}}, 0x40) 33.023732312s ago: executing program 2 (id=183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) keyctl$search(0xa, 0x0, &(0x7f0000000180)='.dead\x00', 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x8000, 0x0, 0xffffffffffffffc7}, 0x5}, 0x20, 0x1, 0x0) 32.911434702s ago: executing program 4 (id=184): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000780)="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", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x45c, 0x7f], 0x0, 0x0, 0x2, 0x1}}, 0x40) (fail_nth: 1) 32.583713748s ago: executing program 0 (id=185): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0xffffdd40, 0x4) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[], [], 0x2f}) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000000d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080008"], 0x44}}, 0x0) socket$inet6(0xa, 0x1, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000000)="54a26a00325bf1c76f72a647368e2f981b095ee35539c1fa486153f2840f095a3bf9d148bc95a68f34a00edaa1b3f355e552529b277553ef9c9edf6e771f7c8d9da1a5", 0x43}], 0x2, 0x0, 0x0, 0x1f000801}, 0x4008081) 32.516415249s ago: executing program 4 (id=186): r0 = socket$inet(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001900010000000000000000000218000000"], 0x30}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85ead19197f5bb494e52b92a095e84bfbf0b4dbb1d381df80a5aeb2593fc7e8c756d0a4ade7d6f0567e650b62b6d1ea2a47d603030d2dc1d8d8c5c87e9c489e09c654592c2e9fccbf0f15e46d8536c09a9f07ea1f12d3a17e1d94458bd8448011c6e13fb3c957d3b8499524f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f84e4272d2cc72d4e771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de457f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5bfc182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456cd7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f746561ed000000aaaaaaf991bb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba3160000000000000000000800000000eb560000000000892f0700636f6e6e6c6162656c000000000000000000e5ffffff00000000000020000000080000000000000000000000000000004e465154455545000000000000000000000000000000000080000000000000000800000000000000000800000000000400000000000000000000000080000000000000000000000001fcffffffffffff0000000001000000ffffffff000000000000000000000000000400000000efff000000000000000000000000000000000000000001000000feffffff010000000b00006b90088754ea234d6f6e6430000000000000000000000074489c4c2c0000000000000000000000626f6e64300000ff000000000000000076657468315f744d8abdc76964676500aaaaaaaaaabb0000000000e7feffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d3c964de64039918d16289341524b00000000208279030000000000000000000000000008040000"]}, 0x2a7) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f02142dadffffffffee0200000000000000000000070000000000", 0x21) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 32.502163162s ago: executing program 1 (id=187): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) write$cgroup_subtree(r0, 0x0, 0x4a) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x17, 0x2) read(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000017c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x240040c1}, 0x20000004) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xc0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r3, 0x10d, 0x9c, 0xfffffffffffffffe, 0x0) r4 = getpid() r5 = socket(0x22, 0x2, 0x3) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000100), 0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448d4, &(0x7f0000000480)={0x0, 0x201, "b70180"}) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) 30.240763938s ago: executing program 0 (id=188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@target={'target ', {'PCI:', '12', ':', '9', ':', '1f', '.', '9'}}, 0x15) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x40) sendfile(r0, r3, 0x0, 0x7ffff004) 29.673540777s ago: executing program 4 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8, 0x20, 0x1, 0x68, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x68, 0x0, 0x3, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xc}}}}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 29.4565289s ago: executing program 2 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, r5, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r7 = fanotify_init(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') fanotify_mark(r7, 0x12, 0x8001001, r8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f00000012c0)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="76cf2d6132f101e46fdf5f19cdb53d3c692c4912981246af5c27552dede6c8f3f609cf5d73db5096501cd07fd8b7", 0x2e}, {&(0x7f0000000140)="112f39f4a7b79fe5ae2fa7d82d962e7fd26da8ff3e84c0b9b47848cec0f005d0e9f57f3abfc20066d4416c1d20018c9be0658bdcff9e3f57d18f342a6109c77accdc84f07633abc26e2584008571aa16fb04896a7d3838e337a1dec9", 0x5c}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000001c0)="ce2a3cd75f6990988869a8a8564e92631b992552635ae445dd2ba6d286013bfe386c3201f8daaa0a266247f61919d2be33249b53f3321b06f40908abd4356c93075ecf8bde68468282b3caef6ed31f402302da1badee5611782ead3a16", 0x5d}], 0x4, 0x0, 0x0, 0x24040055}, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000040)) 29.248923s ago: executing program 4 (id=191): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{}, {}, {}, {0x0, 0x8}, {0x0, 0x7}, {0xfffffffd, 0x5f, 0x1}], '\x00', 0x1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = creat(0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000800)=0x0) process_vm_writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000000900)=""/195, 0xc3}], 0x3, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/93, 0x5d}], 0x2, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000001740)=[0x0]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x89f0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg(r2, &(0x7f0000000bc0)={&(0x7f0000000240)=@tipc, 0x80, &(0x7f0000000640)=[{&(0x7f0000004200)=""/4105, 0x1009}, {0x0}, {0x0}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000100)=""/14, 0xe}, {0x0}], 0x8, &(0x7f00000006c0)=""/229, 0xe5}, 0x10000) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, 0x0) read$dsp(r7, 0x0, 0x0) 25.10922528s ago: executing program 1 (id=192): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) accept$netrom(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x1f9, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) io_setup(0x6, &(0x7f0000000240)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x2, &(0x7f0000000f40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xb93c, 0xffffffffffffffff, 0x0}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x3, 0x4, r0, 0x0, 0x0, 0x5, 0x0, 0x1}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) listen(r8, 0x0) 25.060496856s ago: executing program 0 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000011105cfe2914da85a745f71762846fb4ee591be0004104276eef01d7d7673152364d7cd39c80a02d3c58067f0e6041686490e79de7377439fd6251c4b7fe1427b71ec19ed7a8e73f54557852bead6a6833b4a3ba5cec696d2dc488e5b7f6345f561316e1b68e", @ANYRESDEC, @ANYBLOB="08002dbd7000fbdbdf25150000003c000180380004001400010002004e20ac1414aa0000000000000000200002000a004e20000000040000000000000000000000000000000004000000"], 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(&(0x7f0000000100)='ceph\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000000d72"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) pipe(0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x705201) 23.784927418s ago: executing program 3 (id=194): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b780b0e9a42f337b10000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYRES16=r7], 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000eeff11"], 0x30}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8801, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 23.55219567s ago: executing program 4 (id=195): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00'}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe800000"], 0xfe1b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x6bf1c2d5adba8c30}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x8, 0x0, [{0xeeee8000, 0x17, &(0x7f0000000040)=""/23}, {0x0, 0x8c, &(0x7f0000000380)=""/140}, {0xeeef0000, 0x1b, &(0x7f0000000740)=""/27}, {0xeeee8000, 0xb4, &(0x7f0000006540)=""/180}, {0x5000, 0x50, &(0x7f00000064c0)=""/80}, {0x8000000, 0x6b, &(0x7f0000000500)=""/107}, {0x10000, 0x0, 0x0}, {0x0, 0x66, &(0x7f0000000580)=""/102}]}) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000006480)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x38, 0x1411, 0x2, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x10) r6 = dup(r3) r7 = fcntl$dupfd(r4, 0x406, r5) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/252, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000006380)={'nr0\x00', @multicast}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x48, r9}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000006300)={@local, 0x39, r9}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006340)={'wlan1\x00'}) r10 = syz_open_dev$mouse(&(0x7f0000000000), 0xe56, 0x4fda260e7ac6647a) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$binfmt_script(r11, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'ip6gre0\x00'}, {0x20, '\x00'}], 0xa, "f689eb3c0058483fb6e4bf9c0abed1f4516354af68a99f5008d766cc6886acaeab6dcf2264f8a4644720af3aa58c5b65e90d9a85c87d34c70507c6d4"}, 0x52) recvmmsg(r11, &(0x7f0000006100)=[{{&(0x7f0000000180)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000640)=""/68, 0x44}], 0xa}, 0x35f9}, {{&(0x7f0000000780)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/216, 0xd8}, {&(0x7f0000001940)=""/141, 0x8d}, {&(0x7f0000001a00)=""/68, 0x44}], 0x3, &(0x7f0000001ac0)=""/137, 0x89}, 0x7}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001b80)=""/85, 0x55}, {&(0x7f0000001c00)=""/213, 0xd5}, {&(0x7f0000001d00)=""/218, 0xda}], 0x3, &(0x7f0000001e40)=""/4096, 0x1000}}, {{&(0x7f0000002e40)=@nl=@unspec, 0x80, &(0x7f0000003100)=[{&(0x7f0000002ec0)=""/221, 0xdd}, {&(0x7f0000002fc0)=""/67, 0x43}, {&(0x7f0000003040)=""/145, 0x91}], 0x3}, 0x8}, {{&(0x7f0000006680)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000004440)=[{&(0x7f00000031c0)=""/143, 0x8f}, {&(0x7f0000003280)=""/152, 0x98}, {&(0x7f0000003340)=""/67, 0x43}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/123, 0x7b}], 0x5, &(0x7f00000044c0)=""/41, 0x29}, 0x3}, {{&(0x7f0000004500)=@ax25={{0x3, @rose}, [@null, @null, @bcast, @netrom, @bcast, @netrom, @remote, @null]}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000004580)=""/251, 0xfb}, {&(0x7f0000004680)=""/227, 0xe3}, {&(0x7f0000004780)=""/165, 0xa5}, {&(0x7f0000004840)=""/133, 0x85}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/124, 0x7c}, {&(0x7f0000005980)=""/251, 0xfb}, {&(0x7f0000005a80)=""/47, 0x2f}], 0x8, &(0x7f0000005b40)=""/173, 0xad}, 0xff}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000005c00)=""/182, 0xb6}, {&(0x7f0000005cc0)=""/225, 0xe1}, {&(0x7f0000005dc0)=""/104, 0x68}, {&(0x7f0000005e40)=""/10, 0xa}, {&(0x7f0000005e80)=""/234, 0xea}], 0x5, &(0x7f0000006000)=""/230, 0xe6}}], 0x7, 0x40000002, &(0x7f00000062c0)={0x77359400}) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000006600)=ANY=[@ANYBLOB="0805003228bb546553efa44215af0000000000050242b9040102072000000002069f00000000004000000600"/67], 0x38) 22.864363507s ago: executing program 1 (id=196): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x330b, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 22.592484415s ago: executing program 3 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file2\x00', &(0x7f00000005c0)='binder\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f00000006c0), 0x44090, &(0x7f0000000680)={[{@nfs_export_on}, {@verity_require}, {@workdir={'workdir', 0x3d, './bus'}}]}) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file1\x00') rmdir(&(0x7f00000001c0)='./file1\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x52) mknodat$loop(r0, &(0x7f0000000840)='./file1\x00', 0x10, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') syz_open_dev$radio(&(0x7f0000000880), 0x0, 0x2) set_mempolicy(0x6, &(0x7f0000000080)=0x89, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000800)={&(0x7f0000000480)=@nfc={0x27, 0x0}, 0xd2, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/152, 0x98}, 0x22) socket(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xdededede}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r3], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sock_ops, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r6 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x2) 21.89806147s ago: executing program 3 (id=198): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x22000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000480)=""/102384, 0x18ff0) r1 = socket(0x22, 0x2, 0x3) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000100)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x6, 0x51f140) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000200000000000000aa94fdffffff000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r3, 0x6, 0x0, @val=@tracing}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 21.810964935s ago: executing program 1 (id=199): r0 = socket$inet(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001900010000000000000000000218000000"], 0x30}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85ead19197f5bb494e52b92a095e84bfbf0b4dbb1d381df80a5aeb2593fc7e8c756d0a4ade7d6f0567e650b62b6d1ea2a47d603030d2dc1d8d8c5c87e9c489e09c654592c2e9fccbf0f15e46d8536c09a9f07ea1f12d3a17e1d94458bd8448011c6e13fb3c957d3b8499524f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a7) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f02142dadffffffffee0200000000000000000000070000000000", 0x21) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 19.056573809s ago: executing program 4 (id=200): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000f30000000000000000000000000000000000cf06c97ce9eaccda4551a45f24ae0af3c99dcd7b91260e0684f8a7306facd3f151c169b3a3b8f1f7e69e05147eebca156bb51a5c790b1acb39939100"/99], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x40007fffffff) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r6, 0x4b000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fstat(r7, &(0x7f0000000000)) 9.297670102s ago: executing program 32 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, r5, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r7 = fanotify_init(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') fanotify_mark(r7, 0x12, 0x8001001, r8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f00000012c0)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="76cf2d6132f101e46fdf5f19cdb53d3c692c4912981246af5c27552dede6c8f3f609cf5d73db5096501cd07fd8b7", 0x2e}, {&(0x7f0000000140)="112f39f4a7b79fe5ae2fa7d82d962e7fd26da8ff3e84c0b9b47848cec0f005d0e9f57f3abfc20066d4416c1d20018c9be0658bdcff9e3f57d18f342a6109c77accdc84f07633abc26e2584008571aa16fb04896a7d3838e337a1dec9", 0x5c}, {&(0x7f00000002c0)="8605c3f46dc38fd91bd9a19f2601b9d15649b128f2ba3a8ad037524db9112d3a33bb49698c6d42d6907f15d4622c01b508a7aa72fed14891caad55a8cd7be5855e6562246ca25649034edaa7b2bbe1fa5c607e27a35730f1175a46bb770228e9a471ea767358bffb97fad669f4c1ca41a7e3adfb37ca8371e30e30ee369d5e7bca3613c7fd9aa3a13184d1f2c464e014ea8c40082ceabe0fdb64268787e5040b818a470468f21ec17c980b3d5d8eed676c0473d1eb684b8bffb349f07229726f953db6168fce5729923056b73e419fb86bf625679e5088015ce5bca93d8aa47a0f396e9123f5e01e521470092556ce789be076e123d8b52bda7422edd55ea71958d59bc834669ce010c3f0e6655cd9a0d855aca21b1106ddfb8c95f822381fe89ec7a96c9d2fedafd8e458330e70102452981b018c172fbb90b98c27e6dd0e173c9cc9784ab302a5c7ef2628f4c97d350ec584a5cb77c6cb787939cfc3127ec9474ca746ec368b6dde7dd29357a5d86032c3d47cd59f2849566253fd2a2704cecdda6a216068d461e7c06cfe12cdea3b8c3cc5d8b7d2aefb9ec580a19a57d98d8ad0c7281562c08fc2d811323d6193a4d5a6f4fb073d232575e9cd7bafefa6d2276c3089f5b0ef65ca606373259b57e83fc29ee9e691b3c709f149246c7b7e09e5b508bd7ae500e428b213a99006a4ec74d696e16c748a303b239448c1d4412b8acb1a6a88da779ada091cfb1b6c8d27ebc67e9b07b9265594890cbfa75662aa89ced5e762dd116db13df8b21824c5bac90352856b3c6f44816718829417388bf02f1d0c78bfc2f12ab63d8cad58872412412633f583ebe6dc69cef02e4a47033bd2baf2695b51e1a41a1960d17de3d412f875990126c05ba531cb8ca585e00c1b7c2d61e91775b9c86b36b52a2cdd0d76784d68f3a8f99e0f3c683a7af85248a0ef61327b0e1cb14a796c335d7b5135ed08f86a804553d7ea09938834664a3816bf1c6853c739ba204b53c23c7a304db6d46767547822d374fb4f99108416221e52899c838a33e44bdbe40e884d8f689625bd35a838f4dc494e399b8f94112677bbdaffd38a3507c94661f1d7ae3bae2ffe9c05d2d466774e23fa8f248ddb2264a2dd0d695fe3b886eb404a00470ecea0af357338eadf6e526de6363dbc9ed4f43794757b4c5ac259f2713ed96390d46c661140e42deb9d664da413ea5471dffaad095b999164fca9cd50334c08ea2058e874d50370384d6d39123c98f165819bbb6412c9eed69840fd64d9fcb6a932a4377db97819d3067255921c93384319aa3ff0971cf64ec18e35655d03f72e610e25952ca941d9952b83493045db449882944fe4a00bb33255bc9cea2e0dc77cfbea3cf2077b118f1d73487dea4149fd2820f6c8cf29da0994e1f96266fac0a35fe42b416e3285d2aacb7d7e6561da1a385d4dd39768c8b7b45a8176fc2339e7cc6cb6e23cf6b0aaf097c110e07e80631a5f8892b6c23a30d8b2961f2b7b761be5038bc39e1c26ecaad00fadc57e50f483a96db05838cf07206517773ce1a913ab8b1801ea057d95e5ed3b32131a8e1b9f86d19a1b5bc8c5a78348c07f777b5da678491014c0e7f886b58cf78aafb273ef2ed0d6b314ddea8a66ec2a605eac2f85ee41d04e383358005980f8f135419962c243f6783b0afebcb0e13f741a5d565bd073e51b08dc2b2a5c2593a84bfa6934c917fe88fb227eaf44e41bad28af5791f72e500b616758642049416f0e19e2f8294b260a7c35dafb542973a9c74fbf757589e971c9c7e946fd1b735ab9436092c016a6508be3cf4b17ffdafab696c82231c7ce19eb40b2c047e3b6dd465b4fa6e9d40aaa75b1d0f6445afe8b11cb363882c6dc0ad996ae2b274ba7a4419d946e6f9f0f4dd10172c88fde97fa55e6e61941de15e94d1419565900a60c4e0721cf858aec8b1f0c47db46df12e04ec8bd193c8ca46e81d317e9a1126c4d5b9adfff8386b270f7796de4c6008d3f997d522325a108c192833058719d29e7fe32a0671a64bc1da9fa8c4a7197595b8109ad007402272463d9714b61c4cc94e6f95804642b0d767f0486f97b90729b926c5352a89f1b6ec04890b7c1817d0c13aa4b13f609f73ee2faa756c8f945f71841be1a76e2c43fde83a82f8d71bcacede1f9ff660da5dfbf8b561eab5a1f6b881b528627edc0e82a200e53954744b53f4f195c711568d9cc1e956f5c3211c3a4c35739e3dbdb86bb05ce433fc24540d40ef4572e4b9605e5e22a90258ab2a264e5fc7999b10d41d2a3ac3e450e43f8d46f1f436714767db105c973d8d0fdca4535d48d8568c7e23ccafdde9d57bf9061b2e31da1ce4366a9b1abc980c13de8c47680e28b4625cf97e4243df373c60b8f8d00fb90d5fa41919aa39570e9d90b9112dd2c801b4ec29a3ee07985a4aa74ea9ca933d20e1e83ed2880f5942143440f43a0d14d753fce5d788b3c85721a214d065b81227f52304babd3f7a4ece1dbb8422f3a54c75830713afb00d7c1ea7a39b2a4805d6c5a004adc405910cde6d609433cc9724b29adbcebb6b2443e036b65f24f1b9e2575bb0ba8cf5337b0f46c6596e1108ac221c9402582b5b89ea120dd87bc808509e658bb9500226db26c0d8f94846ae018bc60cdce2827ab98e46ce6c478bd8f40019825a2efc33d1f09fa8f9c92500b352e61bd64c510578eae432594dcbd6190123d940cc041399be2d15c98ea66e47ed91cfc58ddd31527657f8659e5ef829b93f7d109acb31b8a6d1bf275a642daa6be4856aaf1fc9616f52713b2e163b66ca66dcee21a26589884f93da7b5e5c0767d9f5604122108016e9edeef43235700e53747cb5c513c13b2b39ea02980232b41e5b37b044494cdd4e00e59a9499e11e4022afe856d97301d6c84e7b318838590bdd9bb28a11ddc61ccd06147a1f480c2a8b242e43143b6da95d7b945f8bab99436049b6091d4b4bd0716b1aad81a820004c4e77b4baffe96ba619ba132624948c4db63c48e93295e59ee8893eb7786f77ceb23edd382cb036d87384b9faa4f282cb834f5840a81d5484aa8f90366730ffa7f53d32242695153077dcebf993d16ce436250ff047edbb6e051ef19b17a83befe27e8025dc7cac96583d27ea090dd669b7d48f2c25f83428b11b80e5750246f4d1f1ec9cd93e03a5de73f66cc7e4fe237cbc0b77e1828e5ac20c457b403dd275101ce92e245e933155fd2cf6a7dd07c1b6c084fc5021e41419f9cba551e6cd3805611742d6ed865f2ec852a64ecd37f400b770a1142a407082d1b8627a1097ee659b0bdc26121711071329516344e20213d7e6aa45ed8279c323b67780de9dfe1d793047eb68f754a46ebfe9f73b2723fbfe7520d9979d06d051bff9fbd4a92a11cbdd55b7a00689d2b520636a033b368a1d6321285366960d754e9c5200a33d588872d35feee3adf2cb984c5883d4f1f02088cc1e4892edac3fd53c97f96d1634385bdb1708b6b4a65bbcf316edb518d274e949b4233b08edd4061bfa22802098b408611cb5a12df1d62c44485b2e1d4122f76577bd706cf3aa5a1f7debbe3eff80dfa5360ea857e9786a9d58d1fda7f2ed5e4ba47c5708cfb4e546afe74a186c81f24da331d11b6e8e276601467c27e7153a88b2396eb18d34f3c970b5aa2615b31d0a2953ce2afbe13dbfca4415f82f87bb8be3100ff6053948a95fc6c96eb7d8fba7d561276c8c6b25f92b9f39d5be61c27d252969dcef49089108475dd70c42c7f832a06fdb7211e9f85307b234ecabddab2bd46d0c9e5cd4786f949e6f64cd219e8ec1b0d23a5cf0fa259560ecf35195ce1f20605eb8904d306c68c01369b4db78b589febca7cf6609d1144723528d219e710ca7af4de50335529ebc6747bfbd05f9fafbbe9d97cebb1e7cfe136fe104b08e613a5bbd921c83753803135a83572dfa9cede839dfa3edf0dacfe4640f711782f17cad76db03823594c1e01673132ab84112bf35e79efe44765101fcfbae2845d75a9226ff639c68584b4e19d3a213c6c5ef3d3573a1bbae6ee926d2213afe9cb7be9027415c7ded9cb9261518b5efea764165e3222ff0865798702f4cd54bc9c9753166481087efe8d73f36d5a4a95abb8898a541ef475e404b6e8e8cf3dc228320e2bd2a845408eae627dfe877f3cd32e5641fc7ae47cd5196a2474b67778c014b7405e0d471d8c3938e6623a98127168504cd688a447b939ccc11ded5b5104280cf1e67c961de7a4e58ef2fd2d93e87867a646e586d489dd53684bad0d56950910923ec2420bbc1ba46abe2b454af621f2d1745de75075a29f343d34f65669d8a9a281f0c3be75df1042cbfea982039b622f923de1a6feaad9454ffbcd74df359f0834bf39920d4a6e9b5f55ccadde6f54c685333bbf796758c71113919c13722d2d78f931fa76cade8a7b1c6710d351f980891deb54fdb34bc1363545a5c418f011ad878dfd7c0700502219a787daad4e3bf8dae21ce5c10be44715e56d2b97d05cd990b500cf8666111ab972d3ff0ae1cc3eaea4ea82ee315bf8b745b03cd38eaad68710e0e86b05e7b42f33cd8a37dc7ef3be9f011029951e028a0deba90f3644dc609829bc96a990ee9d70855702df2e0f8502c7980af2af4bcdafead9b9424d738e6c7f1d70d39f3b6595f971a32cb5624d659b62cbebda841b0d3850fc0c7cd64764aedd77d93b82f5bf4ef654a22699e18dd503e7143814e4e5b94c7d8f407fc6930a91c51f5440205b6c249b1f788520712162ef816cabab5db3c0832a2ee84d6b8e3faa9c00fc84f23a6bf2f6ca28b7d83ea775101e828d9496289e286730c14144a01cb4b2f268e1cab7ef0b4e8b9d6bd4638d26cf0a049d04fd83d0bd3232a167a199a3a81e685152cb1f6a2897f54b9cef61f48825caa33e4fe80c56e2058c7eb6144f83e656b6ed145232c1cdd68f755a706dfab508ecd064dd4e40fffb3c9e8f831d02794d20b8a332998a62d1d57c2d727f92602c5f99b8662db2d655c69075fb87f136ca09831930fb3fc8570a419988954756b2dd560e29e38bc2aa6af2d59ab14d151c2e7ea0a048e3047b8f1ee7a938f728dd47c476034688a22fff7479e87507364278ce32b424d626069a1ce7e52d6a014e76f075342d5d3bc72c2d3c06593f98f1f554d4b3559e8bcf9ee031dfdfda35f3db5c12159577bbeb764d1eb7b7dc1c2b1098318acdbba411683fee7a6104adbfddc00056f8400ec42f791ed1288524d7b17c74524a55f16df11bcef961b4bcb00565c4f94de321c9f0c166cdec6fa48cda778f49689673cd5a8a3201d585b82cfc7b050563df485ad40c7d5ac090135c90c67eb219471be11821609a6764175fba4c4f748f731b17d1a5029384994cd2ff5ea39a336b617b3f487ea75680a97c7b4656a7dbd1c6d838f2ad9f7049768a7f678eeaa7d74962ab7b1b6ab9b4d82207d78dd7e425439da44bb4913a279499629fc65631550da4f6987f6c98c0d4e52d5287740297649286b88dba8468d09748e894a2ea90aba0638ef827e1dd5ba5294550e12f2be6f07d7b570a1a61cff442d1b1b53b2e5849c0793432f0ccc002e55c16c0cb4c82371cf9050dcea225082c015c20ce7d617fe591689f3dd430828a72009e8032a35cfc31c56af95d39afeb7157bbc4759afa08983677eb6efd39230215b8b09858b412faa6e7b3c8ee99f7b36a1153ee7cb42e3799a329cb94b1608d4a4e704b79bd48b9bb034386cc69b1866bb99c276966b4c107f71ca963ef104f46b0f01671ed", 0x1000}, {&(0x7f00000001c0)="ce2a3cd75f6990988869a8a8564e92631b992552635ae445dd2ba6d286013bfe386c3201f8daaa0a266247f61919d2be33249b53f3321b06f40908abd4356c93075ecf8bde68468282b3caef6ed31f402302da1badee5611782ead3a16", 0x5d}], 0x4, 0x0, 0x0, 0x24040055}, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000040)) 1.230099003s ago: executing program 33 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000011105cfe2914da85a745f71762846fb4ee591be0004104276eef01d7d7673152364d7cd39c80a02d3c58067f0e6041686490e79de7377439fd6251c4b7fe1427b71ec19ed7a8e73f54557852bead6a6833b4a3ba5cec696d2dc488e5b7f6345f561316e1b68e", @ANYRESDEC, @ANYBLOB="08002dbd7000fbdbdf25150000003c000180380004001400010002004e20ac1414aa0000000000000000200002000a004e20000000040000000000000000000000000000000004000000"], 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(&(0x7f0000000100)='ceph\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000000d72"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) pipe(0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x705201) 200.959273ms ago: executing program 34 (id=199): r0 = socket$inet(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001900010000000000000000000218000000"], 0x30}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85ead19197f5bb494e52b92a095e84bfbf0b4dbb1d381df80a5aeb2593fc7e8c756d0a4ade7d6f0567e650b62b6d1ea2a47d603030d2dc1d8d8c5c87e9c489e09c654592c2e9fccbf0f15e46d8536c09a9f07ea1f12d3a17e1d94458bd8448011c6e13fb3c957d3b8499524f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a7) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000001e005f02142dadffffffffee0200000000000000000000070000000000", 0x21) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 61.949048ms ago: executing program 35 (id=198): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x22000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000480)=""/102384, 0x18ff0) r1 = socket(0x22, 0x2, 0x3) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000100)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x6, 0x51f140) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000200000000000000aa94fdffffff000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r3, 0x6, 0x0, @val=@tracing}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 0s ago: executing program 36 (id=200): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000f30000000000000000000000000000000000cf06c97ce9eaccda4551a45f24ae0af3c99dcd7b91260e0684f8a7306facd3f151c169b3a3b8f1f7e69e05147eebca156bb51a5c790b1acb39939100"/99], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x40007fffffff) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r6, 0x4b000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fstat(r7, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ntext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.545342][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.552660][ T29] audit: type=1400 audit(1731849216.965:106): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="socket:[5158]" dev="sockfs" ino=5158 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.581064][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.588659][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.600425][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.622919][ T29] audit: type=1400 audit(1731849217.135:107): avc: denied { read } for pid=5823 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.681772][ T29] audit: type=1400 audit(1731849217.135:108): avc: denied { open } for pid=5823 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.706952][ T29] audit: type=1400 audit(1731849217.135:109): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.729144][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.770451][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.779712][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.801591][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.820118][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.827981][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.840666][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.841151][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.862709][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.871533][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.878990][ T29] audit: type=1400 audit(1731849217.335:110): avc: denied { module_request } for pid=5823 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 58.897195][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 58.901788][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.915797][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.922905][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.932654][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.940412][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.948028][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.948347][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.962750][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.962829][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.970467][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.984762][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.993179][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.000375][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.000559][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.098012][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.105922][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.113544][ T5823] bridge_slave_0: entered allmulticast mode [ 59.120087][ T5823] bridge_slave_0: entered promiscuous mode [ 59.140775][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.147872][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.155365][ T5823] bridge_slave_1: entered allmulticast mode [ 59.161918][ T5823] bridge_slave_1: entered promiscuous mode [ 59.209237][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.222602][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.273975][ T5823] team0: Port device team_slave_0 added [ 59.296993][ T5823] team0: Port device team_slave_1 added [ 59.340595][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.347569][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.373549][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.388487][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.395514][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.421450][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.482147][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 59.557903][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 59.609149][ T5823] hsr_slave_0: entered promiscuous mode [ 59.616939][ T5823] hsr_slave_1: entered promiscuous mode [ 59.647167][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 59.684049][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.691753][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.698886][ T5827] bridge_slave_0: entered allmulticast mode [ 59.708263][ T5827] bridge_slave_0: entered promiscuous mode [ 59.715701][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.722910][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.730056][ T5827] bridge_slave_1: entered allmulticast mode [ 59.736991][ T5827] bridge_slave_1: entered promiscuous mode [ 59.763887][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 59.821370][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.849138][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.860187][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.867752][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.875383][ T5830] bridge_slave_0: entered allmulticast mode [ 59.882779][ T5830] bridge_slave_0: entered promiscuous mode [ 59.922302][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.929434][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.939206][ T5830] bridge_slave_1: entered allmulticast mode [ 59.946171][ T5830] bridge_slave_1: entered promiscuous mode [ 59.972075][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.979158][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.986497][ T5831] bridge_slave_0: entered allmulticast mode [ 59.993078][ T5831] bridge_slave_0: entered promiscuous mode [ 60.029438][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.036725][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.044608][ T5831] bridge_slave_1: entered allmulticast mode [ 60.051084][ T5831] bridge_slave_1: entered promiscuous mode [ 60.059495][ T5827] team0: Port device team_slave_0 added [ 60.070049][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.080122][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.087699][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.095410][ T5834] bridge_slave_0: entered allmulticast mode [ 60.102536][ T5834] bridge_slave_0: entered promiscuous mode [ 60.117305][ T5827] team0: Port device team_slave_1 added [ 60.124460][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.142140][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.149240][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.156786][ T5834] bridge_slave_1: entered allmulticast mode [ 60.163438][ T5834] bridge_slave_1: entered promiscuous mode [ 60.187175][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.226362][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.237137][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.253253][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.261980][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.288273][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.300899][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.307853][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.334251][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.353412][ T5830] team0: Port device team_slave_0 added [ 60.360773][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.391918][ T5830] team0: Port device team_slave_1 added [ 60.411820][ T5831] team0: Port device team_slave_0 added [ 60.433784][ T5834] team0: Port device team_slave_0 added [ 60.443136][ T5831] team0: Port device team_slave_1 added [ 60.466975][ T5827] hsr_slave_0: entered promiscuous mode [ 60.475636][ T5827] hsr_slave_1: entered promiscuous mode [ 60.481813][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.489582][ T5827] Cannot create hsr debugfs directory [ 60.503839][ T5834] team0: Port device team_slave_1 added [ 60.523228][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.530185][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.557585][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.569451][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.577004][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.602944][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.637629][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.644788][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.671180][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.682670][ T5838] Bluetooth: hci0: command tx timeout [ 60.696327][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.703380][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.729711][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.755053][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.762099][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.788035][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.825003][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.834442][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.860972][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.873962][ T5831] hsr_slave_0: entered promiscuous mode [ 60.879983][ T5831] hsr_slave_1: entered promiscuous mode [ 60.888754][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.896532][ T5831] Cannot create hsr debugfs directory [ 60.901252][ T5838] Bluetooth: hci1: command tx timeout [ 60.941366][ T5830] hsr_slave_0: entered promiscuous mode [ 60.947505][ T5830] hsr_slave_1: entered promiscuous mode [ 60.953990][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.961722][ T5830] Cannot create hsr debugfs directory [ 61.002743][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.035798][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.050352][ T5838] Bluetooth: hci3: command tx timeout [ 61.050503][ T5826] Bluetooth: hci4: command tx timeout [ 61.060306][ T5838] Bluetooth: hci2: command tx timeout [ 61.090845][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.131384][ T5834] hsr_slave_0: entered promiscuous mode [ 61.137442][ T5834] hsr_slave_1: entered promiscuous mode [ 61.148480][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.156294][ T5834] Cannot create hsr debugfs directory [ 61.168647][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.290965][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.299593][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.320876][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.334671][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.390761][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.411512][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.439180][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.449775][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.488037][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.504012][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.515449][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.536831][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.569326][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.625382][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.647072][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.656556][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.668846][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.691112][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.706407][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.713612][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.739187][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.746326][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.799199][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.829704][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.839611][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.887471][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.902656][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.924739][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.931879][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.946079][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.953213][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.966545][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.974311][ T29] audit: type=1400 audit(1731849220.495:111): avc: denied { sys_module } for pid=5823 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.016336][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.023444][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.036056][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.043166][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.073995][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.084986][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.092136][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.117732][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.124879][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.148971][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.163206][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.202213][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.209803][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.225049][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.232189][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.303238][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.335763][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.485457][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.528993][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.677004][ T5827] veth0_vlan: entered promiscuous mode [ 62.700173][ T5831] veth0_vlan: entered promiscuous mode [ 62.730791][ T5838] Bluetooth: hci0: command tx timeout [ 62.743939][ T5827] veth1_vlan: entered promiscuous mode [ 62.756911][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.770143][ T5831] veth1_vlan: entered promiscuous mode [ 62.808957][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.821011][ T5823] veth0_vlan: entered promiscuous mode [ 62.857222][ T5827] veth0_macvtap: entered promiscuous mode [ 62.881728][ T5827] veth1_macvtap: entered promiscuous mode [ 62.891217][ T5823] veth1_vlan: entered promiscuous mode [ 62.903498][ T5830] veth0_vlan: entered promiscuous mode [ 62.925287][ T5831] veth0_macvtap: entered promiscuous mode [ 62.938926][ T5834] veth0_vlan: entered promiscuous mode [ 62.948109][ T5831] veth1_macvtap: entered promiscuous mode [ 62.959298][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.971305][ T5838] Bluetooth: hci1: command tx timeout [ 62.980999][ T5830] veth1_vlan: entered promiscuous mode [ 62.994817][ T5834] veth1_vlan: entered promiscuous mode [ 63.023506][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.045768][ T5823] veth0_macvtap: entered promiscuous mode [ 63.058173][ T5834] veth0_macvtap: entered promiscuous mode [ 63.067877][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.080004][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.089315][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.098398][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.113804][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.124586][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.131181][ T5838] Bluetooth: hci4: command tx timeout [ 63.137592][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.140085][ T5838] Bluetooth: hci3: command tx timeout [ 63.147222][ T5826] Bluetooth: hci2: command tx timeout [ 63.165625][ T5834] veth1_macvtap: entered promiscuous mode [ 63.177102][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.187728][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.198776][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.208413][ T5823] veth1_macvtap: entered promiscuous mode [ 63.235423][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.246252][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.256259][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.266748][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.277616][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.289801][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.301233][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.311190][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.322091][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.333169][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.341760][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.351139][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.359834][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.368779][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.397692][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.406879][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.416067][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.424980][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.438623][ T5830] veth0_macvtap: entered promiscuous mode [ 63.465620][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.476506][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.488475][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.500052][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.510178][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.524464][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.541518][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.550043][ T5830] veth1_macvtap: entered promiscuous mode [ 63.566356][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.578032][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.587963][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.598674][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.608572][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.619637][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.632199][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.642685][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.654687][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.667508][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.681082][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.692646][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.703171][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.713051][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.723633][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.734728][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.772196][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.785073][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.794193][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.802939][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.814771][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.825565][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.835558][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.846270][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.857020][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.867546][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.877477][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.887924][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.898605][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.924092][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.933568][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.944415][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.953213][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.995813][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.012808][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.068571][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.077029][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.088575][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.111291][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.119790][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.130410][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.153032][ T29] audit: type=1400 audit(1731849222.665:112): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.tbr5W5/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.197863][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.221346][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.241404][ T29] audit: type=1400 audit(1731849222.685:113): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.266073][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.290600][ T29] audit: type=1400 audit(1731849222.685:114): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.tbr5W5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.315637][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.334954][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.335732][ T29] audit: type=1400 audit(1731849222.685:115): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.362407][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.379942][ T29] audit: type=1400 audit(1731849222.685:116): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.tbr5W5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.387944][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.415801][ T29] audit: type=1400 audit(1731849222.685:117): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.tbr5W5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.422630][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.455603][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.466397][ T29] audit: type=1400 audit(1731849222.695:118): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.487068][ T29] audit: type=1400 audit(1731849222.695:119): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.526859][ T29] audit: type=1400 audit(1731849222.705:120): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.558891][ T29] audit: type=1400 audit(1731849222.705:121): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 64.593820][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.602814][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.751641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 64.820676][ T5826] Bluetooth: hci0: command tx timeout [ 64.977833][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.056295][ T5826] Bluetooth: hci1: command tx timeout [ 65.067922][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.211080][ T5826] Bluetooth: hci3: command tx timeout [ 65.216993][ T5826] Bluetooth: hci2: command tx timeout [ 65.222935][ T5838] Bluetooth: hci4: command tx timeout [ 65.436070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.450388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.460991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 65.472274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.481345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.489510][ T5916] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.764315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 65.791400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.165143][ T5916] 9pnet_fd: Insufficient options for proto=fd [ 66.293217][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.304428][ T5915] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 66.390722][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.761500][ T5930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6'. [ 66.780543][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 66.797357][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 66.827899][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 66.896665][ T5840] Bluetooth: hci0: command tx timeout [ 67.131096][ T5840] Bluetooth: hci1: command tx timeout [ 67.241477][ T967] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.313189][ T5840] Bluetooth: hci4: command tx timeout [ 67.318704][ T5840] Bluetooth: hci2: command tx timeout [ 67.324397][ T5838] Bluetooth: hci3: command tx timeout [ 67.423675][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.435202][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.452434][ T967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.468859][ T967] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.478058][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.923372][ T967] usb 1-1: config 0 descriptor?? [ 68.150252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 68.171804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 69.874968][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 69.875009][ T29] audit: type=1400 audit(1731849227.895:175): avc: denied { block_suspend } for pid=5950 comm="syz.1.11" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.041921][ T967] usbhid 1-1:0.0: can't add hid device: -71 [ 70.048573][ T967] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 70.126655][ T967] usb 1-1: USB disconnect, device number 2 [ 70.333131][ T29] audit: type=1400 audit(1731849228.855:176): avc: denied { ioctl } for pid=5965 comm="syz.4.15" path="socket:[8597]" dev="sockfs" ino=8597 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.431004][ T29] audit: type=1400 audit(1731849229.605:177): avc: denied { create } for pid=5967 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.462070][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.463858][ T29] audit: type=1400 audit(1731849229.625:178): avc: denied { create } for pid=5967 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.495123][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.689660][ T967] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.019891][ T29] audit: type=1400 audit(1731849229.625:179): avc: denied { getopt } for pid=5967 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.160378][ T29] audit: type=1400 audit(1731849230.675:180): avc: denied { create } for pid=5982 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.188091][ T967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.199284][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 72.271123][ T967] usb 1-1: config 0 has no interfaces? [ 72.577310][ T967] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 72.586529][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.594602][ T967] usb 1-1: Product: syz [ 72.598784][ T967] usb 1-1: Manufacturer: syz [ 72.712342][ T967] usb 1-1: SerialNumber: syz [ 72.764553][ T967] usb 1-1: config 0 descriptor?? [ 72.813728][ T29] audit: type=1400 audit(1731849230.795:181): avc: denied { listen } for pid=5982 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.835606][ T29] audit: type=1400 audit(1731849231.095:182): avc: denied { create } for pid=5984 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.857072][ T29] audit: type=1400 audit(1731849231.095:183): avc: denied { getopt } for pid=5984 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.877177][ T29] audit: type=1400 audit(1731849231.095:184): avc: denied { read } for pid=5984 comm="syz.1.19" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.340328][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.490627][ T967] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.631588][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 73.631920][ T44] usb 1-1: USB disconnect, device number 3 [ 73.832579][ T5879] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 73.845593][ T5879] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 73.907791][ T5879] usb 2-1: config 1 has no interface number 1 [ 73.914606][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 73.924888][ T5879] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 73.930927][ T967] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 73.967030][ T967] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 73.976410][ T967] usb 3-1: config 1 has no interface number 1 [ 73.982936][ T5879] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.994038][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23'. [ 74.008511][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.020104][ T967] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 74.027314][ T5879] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.042084][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.042894][ T967] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.050587][ T5879] usb 2-1: Product: syz [ 74.086974][ T5879] usb 2-1: Manufacturer: syz [ 74.089291][ T967] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.098151][ T5879] usb 2-1: SerialNumber: syz [ 74.109118][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.116965][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'. [ 74.135851][ T967] usb 3-1: Product: syz [ 74.144554][ T967] usb 3-1: Manufacturer: syz [ 74.159531][ T967] usb 3-1: SerialNumber: syz [ 74.160442][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 74.235606][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 74.245303][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 74.705854][ T5879] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 74.739682][ T5879] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 74.794264][ T5879] usb 2-1: USB disconnect, device number 2 [ 74.801960][ T967] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 74.828563][ T967] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 74.929748][ T967] usb 3-1: USB disconnect, device number 2 [ 75.748857][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 75.788586][ T6038] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.201500][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.501211][ T8] cfg80211: failed to load regulatory.db [ 77.413330][ T6055] netlink: 'syz.1.31': attribute type 8 has an invalid length. [ 77.420961][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 77.691347][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 77.691366][ T29] audit: type=1400 audit(1731849235.265:206): avc: denied { bind } for pid=6051 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.717084][ T29] audit: type=1400 audit(1731849235.265:207): avc: denied { setopt } for pid=6051 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.736804][ T29] audit: type=1400 audit(1731849235.265:208): avc: denied { read } for pid=6051 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.640986][ T29] audit: type=1400 audit(1731849237.105:209): avc: denied { read write } for pid=6062 comm="syz.0.35" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.699571][ T29] audit: type=1400 audit(1731849237.105:210): avc: denied { open } for pid=6062 comm="syz.0.35" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.752148][ T29] audit: type=1400 audit(1731849237.105:211): avc: denied { ioctl } for pid=6062 comm="syz.0.35" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.779722][ T29] audit: type=1400 audit(1731849237.105:212): avc: denied { setattr } for pid=6062 comm="syz.0.35" path="pipe:[8811]" dev="pipefs" ino=8811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 78.834117][ T29] audit: type=1400 audit(1731849237.115:213): avc: denied { setopt } for pid=6058 comm="syz.4.34" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.874560][ T29] audit: type=1400 audit(1731849237.375:214): avc: denied { write } for pid=6074 comm="syz.1.36" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.930859][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.105433][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.120619][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 79.138761][ T8] usb 1-1: config 1 has an invalid interface number: 136 but max is 2 [ 79.270386][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 79.674617][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 79.697351][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 79.698665][ T29] audit: type=1400 audit(1731849237.755:215): avc: denied { setopt } for pid=6083 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.707008][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 79.707032][ T8] usb 1-1: config 1 has an invalid interface number: 5 but max is 2 [ 79.707054][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 79.707073][ T8] usb 1-1: config 1 has an invalid interface number: 7 but max is 2 [ 79.830285][ T8] usb 1-1: config 1 has no interface number 0 [ 79.836462][ T8] usb 1-1: config 1 has no interface number 1 [ 79.842664][ T8] usb 1-1: config 1 has no interface number 2 [ 79.848778][ T8] usb 1-1: config 1 interface 136 altsetting 8 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 79.860586][ T8] usb 1-1: config 1 interface 136 altsetting 8 endpoint 0x8E has invalid maxpacket 1552, setting to 64 [ 79.871779][ T8] usb 1-1: config 1 interface 136 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 79.882810][ T8] usb 1-1: config 1 interface 136 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 79.893734][ T8] usb 1-1: config 1 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 79.905129][ T8] usb 1-1: config 1 interface 5 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 79.907919][ T5875] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 79.917246][ T8] usb 1-1: config 1 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 79.923399][ T5875] usb 3-1: can't read configurations, error -71 [ 79.934189][ T8] usb 1-1: config 1 interface 7 altsetting 9 bulk endpoint 0xD has invalid maxpacket 64 [ 79.950239][ T8] usb 1-1: config 1 interface 7 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 79.960842][ T8] usb 1-1: config 1 interface 7 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 79.971430][ T8] usb 1-1: config 1 interface 7 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 79.982269][ T8] usb 1-1: config 1 interface 136 has no altsetting 0 [ 79.989055][ T8] usb 1-1: config 1 interface 5 has no altsetting 0 [ 79.995755][ T8] usb 1-1: config 1 interface 7 has no altsetting 0 [ 80.022027][ T8] usb 1-1: New USB device found, idVendor=20d6, idProduct=7b9a, bcdDevice=58.3c [ 80.031695][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.039703][ T8] usb 1-1: Product: syz [ 80.079103][ T6096] syz.1.39: attempt to access beyond end of device [ 80.079103][ T6096] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 80.108308][ T8] usb 1-1: Manufacturer: ш [ 80.125931][ T8] usb 1-1: SerialNumber: syz [ 80.130405][ T6096] FAT-fs (loop3): unable to read boot sector [ 80.270377][ T5828] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.381257][ T967] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.401152][ T5828] usb 5-1: device descriptor read/64, error -71 [ 80.835544][ T5828] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.849788][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.963034][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.081084][ T5828] usb 5-1: device descriptor read/64, error -71 [ 81.124148][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.220360][ T5828] usb usb5-port1: attempt power cycle [ 81.231548][ T8] usb 1-1: USB disconnect, device number 4 [ 81.252547][ T967] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.263001][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.282074][ T967] usb 4-1: config 0 descriptor?? [ 82.484852][ T5828] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.549070][ T967] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 84.560309][ T967] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 85.557428][ T5828] usb 5-1: device descriptor read/8, error -71 [ 85.786080][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 85.786095][ T29] audit: type=1400 audit(1731849244.305:232): avc: denied { create } for pid=6146 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.812080][ T29] audit: type=1400 audit(1731849244.335:233): avc: denied { setopt } for pid=6146 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.831886][ T29] audit: type=1400 audit(1731849244.355:234): avc: denied { write } for pid=6146 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.853274][ T29] audit: type=1400 audit(1731849244.375:235): avc: denied { write } for pid=6146 comm="syz.0.49" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.882424][ T967] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 85.930451][ T967] usb 4-1: USB disconnect, device number 2 [ 86.827226][ T6148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.106414][ T29] audit: type=1400 audit(1731849245.595:236): avc: denied { read } for pid=6161 comm="syz.3.53" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.528811][ T29] audit: type=1400 audit(1731849245.595:237): avc: denied { open } for pid=6161 comm="syz.3.53" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.554459][ T29] audit: type=1400 audit(1731849245.615:238): avc: denied { map } for pid=6161 comm="syz.3.53" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.580305][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.590897][ T6168] overlayfs: failed to resolve './file0': -2 [ 87.632945][ T29] audit: type=1400 audit(1731849246.065:239): avc: denied { create } for pid=6164 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.665957][ T29] audit: type=1400 audit(1731849246.185:240): avc: denied { bind } for pid=6164 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.781518][ T6148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.860449][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 87.895197][ T5878] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 87.906035][ T5878] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 87.915083][ T5878] usb 3-1: config 1 has no interface number 1 [ 87.921247][ T5878] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 87.930362][ T5878] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.955178][ T5878] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.964970][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.973074][ T5878] usb 3-1: Product: syz [ 87.988489][ T5878] usb 3-1: Manufacturer: syz [ 87.996408][ T6148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.000523][ T5878] usb 3-1: SerialNumber: syz [ 88.033086][ T6180] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 88.041452][ T6180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.049102][ T6180] IPv6: NLM_F_CREATE should be set when creating new route [ 88.110372][ T6128] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.139364][ T6148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.166164][ T6186] FAULT_INJECTION: forcing a failure. [ 88.166164][ T6186] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.179653][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.4.59 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 88.190192][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 88.200253][ T6186] Call Trace: [ 88.203530][ T6186] [ 88.206451][ T6186] dump_stack_lvl+0x16c/0x1f0 [ 88.211133][ T6186] should_fail_ex+0x497/0x5b0 [ 88.215805][ T6186] _copy_from_user+0x2e/0xd0 [ 88.220392][ T6186] copy_msghdr_from_user+0x99/0x160 [ 88.225590][ T6186] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 88.231393][ T6186] ? __pfx___lock_acquire+0x10/0x10 [ 88.236583][ T6186] ___sys_sendmsg+0xff/0x1e0 [ 88.241166][ T6186] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.246371][ T6186] ? lock_acquire+0x2f/0xb0 [ 88.250864][ T6186] ? __fget_files+0x40/0x3f0 [ 88.255457][ T6186] ? fdget+0x176/0x210 [ 88.259526][ T6186] __sys_sendmsg+0x117/0x1f0 [ 88.264110][ T6186] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.269210][ T6186] ? __fget_files+0x244/0x3f0 [ 88.273899][ T6186] do_syscall_64+0xcd/0x250 [ 88.278396][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.284287][ T6186] RIP: 0033:0x7f95acb7e719 [ 88.288689][ T6186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.308292][ T6186] RSP: 002b:00007f95ad94b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.316718][ T6186] RAX: ffffffffffffffda RBX: 00007f95acd35f80 RCX: 00007f95acb7e719 [ 88.324679][ T6186] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 88.332650][ T6186] RBP: 00007f95ad94b090 R08: 0000000000000000 R09: 0000000000000000 [ 88.340611][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.348578][ T6186] R13: 0000000000000000 R14: 00007f95acd35f80 R15: 00007ffeeec7fd98 [ 88.356553][ T6186] [ 88.380151][ T29] audit: type=1400 audit(1731849246.895:241): avc: denied { bind } for pid=6183 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.400678][ T5878] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 88.408101][ T5878] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 88.465609][ T5878] usb 3-1: USB disconnect, device number 5 [ 88.470655][ T6128] usb 4-1: Using ep0 maxpacket: 8 [ 88.508731][ T6128] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 88.519258][ T6128] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.632396][ T6128] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.886436][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.940337][ T6128] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.962710][ T6148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.971767][ T6128] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.004743][ T6148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.017237][ T6128] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.030947][ T6128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.043367][ T6148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.063915][ T6148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.238518][ T6200] Bluetooth: MGMT ver 1.23 [ 89.258625][ T6128] usb 4-1: usb_control_msg returned -32 [ 89.270030][ T6128] usbtmc 4-1:16.0: can't read capabilities [ 89.350905][ T6203] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 89.440317][ T967] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.570701][ T967] usb 3-1: device descriptor read/64, error -71 [ 89.610622][ T5878] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.621993][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.631529][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.760287][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 89.768876][ T5878] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 89.782663][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.798565][ T6128] kernel write not supported for file /uhid (pid: 6128 comm: kworker/1:6) [ 89.800260][ T5878] usb 2-1: config 0 has no interface number 0 [ 89.810479][ T967] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 89.823674][ T5878] usb 2-1: New USB device found, idVendor=1199, idProduct=c081, bcdDevice=d4.87 [ 89.837970][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.846207][ T5878] usb 2-1: Product: syz [ 89.860318][ T5878] usb 2-1: Manufacturer: syz [ 89.864975][ T5878] usb 2-1: SerialNumber: syz [ 89.876177][ T5878] usb 2-1: config 0 descriptor?? [ 89.950447][ T967] usb 3-1: device descriptor read/64, error -71 [ 90.070654][ T967] usb usb3-port1: attempt power cycle [ 90.095943][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 90.207131][ T5878] qmi_wwan 2-1:0.8: bogus CDC Union: master=0, slave=0 [ 90.217590][ T5878] qmi_wwan 2-1:0.8: probe with driver qmi_wwan failed with error -22 [ 90.245832][ T5878] usb 2-1: USB disconnect, device number 3 [ 90.411447][ T967] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.464889][ T967] usb 3-1: device descriptor read/8, error -71 [ 90.472574][ T6214] bridge_slave_1: left allmulticast mode [ 90.482660][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.710489][ T967] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 90.744654][ T967] usb 3-1: device descriptor read/8, error -71 [ 90.825056][ T5876] usb 4-1: USB disconnect, device number 3 [ 90.860498][ T967] usb usb3-port1: unable to enumerate USB device [ 91.040121][ T6217] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 91.047808][ T6217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.055045][ T6217] IPv6: NLM_F_CREATE should be set when creating new route [ 91.695020][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72'. [ 92.664990][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 92.665007][ T29] audit: type=1400 audit(1731849251.175:266): avc: denied { create } for pid=6241 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.701643][ T29] audit: type=1400 audit(1731849251.225:267): avc: denied { create } for pid=6240 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.701876][ T6246] netlink: 248 bytes leftover after parsing attributes in process `syz.0.76'. [ 92.721794][ T29] audit: type=1400 audit(1731849251.225:268): avc: denied { write } for pid=6240 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.721827][ T29] audit: type=1400 audit(1731849251.225:269): avc: denied { nlmsg_write } for pid=6240 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.761433][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 92.788733][ T6255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.77'. [ 92.797958][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 92.809361][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 92.819077][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 92.822848][ T29] audit: type=1400 audit(1731849251.345:270): avc: denied { read write } for pid=6241 comm="syz.1.75" dev="sockfs" ino=9611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.849550][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.858135][ T29] audit: type=1400 audit(1731849251.375:271): avc: denied { read } for pid=6241 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.894550][ T6251] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.908592][ T29] audit: type=1400 audit(1731849251.435:272): avc: denied { getopt } for pid=6250 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.030490][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 93.054311][ T5906] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 93.066569][ T5906] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.089349][ T5906] usb 5-1: config 1 has no interface number 1 [ 93.139200][ T5906] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 93.268315][ T6266] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 93.276567][ T6266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.283989][ T6266] IPv6: NLM_F_CREATE should be set when creating new route [ 93.485540][ T5906] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.858712][ T5906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.868046][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.883252][ T5906] usb 5-1: Product: syz [ 93.887541][ T5906] usb 5-1: Manufacturer: syz [ 93.939983][ T5906] usb 5-1: SerialNumber: syz [ 94.020452][ T967] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 94.048165][ T6274] qrtr: Invalid version 128 [ 94.145261][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 94.165411][ T5906] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 94.198812][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.220625][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.434239][ T5906] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 94.437165][ T967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.460306][ T967] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.460770][ T29] audit: type=1400 audit(1731849252.985:273): avc: denied { create } for pid=6271 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.498728][ T29] audit: type=1400 audit(1731849253.015:274): avc: denied { write } for pid=6271 comm="syz.3.83" path="socket:[10513]" dev="sockfs" ino=10513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.532648][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.682194][ T5906] usb 5-1: USB disconnect, device number 6 [ 94.700044][ T967] usb 3-1: config 0 descriptor?? [ 94.723579][ T29] audit: type=1400 audit(1731849253.245:275): avc: denied { ioctl } for pid=6264 comm="syz.2.82" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.992867][ T5878] IPVS: starting estimator thread 0... [ 95.090506][ T6294] IPVS: using max 25 ests per chain, 60000 per kthread [ 95.264742][ T6299] blktrace: Concurrent blktraces are not allowed on sg0 [ 95.500283][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 95.526641][ T967] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 95.688234][ T5906] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.722671][ T967] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 95.779307][ T5878] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.143715][ T5906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 96.267159][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.277622][ T5906] usb 5-1: Product: syz [ 96.283822][ T5878] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 96.293354][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.301762][ T5906] usb 5-1: Manufacturer: syz [ 96.306790][ T5878] usb 2-1: Product: syz [ 96.314294][ T5878] usb 2-1: Manufacturer: syz [ 96.318997][ T5906] usb 5-1: SerialNumber: syz [ 96.324072][ T5878] usb 2-1: SerialNumber: syz [ 96.337171][ T5906] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 96.359726][ T8] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.373796][ T5878] usb 2-1: config 0 descriptor?? [ 96.401510][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.999679][ T5906] usb 3-1: USB disconnect, device number 10 [ 97.051709][ T5876] usb 5-1: USB disconnect, device number 7 [ 97.087419][ T5878] usb 2-1: Firmware version (0.0) predates our first public release. [ 97.095797][ T5878] usb 2-1: Please update to version 0.2 or newer [ 97.113744][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 97.223955][ T5878] usb 2-1: USB disconnect, device number 4 [ 97.560854][ T8] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 97.595046][ T8] ath9k_htc: Failed to initialize the device [ 97.663895][ T5876] usb 5-1: ath9k_htc: USB layer deinitialized [ 97.789115][ T6312] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 97.797411][ T6312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.030001][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 98.030015][ T29] audit: type=1400 audit(1731849256.545:283): avc: denied { name_bind } for pid=6323 comm="syz.2.96" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.270848][ T29] audit: type=1400 audit(1731849256.765:284): avc: denied { create } for pid=6323 comm="syz.2.96" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 98.312978][ T29] audit: type=1400 audit(1731849256.765:285): avc: denied { connect } for pid=6323 comm="syz.2.96" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.340815][ T29] audit: type=1400 audit(1731849256.765:286): avc: denied { setopt } for pid=6323 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.370738][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.517728][ T29] audit: type=1400 audit(1731849257.025:287): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 98.536008][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 98.609917][ T6332] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.97'. [ 98.629048][ T29] audit: type=1400 audit(1731849257.145:288): avc: denied { sqpoll } for pid=6338 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.654058][ T6339] netlink: 112 bytes leftover after parsing attributes in process `syz.1.101'. [ 98.664668][ T6339] netlink: 112 bytes leftover after parsing attributes in process `syz.1.101'. [ 98.727607][ T6343] xt_connbytes: Forcing CT accounting to be enabled [ 98.727825][ T6343] Cannot find set identified by id 0 to match [ 98.739536][ T6332] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 98.741359][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.0.97 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 98.741389][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.741402][ T6332] Call Trace: [ 98.741411][ T6332] [ 98.741420][ T6332] dump_stack_lvl+0x16c/0x1f0 [ 98.741450][ T6332] sysfs_warn_dup+0x7f/0xa0 [ 98.741479][ T6332] sysfs_do_create_link_sd+0x124/0x140 [ 98.741505][ T6332] sysfs_create_link+0x61/0xc0 [ 98.741530][ T6332] device_add+0x62e/0x1a70 [ 98.741558][ T6332] ? __pfx_device_add+0x10/0x10 [ 98.741580][ T6332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.741615][ T6332] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 98.741654][ T6332] wiphy_register+0x2101/0x2d00 [ 98.741688][ T6332] ? __pfx_wiphy_register+0x10/0x10 [ 98.741722][ T6332] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 98.741765][ T6332] ieee80211_register_hw+0x2aaa/0x41b0 [ 98.741813][ T6332] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 98.741844][ T6332] ? net_generic+0xea/0x2a0 [ 98.741873][ T6332] ? __asan_memset+0x23/0x50 [ 98.741895][ T6332] ? __hrtimer_init+0x106/0x2c0 [ 98.741920][ T6332] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 98.741961][ T6332] ? trace_kmalloc+0x2d/0xe0 [ 98.741989][ T6332] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 98.742014][ T6332] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 98.742039][ T6332] ? __asan_memcpy+0x3c/0x60 [ 98.742065][ T6332] hwsim_new_radio_nl+0xb42/0x12b0 [ 98.742093][ T6332] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 98.742127][ T6332] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 98.742155][ T6332] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 98.742188][ T6332] genl_family_rcv_msg_doit+0x202/0x2f0 [ 98.742215][ T6332] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 98.742248][ T6332] ? bpf_lsm_capable+0x9/0x10 [ 98.742272][ T6332] ? security_capable+0x7e/0x260 [ 98.742305][ T6332] ? ns_capable+0xd7/0x110 [ 98.742331][ T6332] genl_rcv_msg+0x565/0x800 [ 98.742360][ T6332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.742386][ T6332] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 98.742422][ T6332] netlink_rcv_skb+0x16b/0x440 [ 98.742444][ T6332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.742471][ T6332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.742508][ T6332] ? down_read+0xc9/0x330 [ 98.742524][ T5876] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 98.742534][ T6332] ? __pfx_down_read+0x10/0x10 [ 98.742551][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.742559][ T6332] ? netlink_deliver_tap+0x1ae/0xd90 [ 98.742573][ T5876] usb 5-1: Product: syz [ 98.742589][ T5876] usb 5-1: Manufacturer: syz [ 98.742598][ T6332] genl_rcv+0x28/0x40 [ 98.742607][ T5876] usb 5-1: SerialNumber: syz [ 98.742622][ T6332] netlink_unicast+0x53c/0x7f0 [ 98.742646][ T6332] ? __pfx_netlink_unicast+0x10/0x10 [ 98.742673][ T6332] netlink_sendmsg+0x8b8/0xd70 [ 98.742700][ T6332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.742740][ T6332] ____sys_sendmsg+0xaaf/0xc90 [ 98.742775][ T6332] ? copy_msghdr_from_user+0x10b/0x160 [ 98.742803][ T6332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.742842][ T6332] ? __pfx___lock_acquire+0x10/0x10 [ 98.742867][ T6332] ___sys_sendmsg+0x135/0x1e0 [ 98.742896][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.742937][ T6332] ? lock_acquire+0x2f/0xb0 [ 98.742956][ T6332] ? __fget_files+0x40/0x3f0 [ 98.743000][ T6332] ? fdget+0x176/0x210 [ 98.743034][ T6332] __sys_sendmsg+0x117/0x1f0 [ 98.743060][ T6332] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.743089][ T6332] ? __x64_sys_futex+0x1e1/0x4c0 [ 98.743135][ T6332] do_syscall_64+0xcd/0x250 [ 98.743158][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.743189][ T6332] RIP: 0033:0x7fc8bc97e719 [ 98.743207][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.743227][ T6332] RSP: 002b:00007fc8bd693038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.743251][ T6332] RAX: ffffffffffffffda RBX: 00007fc8bcb36058 RCX: 00007fc8bc97e719 [ 98.743267][ T6332] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 98.743281][ T6332] RBP: 00007fc8bc9f175e R08: 0000000000000000 R09: 0000000000000000 [ 98.743296][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.743309][ T6332] R13: 0000000000000000 R14: 00007fc8bcb36058 R15: 00007fff22415e98 [ 98.743338][ T6332] [ 98.753618][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.765239][ T29] audit: type=1400 audit(1731849257.285:289): avc: denied { rename } for pid=5183 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.765277][ T29] audit: type=1400 audit(1731849257.285:290): avc: denied { unlink } for pid=5183 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.765305][ T29] audit: type=1400 audit(1731849257.285:291): avc: denied { create } for pid=5183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.778076][ T6336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.97'. [ 98.778159][ T5876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 98.778195][ T5876] r8152-cfgselector 5-1: config 0 descriptor?? [ 98.791954][ T6343] loop9: detected capacity change from 0 to 6 [ 98.795228][ T6343] Dev loop9: unable to read RDB block 6 [ 98.795294][ T6343] loop9: unable to read partition table [ 98.795407][ T6343] loop9: partition table beyond EOD, truncated [ 98.795424][ T6343] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 98.795424][ T6343] ) failed (rc=-5) [ 98.813531][ T29] audit: type=1400 audit(1731849257.335:292): avc: denied { append } for pid=6341 comm="syz.2.102" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 98.813883][ T6344] random: crng reseeded on system resumption [ 98.910537][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 98.914348][ T5878] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 98.914365][ T5878] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.914378][ T5878] usb 4-1: config 1 has no interface number 1 [ 98.914395][ T5878] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 98.914422][ T5878] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.916172][ T5878] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.916201][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.916217][ T5878] usb 4-1: Product: syz [ 98.916226][ T5878] usb 4-1: Manufacturer: syz [ 98.916236][ T5878] usb 4-1: SerialNumber: syz [ 99.270756][ T5878] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 99.270787][ T5878] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 99.332702][ T5878] usb 4-1: USB disconnect, device number 4 [ 99.503409][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.602989][ T5876] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 100.060072][ T6342] Restarting kernel threads ... done. [ 100.870449][ T967] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.946194][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.134490][ T6365] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 101.142261][ T6365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.149598][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 101.156647][ T8] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 101.160951][ T967] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 101.165185][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.195687][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.200405][ T8] usb 5-1: config 0 has no interface number 0 [ 101.227539][ T8] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.235016][ T967] usb 2-1: Product: syz [ 101.260974][ T967] usb 2-1: Manufacturer: syz [ 101.281382][ T8] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.284763][ T967] usb 2-1: SerialNumber: syz [ 101.320329][ T8] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.333325][ T967] usb 2-1: config 0 descriptor?? [ 101.729861][ T6371] warning: `syz.3.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.730001][ T8] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.786665][ T6370] block device autoloading is deprecated and will be removed. [ 101.814638][ T8] usb 5-1: config 0 interface 52 has no altsetting 0 [ 101.836654][ T6370] syz.2.109: attempt to access beyond end of device [ 101.836654][ T6370] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 101.840388][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 101.858862][ T8] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 101.873140][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.894444][ T8] usb 5-1: config 0 descriptor?? [ 102.006829][ T6376] netlink: 188 bytes leftover after parsing attributes in process `syz.2.111'. [ 102.017238][ T6376] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 102.028607][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'. [ 102.165696][ T8] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input9 [ 102.294041][ T8] IPVS: starting estimator thread 0... [ 102.320350][ T5906] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 102.388770][ T967] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 102.404519][ T6383] IPVS: using max 38 ests per chain, 91200 per kthread [ 102.449800][ T967] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 102.466794][ T967] asix 2-1:0.0: probe with driver asix failed with error -71 [ 102.483800][ T5906] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 102.494238][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.501340][ T967] usb 2-1: USB disconnect, device number 5 [ 102.508620][ T5878] usb 5-1: USB disconnect, device number 9 [ 102.548877][ T5906] usb 3-1: Product: syz [ 102.556633][ T5906] usb 3-1: Manufacturer: syz [ 102.561421][ T5906] usb 3-1: SerialNumber: syz [ 102.578675][ T5906] usb 3-1: config 0 descriptor?? [ 102.735729][ T5906] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 011 [ 103.189076][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 103.189088][ T29] audit: type=1400 audit(1731849261.705:317): avc: denied { read } for pid=6392 comm="syz.3.117" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.210708][ T5906] (null): failure reading functionality [ 103.229133][ T5906] i2c i2c-1: failure reading functionality [ 103.263232][ T5906] i2c i2c-1: connected i2c-tiny-usb device [ 103.597329][ T6394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.802829][ T5906] usb 3-1: USB disconnect, device number 11 [ 103.814653][ T29] audit: type=1400 audit(1731849261.735:318): avc: denied { open } for pid=6392 comm="syz.3.117" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.852013][ T1151] wlan1: Trigger new scan to find an IBSS to join [ 103.858607][ T6393] : entered promiscuous mode [ 103.863065][ T29] audit: type=1400 audit(1731849262.105:319): avc: denied { write } for pid=6389 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.864360][ T5878] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 103.886083][ T29] audit: type=1400 audit(1731849262.345:320): avc: denied { ioctl } for pid=6392 comm="syz.3.117" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.215904][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 105.030529][ T5878] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 105.039321][ T5878] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.054401][ T6401] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 105.062605][ T6401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.069968][ T5878] usb 5-1: config 1 has no interface number 1 [ 105.076235][ T5878] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 105.085426][ T5878] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.113819][ T5878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.144059][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.160351][ T5878] usb 5-1: Product: syz [ 105.174928][ T5878] usb 5-1: Manufacturer: syz [ 105.179572][ T5878] usb 5-1: SerialNumber: syz [ 105.490505][ T967] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.650546][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 105.750960][ T5878] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 105.758431][ T5878] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 105.766519][ T967] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.784130][ T967] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.802476][ T967] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.816654][ T6418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.823981][ T6418] IPv6: NLM_F_CREATE should be set when creating new route [ 105.830659][ T5878] usb 5-1: USB disconnect, device number 10 [ 105.836203][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.874837][ T967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.886261][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.896388][ T967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 105.906556][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.920090][ T967] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 105.929442][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.940130][ T29] audit: type=1400 audit(1731849264.455:321): avc: denied { ioctl } for pid=6419 comm="syz.2.126" path="socket:[10063]" dev="sockfs" ino=10063 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.971249][ T967] usb 4-1: config 0 descriptor?? [ 106.133853][ T29] audit: type=1400 audit(1731849264.655:322): avc: denied { watch } for pid=6426 comm="syz.2.129" path="/25/file0" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.180564][ T29] audit: type=1400 audit(1731849264.695:323): avc: denied { connect } for pid=6423 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.211214][ T29] audit: type=1400 audit(1731849264.725:324): avc: denied { bind } for pid=6423 comm="syz.0.128" laddr=fe80::11 lport=2 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.234629][ T967] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.239491][ T29] audit: type=1400 audit(1731849264.725:325): avc: denied { name_bind } for pid=6423 comm="syz.0.128" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 106.285074][ T29] audit: type=1400 audit(1731849264.725:326): avc: denied { node_bind } for pid=6423 comm="syz.0.128" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 106.290162][ T5875] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.385270][ T6432] 9pnet: Could not find request transport: fd0x0000000000000003 [ 106.425933][ T5828] usb 4-1: USB disconnect, device number 5 [ 106.443761][ T5828] usblp0: removed [ 106.464723][ T6438] Zero length message leads to an empty skb [ 106.481618][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.492874][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.521829][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.558582][ T5875] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.578216][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.608445][ T5875] usb 2-1: config 0 descriptor?? [ 107.755599][ T6459] blktrace: Concurrent blktraces are not allowed on sg0 [ 107.933302][ T4381] wlan1: Trigger new scan to find an IBSS to join [ 108.396471][ T5875] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 108.410046][ T5875] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 108.440546][ T5875] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 109.860552][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 109.860567][ T29] audit: type=1400 audit(1731849268.385:329): avc: denied { create } for pid=6468 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.886353][ T61] wlan1: Creating new IBSS network, BSSID aa:42:79:6e:56:5b [ 109.989900][ T5828] usb 2-1: USB disconnect, device number 6 [ 110.021050][ T29] audit: type=1400 audit(1731849268.525:330): avc: denied { setopt } for pid=6468 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.057254][ T6475] Cannot find set identified by id 0 to match [ 110.076024][ T29] audit: type=1400 audit(1731849268.565:331): avc: denied { read append } for pid=6474 comm="syz.3.144" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.165801][ T29] audit: type=1400 audit(1731849268.565:332): avc: denied { open } for pid=6474 comm="syz.3.144" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.350515][ T5875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.510633][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.518848][ T6478] 9pnet_fd: Insufficient options for proto=fd [ 110.550861][ T29] audit: type=1400 audit(1731849268.575:333): avc: denied { write } for pid=6474 comm="syz.3.144" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.574612][ T29] audit: type=1400 audit(1731849268.585:334): avc: denied { write } for pid=6468 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.593991][ T29] audit: type=1400 audit(1731849268.765:335): avc: denied { read } for pid=6468 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.600920][ T5875] usb 4-1: device descriptor read/64, error -71 [ 110.613289][ T29] audit: type=1400 audit(1731849268.975:336): avc: denied { ioctl } for pid=6468 comm="syz.4.141" path="socket:[10206]" dev="sockfs" ino=10206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.669966][ T6483] FAULT_INJECTION: forcing a failure. [ 110.669966][ T6483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.683914][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 110.689504][ T6483] CPU: 0 UID: 0 PID: 6483 Comm: syz.2.146 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 110.700122][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 110.710192][ T6483] Call Trace: [ 110.713481][ T6483] [ 110.716419][ T6483] dump_stack_lvl+0x16c/0x1f0 [ 110.721116][ T6483] should_fail_ex+0x497/0x5b0 [ 110.725815][ T6483] _copy_from_iter+0x2a1/0x1560 [ 110.730706][ T6483] ? __pfx__copy_from_iter+0x10/0x10 [ 110.735995][ T6483] ? __virt_addr_valid+0x1a4/0x590 [ 110.741116][ T6483] ? __virt_addr_valid+0x5e/0x590 [ 110.746148][ T6483] ? __phys_addr_symbol+0x30/0x80 [ 110.751180][ T6483] ? __check_object_size+0x488/0x710 [ 110.756476][ T6483] netlink_sendmsg+0x813/0xd70 [ 110.761258][ T6483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.766547][ T6483] ____sys_sendmsg+0xaaf/0xc90 [ 110.771310][ T6483] ? copy_msghdr_from_user+0x10b/0x160 [ 110.776786][ T6483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.782100][ T6483] ? __pfx___lock_acquire+0x10/0x10 [ 110.787318][ T6483] ___sys_sendmsg+0x135/0x1e0 [ 110.792008][ T6483] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.797237][ T6483] ? lock_acquire+0x2f/0xb0 [ 110.801747][ T6483] ? __fget_files+0x40/0x3f0 [ 110.806338][ T6483] ? fdget+0x176/0x210 [ 110.810432][ T6483] __sys_sendmsg+0x117/0x1f0 [ 110.815030][ T6483] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.820138][ T6483] ? __fget_files+0x244/0x3f0 [ 110.824852][ T6483] do_syscall_64+0xcd/0x250 [ 110.829371][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.835282][ T6483] RIP: 0033:0x7f9dfb97e719 [ 110.839698][ T6483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.859318][ T6483] RSP: 002b:00007f9dfc6f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.867746][ T6483] RAX: ffffffffffffffda RBX: 00007f9dfbb35f80 RCX: 00007f9dfb97e719 [ 110.875726][ T6483] RDX: 0000000000040040 RSI: 0000000020000340 RDI: 0000000000000004 [ 110.883703][ T6483] RBP: 00007f9dfc6f2090 R08: 0000000000000000 R09: 0000000000000000 [ 110.891675][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.899639][ T6483] R13: 0000000000000000 R14: 00007f9dfbb35f80 R15: 00007ffd1cc17ce8 [ 110.907639][ T6483] [ 110.920608][ T5828] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 110.932834][ T5828] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.968183][ T5828] usb 2-1: config 1 has no interface number 1 [ 110.987862][ T5828] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 111.040555][ T5875] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.070571][ T5828] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.191437][ T5875] usb 4-1: device descriptor read/64, error -71 [ 111.301802][ T5875] usb usb4-port1: attempt power cycle [ 111.330101][ T5828] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.365956][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.431971][ T5828] usb 2-1: Product: syz [ 111.470796][ T5828] usb 2-1: Manufacturer: syz [ 111.653780][ T5828] usb 2-1: SerialNumber: syz [ 112.008960][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.062019][ T5875] usb 4-1: device descriptor read/8, error -71 [ 112.331000][ T5828] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 112.361874][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.384591][ T5828] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 112.406414][ T6506] loop5: detected capacity change from 0 to 7 [ 112.418084][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.427465][ T6502] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 112.435236][ T6502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.442467][ T6502] IPv6: NLM_F_CREATE should be set when creating new route [ 112.476719][ T6507] process 'syz.4.153' launched './file0' with NULL argv: empty string added [ 112.485625][ T29] audit: type=1400 audit(1731849270.995:337): avc: denied { execute } for pid=6504 comm="syz.4.153" name="file0" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.515439][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.529413][ T5875] usb 4-1: device descriptor read/8, error -71 [ 112.540934][ T5828] usb 2-1: USB disconnect, device number 7 [ 112.554744][ T29] audit: type=1400 audit(1731849271.075:338): avc: denied { execute_no_trans } for pid=6504 comm="syz.4.153" path="/27/file0" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.561255][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.597434][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.628210][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.636838][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.645680][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.651221][ T5875] usb usb4-port1: unable to enumerate USB device [ 112.654619][ T6506] ldm_validate_partition_table(): Disk read failed. [ 112.680370][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.689573][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.699573][ T6506] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.710006][ T6506] Dev loop5: unable to read RDB block 0 [ 112.721310][ T6506] loop5: unable to read partition table [ 112.727176][ T6506] loop5: partition table beyond EOD, truncated [ 112.738311][ T6506] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 112.738311][ T6506] ) failed (rc=-5) [ 112.815481][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.841774][ T6514] FAULT_INJECTION: forcing a failure. [ 112.841774][ T6514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.857414][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.0.155 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 112.868039][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 112.878098][ T6514] Call Trace: [ 112.881361][ T6514] [ 112.884273][ T6514] dump_stack_lvl+0x16c/0x1f0 [ 112.888936][ T6514] should_fail_ex+0x497/0x5b0 [ 112.893603][ T6514] _copy_from_user+0x2e/0xd0 [ 112.898189][ T6514] snd_pcm_oss_write2+0x1c6/0x3f0 [ 112.903211][ T6514] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 112.908751][ T6514] ? snd_pcm_kernel_ioctl+0x257/0x2d0 [ 112.914113][ T6514] ? snd_pcm_oss_prepare+0x11e/0x220 [ 112.919391][ T6514] snd_pcm_oss_write+0x727/0xa00 [ 112.924330][ T6514] ? rw_verify_area+0xd0/0x700 [ 112.929092][ T6514] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 112.934534][ T6514] vfs_write+0x24c/0x1150 [ 112.938852][ T6514] ? __fget_files+0x23a/0x3f0 [ 112.943523][ T6514] ? __pfx_lock_release+0x10/0x10 [ 112.948542][ T6514] ? trace_lock_acquire+0x14a/0x1d0 [ 112.953734][ T6514] ? __pfx_vfs_write+0x10/0x10 [ 112.958505][ T6514] ? lock_acquire+0x2f/0xb0 [ 112.963016][ T6514] ? __fget_files+0x40/0x3f0 [ 112.967602][ T6514] ? __fget_files+0x244/0x3f0 [ 112.972289][ T6514] ksys_write+0x12f/0x260 [ 112.976620][ T6514] ? __pfx_ksys_write+0x10/0x10 [ 112.981458][ T6514] do_syscall_64+0xcd/0x250 [ 112.985947][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.991834][ T6514] RIP: 0033:0x7fc8bc97e719 [ 112.996232][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.015831][ T6514] RSP: 002b:00007fc8bd6b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.024232][ T6514] RAX: ffffffffffffffda RBX: 00007fc8bcb35f80 RCX: 00007fc8bc97e719 [ 113.032212][ T6514] RDX: 0000000000004000 RSI: 00000000200012c0 RDI: 0000000000000003 [ 113.040176][ T6514] RBP: 00007fc8bd6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 113.048139][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.056097][ T6514] R13: 0000000000000000 R14: 00007fc8bcb35f80 R15: 00007fff22415e98 [ 113.064086][ T6514] [ 113.162274][ T6519] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.156'. [ 113.591507][ T6519] debugfs: Directory ' !' with parent 'ieee80211' already present! [ 114.035028][ T6527] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.157'. [ 114.063512][ T6527] debugfs: Directory ' !' with parent 'ieee80211' already present! [ 114.145100][ T5906] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 114.900354][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 114.907626][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.919385][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.934632][ T5906] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.966240][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 114.966257][ T29] audit: type=1400 audit(1731849273.475:346): avc: denied { accept } for pid=6537 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.994543][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.060042][ T5906] usb 4-1: config 0 descriptor?? [ 115.071458][ T5906] hub 4-1:0.0: USB hub found [ 115.096626][ T6540] sctp: failed to load transform for md5: -2 [ 115.297309][ T5906] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 115.956816][ T29] audit: type=1400 audit(1731849274.175:347): avc: denied { name_connect } for pid=6551 comm="syz.1.164" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 116.450957][ T5906] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 116.461444][ T5906] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22 [ 116.488339][ T29] audit: type=1400 audit(1731849274.805:348): avc: denied { write } for pid=6569 comm="syz.2.169" name="net" dev="proc" ino=11403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 116.595680][ T5840] Bluetooth: hci2: unexpected event 0x03 length: 31 > 11 [ 117.218440][ T29] audit: type=1400 audit(1731849274.805:349): avc: denied { add_name } for pid=6569 comm="syz.2.169" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 117.324314][ T29] audit: type=1400 audit(1731849274.805:350): avc: denied { create } for pid=6569 comm="syz.2.169" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 117.325108][ T5878] usb 4-1: USB disconnect, device number 10 [ 117.344390][ T29] audit: type=1400 audit(1731849274.805:351): avc: denied { associate } for pid=6569 comm="syz.2.169" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.469509][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'. [ 117.496839][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 117.509689][ T6578] netlink: 'syz.4.170': attribute type 11 has an invalid length. [ 117.910816][ T6583] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.171'. [ 117.920816][ C0] hrtimer: interrupt took 718510 ns [ 118.052113][ T6583] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 118.060590][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.1.171 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 118.071179][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 118.081222][ T6583] Call Trace: [ 118.084483][ T6583] [ 118.087395][ T6583] dump_stack_lvl+0x16c/0x1f0 [ 118.092063][ T6583] sysfs_warn_dup+0x7f/0xa0 [ 118.096556][ T6583] sysfs_do_create_link_sd+0x124/0x140 [ 118.101997][ T6583] sysfs_create_link+0x61/0xc0 [ 118.106742][ T6583] device_add+0x62e/0x1a70 [ 118.111140][ T6583] ? __pfx_device_add+0x10/0x10 [ 118.115970][ T6583] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.121866][ T6583] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 118.127872][ T6583] wiphy_register+0x2101/0x2d00 [ 118.132731][ T6583] ? __pfx_wiphy_register+0x10/0x10 [ 118.137932][ T6583] ? ieee80211_register_hw+0x2a80/0x41b0 [ 118.143568][ T6583] ieee80211_register_hw+0x2aaa/0x41b0 [ 118.149038][ T6583] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 118.154854][ T6583] ? __asan_memset+0x23/0x50 [ 118.159435][ T6583] ? __hrtimer_init+0x106/0x2c0 [ 118.164284][ T6583] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 118.170015][ T6583] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 118.176084][ T6583] hwsim_new_radio_nl+0xb42/0x12b0 [ 118.181190][ T6583] ? mark_held_locks+0x9f/0xe0 [ 118.185946][ T6583] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.191502][ T6583] genl_family_rcv_msg_doit+0x202/0x2f0 [ 118.197047][ T6583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 118.203116][ T6583] ? bpf_lsm_capable+0x9/0x10 [ 118.207787][ T6583] ? security_capable+0x7e/0x260 [ 118.212731][ T6583] ? ns_capable+0xd7/0x110 [ 118.217146][ T6583] genl_rcv_msg+0x565/0x800 [ 118.221648][ T6583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.226671][ T6583] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.232212][ T6583] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.237421][ T6583] netlink_rcv_skb+0x16b/0x440 [ 118.242177][ T6583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.247199][ T6583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.252491][ T6583] ? down_read+0xc9/0x330 [ 118.256820][ T6583] ? __pfx_down_read+0x10/0x10 [ 118.261580][ T6583] ? rcu_is_watching+0x12/0xc0 [ 118.266344][ T6583] genl_rcv+0x28/0x40 [ 118.270321][ T6583] netlink_unicast+0x53c/0x7f0 [ 118.275087][ T6583] ? __pfx_netlink_unicast+0x10/0x10 [ 118.280368][ T6583] ? __pfx_bpf_lsm_netlink_send+0x10/0x10 [ 118.286091][ T6583] netlink_sendmsg+0x8b8/0xd70 [ 118.290853][ T6583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.296144][ T6583] ____sys_sendmsg+0xaaf/0xc90 [ 118.300912][ T6583] ? copy_msghdr_from_user+0x10b/0x160 [ 118.306368][ T6583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.312732][ T6583] ? __pfx___lock_acquire+0x10/0x10 [ 118.317926][ T6583] ? __pfx___lock_acquire+0x10/0x10 [ 118.323115][ T6583] ? find_held_lock+0x2d/0x110 [ 118.327880][ T6583] ___sys_sendmsg+0x135/0x1e0 [ 118.332556][ T6583] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.337764][ T6583] ? lock_acquire+0x2f/0xb0 [ 118.342267][ T6583] ? __fget_files+0x40/0x3f0 [ 118.346871][ T6583] ? fdget+0x176/0x210 [ 118.350942][ T6583] __sys_sendmsg+0x117/0x1f0 [ 118.355528][ T6583] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.360635][ T6583] ? __pfx___schedule+0x10/0x10 [ 118.365504][ T6583] do_syscall_64+0xcd/0x250 [ 118.370007][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.375906][ T6583] RIP: 0033:0x7f43c997e719 [ 118.380317][ T6583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.399942][ T6583] RSP: 002b:00007f43ca6b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.408352][ T6583] RAX: ffffffffffffffda RBX: 00007f43c9b36058 RCX: 00007f43c997e719 [ 118.416321][ T6583] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 118.424288][ T6583] RBP: 00007f43c99f175e R08: 0000000000000000 R09: 0000000000000000 [ 118.432254][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.440240][ T6583] R13: 0000000000000000 R14: 00007f43c9b36058 R15: 00007fff6660fb58 [ 118.448222][ T6583] [ 118.626496][ T29] audit: type=1400 audit(1731849277.145:352): avc: denied { ioctl } for pid=6587 comm="syz.3.174" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.987072][ T29] audit: type=1400 audit(1731849277.375:353): avc: denied { create } for pid=6591 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.732196][ T29] audit: type=1400 audit(1731849277.375:354): avc: denied { getopt } for pid=6591 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.810779][ T5875] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.950443][ T5875] usb 4-1: device descriptor read/64, error -71 [ 121.075800][ T6621] veth0_vlan: entered allmulticast mode [ 121.210868][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 121.360754][ T5875] usb 4-1: device descriptor read/64, error -71 [ 121.471246][ T5875] usb usb4-port1: attempt power cycle [ 121.581629][ T6640] FAULT_INJECTION: forcing a failure. [ 121.581629][ T6640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.596053][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.4.184 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 121.606684][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 121.616763][ T6640] Call Trace: [ 121.620054][ T6640] [ 121.622997][ T6640] dump_stack_lvl+0x16c/0x1f0 [ 121.627701][ T6640] should_fail_ex+0x497/0x5b0 [ 121.632424][ T6640] _copy_from_user+0x2e/0xd0 [ 121.637039][ T6640] __sys_bpf+0x21c/0x49a0 [ 121.641388][ T6640] ? ksys_write+0x21e/0x260 [ 121.645905][ T6640] ? reacquire_held_locks+0x470/0x4c0 [ 121.651296][ T6640] ? __pfx___sys_bpf+0x10/0x10 [ 121.656086][ T6640] ? vfs_write+0x306/0x1150 [ 121.660620][ T6640] ? __mutex_unlock_slowpath+0x164/0x650 [ 121.666290][ T6640] ? fput+0x30/0x390 [ 121.670210][ T6640] ? ksys_write+0x1ad/0x260 [ 121.674722][ T6640] ? __pfx_ksys_write+0x10/0x10 [ 121.679586][ T6640] __x64_sys_bpf+0x78/0xc0 [ 121.684005][ T6640] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.689220][ T6640] do_syscall_64+0xcd/0x250 [ 121.693722][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.699622][ T6640] RIP: 0033:0x7f95acb7e719 [ 121.704041][ T6640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.723643][ T6640] RSP: 002b:00007f95ad94b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.732065][ T6640] RAX: ffffffffffffffda RBX: 00007f95acd35f80 RCX: 00007f95acb7e719 [ 121.740029][ T6640] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 000000000000001c [ 121.747996][ T6640] RBP: 00007f95ad94b090 R08: 0000000000000000 R09: 0000000000000000 [ 121.755959][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.763926][ T6640] R13: 0000000000000000 R14: 00007f95acd35f80 R15: 00007ffeeec7fd98 [ 121.771932][ T6640] [ 121.774990][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.850580][ T5875] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 121.859422][ T5878] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 121.876106][ T5875] usb 4-1: device descriptor read/8, error -71 [ 122.133072][ T5875] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 122.141946][ T29] audit: type=1400 audit(1731849280.665:355): avc: denied { write } for pid=6649 comm="syz.1.187" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.164811][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.190455][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 122.215374][ T5878] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 123.157774][ T5878] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 123.167451][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.176059][ T5878] usb 3-1: Product: syz [ 123.180694][ T5878] usb 3-1: Manufacturer: syz [ 123.185570][ T5878] usb 3-1: SerialNumber: syz [ 123.192558][ T5878] usb 3-1: config 0 descriptor?? [ 123.199171][ T6637] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.223843][ T6650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.186'. [ 123.254223][ T5875] usb 4-1: device descriptor read/8, error -71 [ 123.746274][ T5878] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.090428][ T5875] usb usb4-port1: unable to enumerate USB device [ 124.161103][ T29] audit: type=1400 audit(1731849282.675:356): avc: denied { getopt } for pid=6649 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 124.390367][ T29] audit: type=1400 audit(1731849282.685:357): avc: denied { setopt } for pid=6649 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 124.615879][ T29] audit: type=1400 audit(1731849282.725:358): avc: denied { accept } for pid=6607 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.677518][ T29] audit: type=1400 audit(1731849283.195:359): avc: denied { read write } for pid=6667 comm="syz.0.188" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.701874][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.315669][ T29] audit: type=1400 audit(1731849283.195:360): avc: denied { open } for pid=6667 comm="syz.0.188" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 129.140355][ T29] audit: type=1400 audit(1731849283.435:361): avc: denied { create } for pid=6667 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 129.971034][ T5878] usb 3-1: USB disconnect, device number 12 [ 130.298845][ T16] sched: DL replenish lagged too much [ 130.540335][ T29] audit: type=1400 audit(1731849283.445:362): avc: denied { write } for pid=6667 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.762979][ T29] audit: type=1400 audit(1731849283.815:363): avc: denied { watch_mount watch_reads } for pid=6675 comm="syz.2.190" path="/proc/131/task" dev="proc" ino=11149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 131.503900][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 131.612352][ T6695] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 131.658479][ T29] audit: type=1400 audit(1731849290.175:364): avc: denied { unlink } for pid=6689 comm="syz.3.194" name="#1" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.704205][ T6698] random: crng reseeded on system resumption [ 131.856123][ T5875] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.021383][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 132.026676][ T29] audit: type=1400 audit(1731849290.535:365): avc: denied { mount } for pid=6700 comm="syz.3.197" name="/" dev="configfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 132.082728][ T5875] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 132.113695][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.144802][ T5875] usb 5-1: Product: syz [ 132.161113][ T5875] usb 5-1: Manufacturer: syz [ 132.181156][ T5875] usb 5-1: SerialNumber: syz [ 132.210134][ T5875] usb 5-1: config 0 descriptor?? [ 132.244814][ T5875] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 132.454266][ T29] audit: type=1400 audit(1731849290.975:366): avc: denied { ioctl } for pid=6693 comm="syz.4.195" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 132.590929][ T5875] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 132.642353][ T5875] usb 5-1: USB disconnect, device number 11 [ 132.840707][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847163][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.290458][ T29] audit: type=1400 audit(1731849292.835:367): avc: denied { getopt } for pid=6705 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.229724][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 154.257829][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.281002][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.290162][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.327657][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.336237][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.380323][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.451552][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.489472][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.498505][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.517051][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.524301][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.537202][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.602629][ T29] audit: type=1400 audit(1731849313.105:368): avc: denied { mounton } for pid=6716 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 155.689588][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.707731][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.716149][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.728249][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.735959][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.744597][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.870155][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.880079][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.888630][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.900047][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.909617][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.918939][ T5840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.929828][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.938246][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.945959][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.954165][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.975762][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.988167][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.730437][ T5826] Bluetooth: hci6: command tx timeout [ 156.736499][ T5826] Bluetooth: hci5: command tx timeout [ 157.851405][ T5826] Bluetooth: hci1: command tx timeout [ 158.090506][ T5840] Bluetooth: hci7: command tx timeout [ 158.098574][ T5826] Bluetooth: hci2: command tx timeout [ 158.810588][ T5840] Bluetooth: hci6: command tx timeout [ 158.817126][ T5826] Bluetooth: hci5: command tx timeout [ 159.930451][ T5826] Bluetooth: hci1: command tx timeout [ 160.170491][ T5826] Bluetooth: hci2: command tx timeout [ 160.175946][ T5826] Bluetooth: hci7: command tx timeout [ 160.893217][ T5840] Bluetooth: hci6: command tx timeout [ 160.900477][ T5826] Bluetooth: hci5: command tx timeout [ 162.010310][ T5826] Bluetooth: hci1: command tx timeout [ 162.250381][ T5840] Bluetooth: hci2: command tx timeout [ 162.257496][ T5826] Bluetooth: hci7: command tx timeout [ 162.970490][ T5826] Bluetooth: hci5: command tx timeout [ 162.975939][ T5826] Bluetooth: hci6: command tx timeout [ 164.090332][ T5826] Bluetooth: hci1: command tx timeout [ 164.330442][ T5840] Bluetooth: hci2: command tx timeout [ 164.335934][ T5826] Bluetooth: hci7: command tx timeout [ 183.259065][ T1160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.533298][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.539627][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.626525][ T1135] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.905654][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.922346][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.978577][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.009133][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.026308][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.033785][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.406978][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.418963][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.427767][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.457799][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.465474][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.473295][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.507035][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.521144][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.532163][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.557535][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.566790][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.577512][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.585876][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.596977][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.604987][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.621422][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.628778][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.636258][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.697608][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.706635][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.715362][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.723325][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.740089][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.748388][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.130410][ T5838] Bluetooth: hci0: command tx timeout [ 227.530444][ T5838] Bluetooth: hci1: command tx timeout [ 227.690515][ T5840] Bluetooth: hci3: command tx timeout [ 227.698459][ T5838] Bluetooth: hci4: command tx timeout [ 227.850814][ T5838] Bluetooth: hci5: command tx timeout [ 229.210385][ T5838] Bluetooth: hci0: command tx timeout [ 229.610439][ T5838] Bluetooth: hci1: command tx timeout [ 229.770433][ T5840] Bluetooth: hci3: command tx timeout [ 229.777016][ T5838] Bluetooth: hci4: command tx timeout [ 229.930488][ T5838] Bluetooth: hci5: command tx timeout [ 231.290400][ T5838] Bluetooth: hci0: command tx timeout [ 231.690455][ T5838] Bluetooth: hci1: command tx timeout [ 231.850524][ T5838] Bluetooth: hci4: command tx timeout [ 231.855980][ T5838] Bluetooth: hci3: command tx timeout [ 232.010558][ T5838] Bluetooth: hci5: command tx timeout [ 233.370953][ T5838] Bluetooth: hci0: command tx timeout [ 233.770435][ T5838] Bluetooth: hci1: command tx timeout [ 233.931081][ T5840] Bluetooth: hci4: command tx timeout [ 233.936576][ T5838] Bluetooth: hci3: command tx timeout [ 234.090459][ T5838] Bluetooth: hci5: command tx timeout [ 255.697905][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.710171][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.837303][ T1160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.261145][ T5838] Bluetooth: hci7: command 0x0406 tx timeout [ 278.267204][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 278.611585][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.655665][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.685998][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.772064][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.907121][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.038334][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.290835][ T5841] Bluetooth: hci6: command tx timeout [ 282.465934][ T5826] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 282.475436][ T5826] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 282.483988][ T5826] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 282.492345][ T5826] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 282.500087][ T5826] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 282.507492][ T5826] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 283.370386][ T5826] Bluetooth: hci6: command tx timeout [ 284.580429][ T5826] Bluetooth: hci8: command tx timeout [ 284.802012][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 284.814439][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 284.822437][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 284.830839][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 284.839711][ T5841] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 284.847371][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 284.935742][ T5826] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 284.945350][ T5826] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 284.954612][ T5826] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 284.973633][ T5826] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 284.984086][ T5826] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 284.991629][ T5826] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 285.035809][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 285.044785][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 285.053032][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 285.060942][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 285.071274][ T5841] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 285.078665][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 285.454112][ T5826] Bluetooth: hci6: command tx timeout [ 286.653265][ T5826] Bluetooth: hci8: command tx timeout [ 286.758849][ T1160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.890471][ T5826] Bluetooth: hci9: command tx timeout [ 287.050621][ T5826] Bluetooth: hci10: command tx timeout [ 287.130500][ T5826] Bluetooth: hci11: command tx timeout [ 287.530373][ T5826] Bluetooth: hci6: command tx timeout [ 288.730414][ T5826] Bluetooth: hci8: command tx timeout [ 288.970474][ T5826] Bluetooth: hci9: command tx timeout [ 289.130426][ T5826] Bluetooth: hci10: command tx timeout [ 289.210418][ T5826] Bluetooth: hci11: command tx timeout [ 290.810432][ T5826] Bluetooth: hci8: command tx timeout [ 291.050386][ T5826] Bluetooth: hci9: command tx timeout [ 291.210363][ T5826] Bluetooth: hci10: command tx timeout [ 291.290438][ T5826] Bluetooth: hci11: command tx timeout [ 293.130421][ T5826] Bluetooth: hci9: command tx timeout [ 293.290357][ T5826] Bluetooth: hci10: command tx timeout [ 293.370467][ T5826] Bluetooth: hci11: command tx timeout [ 299.850925][ T30] INFO: task syz-executor:6727 blocked for more than 143 seconds. [ 299.859112][ T30] Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.900366][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.930413][ T30] task:syz-executor state:D stack:27024 pid:6727 tgid:6727 ppid:1 flags:0x00000004 [ 300.029778][ T30] Call Trace: [ 300.050349][ T30] [ 300.053333][ T30] __schedule+0xe55/0x5740 [ 300.058131][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 300.130415][ T30] ? lockdep_hardirqs_on_prepare+0x390/0x420 [ 300.136457][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 300.190366][ T30] ? __pfx___schedule+0x10/0x10 [ 300.195289][ T30] ? schedule+0x298/0x350 [ 300.199643][ T30] ? __pfx_lock_release+0x10/0x10 [ 300.270482][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 300.275745][ T30] ? lock_acquire+0x2f/0xb0 [ 300.327477][ T30] ? schedule+0x1fd/0x350 [ 300.337039][ T30] schedule+0xe7/0x350 [ 300.357300][ T30] schedule_preempt_disabled+0x13/0x30 [ 300.379730][ T30] __mutex_lock+0x5b8/0x9c0 [ 300.400326][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 300.405504][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 300.430508][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 300.435766][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 300.470328][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.475856][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 300.547423][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 300.566769][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 300.585142][ T30] netlink_rcv_skb+0x16b/0x440 [ 300.605437][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.618654][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.630608][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 300.635965][ T30] netlink_unicast+0x53c/0x7f0 [ 300.645917][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 300.653412][ T30] netlink_sendmsg+0x8b8/0xd70 [ 300.658218][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.668642][ T30] __sys_sendto+0x479/0x4d0 [ 300.676002][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 300.686916][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 300.693544][ T30] ? do_user_addr_fault+0xdc7/0x13f0 [ 300.698905][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 300.708882][ T30] ? do_syscall_64+0x91/0x250 [ 300.713965][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 300.719201][ T30] do_syscall_64+0xcd/0x250 [ 300.728867][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.739022][ T30] RIP: 0033:0x7f2fe15805ac [ 300.748608][ T30] RSP: 002b:00007ffc126795d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 300.758548][ T30] RAX: ffffffffffffffda RBX: 00007f2fe2264620 RCX: 00007f2fe15805ac [ 300.770294][ T30] RDX: 0000000000000028 RSI: 00007f2fe2264670 RDI: 0000000000000003 [ 300.786647][ T30] RBP: 0000000000000000 R08: 00007ffc12679624 R09: 000000000000000c [ 300.797058][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 300.812533][ T30] R13: 0000000000000000 R14: 00007f2fe2264670 R15: 0000000000000000 [ 300.824724][ T30] [ 300.827840][ T30] INFO: task syz-executor:6728 blocked for more than 144 seconds. [ 300.837388][ T30] Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 300.849168][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.859142][ T30] task:syz-executor state:D stack:27120 pid:6728 tgid:6728 ppid:1 flags:0x00004004 [ 300.874700][ T30] Call Trace: [ 300.878015][ T30] [ 300.882734][ T30] __schedule+0xe55/0x5740 [ 300.887189][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 300.898269][ T30] ? lockdep_hardirqs_on_prepare+0x390/0x420 [ 300.908001][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 300.916429][ T30] ? __pfx___schedule+0x10/0x10 [ 300.923631][ T30] ? schedule+0x298/0x350 [ 300.928009][ T30] ? __pfx_lock_release+0x10/0x10 [ 300.937349][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 300.944831][ T30] ? lock_acquire+0x2f/0xb0 [ 300.949367][ T30] ? schedule+0x1fd/0x350 [ 300.956966][ T30] schedule+0xe7/0x350 [ 300.963368][ T30] schedule_preempt_disabled+0x13/0x30 [ 300.968877][ T30] __mutex_lock+0x5b8/0x9c0 [ 300.977174][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 300.986681][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 300.996881][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 301.006578][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 301.015242][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.022949][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 301.028181][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 301.036807][ T30] ? __pfx_avc_has_perm+0x10/0x10 [ 301.044406][ T30] netlink_rcv_skb+0x16b/0x440 [ 301.049208][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.059273][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.066788][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 301.075283][ T30] netlink_unicast+0x53c/0x7f0 [ 301.080932][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 301.086256][ T30] netlink_sendmsg+0x8b8/0xd70 [ 301.096134][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.102369][ T30] __sys_sendto+0x479/0x4d0 [ 301.106899][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 301.122909][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 301.128330][ T30] ? do_user_addr_fault+0xdc7/0x13f0 [ 301.139131][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 301.144208][ T30] ? do_syscall_64+0x91/0x250 [ 301.148911][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 301.159784][ T30] do_syscall_64+0xcd/0x250 [ 301.164876][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.176715][ T30] RIP: 0033:0x7fb4fe1805ac [ 301.182041][ T30] RSP: 002b:00007ffddeec20c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 301.195493][ T30] RAX: ffffffffffffffda RBX: 00007fb4fee64620 RCX: 00007fb4fe1805ac [ 301.203880][ T30] RDX: 0000000000000028 RSI: 00007fb4fee64670 RDI: 0000000000000003 [ 301.219655][ T30] RBP: 0000000000000000 R08: 00007ffddeec2114 R09: 000000000000000c [ 301.236488][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 301.245854][ T30] R13: 0000000000000000 R14: 00007fb4fee64670 R15: 0000000000000000 [ 301.258929][ T30] [ 301.262302][ T30] [ 301.262302][ T30] Showing all locks held in the system: [ 301.270036][ T30] 1 lock held by khungtaskd/30: [ 301.280089][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 301.292310][ T30] 4 locks held by kworker/u8:4/61: [ 301.297440][ T30] #0: ffff88801bee3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 301.314074][ T30] #1: ffffc900015c7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 301.325323][ T30] #2: ffffffff8fecded0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 301.341044][ T30] #3: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230 [ 301.356395][ T30] 3 locks held by kworker/u8:5/1135: [ 301.362001][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 301.378913][ T30] #1: ffffc90004247d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 301.395105][ T30] #2: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 301.404617][ T30] 3 locks held by kworker/u8:6/1151: [ 301.409919][ T30] #0: ffff88814d761948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 301.427775][ T30] #1: ffffc900042c7d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 301.448670][ T30] #2: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 301.459428][ T30] 2 locks held by getty/5587: [ 301.469257][ T30] #0: ffff888031cc70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 301.480409][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 301.496435][ T30] 2 locks held by syz-executor/5831: [ 301.502131][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 301.516197][ T30] #1: ffffffff8e05b950 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x54d/0x1e50 [ 301.528547][ T30] 3 locks held by kworker/0:4/5877: [ 301.540962][ T30] #0: ffff88801b079948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 301.562416][ T30] #1: ffffc900033efd80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 301.577165][ T30] #2: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x84/0x1130 [ 301.588242][ T30] 7 locks held by kworker/0:5/5878: [ 301.598121][ T30] 5 locks held by kworker/0:7/5906: [ 301.604666][ T30] 1 lock held by syz.3.198/6705: [ 301.609626][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 301.626800][ T30] 1 lock held by syz-executor/6716: [ 301.632461][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 301.646513][ T30] 1 lock held by syz-executor/6717: [ 301.652005][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 301.668790][ T30] 1 lock held by syz-executor/6727: [ 301.674912][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.689494][ T30] 1 lock held by syz-executor/6728: [ 301.697348][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.711881][ T30] 1 lock held by syz-executor/6746: [ 301.717101][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.732308][ T30] 1 lock held by syz-executor/6748: [ 301.737543][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.753309][ T30] 1 lock held by syz-executor/6749: [ 301.758550][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.769388][ T30] 1 lock held by syz-executor/6751: [ 301.790360][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.808262][ T30] 1 lock held by syz-executor/6754: [ 301.813781][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.829203][ T30] 1 lock held by syz-executor/6758: [ 301.834791][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.849357][ T30] 1 lock held by syz-executor/6764: [ 301.856251][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.870338][ T30] 1 lock held by syz-executor/6771: [ 301.875563][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.890028][ T30] 1 lock held by syz-executor/6773: [ 301.897973][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.913175][ T30] 1 lock held by syz-executor/6775: [ 301.918397][ T30] #0: ffffffff8fee38e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 301.936295][ T30] [ 301.938660][ T30] ============================================= [ 301.938660][ T30] [ 301.948631][ T30] NMI backtrace for cpu 1 [ 301.952979][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 301.963489][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 301.973559][ T30] Call Trace: [ 301.976847][ T30] [ 301.979780][ T30] dump_stack_lvl+0x116/0x1f0 [ 301.984470][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 301.989432][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 301.995434][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 302.001442][ T30] watchdog+0xf0c/0x1240 [ 302.005695][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.010378][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.015596][ T30] ? __kthread_parkme+0x148/0x220 [ 302.020636][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.025321][ T30] kthread+0x2c1/0x3a0 [ 302.029412][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.034629][ T30] ? __pfx_kthread+0x10/0x10 [ 302.039232][ T30] ret_from_fork+0x45/0x80 [ 302.043658][ T30] ? __pfx_kthread+0x10/0x10 [ 302.048269][ T30] ret_from_fork_asm+0x1a/0x30 [ 302.053070][ T30] [ 302.056549][ T30] Sending NMI from CPU 1 to CPUs 0: [ 302.061993][ C0] NMI backtrace for cpu 0 [ 302.062007][ C0] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:7 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 302.062031][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 302.062048][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 302.062084][ C0] RIP: 0010:unwind_next_frame+0x5c0/0x20c0 [ 302.062109][ C0] Code: 00 00 0f 87 30 02 00 00 41 80 fe 04 0f 84 17 0c 00 00 41 80 fe 05 0f 85 d7 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 <48> c1 ea 03 80 3c 02 00 0f 85 a5 1a 00 00 48 89 c8 4d 8b 7d 38 48 [ 302.062129][ C0] RSP: 0018:ffffc90000007858 EFLAGS: 00000246 [ 302.062144][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff90f27440 [ 302.062158][ C0] RDX: ffffc90000007900 RSI: 0000000000000001 RDI: ffffffff90706370 [ 302.062172][ C0] RBP: ffffc90000007910 R08: ffffffff90f27446 R09: ffffffff90f27444 [ 302.062186][ C0] R10: ffffc900000078c8 R11: 00000000000056f5 R12: ffffc90000007918 [ 302.062200][ C0] R13: ffffc900000078c8 R14: 0000000000000005 R15: 0000000000000000 [ 302.062214][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 302.062234][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.062248][ C0] CR2: 000000002057eff8 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 302.062262][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.062274][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.062287][ C0] Call Trace: [ 302.062293][ C0] [ 302.062301][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 302.062332][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 302.062363][ C0] ? nmi_handle+0x1a9/0x5c0 [ 302.062384][ C0] ? unwind_next_frame+0x5c0/0x20c0 [ 302.062406][ C0] ? default_do_nmi+0x6a/0x160 [ 302.062433][ C0] ? exc_nmi+0x170/0x1e0 [ 302.062457][ C0] ? end_repeat_nmi+0xf/0x53 [ 302.062481][ C0] ? unwind_next_frame+0x5c0/0x20c0 [ 302.062503][ C0] ? unwind_next_frame+0x5c0/0x20c0 [ 302.062526][ C0] ? unwind_next_frame+0x5c0/0x20c0 [ 302.062547][ C0] [ 302.062553][ C0] [ 302.062559][ C0] ? worker_thread+0x6c8/0xf00 [ 302.062586][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.062613][ C0] arch_stack_walk+0x95/0x100 [ 302.062645][ C0] ? worker_thread+0x6c8/0xf00 [ 302.062665][ C0] stack_trace_save+0x95/0xd0 [ 302.062689][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 302.062713][ C0] ? __pfx_mark_lock+0x10/0x10 [ 302.062733][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 302.062752][ C0] kasan_save_stack+0x33/0x60 [ 302.062775][ C0] ? kasan_save_stack+0x33/0x60 [ 302.062797][ C0] ? kasan_save_track+0x14/0x30 [ 302.062818][ C0] ? kasan_save_free_info+0x3b/0x60 [ 302.062848][ C0] ? __kasan_slab_free+0x51/0x70 [ 302.062871][ C0] ? kfree+0x14f/0x4b0 [ 302.062890][ C0] ? ref_tracker_free+0x377/0x820 [ 302.062914][ C0] ? dst_destroy+0x108/0x3f0 [ 302.062945][ C0] ? rcu_core+0x79d/0x14d0 [ 302.062967][ C0] ? handle_softirqs+0x213/0x8f0 [ 302.062989][ C0] ? irq_exit_rcu+0xbb/0x120 [ 302.063011][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 302.063042][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.063062][ C0] ? lock_release+0x3e5/0x6f0 [ 302.063080][ C0] ? _raw_spin_unlock+0x16/0x50 [ 302.063108][ C0] ? wg_ratelimiter_gc_entries+0x2b0/0x520 [ 302.063140][ C0] ? process_one_work+0x9c5/0x1ba0 [ 302.063158][ C0] ? worker_thread+0x6c8/0xf00 [ 302.063189][ C0] kasan_save_track+0x14/0x30 [ 302.063211][ C0] kasan_save_free_info+0x3b/0x60 [ 302.063241][ C0] __kasan_slab_free+0x51/0x70 [ 302.063265][ C0] kfree+0x14f/0x4b0 [ 302.063284][ C0] ? ref_tracker_free+0x377/0x820 [ 302.063309][ C0] ref_tracker_free+0x377/0x820 [ 302.063334][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 302.063358][ C0] ? dst_destroy+0x108/0x3f0 [ 302.063387][ C0] ? rcu_core+0x79d/0x14d0 [ 302.063409][ C0] ? handle_softirqs+0x213/0x8f0 [ 302.063431][ C0] ? irq_exit_rcu+0xbb/0x120 [ 302.063453][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 302.063484][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.063504][ C0] ? lock_release+0x3e5/0x6f0 [ 302.063522][ C0] ? _raw_spin_unlock+0x16/0x50 [ 302.063549][ C0] ? wg_ratelimiter_gc_entries+0x2b0/0x520 [ 302.063587][ C0] ? process_one_work+0x9c5/0x1ba0 [ 302.063605][ C0] ? worker_thread+0x6c8/0xf00 [ 302.063623][ C0] ? kthread+0x2c1/0x3a0 [ 302.063647][ C0] ? ret_from_fork+0x45/0x80 [ 302.063665][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 302.063694][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.063726][ C0] ? ipv4_dst_destroy+0x1ef/0x290 [ 302.063745][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 302.063770][ C0] dst_destroy+0x108/0x3f0 [ 302.063800][ C0] ? rcu_core+0x79b/0x14d0 [ 302.063823][ C0] rcu_core+0x79d/0x14d0 [ 302.063847][ C0] ? __pfx_rcu_core+0x10/0x10 [ 302.063872][ C0] ? net_tx_action+0x7ec/0xd00 [ 302.063898][ C0] handle_softirqs+0x213/0x8f0 [ 302.063923][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 302.063948][ C0] irq_exit_rcu+0xbb/0x120 [ 302.063971][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 302.064002][ C0] [ 302.064008][ C0] [ 302.064014][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.064035][ C0] RIP: 0010:lock_release+0x3e5/0x6f0 [ 302.064054][ C0] Code: 7e 83 f8 01 0f 85 fd 01 00 00 9c 58 f6 c4 02 0f 85 e8 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 302.064073][ C0] RSP: 0018:ffffc90004747b98 EFLAGS: 00000206 [ 302.064088][ C0] RAX: dffffc0000000000 RBX: 1ffff920008e8f75 RCX: ffffc90004747be8 [ 302.064102][ C0] RDX: 1ffff11004f2915a RSI: ffffffff8b6cd2c0 RDI: ffffffff8bd1b6c0 [ 302.064116][ C0] RBP: 609f4d6580643572 R08: 0000000000000000 R09: fffffbfff20bebb1 [ 302.064130][ C0] R10: ffffffff905f5d8f R11: 0000000000000000 R12: 0000000000000002 [ 302.064143][ C0] R13: 0000000000000003 R14: ffff888027948ad8 R15: ffff888027948000 [ 302.064163][ C0] ? wg_ratelimiter_gc_entries+0x2b0/0x520 [ 302.064195][ C0] ? __pfx_lock_release+0x10/0x10 [ 302.064213][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 302.064237][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.064261][ C0] ? lock_acquire+0x2f/0xb0 [ 302.064278][ C0] ? wg_ratelimiter_gc_entries+0xc6/0x520 [ 302.064312][ C0] _raw_spin_unlock+0x16/0x50 [ 302.064341][ C0] wg_ratelimiter_gc_entries+0x2b0/0x520 [ 302.064372][ C0] ? lock_acquire+0x2f/0xb0 [ 302.064392][ C0] process_one_work+0x9c5/0x1ba0 [ 302.064415][ C0] ? __pfx_work_fn+0x10/0x10 [ 302.064441][ C0] ? __pfx_process_one_work+0x10/0x10 [ 302.064464][ C0] ? assign_work+0x1a0/0x250 [ 302.064496][ C0] worker_thread+0x6c8/0xf00 [ 302.064518][ C0] ? __kthread_parkme+0x148/0x220 [ 302.064544][ C0] ? __pfx_worker_thread+0x10/0x10 [ 302.064564][ C0] kthread+0x2c1/0x3a0 [ 302.064594][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.064624][ C0] ? __pfx_kthread+0x10/0x10 [ 302.064649][ C0] ret_from_fork+0x45/0x80 [ 302.064666][ C0] ? __pfx_kthread+0x10/0x10 [ 302.064691][ C0] ret_from_fork_asm+0x1a/0x30 [ 302.064725][ C0] [ 302.790458][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 302.797343][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 302.807853][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 302.817920][ T30] Call Trace: [ 302.821205][ T30] [ 302.824143][ T30] dump_stack_lvl+0x3d/0x1f0 [ 302.828751][ T30] panic+0x71d/0x800 [ 302.832668][ T30] ? __pfx_panic+0x10/0x10 [ 302.837120][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 302.842552][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 302.848554][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 302.853943][ T30] ? watchdog+0xd76/0x1240 [ 302.858372][ T30] ? watchdog+0xd69/0x1240 [ 302.862806][ T30] watchdog+0xd87/0x1240 [ 302.867089][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.871775][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.877002][ T30] ? __kthread_parkme+0x148/0x220 [ 302.882045][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.886739][ T30] kthread+0x2c1/0x3a0 [ 302.890829][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.896056][ T30] ? __pfx_kthread+0x10/0x10 [ 302.900666][ T30] ret_from_fork+0x45/0x80 [ 302.905091][ T30] ? __pfx_kthread+0x10/0x10 [ 302.909697][ T30] ret_from_fork_asm+0x1a/0x30 [ 302.914488][ T30] [ 302.917724][ T30] Kernel Offset: disabled [ 302.922037][ T30] Rebooting in 86400 seconds..