last executing test programs: 2m32.986045639s ago: executing program 0 (id=2052): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0x1}) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000040)={0x0, 0xffff}, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000280)={0x51a3, 0x0, 0x8, r3, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/72, 0x48}], &(0x7f0000000340)=[0xea, 0x6, 0x3, 0x7f], 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x8000, 0x7fffffff}}) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f00000000c0)=0x8) 2m32.453835018s ago: executing program 0 (id=2055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x3000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x4000000000000000) 2m31.032303582s ago: executing program 0 (id=2058): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x8, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x4044004) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x2a040, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fsopen(0x0, 0x0) openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1ec6, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0x4002, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) pipe(&(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x934, 0x0, &(0x7f00000001c0)="03cc0a4703e5f64f345df30de69a6a6d634ad09d503ee4fcc2466dc325bcea3fb2ee8cc004a989f5c1ae8d013ae87c", 0x0, 0x2f}) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m30.023457769s ago: executing program 0 (id=2065): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000c000000090000000000000205000000000000000300000d00000000030000000300000006000000000000000c00000003000000305f5f5f2e2e302e2e6100"], &(0x7f00000003c0)=""/4096, 0x60, 0x1000, 0x0, 0x9, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, r4}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setitimer(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0, 0x0) ftruncate(r6, 0x8800000) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89ef, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0x80) getcwd(&(0x7f0000000340)=""/112, 0x10) 2m26.624975811s ago: executing program 0 (id=2083): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe0900, 0x0) pipe(0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) (fail_nth: 1) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) dup3(r0, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x20000014) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m24.178027467s ago: executing program 0 (id=2094): mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e7364656c65676184652c6d656d6f72795f68756765746c62ffff63636f756e74696e672c00"]) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x62200) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x25, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad9, 0x80, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000080)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x81}}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000100)={0x5, r2, 0x2, {0x8000000000000001, 0x7}, 0xb8}, 0x1) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x400240) ioctl$LOOP_SET_FD(r7, 0x4c00, r1) getsockopt(r1, 0x114, 0x271b, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r9, 0x0, 0x20000800) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 2m23.282163945s ago: executing program 4 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='sys_exit\x00', r1, 0xc000000}, 0x18) 2m23.049504638s ago: executing program 4 (id=2101): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) ftruncate(r0, 0x7fffffffffffffff) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x60000006}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="c021", 0x2}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x7b7306c040530be}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ec4, &(0x7f0000000740)={0x0, 0xbb3c, 0x10, 0x2, 0x1e3}, &(0x7f0000000140), &(0x7f0000000200)=0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, r7, r8, r9, 0x0, r10, r11], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000900)={r8, r12, 0xcc, 0x6, 0x4}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000840)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000007c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0x0, 0x0, 0x1, {0x0, r13}}) epoll_pwait2(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x6}, &(0x7f00000001c0)=0xc) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000040)="5b17", 0x2}, {&(0x7f00000004c0)="bfafbd8342f49c0fef07fcbae9f5ab987dc5b2124c8078e0d625335c40e51b4851effa0ee06711f5847d4b50e5f89974d384a94877990801dc555b59c06055c98929d6146d1bbf7ee0409d2a4d5a73bfb36d7dbba3292da9677ad5f850a341e6d5218745245314f3ab2e70070cdab08716e3be8806ab1fd55261704491b699563b50f73186b98b65fbf564ce4d1945a7301a6e42eb9de44f4d41255d5d5707", 0x9f}, {&(0x7f0000000340)="d5540a1d16296553f8c235afd6dcadf1d21a38605b2ab8864f36c26fca6f08ccc163d20c6b00d568d322e4a2d431d57ef6ea440fa0f61bcef78e20b6228a6a0ff04fa6d57c7db1d4e4e7619fd03a7eb205a581034af97e5ecf2e6c5567", 0x5d}, {&(0x7f00000003c0)="b982f31c9d10cab90494b1a17109b6fcffbd47d136979c3255a5b2bf312cc60ac4d45bd2dc3d87e002a6e53cf1b675655c3bd1a9e51d65e283ad7043968f8ed3edc39c068a8c15a6b231234bfa3e2c71ba1b2fd47c2aad1345e0b9681a70d7cd7aa4dc8df69429096b8d394fec1fc6518796ed7d7546f50db8f4bf9c422095b866201e914ee921e4eb0fce549f53f08ebac861a5dbad45438473571f0e0e0ab1ad30c2d8f359c7a20d2558f372b18480665f9c918d52bc4d5b8ae3e161838286bdb71e2f0f218dc7d55a977bf7b814d1c36b495023d05c5a4fb33b", 0xdb}, {&(0x7f0000000ac0)="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", 0x1b3}, {&(0x7f00000009c0)="48d20cc58bb3b08538802d55676494687767410fc4623e046183fe0b661030d232090c034a25d5b61ec6c0299dcd809731f7245c4eec44d018fe6319b52b3e7fa38bbfef5fd40047509d977d0381b1c6b2bb9dd24d84adc04777cbbfd2c7e72362c026e090b1b61270a928d58dd5d1846d602b002927ff6e60b92c12b9cc559eddddab54eaff6c07f6aa282138070e04791a99d248ce935b6268e6386c76356a4d91956f558fdc8d32ff38bb8966207d5d8493b115fa2428233d82addda34976efd5f1306b411d2903de938ad89d2b8942172d146fb1f4ecba", 0xd9}, {&(0x7f0000000080)="1eef16f7b3d2", 0x6}], 0x7) 2m20.883449651s ago: executing program 4 (id=2108): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$sequencer(r1, &(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x44, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2m20.457449089s ago: executing program 4 (id=2110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002040)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x2, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}], 0x1, 0x402c888) mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000380)={0x12b, 0x0, 0xffffb570, 0x4, 0x0, "0c796c4e98fd3136ee35c34655aa7253bd92fe", 0x7, 0x8}) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)=ANY=[], 0x8) 2m19.549619716s ago: executing program 4 (id=2114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0xf0, 0xe, 0x41, &(0x7f0000000200)="e027423b19c6b67ae8e86c0d85ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="00fbff008600000000003271a5bf00", 0x20) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000480)={0x80, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/218, 0xda}], &(0x7f0000000440)=[0x10001], 0x1}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 2m16.979982663s ago: executing program 4 (id=2120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_io_uring_setup(0x3808, &(0x7f0000000040)={0x0, 0x3c64, 0x200, 0x2, 0x304}, &(0x7f0000000140), &(0x7f0000000180)) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000800)="38c8114f", 0x4}], 0x3) 2m9.055752838s ago: executing program 32 (id=2094): mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e7364656c65676184652c6d656d6f72795f68756765746c62ffff63636f756e74696e672c00"]) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x62200) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x25, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad9, 0x80, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000080)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x81}}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000100)={0x5, r2, 0x2, {0x8000000000000001, 0x7}, 0xb8}, 0x1) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x400240) ioctl$LOOP_SET_FD(r7, 0x4c00, r1) getsockopt(r1, 0x114, 0x271b, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r9, 0x0, 0x20000800) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 2m1.848625881s ago: executing program 33 (id=2120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_io_uring_setup(0x3808, &(0x7f0000000040)={0x0, 0x3c64, 0x200, 0x2, 0x304}, &(0x7f0000000140), &(0x7f0000000180)) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000800)="38c8114f", 0x4}], 0x3) 59.132450483s ago: executing program 6 (id=2169): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x543, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x4, 'syz1\x00', @bcast, 0x0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x80) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000008815cdaf12153c01b3c3aa3f000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/192], 0xfc}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010028bd700000000000fc02000000000000000000000000000064010102000000000000000000000000000000000000fffc0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000001a00e0000002000000000000000000000000fe8000000000000000000000000000bb3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 53.396015097s ago: executing program 5 (id=2142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0xc00}}], 0x40001b6, 0xf5) 49.58399362s ago: executing program 6 (id=2169): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x543, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x4, 'syz1\x00', @bcast, 0x0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x80) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000008815cdaf12153c01b3c3aa3f000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/192], 0xfc}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010028bd700000000000fc02000000000000000000000000000064010102000000000000000000000000000000000000fffc0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000001a00e0000002000000000000000000000000fe8000000000000000000000000000bb3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 44.841736682s ago: executing program 5 (id=2142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0xc00}}], 0x40001b6, 0xf5) 37.125625542s ago: executing program 6 (id=2169): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x543, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x4, 'syz1\x00', @bcast, 0x0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x80) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000008815cdaf12153c01b3c3aa3f000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/192], 0xfc}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010028bd700000000000fc02000000000000000000000000000064010102000000000000000000000000000000000000fffc0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000001a00e0000002000000000000000000000000fe8000000000000000000000000000bb3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 34.660517144s ago: executing program 5 (id=2142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0xc00}}], 0x40001b6, 0xf5) 28.432305532s ago: executing program 6 (id=2169): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x543, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x4, 'syz1\x00', @bcast, 0x0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x80) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000008815cdaf12153c01b3c3aa3f000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/192], 0xfc}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010028bd700000000000fc02000000000000000000000000000064010102000000000000000000000000000000000000fffc0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000001a00e0000002000000000000000000000000fe8000000000000000000000000000bb3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 24.354071331s ago: executing program 5 (id=2142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0xc00}}], 0x40001b6, 0xf5) 18.915540312s ago: executing program 6 (id=2169): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x543, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x4, 'syz1\x00', @bcast, 0x0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x80) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000008815cdaf12153c01b3c3aa3f000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/192], 0xfc}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010028bd700000000000fc02000000000000000000000000000064010102000000000000000000000000000000000000fffc0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000001a00e0000002000000000000000000000000fe8000000000000000000000000000bb3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 15.77741356s ago: executing program 5 (id=2142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0xc00}}], 0x40001b6, 0xf5) 7.911801812s ago: executing program 6 (id=2169): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x543, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x4, 'syz1\x00', @bcast, 0x0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x80) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000008815cdaf12153c01b3c3aa3f000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/192], 0xfc}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010028bd700000000000fc02000000000000000000000000000064010102000000000000000000000000000000000000fffc0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000001a00e0000002000000000000000000000000fe8000000000000000000000000000bb3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.540646308s ago: executing program 1 (id=2478): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp={0xb, 0x3, 0x31364d4e, 0x5, 0xc, [{0x7ff, 0x7f}, {0x9, 0x7}, {0x7f9}, {0x1, 0xe}, {0xe438, 0xb7}, {0x3}, {0x2, 0xfffffff4}, {0x10, 0x80}], 0x4, 0xff, 0x1, 0x1, 0x7}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x94}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x8002]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrandom(0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) io_uring_enter(r7, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20) 5.498039489s ago: executing program 1 (id=2480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), 0x0, 0x2}, 0x20) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 4.022133005s ago: executing program 2 (id=2486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='sys_exit\x00', r1, 0x10000000}, 0x18) 4.012335645s ago: executing program 5 (id=2142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0xc00}}], 0x40001b6, 0xf5) 2.237292s ago: executing program 1 (id=2488): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000800)=[@wr_crn={0x46, 0x20, {0x3, 0x1}}, @out_dx={0xaa, 0xffffffffffffff96, {0x399d, 0x2, 0x4000000000000000}}, @in_dx={0x82, 0x20, {0xee41}}, @rdmsr={0x32, 0x18, {0x973}}, @wr_drn={0x6e, 0x0, {0x7, 0xd4}}, @set_irq_handler={0xbe, 0x20, {0x9, 0x1}}, @set_irq_handler={0xbe, 0x20, {0x96}}, @out_dx={0xaa, 0x28, {0xea18, 0x0, 0x5}}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @cpuid={0x14, 0x0, {0x4, 0x1}}, @wrmsr={0x1e, 0x0, {0xb899f3348cc18cba}}, @code={0xa, 0x94, {"da51e0c744240000500000c7442402b7170000c744240600000000c421d95823438d04b7c4627d17fa66baf80cb8d431f48fef66bafc0c66ed0f788f00000100c74424005d408771c7442402fe990000c7442406000000000f01142466660f382520c744240003000000c7442402c4000000c7442406000000000f011c248f6978d60479"}}, @code={0xa, 0x61, {"42a100000000000000004f0fc75c77ea66b8de000f00d0440f79920070000066b863008ee80f013b48b81ac20000000000000f23c80f21f835080040000f23f83e670f00578067e70dc4a3b568433896"}}, @code={0xa, 0x6b, {"65450f2005b9440900000f32c4237bf053bca30fc76900c7442400b7970dd7c74424029d925b39c7442406000000000f01142447fdc4822505a91a0000006543d9fa363ef20f2cbf0000c0feb9800000c00f3235008000000f30"}}, @cpuid={0x14, 0x18, {0x6, 0x6}}, @wrmsr={0x1e, 0x20, {0xc0011031, 0xb}}, @set_irq_handler={0xbe, 0x20, {0xf7, 0x2}}, @wr_drn={0x6e, 0x20, {0x0, 0xffffffffffffffff}}, @wr_drn={0x6e, 0x20, {0x3, 0xfffffffffffffff7}}, @wrmsr={0x1e, 0x20, {0xadf, 0x1ff}}, @code={0xa, 0x44, {"67660fae70dfc4217567a20000000036d8f42e430f01ca660f383368df66660f09670f01cf400f09c401156ac5660f38827e00"}}, @uexit={0x0, 0x18, 0x7}], 0x3dc}) poll(&(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) r2 = syz_open_dev$vcsn(0x0, 0x1002, 0x434901) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x2d, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) clock_settime(0x5, &(0x7f0000000180)={0x0, 0x3938700}) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1001, 0xf, 0xf, "24669c7026b3551c6a8882e0c0020035265a02"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x4, 0x4, 0x6}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.236865356s ago: executing program 2 (id=2489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x400000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="7838fd341a0700cc28331d49733137d9", 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf256600000008000300", @ANYRES32=r9, @ANYBLOB="0800b700f600e1ff080026"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.165672111s ago: executing program 3 (id=2491): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffff, 0x2, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff5}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542140002007767300000000000000000cc0f682439ac7da44f05d5cb645ec800000000002c0008802800008024000100d1732889f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b6b3651dc1e7e7475fbe9cbaf39f61dab3169252e24ea7f701045358fa75ce765cf928781"], 0x78}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="772cdb1454e96363ab095e6c8a6457a859646193010a24b50364a68319f695d07f50a1aa0b1914dce43c759f45011e9074d86139a3f7788efebb944f4f07c08c7dffb75ed288bf55b5ed61ba628086656c86502ec7de6d963182ad14142d8a4464ae41a8ff8640a437de15b36f7fed34d3998b0b91a6c860bb515d63398b97d208672d50cea387f2e09b000047f6fceef0a4c63cc4ab7801a4305533e340bbddaa791dcf1597a3f3ed476e7d74897baaa915d16c1e6d6ecf04", 0xb9}, {&(0x7f0000000440)="caf114a73210db1da97cce97cc666786a7af221f91ed4217860057735cf6926296985a40a8111a0f299393a71563723d6a811c4ae9decdc0920abb59e1a948cc1b761823f3ed0908489424f501d3a9214dc1d3e00c0b7f24bf228d11465c218423483f84a064c0d101b42ad2e7b350250512d9b5482d1bf102c1939f014dbeee034f2e980f993c15cb95ae1cb5bef8adfd8eed61c53d2e4ee9e396eb93d9421b1a5dfbf1781a79ef99fd6451414a03e57e8d03c154a655d1c651e812163567e07f6046a53d7933c1820823", 0xcb}, {&(0x7f00000001c0)="1af14ca7167e58888d71d2b23944324440a7a0fa3c19611d747e71d4b8b46578e6a9e7a765b2b481b292ba49277dba179151e82c96ab5d015bac1ea45fb49d909ed4b836133afc3cb17f1344485eb22821794ab7b6d2768a757802d7612374d467", 0x61}, {&(0x7f0000000100)="7fe704ddb0533076288080de5031eb45de301bca47dc49984a506217246bd9dee61020d6198e1a1247438d3647bbae6220451545", 0x34}, {&(0x7f0000000540)="f37dd9c0802c6e71f5099c847ee07b6075a80dd734b970718a541202288ca8b998399c1c1346a8c1f9fc9e70fb18cb11b307092207e64b32bf47658ea05283374c4641f4f245cc8071055455daae7afabdb267b5e8ce1ddc145d8211f55061eadb2dcd4f8cd4ade19df1bb7d9eb3d6b8fb96229c20b1", 0x76}, {&(0x7f00000005c0)="0fe65ffa9108ee3293fea328265fa9a0b24c3c5ddf6be936138dfad672ecc960f52ab119faee5f5bd0ca01d0d6616a44e80ded52e6041a06faf3d85f50091ba12a8c80239b3729fab228687047a5a7773dc63a237bd80553c9074b07b111296021adc6ead36a15c7ee5cc5ba66f08746ec376649b8684faddde2ef5cee", 0x7d}, {&(0x7f0000000640)="fcf3c30ae8a913aaf5bdef6ad081b133585d6583d067d9cf52e2c307cb36b1ad9f", 0x21}, {&(0x7f0000000680)="f31dbe714a7223f28ed43ef1d0e91f", 0xf}], 0x8, &(0x7f0000000c00)=[{0x80, 0x1, 0x9df, "3a59c962ad6107c5ecbb380edb2f3d7e3a73eff36c64c6ab13b467101250242c594044f250114d89a199560aa86d05df4bb19b256f288255d27c070853475b3ccb6e07a621a3f83ba9d1603de5f4dbae3719d8f786b33a8f5ef3be8037739e9cc27c5e69d0bff00839ac33b7fe"}, {0x88, 0x103, 0x555b, "a679363f2486d7962c4cb59a50903d05239f1e0dca84e75e1e5b7b259a910b25d83267ced5767e5e84c8cccd3dd5a0eb5c1b974261b63bd1f8aea7fc6d85c53173703a53c7e0006d414dfd99242f951c89d2718e0d412f8a06776db272949ba3eb28e5940258d520e45d4536c017b1cc30cf"}, {0x78, 0x10b, 0x3, "8b8b9865b12d8be54db30a4c718a8e96f13b4b12fd6ddd82f0c25601b9112818187ac566500c344962df35c4bbd6c5cd61fe72acf4f75a111a53bb5636968fec3c0fc373ffd32311eb2f8bc9ade1529fa23f7c410e6433de4f4cc91b3502e3f5db15ea"}, {0x70, 0x10b, 0x7, "3c24de91ea4d3b8df88736c5595705dd409ff6eb204d7330155a2da7c61e0b39ba6812061bba232bfc13f1a818dd7f0df8b6140e6dfd6e70ef8e8bb394d0091ab3a4a1ff4296a3b241f9680d33c2b99cb65c8815dd7761fc23c3d6"}, {0x100, 0x1f5, 0x3, "070d96be0a5e36d55b7a167087057656ef81ad31835d22c3c0328543eba1d6878ae9890d721d133a30485fe9690b406ea11d5429b4f114b9caa3d678fa80db85ccbcacdcf8cf5ad1266ed81386ac86dea5089a1a1b5bf762d94827f9a14918bb24951fa57b82c7c8d06d03066fa540bc2996f29ecde0268462049f4094eb13a388ba902ff8494185fc82a8ea7b682e968bb0538e07f13bf2d10b52698118a5758deecf5c2810a334f1e20f7a95ce3c7987d7a7e1a77696aa9f58262dbee2b1809dcf4973ddb5c170664e77f6ef9a04ba134c101929de58f3f90248aba68ac8851267cf5f670d7124d873e13265"}, {0x198, 0x116, 0xf, "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"}, {0x20, 0x111, 0x7, "fb6a516d20d06156920601b986df32"}], 0x4a8}, 0x4000) mknod(0x0, 0x8, 0x8) socket(0x10, 0x80000, 0x1000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x8000a, 0x10, 0x3ffffffe, 0x1}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, 0x0, &(0x7f00000004c0)=""/195, &(0x7f00000005c0)=""/187, 0x100000}) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x2002, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.813326428s ago: executing program 3 (id=2492): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000800)=[@wr_crn={0x46, 0x20, {0x3, 0x1}}, @out_dx={0xaa, 0xffffffffffffff96, {0x399d, 0x2, 0x4000000000000000}}, @in_dx={0x82, 0x20, {0xee41}}, @rdmsr={0x32, 0x18, {0x973}}, @wr_drn={0x6e, 0x0, {0x7, 0xd4}}, @set_irq_handler={0xbe, 0x20, {0x9, 0x1}}, @set_irq_handler={0xbe, 0x20, {0x96}}, @out_dx={0xaa, 0x28, {0xea18, 0x0, 0x5}}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @cpuid={0x14, 0x0, {0x4, 0x1}}, @wrmsr={0x1e, 0x0, {0xb899f3348cc18cba}}, @code={0xa, 0x94, {"da51e0c744240000500000c7442402b7170000c744240600000000c421d95823438d04b7c4627d17fa66baf80cb8d431f48fef66bafc0c66ed0f788f00000100c74424005d408771c7442402fe990000c7442406000000000f01142466660f382520c744240003000000c7442402c4000000c7442406000000000f011c248f6978d60479"}}, @code={0xa, 0x61, {"42a100000000000000004f0fc75c77ea66b8de000f00d0440f79920070000066b863008ee80f013b48b81ac20000000000000f23c80f21f835080040000f23f83e670f00578067e70dc4a3b568433896"}}, @code={0xa, 0x6b, {"65450f2005b9440900000f32c4237bf053bca30fc76900c7442400b7970dd7c74424029d925b39c7442406000000000f01142447fdc4822505a91a0000006543d9fa363ef20f2cbf0000c0feb9800000c00f3235008000000f30"}}, @cpuid={0x14, 0x18, {0x6, 0x6}}, @wrmsr={0x1e, 0x20, {0xc0011031, 0xb}}, @set_irq_handler={0xbe, 0x20, {0xf7, 0x2}}, @wr_drn={0x6e, 0x20, {0x0, 0xffffffffffffffff}}, @wr_drn={0x6e, 0x20, {0x3, 0xfffffffffffffff7}}, @wrmsr={0x1e, 0x20, {0xadf, 0x1ff}}, @code={0xa, 0x44, {"67660fae70dfc4217567a20000000036d8f42e430f01ca660f383368df66660f09670f01cf400f09c401156ac5660f38827e00"}}, @uexit={0x0, 0x18, 0x7}], 0x3dc}) poll(&(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) r2 = syz_open_dev$vcsn(0x0, 0x1002, 0x434901) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x2d, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) clock_settime(0x5, &(0x7f0000000180)={0x0, 0x3938700}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x48840, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1001, 0xf, 0xf, "24669c7026b3551c6a8882e0c0020035265a02"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x4, 0x4, 0x6}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.811133255s ago: executing program 1 (id=2493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f000000aac0)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f0000001080)=""/250, 0xfa}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000008940)=""/4096, 0x1000}, {&(0x7f0000009940)=""/155, 0x9b}, {&(0x7f0000009a00)=""/144, 0x90}, {&(0x7f0000009ac0)=""/4096, 0x1000}], 0x7, &(0x7f00000011c0)=""/110, 0x6e}, 0x5}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001240)=""/65, 0x41}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/75, 0x4b}, {&(0x7f0000002480)=""/11, 0xb}, {&(0x7f00000024c0)=""/151, 0x97}], 0x5, &(0x7f0000002600)=""/159, 0x9f}, 0x5}, {{&(0x7f00000026c0)=@un=@abs, 0x80, &(0x7f00000049c0)=[{&(0x7f0000002740)=""/105, 0x69}, {&(0x7f00000027c0)=""/52, 0x34}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/168, 0xa8}, {&(0x7f00000038c0)=""/224, 0xe0}, {&(0x7f00000039c0)=""/4096, 0x1000}], 0x6, &(0x7f0000004a40)=""/4096, 0x1000}, 0x80000000}, {{&(0x7f0000005a40)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000083c0)=[{&(0x7f0000005ac0)=""/4, 0x4}], 0x1, &(0x7f00000003c0)=""/115, 0x73}, 0x9}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005bc0)=""/103, 0x67}], 0x1, &(0x7f0000005c80)=""/4096, 0x1000}}, {{&(0x7f0000006c80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000007180)=[{&(0x7f0000006d00)=""/248, 0xf8}, {&(0x7f0000006e00)=""/239, 0xef}, {&(0x7f0000006f00)=""/81, 0x51}, {&(0x7f0000006f80)=""/244, 0xf4}, {&(0x7f0000007080)=""/14, 0xe}, {&(0x7f00000070c0)=""/115, 0x73}, {&(0x7f00000004c0)=""/38, 0x26}], 0x7, &(0x7f0000007200)=""/51, 0x33}, 0xffe00000}, {{&(0x7f0000007240)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000008400), 0x0, &(0x7f0000008440)=""/104, 0x68}, 0x1c}, {{&(0x7f00000084c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000008600)=[{&(0x7f0000008540)=""/191, 0xbf}], 0x1, &(0x7f0000000280)=""/248, 0xf8}}], 0x8, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x29, 0x80000, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1d}, {0xe, 0xffff}, {0xe, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff}, {0x5, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x15) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x15) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) dup(r8) (async) dup(r8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) (async) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r10 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r10, 0x110, 0x4, &(0x7f00000001c0)=0x4, 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r10, 0x110, 0x4, &(0x7f00000001c0)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800083afffe8000000000000000000000000000bb00000022605dc4fad26f0000000000000000000000000180"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$vga_arbiter(r9, &(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0xc) 1.781599732s ago: executing program 3 (id=2494): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) (async) r1 = socket(0xa, 0x3, 0xff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000740)='ext4_fc_commit_start\x00', r2}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000125000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000dc0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000380)="78a1725b34a6d40e7d6055a2fab13c5d219ffc3a3a240510a41f3aa881f8eab32598d35d4be10d404077f829417feab8fedda6c79d3f7e6b3ea71132d19352c862783fd65c9a288c879612529490077b6a85ac9c89ecc8c1f00fc1e64c1aeaa57103383648715dc8d444d4539323d843af3b9a8b46efa18e3810239a60f46809276e7ceaa9c488ea7a8b275858e5a5a4ad67b93af5e63cd73fe25ed317ecebbfc74d44ec488757e29b7b799dddee6123bb0a867c2f5ecbf87110bd1aa8", 0xbd}, {&(0x7f0000000780)="995201c2266fad54d950af2e5d0380a91de6ac723952a78d670f7f70710329179dacf9c74da12f8c07000000c60462ec24ff0a300667f99e4f159fc4335e4f6ec9e561c0bb050b174978b90bc202a3781174b89ecb4b6c9ca758ccc0ee745fe8069247e5089e95fb592f001dcc30643ebd476565cc86e5ba00000000000000", 0x7f}, {&(0x7f00000004c0)="b7d24742c5689ef57d102ded80343ae7791bc85ecdf2e02212442153753b29772f45cca198e7933be12573e6564341214500a04532cced3935486e6412c67cd119198154afcbb927a9defd4453e50fe9347e10f0d1b60653ade6030bc3b603fc01d05cf119f331f188d5b9915b2ccb534e22e0ac9a497055f62008751be4143f8fa20bb0552a02a8372c2f6683f17503bdb485340e4ce42434c530994b747834be7d945c103f77996ee8fe1da4e5985cfdb63e9842b782ecd5253eb5b3e9006bc7cfbbfdfe91c610884935bafe66fec0a01e295c9ea262", 0xd7}, {&(0x7f0000000e40)="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", 0x1b7}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r1, 0xffffffffffffffff, r2, r5, r0]}}, @rights={{0x20, 0x1, 0x1, [r6, r1, r6, r6]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000000900)="e75663cba33ec3de27b8a702b56f3e45b65bfe97c9ec225e285aa425fdb31e79dcd68f24ae21cbd7c2acef33128026a7d82cfb3424343bcfb7c27bb8314f381a85b481eee64b9145175d75ab3e800972480a9142e4e04f32248b9e504526ec43a151674facab883ade89a829b606fe8ea98d0ba8f4cff5ed0f17d8ddfe17aac904", 0x81}], 0x2, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r6]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x4c000}}], 0x2, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r8 = socket$netlink(0x10, 0x3, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c6569766cd6554362ac1a3e75d1c31792d350e7653a362d4e3a302f4e00"]) writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x181820, 0x0) ioctl$IMDELTIMER(r9, 0x80044941, &(0x7f00000001c0)) (async) syz_usb_connect(0x2, 0xfffffffffffffd94, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0xf3, 0x4b, 0x22, 0x40, 0x5ac, 0x30a, 0x7a35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d9, 0x1, 0xff, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0xc, 0x3, 0x1b, 0x2, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xd, 0x8, 0x7, [@generic={0xc, 0x5, "b2c30d9f9e8f4ae31502"}, @generic={0x22, 0xf, "ed54ee09631ecbc6bfd5857bb482171aa5eaf728a8fb9c603155b667c0d00184"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x3, 0xb, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6}, @generic={0xa4, 0x6008e63fa0b148d8, "0b3ba35bfc2885c42b3654e0ee78a44f60c22c7bdfd44adcc4c6a3f34e2191db014f563121f6a27f6cd1a11183d81168175c012ff37d602dcf25ecbf3952a6f6960598a0647cdeb562c62b5fdca7251819ff66cee75e8bc06128cc9c5a52cf9448ee4f03c1fba94a4f4aac2fc8bb913c4a31621cb2f7cfbd68f7c54236a7144498e435ea3593bf22b162175da63811f56852ddea28f816eda97649af2ea39ef9a955"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x9, 0x52, 0x8, [@generic={0x85, 0x22, "7fe437b586a636d3a5f99e845f65c4fa9bf3f69ef7c2e2e169110bb6146cec4f7e8fcfa8cb42f81ed75f2497a7d68ee25b369c758f2d74517978ee7ddc575c8173e4543a173b372eec67825856cac16a75d3026de2471918f3a5092b21a2e82489ccf968a53ebd77cb75552d2804a1b0cef1e86c441850299368ad5b40f4d021875ccf"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x5}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x1, 0x1, 0x4, [@generic={0x2a, 0x10, "a9e6a1bac2054ca2be6b15df3644d779a2f9784050d9915a668e3957ee8fc12ab6f4e14946abd945"}, @generic={0xaa, 0x4, "18f451065ee1add123c5870b7a060f5f34ae6917ca9daca74a133085e433ac256093a8297cce0b53f7699a1580620271bf5c6fb012d0e2be837449a7b66f425f7f0a544a484cc5bd7e2f4d0ce0c342626d966367d7ea1e8daad35f48a221ea193d88b237dba5243b9b4cd9c6a1d673481b81db647bcff468013295d70023dfdc824fa7040342ecb4a0621ab6ab4ed13c075a59efa674a0f26bfd5d6db5a30d92392b88aac6659964"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xa, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x31, 0x3}, @generic={0xda, 0xb, "81b672808e9f25d5ed4deb181dade5a0fea8d928b92cce7da607fb683efd35269c3e0d6ef6e9272cfddf1c9da52f590145c0ece3f7656f19c76b4811f6bf8722061c4960bb7800a95a185f68d3b960407481b82ccad5e060ace889e6392cc7ff7fa2dd67701c0db6e5051834aa030cdb1300f60cdff94ba4800452ca08966f902bcb716ef2d2652636d90d151ccf5a1ac7b74ae29ca7e2b6384bc8d1cd37d4ac0d2eadbe3979da42f5a7caeab58f8c1c04cd66bc76d55c338064efba9e6cff017cd59b9bfdc9759e19f1d0ad8297a751e4e06d47a299d215"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0xc, 0x81, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8e}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x3, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xf5, 0x2, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xee, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3c4}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0xff, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f}, @generic={0x10, 0xf, "80a486e932b6d5fefb1cece27184"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x2, 0x81, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x3, 0x0, 0xa}}]}}]}}]}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="12011003000000406a0529004000010203010902240001164770e00904000801030102ae09210500010122910909058103000205000d"], &(0x7f0000001000)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x110, 0xff, 0x1, 0xd, 0x20, 0x4}, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000c40)=@string={0x6, 0x3, "98016974"}}]}) (async) r10 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r10, 0x0, 0x0) 1.537779921s ago: executing program 3 (id=2495): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x15, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xef, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x2, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x94, 0x8, 0x1d}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x4, 0xbe, 0xff, 0x8, 0xff}, 0x10a, &(0x7f0000000280)={0x5, 0xf, 0x10a, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x78, 0x4, 0x9, 0xf, 0x5, [0x0, 0x0, 0xc000, 0xff3fff]}, @generic={0xe9, 0x10, 0x0, "0a385452c624d06259f730455ed6246a89da9e0430ebaeb1ee87d26420d3b09834a96a5aca351e790e8d1a858e2be04951218cf5d231abadcb1be678c689f20cc2e2a451a757726798d593f0e026183e21e0b1fabc87d116951db0f6ec2af30fde721e9f3a27d53c35668a0172b45ebf69bdfeb5658468633abf7b8109041bbd060be22978ac492552f0795008153ee9fec53b88aee7b9bd66e657485b1e928c36ce94d6b87d311509eadf845cb32058375bc05141233fab22b67e09903eaefa59f88556bd1bbe051c58dc04283bd6b1d9f0e569835c8315d5518557cef8fec1fd29da2b736c"}]}, 0x9, [{0xab, &(0x7f00000000c0)=@string={0xab, 0x3, "39b21354f6ec5e7dae3c17b673a7510e74da22005e0eb094b51b3384b116266f55f1f8a6e7af866cd4d611c3497e3532c99adf1e1955fc1ee5235efe357f2a4a6059a330565a1c2f5b51ce7755be510352db83d7088f7e142e09618e90c62efe74ebbf9204220b7f22afd3d15529820a0ad1516554b1dfbfa055bb09bb9fbfdf357f3595fd2074ee5f8fc7e1f5a6759c3168b11daf83c4ca13338467113d629b1af6f964df6086b091"}}, {0x4a, &(0x7f00000001c0)=@string={0x4a, 0x3, "392e69c80114e9cc21cc55cbeb2f03e2c93571dcc782cef3636e515008b2bed4d9318060e508338f7b6300f87e2c953305c3be7f2eddc0807716452cec5948b8c3f6123aa25d9f02"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x62, &(0x7f0000000580)=@string={0x62, 0x3, "b1f7a0e3b840925620f2eb2b8c4643917539ec7a27d5664ba0f7616bf953b916edef60a1bbb57eabbdf065f5a15c2f198dbe0240b42f29adfba977389f67bfcf75e3be360e2fcffa6f76ced9c3aa72586aecb8e10a4b3afbc39ebbcd19ce1f4f"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x26dab17fac51b92}}, {0x24, &(0x7f0000000680)=@string={0x24, 0x3, "d2a3f2122cc8856fe1e12f3cdb40f3b50faa4f07aa918e04dfb2e5186a3f687a3e23"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.416133699s ago: executing program 1 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03062fbd7000fcdbdf250300000005000300000000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0500050080000000050002"], 0x38}}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x806}, 0x1c, &(0x7f0000000100)}}], 0x2, 0x0) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) sendto$inet(r4, &(0x7f0000000200), 0xfffffffffffffef4, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1028) 1.32955437s ago: executing program 2 (id=2497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc6, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 10) 1.08316576s ago: executing program 2 (id=2498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), 0x0, 0x2}, 0x20) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 877.832156ms ago: executing program 3 (id=2499): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000772904830b49598c7e42202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002000000c9880894a11f679ed18e247a4824c2ed7c98110f17828d3ee2891f13f20ad03991933fdc1271e697049b5195eb029eae42e1dc43871a92aa6748129aff000000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}, 0x50) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="00160400000094c161ee79d2ee97fa774f0d9820f662677440d62482344b655b513bf350fd7b21a6881658b0139431ba8667e52792a8765361a8580cd3582b90f96f58e5c28d7ecf467d1bf64dc3a2410223ca1ed3f5e3c818326e14e28e84cf08d7331966476191c9503eb6c21bd1f38224fdbf4fd4964748e341a142493ae06e4168babdb1f96ca8a8465b50"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f000040c000/0x3000)=nil, 0xc, 0x0, 0x0, 0xc2ff, 0xa22383e66e8ea5f2, 0xc, 0x24, 0x76}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="a024eebbd1c621ce3997"], 0x0, 0x0}) r8 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x20000000) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 382.438297ms ago: executing program 1 (id=2500): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80, 0xfe}, 'port1\x00', 0x8, 0x140477, 0x7fff, 0x800004, 0x1ff, 0x0, 0x80000000, 0x0, 0x6}) socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x2, 0xf2e, 0x32314d59, 0x1, 0x9, [{0x1, 0x2}, {0x2, 0x3}, {0x4, 0xfffffffb}, {0x9, 0x100006}, {0xa, 0x4}, {0x1ff, 0xfffffbff}, {0x0, 0x9}, {0x5, 0x1}], 0x7, 0xb, 0x2, 0x0, 0x5}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x3ff}, &(0x7f0000000600)=0x8) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) 141.439799ms ago: executing program 2 (id=2501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="21010000000000001c0012800b00010062726964676500000c00028006002700a10000fb090001"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 65.981363ms ago: executing program 2 (id=2502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'pim6reg0\x00', 0x4000}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_usb_connect$uac1(0x1, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xe, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0xfd}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0x8, "0eb010cecc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x0, 0x4, {0x7, 0x25, 0x1, 0x2, 0x81, 0xce}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x6, 0x6, {0x7, 0x25, 0x1, 0x1, 0x7, 0xd7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0a9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=2503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x3f00, 0x800}, 0x80a0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): tclass=rds_socket permissive=1 [ 667.761215][T14177] bridge0: port 3(gretap0) entered disabled state [ 667.801016][ T6085] bridge_slave_1: left allmulticast mode [ 667.807257][ T6085] bridge_slave_1: left promiscuous mode [ 667.837939][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.002894][T14182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.225778][ T6085] bridge_slave_0: left allmulticast mode [ 668.232440][ T6085] bridge_slave_0: left promiscuous mode [ 668.238178][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.256019][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 668.266388][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 668.275121][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.285127][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.292967][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 669.587572][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.602323][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.614119][ T6085] bond0 (unregistering): Released all slaves [ 670.000740][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.010709][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.352200][ T5134] Bluetooth: hci3: command tx timeout [ 670.483381][T14183] Failed to initialize the IGMP autojoin socket (err -2) [ 670.510261][ T6085] hsr_slave_0: left promiscuous mode [ 670.531696][ T6085] hsr_slave_1: left promiscuous mode [ 670.535239][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 670.548704][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.556946][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.567012][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.574997][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.621526][ T6085] veth1_macvtap: left promiscuous mode [ 670.627253][ T6085] veth0_macvtap: left promiscuous mode [ 670.633698][ T6085] veth1_vlan: left promiscuous mode [ 670.639160][ T6085] veth0_vlan: left promiscuous mode [ 671.233336][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 671.278302][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 672.202614][T14004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.638753][T14231] bridge2: entered promiscuous mode [ 672.644330][T14231] bridge2: entered allmulticast mode [ 672.691214][T14231] team0: Port device bridge2 added [ 672.773302][T14232] bridge0: port 3(team0) entered blocking state [ 672.784485][T14232] bridge0: port 3(team0) entered disabled state [ 672.793164][T14232] team0: entered allmulticast mode [ 672.809972][T14232] team_slave_0: entered allmulticast mode [ 672.811949][ T30] audit: type=1400 audit(2000000327.075:1287): avc: denied { connect } for pid=14229 comm="syz.1.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 672.829690][T14232] team_slave_1: entered allmulticast mode [ 672.852717][T14232] team0: entered promiscuous mode [ 672.858946][T14232] team_slave_0: entered promiscuous mode [ 672.866020][T14232] team_slave_1: entered promiscuous mode [ 672.872192][T14232] bridge0: port 3(team0) entered blocking state [ 672.878496][T14232] bridge0: port 3(team0) entered forwarding state [ 673.136962][T14004] veth0_vlan: entered promiscuous mode [ 673.152110][T14004] veth1_vlan: entered promiscuous mode [ 673.228916][T14004] veth0_macvtap: entered promiscuous mode [ 673.252868][T14004] veth1_macvtap: entered promiscuous mode [ 673.314522][T14004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.338027][T14004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.353177][T14004] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 673.372927][T14004] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 673.392327][T14004] wireguard: wg0: Could not create IPv4 socket [ 673.431311][T14004] wireguard: wg1: Could not create IPv4 socket [ 673.452797][T14004] wireguard: wg2: Could not create IPv4 socket [ 674.074815][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.083291][ T5867] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 674.097195][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.105363][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.113822][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.121316][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.191583][T14250] Failed to initialize the IGMP autojoin socket (err -2) [ 674.282021][ T5867] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 674.309724][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.321502][ T5867] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 674.332153][ T5867] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 674.340313][ T5867] usb 2-1: Manufacturer: syz [ 674.356309][ T5867] usb 2-1: config 0 descriptor?? [ 674.449791][ T5867] rc_core: IR keymap rc-hauppauge not found [ 674.481439][ T5867] Registered IR keymap rc-empty [ 674.508757][ T5867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 674.556872][ T5867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input74 [ 674.631812][ T5867] usb 2-1: USB disconnect, device number 86 [ 674.853161][ T30] audit: type=1800 audit(2000000329.095:1288): pid=14258 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2221" name="bus" dev="overlay" ino=2524 res=0 errno=0 [ 674.875010][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.071318][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 675.080693][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 675.657863][ T30] audit: type=1400 audit(2000000329.915:1289): avc: denied { append } for pid=14259 comm="syz.2.2222" name="file0" dev="fuse" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 675.750318][ T30] audit: type=1400 audit(2000000329.945:1290): avc: denied { open } for pid=14259 comm="syz.2.2222" path="/480/file0/file0" dev="fuse" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 675.773362][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.872941][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 675.888733][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 675.903868][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 675.917041][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 675.928556][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 676.045214][T14267] Failed to initialize the IGMP autojoin socket (err -2) [ 676.190493][ T5817] Bluetooth: hci3: command tx timeout [ 678.018091][T14302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.041464][T14305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.064233][T14305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.087038][ T30] audit: type=1400 audit(2000000332.345:1291): avc: denied { associate } for pid=14304 comm="syz.2.2228" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 678.200073][ T30] audit: type=1400 audit(2000000332.405:1292): avc: denied { read } for pid=14304 comm="syz.2.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 678.291105][ C0] vkms_vblank_simulate: vblank timer overrun [ 678.351210][ T5817] Bluetooth: hci3: command tx timeout [ 678.365254][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 678.375533][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 678.383728][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 678.392023][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 678.430771][T14250] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 678.821162][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 678.863982][T14250] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 678.883161][T14312] Failed to initialize the IGMP autojoin socket (err -2) [ 678.893286][T14250] wireguard: wg0: Could not create IPv4 socket [ 678.902193][T14250] wireguard: wg1: Could not create IPv4 socket [ 678.910608][T14250] wireguard: wg2: Could not create IPv4 socket [ 679.696345][T10226] hid_parser_main: 161 callbacks suppressed [ 679.696365][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.711342][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.718802][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.728396][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.738308][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.754578][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.772055][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.796450][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.811426][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.819006][T10226] hid-generic 0009:0000:0401.0032: unknown main item tag 0x0 [ 679.861841][T10226] hid-generic 0009:0000:0401.0032: hidraw0: HID v0.06 Device [syz1] on syz0 [ 679.973814][T14333] fido_id[14333]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 680.160629][T11550] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 680.331843][T11550] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 680.404044][T11550] usb 4-1: config 0 has no interface number 0 [ 680.425971][T11550] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 680.455575][T11550] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 680.465150][T11550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.474145][T11550] usb 4-1: Product: syz [ 680.516611][T11550] usb 4-1: Manufacturer: syz [ 680.527990][T11550] usb 4-1: SerialNumber: syz [ 680.536073][T11550] usb 4-1: config 0 descriptor?? [ 680.586691][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 680.597825][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 680.609698][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 680.618501][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 680.626790][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 680.662657][T14350] Failed to initialize the IGMP autojoin socket (err -2) [ 680.752637][ T30] audit: type=1400 audit(2000000335.005:1293): avc: denied { mounton } for pid=14329 comm="syz.3.2231" path="/proc/1584/task" dev="proc" ino=47915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 680.776759][T11550] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 680.786987][T11550] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 680.795715][T11550] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 680.804582][T11550] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 680.826134][T11550] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 680.883865][T11550] usb 4-1: USB disconnect, device number 66 [ 680.913099][T11550] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 680.946238][T11550] keyspan 4-1:0.133: device disconnected [ 681.130561][T14363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.151083][T14363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.472364][ T30] audit: type=1400 audit(2000000335.735:1294): avc: denied { read } for pid=14372 comm="syz.1.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 681.760189][T14387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.769205][T14387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.871739][ T5927] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 682.189923][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 682.197742][ T5927] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 682.208149][ T5927] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 682.228689][ T5927] usb 2-1: config 0 has no interface number 0 [ 682.244193][ T5927] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 682.263486][ T5927] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 682.297278][ T5927] usb 2-1: config 0 interface 48 has no altsetting 0 [ 682.314508][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 682.339996][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.368061][ T5927] usb 2-1: config 0 descriptor?? [ 682.743372][ T5817] Bluetooth: hci3: command tx timeout [ 684.636793][ T5927] usb 2-1: string descriptor 0 read error: -71 [ 684.661774][ T5927] hub 2-1:0.48: bad descriptor, ignoring hub [ 684.667802][ T5927] hub 2-1:0.48: probe with driver hub failed with error -5 [ 684.749677][T11550] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 684.752491][ T5927] usb 2-1: USB disconnect, device number 87 [ 684.819696][ T5817] Bluetooth: hci3: command tx timeout [ 684.911389][T11550] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.929682][T11550] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 684.938599][T11550] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 684.982781][T11550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.020968][T11550] usb 4-1: config 0 descriptor?? [ 685.071537][T11550] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 685.078343][T11550] dvb-usb: bulk message failed: -22 (3/0) [ 685.131289][T11550] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 685.190246][T11550] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 685.197338][T11550] usb 4-1: media controller created [ 685.243721][T11550] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.298249][T11550] dvb-usb: bulk message failed: -22 (6/0) [ 685.309288][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.315849][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.404461][T11550] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 685.567492][T14436] dvb-usb: bulk message failed: -22 (2/0) [ 685.601041][T11550] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input75 [ 686.350936][T11550] dvb-usb: schedule remote query interval to 150 msecs. [ 686.442493][T11550] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 687.219942][ T5817] Bluetooth: hci3: command tx timeout [ 687.246086][T12155] dvb-usb: bulk message failed: -22 (1/0) [ 687.258998][T12155] dvb-usb: error while querying for an remote control event. [ 687.431519][T11550] dvb-usb: bulk message failed: -22 (1/0) [ 687.437841][T11550] dvb-usb: error while querying for an remote control event. [ 687.710213][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 687.767023][ T5890] dvb-usb: error while querying for an remote control event. [ 687.883506][T14350] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 687.943822][ T30] audit: type=1400 audit(2000000342.195:1295): avc: denied { read } for pid=14451 comm="syz.2.2246" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 687.970434][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 687.973536][ T30] audit: type=1400 audit(2000000342.195:1296): avc: denied { open } for pid=14451 comm="syz.2.2246" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 687.989652][ T5890] dvb-usb: error while querying for an remote control event. [ 688.053203][ T30] audit: type=1400 audit(2000000342.205:1297): avc: denied { map } for pid=14451 comm="syz.2.2246" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 688.084206][T14350] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 688.133295][T14350] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 688.150636][T14350] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 688.168038][ T5867] usb 4-1: USB disconnect, device number 67 [ 688.215659][T14461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.226161][ T5867] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 688.248639][T14461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.341854][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 688.352413][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 688.361004][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 688.368713][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 688.378237][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 688.425163][T14464] Failed to initialize the IGMP autojoin socket (err -2) [ 689.077640][T14350] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 689.098111][T14350] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 689.117106][T14350] wireguard: wg0: Could not create IPv4 socket [ 689.126011][T14350] wireguard: wg1: Could not create IPv4 socket [ 689.135911][T14350] wireguard: wg2: Could not create IPv4 socket [ 689.769887][T14530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.800739][T14530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.864344][T14530] overlayfs: missing 'lowerdir' [ 690.956992][ T5867] hid_parser_main: 161 callbacks suppressed [ 690.957012][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 690.971321][T14544] FAULT_INJECTION: forcing a failure. [ 690.971321][T14544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.062914][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.079452][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 691.090049][T14544] CPU: 1 UID: 0 PID: 14544 Comm: syz.3.2253 Not tainted syzkaller #0 PREEMPT(full) [ 691.090074][T14544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 691.090085][T14544] Call Trace: [ 691.090091][T14544] [ 691.090099][T14544] dump_stack_lvl+0x16c/0x1f0 [ 691.090130][T14544] should_fail_ex+0x512/0x640 [ 691.090155][T14544] _copy_to_user+0x32/0xd0 [ 691.090179][T14544] snd_pcm_oss_ioctl+0xee8/0x37c0 [ 691.090204][T14544] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 691.090227][T14544] ? selinux_file_ioctl+0x180/0x270 [ 691.090246][T14544] ? selinux_file_ioctl+0xb4/0x270 [ 691.090273][T14544] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 691.090293][T14544] __x64_sys_ioctl+0x18e/0x210 [ 691.090321][T14544] do_syscall_64+0xcd/0xfa0 [ 691.090340][T14544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.090356][T14544] RIP: 0033:0x7fbd8b18f6c9 [ 691.090370][T14544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.090387][T14544] RSP: 002b:00007fbd8bfbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.090405][T14544] RAX: ffffffffffffffda RBX: 00007fbd8b3e6180 RCX: 00007fbd8b18f6c9 [ 691.090417][T14544] RDX: 0000200000000100 RSI: 00000000800c5012 RDI: 0000000000000004 [ 691.090428][T14544] RBP: 00007fbd8bfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 691.090439][T14544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.090449][T14544] R13: 00007fbd8b3e6218 R14: 00007fbd8b3e6180 R15: 00007ffcc6532db8 [ 691.090476][T14544] [ 691.092109][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 691.260768][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 691.270311][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.277963][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.285723][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 691.293051][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.300875][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.308319][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 691.315898][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.323597][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.332116][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.341656][ T5867] hid-generic 0009:0000:0401.0033: unknown main item tag 0x0 [ 691.348999][T14546] Failed to initialize the IGMP autojoin socket (err -2) [ 691.378409][ T5867] hid-generic 0009:0000:0401.0033: hidraw0: HID v0.06 Device [syz1] on syz0 [ 691.616538][ T30] audit: type=1400 audit(2000000345.875:1298): avc: denied { accept } for pid=14559 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 691.662463][T14564] FAULT_INJECTION: forcing a failure. [ 691.662463][T14564] name failslab, interval 1, probability 0, space 0, times 0 [ 691.675200][T14552] fido_id[14552]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 691.691431][T14564] CPU: 1 UID: 0 PID: 14564 Comm: syz.1.2255 Not tainted syzkaller #0 PREEMPT(full) [ 691.691458][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 691.691469][T14564] Call Trace: [ 691.691476][T14564] [ 691.691483][T14564] dump_stack_lvl+0x16c/0x1f0 [ 691.691517][T14564] should_fail_ex+0x512/0x640 [ 691.691537][T14564] ? __kmalloc_cache_noprof+0x5f/0x780 [ 691.691564][T14564] ? __pfx_cgroup_show_path+0x10/0x10 [ 691.691589][T14564] should_failslab+0xc2/0x120 [ 691.691639][T14564] ? __pfx_cgroup_show_path+0x10/0x10 [ 691.691663][T14564] __kmalloc_cache_noprof+0x72/0x780 [ 691.691689][T14564] ? cgroup_show_path+0xb2/0x740 [ 691.691716][T14564] ? __pfx_cgroup_show_path+0x10/0x10 [ 691.691740][T14564] ? cgroup_show_path+0xb2/0x740 [ 691.691762][T14564] ? kernfs_root_to_node+0xd/0x40 [ 691.691788][T14564] cgroup_show_path+0xb2/0x740 [ 691.691816][T14564] ? __pfx_cgroup_show_path+0x10/0x10 [ 691.691840][T14564] kernfs_sop_show_path+0xe9/0x160 [ 691.691861][T14564] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 691.691882][T14564] show_path+0x9e/0x100 [ 691.691904][T14564] show_mountinfo+0x1d8/0x820 [ 691.691923][T14564] ? __pfx_show_mountinfo+0x10/0x10 [ 691.691948][T14564] traverse.part.0.constprop.0+0x107/0x650 [ 691.691985][T14564] seq_lseek+0x2bb/0x450 [ 691.692017][T14564] ksys_lseek+0xf3/0x1b0 [ 691.692049][T14564] do_syscall_64+0xcd/0xfa0 [ 691.692068][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.692086][T14564] RIP: 0033:0x7f238398f6c9 [ 691.692101][T14564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.692118][T14564] RSP: 002b:00007f238485f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 691.692137][T14564] RAX: ffffffffffffffda RBX: 00007f2383be5fa0 RCX: 00007f238398f6c9 [ 691.692148][T14564] RDX: 0000000000000000 RSI: 000000000000fffd RDI: 0000000000000003 [ 691.692158][T14564] RBP: 00007f238485f090 R08: 0000000000000000 R09: 0000000000000000 [ 691.692168][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.692178][T14564] R13: 00007f2383be6038 R14: 00007f2383be5fa0 R15: 00007ffd027a9ac8 [ 691.692206][T14564] [ 691.907702][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.330039][ T5927] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 692.504324][ T5927] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 692.520067][ T5927] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 692.549748][ T5927] usb 2-1: config 220 has no interface number 2 [ 692.561039][ T5927] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 692.589694][ T5927] usb 2-1: config 220 interface 0 has no altsetting 0 [ 692.596493][ T5927] usb 2-1: config 220 interface 76 has no altsetting 0 [ 692.622384][ T5927] usb 2-1: config 220 interface 1 has no altsetting 0 [ 692.635337][ T5927] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 692.669790][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.677808][ T5927] usb 2-1: Product: syz [ 692.699692][ T5927] usb 2-1: Manufacturer: syz [ 692.704309][ T5927] usb 2-1: SerialNumber: syz [ 692.978696][ T5927] usb 2-1: selecting invalid altsetting 0 [ 692.985954][ T5927] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 693.010262][ T5927] uvcvideo 2-1:220.0: No valid video chain found. [ 693.023834][ T5927] usb 2-1: selecting invalid altsetting 0 [ 693.038318][ T5927] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 693.065365][ T5927] usb 2-1: USB disconnect, device number 88 [ 693.164791][T14610] Failed to initialize the IGMP autojoin socket (err -2) [ 693.320731][T14546] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 693.379866][ T5817] Bluetooth: hci3: command tx timeout [ 693.387740][T14546] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 693.432450][T14546] wireguard: wg0: Could not create IPv4 socket [ 693.471845][T14546] wireguard: wg1: Could not create IPv4 socket [ 693.501611][T14546] wireguard: wg2: Could not create IPv4 socket [ 693.596836][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 693.672634][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 693.686818][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 693.695834][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 693.716036][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 693.724255][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 693.756535][ T30] audit: type=1326 audit(2000000348.015:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 693.969877][ T30] audit: type=1326 audit(2000000348.015:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 694.002638][ T42] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 694.038680][T14621] Failed to initialize the IGMP autojoin socket (err -2) [ 694.039519][ T30] audit: type=1326 audit(2000000348.015:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 694.150017][ T30] audit: type=1326 audit(2000000348.015:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 694.259775][ T30] audit: type=1326 audit(2000000348.015:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 694.290004][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 694.359943][T10618] block nbd0: Possible stuck request ffff8880262a7000: control (read@0,1024B). Runtime 330 seconds [ 694.635140][ T30] audit: type=1326 audit(2000000348.015:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd8b18df10 code=0x7ffc0000 [ 694.676380][ T5927] hid-generic 0009:0000:0401.0034: hidraw0: HID v0.06 Device [syz1] on syz0 [ 694.810786][T10618] block nbd0: Possible stuck request ffff8880262a71c0: control (read@1024,1024B). Runtime 330 seconds [ 694.822128][T10618] block nbd0: Possible stuck request ffff8880262a7380: control (read@2048,1024B). Runtime 330 seconds [ 694.833421][ T30] audit: type=1326 audit(2000000348.015:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 694.858050][T10618] block nbd0: Possible stuck request ffff8880262a7540: control (read@3072,1024B). Runtime 330 seconds [ 694.869196][ T30] audit: type=1326 audit(2000000348.015:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 694.897708][ T42] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 694.906074][ T42] usb 4-1: config 0 has no interface number 0 [ 694.912296][ T30] audit: type=1326 audit(2000000348.015:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 694.936211][ T42] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 694.947257][ T42] usb 4-1: config 0 interface 85 has no altsetting 0 [ 694.954175][ T30] audit: type=1326 audit(2000000348.015:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.3.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fbd8b18f6c9 code=0x7ffc0000 [ 695.081820][ T42] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 695.092251][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.135125][T14645] fido_id[14645]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 695.216166][ T42] usb 4-1: Product: syz [ 695.222289][ T42] usb 4-1: Manufacturer: syz [ 695.228834][T14649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.229907][ T42] usb 4-1: SerialNumber: syz [ 695.244540][ T42] usb 4-1: config 0 descriptor?? [ 695.283354][T14649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.530099][ T5927] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 695.692850][ T5927] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 695.702477][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.717017][ T5927] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 695.726487][ T5927] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 695.735118][ T5927] usb 2-1: Manufacturer: syz [ 695.750218][ T5927] usb 2-1: config 0 descriptor?? [ 695.792805][ T5817] Bluetooth: hci3: command tx timeout [ 695.811725][ T5927] rc_core: IR keymap rc-hauppauge not found [ 695.817870][ T5927] Registered IR keymap rc-empty [ 695.828875][ T5927] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 695.848126][ T5927] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input77 [ 695.967041][ T5927] usb 2-1: USB disconnect, device number 89 [ 696.041569][T14676] macvtap0: refused to change device tx_queue_len [ 696.363496][ T5927] hid_parser_main: 332 callbacks suppressed [ 696.363531][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.377410][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.385010][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.393491][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.401038][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.408639][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.416784][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.425011][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.432743][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.440540][ T5927] hid-generic 0009:0000:0401.0035: unknown main item tag 0x0 [ 696.482871][ T5927] hid-generic 0009:0000:0401.0035: hidraw0: HID v0.06 Device [syz1] on syz0 [ 697.024368][ T42] appletouch 4-1:0.85: Failed to request geyser raw mode [ 697.034220][ T42] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 697.057200][ T42] usb 4-1: USB disconnect, device number 68 [ 697.367389][T14717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.389424][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.401184][T14717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.419938][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.432961][ T1159] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 697.444173][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.473835][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.504717][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.520415][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.550746][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.562554][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.582409][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.595125][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.861484][ T5817] Bluetooth: hci3: command tx timeout [ 698.530045][T14764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.544368][T14764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.559935][ T5927] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 698.725365][ T5927] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 698.735032][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.743773][ T5927] usb 4-1: Product: syz [ 698.748390][ T5927] usb 4-1: Manufacturer: syz [ 698.753084][ T5927] usb 4-1: SerialNumber: syz [ 698.769505][ T5927] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 698.801896][ T5867] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 699.540303][ T5927] usb 4-1: USB disconnect, device number 69 [ 699.860285][ T5867] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 699.867323][ T5867] ath9k_htc: Failed to initialize the device [ 699.902786][ T5927] usb 4-1: ath9k_htc: USB layer deinitialized [ 699.934711][T14621] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 699.942034][ T5817] Bluetooth: hci3: command tx timeout [ 699.953302][T14621] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 699.976486][T14621] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 699.997061][T14621] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 700.636026][T14621] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 700.652579][T11550] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 700.660560][T12155] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 700.699451][T14621] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 700.747993][T14621] wireguard: wg0: Could not create IPv4 socket [ 700.759044][T14621] wireguard: wg1: Could not create IPv4 socket [ 700.775735][T14621] wireguard: wg2: Could not create IPv4 socket [ 700.841360][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 700.856134][T12155] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 700.867963][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 700.879512][T12155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.879844][T11550] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 700.899406][T11550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.907790][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 700.915425][T11550] usb 4-1: Product: syz [ 700.920456][T11550] usb 4-1: Manufacturer: syz [ 700.925282][T11550] usb 4-1: SerialNumber: syz [ 700.930389][T12155] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 700.939533][T12155] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 700.947729][T12155] usb 2-1: Manufacturer: syz [ 700.952730][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 700.967070][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 701.008078][T12155] usb 2-1: config 0 descriptor?? [ 701.054068][T14853] Failed to initialize the IGMP autojoin socket (err -2) [ 701.122125][T12155] rc_core: IR keymap rc-hauppauge not found [ 701.128168][T12155] Registered IR keymap rc-empty [ 701.158592][T12155] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 701.217665][T12155] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input78 [ 701.279098][T12155] usb 2-1: USB disconnect, device number 90 [ 701.356631][T11550] rtl8150 4-1:1.0: couldn't reset the device [ 701.376120][T11550] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 701.425741][T14868] bridge0: port 3(gretap0) entered blocking state [ 701.428860][T11550] usb 4-1: USB disconnect, device number 70 [ 701.432373][T14868] bridge0: port 3(gretap0) entered forwarding state [ 701.468310][T14868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 701.562745][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 701.772988][T14879] IPv6: Can't replace route, no match found [ 702.795899][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 702.823315][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2286'. [ 703.064120][ T5817] Bluetooth: hci5: command tx timeout [ 703.363040][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 703.363056][ T30] audit: type=1400 audit(2000000357.625:1350): avc: denied { search } for pid=14910 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.573511][ T30] audit: type=1400 audit(2000000357.655:1351): avc: denied { search } for pid=14910 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.730009][ T30] audit: type=1400 audit(2000000357.655:1352): avc: denied { search } for pid=14910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.780868][ T30] audit: type=1400 audit(2000000357.655:1353): avc: denied { search } for pid=14910 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.839531][ T30] audit: type=1400 audit(2000000357.655:1354): avc: denied { read open } for pid=14910 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.865151][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.929841][ T30] audit: type=1400 audit(2000000357.655:1355): avc: denied { getattr } for pid=14910 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.955241][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.034212][ T30] audit: type=1400 audit(2000000357.665:1356): avc: denied { sys_module } for pid=14853 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 704.065704][T14921] bond3: entered allmulticast mode [ 704.071834][T14921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.148260][ T30] audit: type=1400 audit(2000000357.665:1357): avc: denied { module_request } for pid=14853 comm="syz-executor" kmod="netdevsim5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 704.170503][ T30] audit: type=1400 audit(2000000357.665:1358): avc: denied { read } for pid=14908 comm="syz.3.2288" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 704.203888][T14853] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 704.222029][ T30] audit: type=1400 audit(2000000357.665:1359): avc: denied { open } for pid=14908 comm="syz.3.2288" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 704.279774][T14853] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 704.322381][T14853] wireguard: wg0: Could not create IPv4 socket [ 704.347079][T14853] wireguard: wg1: Could not create IPv4 socket [ 704.363203][T14853] wireguard: wg2: Could not create IPv4 socket [ 704.659704][ T979] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 704.813433][ T979] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 704.821930][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.833594][ T979] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 704.843592][ T979] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 704.852053][ T979] usb 4-1: Manufacturer: syz [ 704.905596][T14952] tipc: Enabled bearer , priority 0 [ 704.927180][ T979] usb 4-1: config 0 descriptor?? [ 705.002345][T14952] syzkaller0: entered promiscuous mode [ 705.019364][T14952] syzkaller0: entered allmulticast mode [ 705.077046][T14952] tipc: Resetting bearer [ 705.151848][ T979] rc_core: IR keymap rc-hauppauge not found [ 705.176221][ T979] Registered IR keymap rc-empty [ 705.179414][ T1159] tipc: Resetting bearer [ 705.199772][T14951] tipc: Resetting bearer [ 705.202621][ T979] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 705.264189][ T979] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input79 [ 705.296744][ T979] usb 4-1: USB disconnect, device number 71 [ 705.909922][T11550] tipc: Node number set to 3832532153 [ 706.240184][T11550] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 706.480589][T11550] usb 4-1: Using ep0 maxpacket: 32 [ 706.498829][T11550] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 706.520408][T11550] usb 4-1: config 0 has no interface number 0 [ 706.543646][T11550] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 706.566573][T11550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.588443][T11550] usb 4-1: Product: syz [ 706.595109][T11550] usb 4-1: Manufacturer: syz [ 706.608575][T11550] usb 4-1: SerialNumber: syz [ 706.623955][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 706.634330][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 706.643888][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 706.653502][T11550] usb 4-1: config 0 descriptor?? [ 706.659028][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 706.675796][T11550] smsc95xx v2.0.0 [ 706.687133][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 707.518866][T11550] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 707.530718][T11550] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 707.828466][T15012] 9pnet_fd: Insufficient options for proto=fd [ 708.706680][T15016] Falling back ldisc for ttyprintk. [ 708.825483][ T5817] Bluetooth: hci3: command tx timeout [ 708.928630][T11550] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 708.950015][T11550] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 708.971373][T11550] usb 4-1: USB disconnect, device number 72 [ 709.373336][T14951] tipc: Disabling bearer [ 709.416389][T14991] Failed to initialize the IGMP autojoin socket (err -2) [ 709.696725][T15051] delete_channel: no stack [ 709.727131][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 709.727148][ T30] audit: type=1400 audit(2000000362.952:1425): avc: denied { create } for pid=15045 comm="syz.2.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 709.765775][ T30] audit: type=1400 audit(2000000362.962:1426): avc: denied { ioctl } for pid=15045 comm="syz.2.2302" path="socket:[50667]" dev="sockfs" ino=50667 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 709.897349][ T30] audit: type=1400 audit(2000000363.152:1427): avc: denied { write } for pid=15045 comm="syz.2.2302" name="netstat" dev="proc" ino=4026533216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 710.040842][ T30] audit: type=1400 audit(2000000363.292:1428): avc: denied { read } for pid=15045 comm="syz.2.2302" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 710.176690][ T30] audit: type=1400 audit(2000000363.292:1429): avc: denied { open } for pid=15045 comm="syz.2.2302" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 710.260392][ T30] audit: type=1400 audit(2000000363.292:1430): avc: denied { read write } for pid=15045 comm="syz.2.2302" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 710.350632][ T30] audit: type=1400 audit(2000000363.292:1431): avc: denied { open } for pid=15045 comm="syz.2.2302" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 710.900005][ T5817] Bluetooth: hci3: command tx timeout [ 711.075560][T14991] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 711.093226][T14991] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 711.112340][T14991] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 711.128036][T14991] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 711.593484][ T30] audit: type=1400 audit(2000000364.852:1432): avc: denied { map_read map_write } for pid=15097 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 712.007322][ T30] audit: type=1400 audit(2000000364.882:1433): avc: denied { create } for pid=15097 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 712.078475][ T30] audit: type=1400 audit(2000000364.882:1434): avc: denied { write } for pid=15097 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 712.122123][T14991] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 712.263350][T14991] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 712.286117][T14991] wireguard: wg0: Could not create IPv4 socket [ 712.302264][T14991] wireguard: wg1: Could not create IPv4 socket [ 712.316616][T14991] wireguard: wg2: Could not create IPv4 socket [ 712.569965][T11550] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 712.741651][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 712.755917][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 712.765518][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 712.773310][T11550] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 712.782459][T11550] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.793825][T11550] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 712.803441][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 712.813606][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.828716][T11550] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 712.846567][T15123] Failed to initialize the IGMP autojoin socket (err -2) [ 712.854156][T11550] usb 2-1: Manufacturer: syz [ 712.860944][T11550] usb 2-1: config 0 descriptor?? [ 712.960059][T11550] rc_core: IR keymap rc-hauppauge not found [ 712.965984][T11550] Registered IR keymap rc-empty [ 712.990775][T11550] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 713.012164][T11550] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input80 [ 713.040087][ T979] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 713.087171][T11550] usb 2-1: USB disconnect, device number 91 [ 713.202299][ T979] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 713.211964][ T979] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 713.231971][ T979] usb 4-1: config 220 has no interface number 2 [ 713.238283][ T979] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 713.259079][ T979] usb 4-1: config 220 interface 0 has no altsetting 0 [ 713.266563][ T979] usb 4-1: config 220 interface 76 has no altsetting 0 [ 713.274519][ T979] usb 4-1: config 220 interface 1 has no altsetting 0 [ 713.283781][ T979] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 713.302162][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.310401][ T979] usb 4-1: Product: syz [ 713.314622][ T979] usb 4-1: Manufacturer: syz [ 713.319258][ T979] usb 4-1: SerialNumber: syz [ 713.548366][ T979] usb 4-1: selecting invalid altsetting 0 [ 713.575509][ T979] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 713.583500][ T979] uvcvideo 4-1:220.0: No valid video chain found. [ 713.608411][ T979] usb 4-1: selecting invalid altsetting 0 [ 713.634756][ T979] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 713.673267][ T979] usb 4-1: USB disconnect, device number 73 [ 713.947262][T11550] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 714.100520][T11550] usb 2-1: Using ep0 maxpacket: 8 [ 714.107212][T11550] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.124463][T11550] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 714.146003][T11550] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 714.158341][T11550] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 714.179869][T11550] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 714.199283][T11550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.318417][T11550] hub 2-1:1.0: bad descriptor, ignoring hub [ 714.331296][T11550] hub 2-1:1.0: probe with driver hub failed with error -5 [ 714.395062][T11550] cdc_wdm 2-1:1.0: skipping garbage [ 714.409951][T11550] cdc_wdm 2-1:1.0: skipping garbage [ 714.435589][T15179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 714.461850][T11550] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 714.480865][T11550] cdc_wdm 2-1:1.0: Unknown control protocol [ 714.951197][ T5817] Bluetooth: hci3: command tx timeout [ 714.998094][T15123] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 715.037164][T15123] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 715.101447][T15123] wireguard: wg0: Could not create IPv4 socket [ 715.125376][T15123] wireguard: wg1: Could not create IPv4 socket [ 715.167140][T15123] wireguard: wg2: Could not create IPv4 socket [ 715.378753][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 715.378764][ T30] audit: type=1400 audit(2000000368.632:1492): avc: denied { mounton } for pid=15195 comm="syz.2.2315" path="/513/file0" dev="tmpfs" ino=2781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 715.412606][T15196] fuse: Bad value for 'rootmode' [ 715.591425][ T30] audit: type=1400 audit(2000000368.842:1493): avc: denied { sqpoll } for pid=15195 comm="syz.2.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 715.772395][T15154] cdc_wdm 2-1:1.0: Error autopm - -16 [ 715.776973][T11550] usb 2-1: USB disconnect, device number 92 [ 716.548017][ T30] audit: type=1400 audit(2000000369.802:1494): avc: denied { unlink } for pid=15228 comm="syz.1.2319" name="#4c" dev="tmpfs" ino=2543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 716.612550][T15231] random: crng reseeded on system resumption [ 716.714065][T15236] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 716.734524][ T30] audit: type=1400 audit(2000000369.802:1495): avc: denied { mount } for pid=15228 comm="syz.1.2319" name="/" dev="overlay" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 716.736321][ T60] Bluetooth: hci3: Frame reassembly failed (-84) [ 716.760210][ T30] audit: type=1400 audit(2000000369.802:1496): avc: denied { create } for pid=15228 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 716.820718][ T30] audit: type=1400 audit(2000000369.802:1497): avc: denied { ioctl } for pid=15228 comm="syz.1.2319" path="socket:[52408]" dev="sockfs" ino=52408 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 716.846752][ T30] audit: type=1400 audit(2000000369.862:1498): avc: denied { write } for pid=15228 comm="syz.1.2319" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 716.874165][ T30] audit: type=1400 audit(2000000369.872:1499): avc: denied { open } for pid=15228 comm="syz.1.2319" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 716.900083][ T30] audit: type=1400 audit(2000000369.892:1500): avc: denied { append } for pid=15221 comm="syz.2.2317" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 716.966906][ T30] audit: type=1400 audit(2000000369.952:1501): avc: denied { create } for pid=15221 comm="syz.2.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 718.385856][T15289] C: renamed from team_slave_0 [ 718.412477][T15289] netlink: 'syz.3.2323': attribute type 3 has an invalid length. [ 718.464013][T15289] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2323'. [ 718.474065][T15289] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 718.689766][T11550] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 718.739932][ T5817] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 718.874144][T11550] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 718.909968][T11550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.929754][T11550] usb 4-1: Product: syz [ 718.933951][T11550] usb 4-1: Manufacturer: syz [ 718.938553][T11550] usb 4-1: SerialNumber: syz [ 719.014265][T11550] usb 4-1: config 0 descriptor?? [ 719.041718][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 719.051994][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 719.068584][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 719.076872][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 719.084582][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 719.113684][ T5817] Bluetooth: hci5: urb ffff888074710a00 submission failed (2) [ 719.406137][T15309] Failed to initialize the IGMP autojoin socket (err -2) [ 719.411816][T11550] usb 4-1: USB disconnect, device number 74 [ 719.469873][ T5867] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 719.644557][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 719.666694][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 719.694644][ T5867] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 719.706688][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.729848][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.752414][ T5867] usb 2-1: string descriptor 0 read error: -22 [ 719.761024][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 719.770724][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.797028][ T5867] usb 2-1: 0:2 : does not exist [ 720.678905][T15309] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 720.691382][T15309] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 720.726029][T15309] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 720.774697][T15309] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 721.141347][ T5817] Bluetooth: hci3: command tx timeout [ 721.925976][T12155] usb 2-1: USB disconnect, device number 93 [ 721.979155][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 721.979171][ T30] audit: type=1400 audit(2000000375.232:1506): avc: denied { create } for pid=15350 comm="syz.2.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 722.090936][ T30] audit: type=1400 audit(2000000375.232:1507): avc: denied { read } for pid=15350 comm="syz.2.2328" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 722.171569][ T30] audit: type=1400 audit(2000000375.232:1508): avc: denied { open } for pid=15350 comm="syz.2.2328" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 722.267777][ T30] audit: type=1400 audit(2000000375.432:1509): avc: denied { write } for pid=15353 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 722.434970][ T30] audit: type=1400 audit(2000000375.692:1510): avc: denied { create } for pid=15368 comm="syz.3.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 722.514465][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.525382][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 722.533959][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 722.543634][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 722.551823][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 722.647665][T15373] Failed to initialize the IGMP autojoin socket (err -2) [ 722.759001][ T30] audit: type=1400 audit(2000000376.012:1511): avc: denied { relabelfrom } for pid=15373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 723.065713][ T30] audit: type=1400 audit(2000000376.012:1512): avc: denied { relabelto } for pid=15373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 723.150143][T10226] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 723.219849][ T5817] Bluetooth: hci3: command tx timeout [ 723.238291][T15309] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 723.257271][T15309] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 723.277175][T15309] wireguard: wg0: Could not create IPv4 socket [ 723.292177][T15309] wireguard: wg1: Could not create IPv4 socket [ 723.309161][T15309] wireguard: wg2: Could not create IPv4 socket [ 723.322727][T10226] usb 4-1: Using ep0 maxpacket: 32 [ 723.334479][T10226] usb 4-1: config 0 has no interfaces? [ 723.343231][T10226] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 723.360202][T10226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.369410][T10226] usb 4-1: Product: syz [ 723.374311][T10226] usb 4-1: Manufacturer: syz [ 723.378982][T10226] usb 4-1: SerialNumber: syz [ 723.393264][T10226] usb 4-1: config 0 descriptor?? [ 723.604867][T12155] usb 4-1: USB disconnect, device number 75 [ 724.359639][ T30] audit: type=1400 audit(2000000377.612:1513): avc: denied { create } for pid=15388 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 724.388517][ T30] audit: type=1400 audit(2000000377.612:1514): avc: denied { connect } for pid=15388 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 724.416046][T15393] openvswitch: netlink: nsh attr 13105 is out of range max 3 [ 724.423675][T15393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.470522][ T30] audit: type=1400 audit(2000000377.722:1515): avc: denied { write } for pid=15388 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 724.828213][T15397] nfs: Unknown parameter '' [ 724.885204][T15394] comedi comedi0: ni_at_a2150: I/O port conflict (0x8002f,28) [ 724.924550][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 724.934633][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 724.945674][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 724.955120][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 724.962683][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 724.982131][T15398] Failed to initialize the IGMP autojoin socket (err -2) [ 724.990271][T10618] block nbd0: Possible stuck request ffff8880262a7000: control (read@0,1024B). Runtime 360 seconds [ 725.001174][ T42] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 725.008792][T10618] block nbd0: Possible stuck request ffff8880262a71c0: control (read@1024,1024B). Runtime 360 seconds [ 725.020699][T10618] block nbd0: Possible stuck request ffff8880262a7380: control (read@2048,1024B). Runtime 360 seconds [ 725.031751][T10618] block nbd0: Possible stuck request ffff8880262a7540: control (read@3072,1024B). Runtime 360 seconds [ 725.200060][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 725.271471][ T42] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.283345][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.295774][ T42] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 725.323024][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.361450][ T42] usb 4-1: config 0 descriptor?? [ 725.551142][T15407] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.2342'. [ 725.932297][T15410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.124017][ T42] nzxt-smart2 0003:1E71:2009.0036: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 726.227046][ T42] usb 4-1: USB disconnect, device number 76 [ 726.276342][T15411] fido_id[15411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 726.561509][T15414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.747845][T15420] tun0: tun_chr_ioctl cmd 1074025675 [ 726.754896][T15420] tun0: persist enabled [ 726.759428][T15420] tun0: tun_chr_ioctl cmd 1074025675 [ 726.764818][T15420] tun0: persist enabled [ 726.976072][T15398] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 726.995628][T15398] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 727.011229][T10226] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 727.022730][T15398] wireguard: wg0: Could not create IPv4 socket [ 727.030373][T15398] wireguard: wg1: Could not create IPv4 socket [ 727.037596][T15398] wireguard: wg2: Could not create IPv4 socket [ 727.060351][ T5817] Bluetooth: hci3: command tx timeout [ 727.161131][T10226] usb 2-1: Using ep0 maxpacket: 32 [ 727.167434][T10226] usb 2-1: config 0 has no interfaces? [ 727.175017][T10226] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 727.184142][T10226] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 727.192368][T10226] usb 2-1: Product: syz [ 727.196513][T10226] usb 2-1: Manufacturer: syz [ 727.201394][T10226] usb 2-1: SerialNumber: syz [ 727.207744][T10226] usb 2-1: config 0 descriptor?? [ 727.416129][T10226] usb 2-1: USB disconnect, device number 94 [ 727.901485][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2347'. [ 728.061928][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 728.072545][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 728.082711][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 728.093795][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 728.105650][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 728.137951][T15439] Failed to initialize the IGMP autojoin socket (err -2) [ 728.525641][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 728.525656][ T30] audit: type=1400 audit(2000000381.782:1518): avc: denied { read write } for pid=15446 comm="syz.3.2351" name="mouse0" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 728.561578][ T30] audit: type=1400 audit(2000000381.782:1519): avc: denied { open } for pid=15446 comm="syz.3.2351" path="/dev/input/mouse0" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 728.640203][ T30] audit: type=1400 audit(2000000381.842:1520): avc: denied { read write } for pid=15446 comm="syz.3.2351" name="video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 728.686961][T15450] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 728.747313][ T30] audit: type=1400 audit(2000000381.842:1521): avc: denied { open } for pid=15446 comm="syz.3.2351" path="/dev/video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 728.800314][ T30] audit: type=1400 audit(2000000381.862:1522): avc: denied { ioctl } for pid=15446 comm="syz.3.2351" path="/dev/video6" dev="devtmpfs" ino=938 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 728.826294][ T30] audit: type=1400 audit(2000000381.902:1523): avc: denied { create } for pid=15444 comm="syz.1.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.859943][ T42] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 728.883846][ T30] audit: type=1400 audit(2000000381.902:1524): avc: denied { bind } for pid=15444 comm="syz.1.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.904583][ T30] audit: type=1400 audit(2000000381.942:1525): avc: denied { write } for pid=15444 comm="syz.1.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.924685][ T30] audit: type=1400 audit(2000000381.962:1526): avc: denied { ioctl } for pid=15444 comm="syz.1.2350" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 729.061616][ T42] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 729.070692][ T42] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 729.086707][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 729.149814][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 729.168428][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 729.181698][ T42] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 729.191768][ T42] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 729.200164][ T42] usb 4-1: Product: syz [ 729.204496][ T42] usb 4-1: Manufacturer: syz [ 729.221572][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 729.230172][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 729.244540][ T42] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 729.251020][ T42] cdc_wdm 4-1:1.0: Unknown control protocol [ 729.540496][T15460] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.2354'. [ 729.809009][ T30] audit: type=1400 audit(2000000383.062:1527): avc: denied { create } for pid=15461 comm="syz.2.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 729.855182][T15464] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 729.862210][T15464] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 729.870135][T15464] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 729.877926][T15464] comedi comedi3: 8255: I/O port conflict (0xffff,4) [ 729.886457][T15464] comedi comedi3: 8255: I/O port conflict (0x40cc7,4) [ 729.893631][T15464] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 729.900310][T15464] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 729.906863][T15464] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 729.913702][T15464] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 729.920710][T15464] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 729.929144][T15464] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 729.935998][T15464] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 729.943656][T15464] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 729.950734][T15464] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 729.958129][T15464] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 729.969061][T15464] comedi comedi3: 8255: I/O port conflict (0x1a449,4) [ 729.977903][T15464] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 729.984846][T15464] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 729.992392][T15464] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 730.000198][T15464] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 730.009208][T15464] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 730.016614][T15464] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 730.023758][T15464] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 730.032737][T15466] SELinux: failed to load policy [ 730.097628][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 730.180014][ T5817] Bluetooth: hci3: command tx timeout [ 730.499996][T11550] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 730.661034][T11550] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 730.672752][T11550] usb 2-1: config 9 has no interfaces? [ 730.683028][T11550] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 730.695039][T11550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.703394][T11550] usb 2-1: Product: syz [ 730.707736][T11550] usb 2-1: Manufacturer: syz [ 730.712560][T11550] usb 2-1: SerialNumber: syz [ 730.983794][T15476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.993762][T15476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.291939][T11550] usb 2-1: USB disconnect, device number 95 [ 731.653081][ T5867] usb 4-1: USB disconnect, device number 77 [ 731.832753][T15439] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 731.844298][T15439] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 731.855944][T15439] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 731.867383][T15439] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 732.111500][T15439] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 732.130469][T15439] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 732.147761][T15439] wireguard: wg0: Could not create IPv4 socket [ 732.155334][T15439] wireguard: wg1: Could not create IPv4 socket [ 732.162725][T15439] wireguard: wg2: Could not create IPv4 socket [ 732.906339][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.917778][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.444670][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 733.454742][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 733.462713][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 733.471351][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 733.478865][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 733.504739][T15496] Failed to initialize the IGMP autojoin socket (err -2) [ 733.889542][T15502] fuse: Unknown parameter 'ft<0x0000000000000003' [ 733.916623][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 733.916639][ T30] audit: type=1400 audit(2000000387.172:1573): avc: denied { create } for pid=15501 comm="syz.2.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 733.942834][ T30] audit: type=1400 audit(2000000387.172:1574): avc: denied { ioctl } for pid=15501 comm="syz.2.2363" path="socket:[54394]" dev="sockfs" ino=54394 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 733.967527][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.988479][ T30] audit: type=1400 audit(2000000387.232:1575): avc: denied { ioctl } for pid=15501 comm="syz.2.2363" path="socket:[54391]" dev="sockfs" ino=54391 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 734.507504][ T30] audit: type=1400 audit(2000000387.702:1576): avc: denied { read write } for pid=15510 comm="syz.2.2366" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 734.531562][ T30] audit: type=1400 audit(2000000387.702:1577): avc: denied { open } for pid=15510 comm="syz.2.2366" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 734.534831][T12155] hid_parser_main: 161 callbacks suppressed [ 734.534845][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.569310][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.577295][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.584910][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.592944][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.600442][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.607919][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.615453][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.623778][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.629860][T14947] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 734.631571][T12155] hid-generic 0009:0000:0401.0037: unknown main item tag 0x0 [ 734.649652][T12155] hid-generic 0009:0000:0401.0037: hidraw0: HID v0.06 Device [syz1] on syz0 [ 734.792329][T14947] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 734.802102][T14947] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 734.813408][T14947] usb 2-1: config 220 has no interface number 2 [ 734.819873][T14947] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 734.877240][T14947] usb 2-1: config 220 interface 0 has no altsetting 0 [ 734.884756][T14947] usb 2-1: config 220 interface 76 has no altsetting 0 [ 734.892296][T14947] usb 2-1: config 220 interface 1 has no altsetting 0 [ 734.903209][T14947] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 734.918588][T14947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.927003][T14947] usb 2-1: Product: syz [ 734.931353][T14947] usb 2-1: Manufacturer: syz [ 734.937035][T14947] usb 2-1: SerialNumber: syz [ 735.325752][T15525] /dev/nullb0: Can't open blockdev [ 735.430687][ T30] audit: type=1400 audit(2000000388.572:1578): avc: denied { getopt } for pid=15515 comm="syz.3.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 735.732332][T15527] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 735.743854][ T5817] Bluetooth: hci3: command tx timeout [ 736.314506][ T6089] Bluetooth: hci5: Frame reassembly failed (-84) [ 736.314755][ T30] audit: type=1400 audit(2000000388.572:1579): avc: denied { mounton } for pid=15515 comm="syz.3.2367" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 736.354088][ T30] audit: type=1400 audit(2000000389.002:1580): avc: denied { bind } for pid=15521 comm="syz.2.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 736.414272][T14947] usb 2-1: selecting invalid altsetting 0 [ 736.421156][T14947] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 736.428461][T14947] uvcvideo 2-1:220.0: No valid video chain found. [ 736.453524][T14947] usb 2-1: selecting invalid altsetting 0 [ 736.459272][T14947] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 736.478673][T14947] usb 2-1: USB disconnect, device number 96 [ 736.796978][T15496] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 736.853287][T15496] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 736.915649][T15496] wireguard: wg0: Could not create IPv4 socket [ 736.936675][T15496] wireguard: wg1: Could not create IPv4 socket [ 736.998545][T15496] wireguard: wg2: Could not create IPv4 socket [ 737.647975][ T30] audit: type=1400 audit(2000000390.762:1581): avc: denied { create } for pid=15544 comm="syz.1.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 737.756371][T15547] Bluetooth: MGMT ver 1.23 [ 737.765783][ T30] audit: type=1400 audit(2000000391.012:1582): avc: denied { bind } for pid=15544 comm="syz.1.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 737.789002][ T5134] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 738.839649][ T42] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 738.969711][ T42] usb 2-1: device descriptor read/64, error -71 [ 739.209773][ T42] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 739.359926][ T42] usb 2-1: device descriptor read/64, error -71 [ 739.493522][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 739.493537][ T30] audit: type=1400 audit(2000000392.752:1584): avc: denied { execute_no_trans } for pid=15555 comm="syz.2.2375" path="/537/file0" dev="tmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 739.572833][ T42] usb usb2-port1: attempt power cycle [ 739.909886][ T42] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 739.930079][ T42] usb 2-1: device descriptor read/8, error -71 [ 740.188960][ T30] audit: type=1400 audit(2000000393.442:1585): avc: denied { accept } for pid=15564 comm="syz.2.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.209981][ T42] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 740.230595][ T42] usb 2-1: device descriptor read/8, error -71 [ 740.239725][ T30] audit: type=1400 audit(2000000393.442:1586): avc: denied { write } for pid=15564 comm="syz.2.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.276320][ T30] audit: type=1400 audit(2000000393.442:1587): avc: denied { read } for pid=15564 comm="syz.2.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.346241][ T42] usb usb2-port1: unable to enumerate USB device [ 740.375023][T15568] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.2379'. [ 740.440262][ T976] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 740.651364][ T976] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 740.660640][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.670164][ T976] usb 4-1: Product: syz [ 740.688837][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 740.698434][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 740.706724][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 740.715532][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 740.723659][ T976] usb 4-1: Manufacturer: syz [ 740.728319][ T976] usb 4-1: SerialNumber: syz [ 740.733821][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 740.774535][T15569] Failed to initialize the IGMP autojoin socket (err -2) [ 740.823813][T15576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.840600][T15576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.856107][ T30] audit: type=1400 audit(2000000394.112:1588): avc: denied { connect } for pid=15575 comm="syz.2.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 740.938265][T15578] Failed to initialize the IGMP autojoin socket (err -2) [ 741.017033][ T30] audit: type=1400 audit(2000000394.272:1589): avc: denied { map } for pid=15575 comm="syz.2.2382" path="socket:[55852]" dev="sockfs" ino=55852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 741.152661][ T976] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 741.164661][ T976] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 741.174393][ T976] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 741.184017][ T976] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 741.935692][ T5867] usb 4-1: USB disconnect, device number 78 [ 742.030955][T15569] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 742.055498][T15569] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 742.074045][T15569] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 742.094942][T15569] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 742.402397][T15569] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 742.427751][T15569] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 742.447506][T15569] wireguard: wg0: Could not create IPv4 socket [ 742.456289][T15569] wireguard: wg1: Could not create IPv4 socket [ 742.471221][T15569] wireguard: wg2: Could not create IPv4 socket [ 743.545019][ T30] audit: type=1400 audit(2000000396.802:1590): avc: denied { connect } for pid=15600 comm="syz.1.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 743.564935][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.649467][ T30] audit: type=1400 audit(2000000396.902:1591): avc: denied { setopt } for pid=15600 comm="syz.1.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 743.684091][T15605] tipc: Started in network mode [ 743.688973][T15605] tipc: Node identity 4, cluster identity 4711 [ 743.709367][T15605] tipc: Node number set to 4 [ 743.724864][ T30] audit: type=1400 audit(2000000396.982:1592): avc: denied { accept } for pid=15600 comm="syz.1.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 743.755146][ T30] audit: type=1400 audit(2000000397.012:1593): avc: denied { create } for pid=15603 comm="syz.3.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 743.779219][T15604] Failed to initialize the IGMP autojoin socket (err -2) [ 743.805381][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 743.819498][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 743.829073][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 743.861205][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 743.871632][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 744.292207][T15608] Failed to initialize the IGMP autojoin socket (err -2) [ 744.363433][T15621] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2390'. [ 744.605079][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 744.605094][ T30] audit: type=1400 audit(2000000397.862:1598): avc: denied { append } for pid=15628 comm="syz.2.2393" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 744.634528][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.719803][ T30] audit: type=1400 audit(2000000397.962:1599): avc: denied { create } for pid=15622 comm="syz.1.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 745.085311][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2393'. [ 745.139355][ T30] audit: type=1400 audit(2000000398.392:1600): avc: denied { create } for pid=15625 comm="syz.3.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 745.272923][ T30] audit: type=1400 audit(2000000398.532:1601): avc: denied { create } for pid=15636 comm="syz.2.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 745.293975][T15637] FAULT_INJECTION: forcing a failure. [ 745.293975][T15637] name failslab, interval 1, probability 0, space 0, times 0 [ 745.325200][T15637] CPU: 1 UID: 0 PID: 15637 Comm: syz.2.2394 Not tainted syzkaller #0 PREEMPT(full) [ 745.325225][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 745.325234][T15637] Call Trace: [ 745.325238][T15637] [ 745.325243][T15637] dump_stack_lvl+0x16c/0x1f0 [ 745.325269][T15637] should_fail_ex+0x512/0x640 [ 745.325285][T15637] should_failslab+0xc2/0x120 [ 745.325298][T15637] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 745.325311][T15637] ? sidtab_sid2str_get+0x17a/0x680 [ 745.325327][T15637] ? kmemdup_noprof+0x29/0x60 [ 745.325343][T15637] kmemdup_noprof+0x29/0x60 [ 745.325359][T15637] sidtab_sid2str_get+0x17a/0x680 [ 745.325374][T15637] sidtab_entry_to_string+0x33/0x110 [ 745.325387][T15637] security_sid_to_context_core+0x35c/0x640 [ 745.325401][T15637] avc_audit_post_callback+0x1aa/0x8f0 [ 745.325418][T15637] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 745.325431][T15637] ? skb_put+0x138/0x1b0 [ 745.325442][T15637] ? audit_log_n_string+0x253/0x550 [ 745.325458][T15637] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 745.325472][T15637] common_lsm_audit+0x24e/0x300 [ 745.325485][T15637] ? __pfx_common_lsm_audit+0x10/0x10 [ 745.325498][T15637] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 745.325517][T15637] ? avc_update_node.isra.0+0x4c0/0xb60 [ 745.325532][T15637] slow_avc_audit+0x186/0x210 [ 745.325547][T15637] ? __pfx_slow_avc_audit+0x10/0x10 [ 745.325567][T15637] ? avc_denied+0x14a/0x190 [ 745.325591][T15637] ? avc_has_perm_noaudit+0x306/0x3b0 [ 745.325617][T15637] avc_has_perm+0x1b5/0x1f0 [ 745.325634][T15637] ? __pfx_avc_has_perm+0x10/0x10 [ 745.325647][T15637] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 745.325664][T15637] ? kernel_text_address+0x8d/0x100 [ 745.325680][T15637] sock_has_perm+0x252/0x2f0 [ 745.325696][T15637] ? __pfx_sock_has_perm+0x10/0x10 [ 745.325714][T15637] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 745.325730][T15637] ? __import_iovec+0x1dd/0x650 [ 745.325744][T15637] ? __might_fault+0xe3/0x190 [ 745.325759][T15637] ? __might_fault+0x13b/0x190 [ 745.325783][T15637] security_socket_sendmsg+0x9b/0x240 [ 745.325813][T15637] ____sys_sendmsg+0x865/0xc70 [ 745.325829][T15637] ? copy_msghdr_from_user+0x10a/0x160 [ 745.325843][T15637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.325860][T15637] ___sys_sendmsg+0x134/0x1d0 [ 745.325874][T15637] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.325887][T15637] ? __lock_acquire+0x622/0x1c90 [ 745.325922][T15637] __sys_sendmsg+0x16d/0x220 [ 745.325936][T15637] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.325960][T15637] do_syscall_64+0xcd/0xfa0 [ 745.325971][T15637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.325982][T15637] RIP: 0033:0x7f700538f6c9 [ 745.325992][T15637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.326002][T15637] RSP: 002b:00007f7006245038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.326013][T15637] RAX: ffffffffffffffda RBX: 00007f70055e5fa0 RCX: 00007f700538f6c9 [ 745.326019][T15637] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 745.326025][T15637] RBP: 00007f7006245090 R08: 0000000000000000 R09: 0000000000000000 [ 745.326031][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.326037][T15637] R13: 00007f70055e6038 R14: 00007f70055e5fa0 R15: 00007ffd7670a458 [ 745.326052][T15637] [ 745.329035][ T30] audit: type=1400 audit(2000000398.552:1602): avc: denied { write } for pid=15636 comm="syz.2.2394" scontext=root:sysadm_r:sysadm_t tsid=148 tclass=netlink_crypto_socket permissive=1 [ 745.689486][ T30] audit: type=1400 audit(2000000398.772:1603): avc: denied { mount } for pid=15638 comm="syz.2.2395" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 745.900470][ T30] audit: type=1400 audit(2000000399.022:1604): avc: denied { connect } for pid=15640 comm="syz.1.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 745.926482][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 745.960614][T15647] team1: entered promiscuous mode [ 745.975803][T15647] team1: entered allmulticast mode [ 745.985903][ T30] audit: type=1400 audit(2000000399.152:1605): avc: denied { write } for pid=15640 comm="syz.1.2397" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 746.100715][ T5134] Bluetooth: hci3: command tx timeout [ 746.156320][T15650] bridge0: port 3(gretap0) entered disabled state [ 746.855268][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.864030][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.915459][T15665] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.2402'. [ 746.976983][T15668] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.2403'. [ 747.166143][ T30] audit: type=1400 audit(2000000400.422:1606): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 747.242096][T15608] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 747.265488][T15683] FAULT_INJECTION: forcing a failure. [ 747.265488][T15683] name failslab, interval 1, probability 0, space 0, times 0 [ 747.278990][T15608] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 747.280489][T15683] CPU: 0 UID: 0 PID: 15683 Comm: syz.1.2408 Not tainted syzkaller #0 PREEMPT(full) [ 747.280509][T15683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 747.280519][T15683] Call Trace: [ 747.280525][T15683] [ 747.280532][T15683] dump_stack_lvl+0x16c/0x1f0 [ 747.280561][T15683] should_fail_ex+0x512/0x640 [ 747.280579][T15683] ? __kmalloc_cache_noprof+0x5f/0x780 [ 747.280603][T15683] should_failslab+0xc2/0x120 [ 747.280620][T15683] __kmalloc_cache_noprof+0x72/0x780 [ 747.280641][T15683] ? nf_tables_newtable+0xd72/0x1b50 [ 747.280662][T15683] ? nf_tables_newtable+0xd72/0x1b50 [ 747.280677][T15683] nf_tables_newtable+0xd72/0x1b50 [ 747.280696][T15683] ? __pfx___nla_validate_parse+0x10/0x10 [ 747.280719][T15683] ? __pfx_nf_tables_newtable+0x10/0x10 [ 747.280741][T15683] ? __nla_parse+0x40/0x60 [ 747.280765][T15683] nfnetlink_rcv_batch+0x190d/0x2350 [ 747.280796][T15683] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 747.280828][T15683] ? avc_has_perm_noaudit+0x149/0x3b0 [ 747.280872][T15683] ? __nla_parse+0x40/0x60 [ 747.280896][T15683] nfnetlink_rcv+0x3c1/0x430 [ 747.280912][T15683] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 747.280935][T15683] netlink_unicast+0x5aa/0x870 [ 747.280961][T15683] ? __pfx_netlink_unicast+0x10/0x10 [ 747.280991][T15683] netlink_sendmsg+0x8c8/0xdd0 [ 747.281015][T15683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.281046][T15683] ____sys_sendmsg+0xa98/0xc70 [ 747.281062][T15683] ? copy_msghdr_from_user+0x10a/0x160 [ 747.281082][T15683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.281108][T15683] ___sys_sendmsg+0x134/0x1d0 [ 747.281130][T15683] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.281147][T15683] ? __lock_acquire+0x622/0x1c90 [ 747.281200][T15683] __sys_sendmsg+0x16d/0x220 [ 747.281221][T15683] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.281256][T15683] do_syscall_64+0xcd/0xfa0 [ 747.281272][T15683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.281288][T15683] RIP: 0033:0x7f238398f6c9 [ 747.281302][T15683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.281316][T15683] RSP: 002b:00007f238485f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.281330][T15683] RAX: ffffffffffffffda RBX: 00007f2383be5fa0 RCX: 00007f238398f6c9 [ 747.281341][T15683] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 747.281350][T15683] RBP: 00007f238485f090 R08: 0000000000000000 R09: 0000000000000000 [ 747.281359][T15683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.281368][T15683] R13: 00007f2383be6038 R14: 00007f2383be5fa0 R15: 00007ffd027a9ac8 [ 747.281391][T15683] [ 747.572944][T15608] wireguard: wg0: Could not create IPv4 socket [ 747.586404][T15608] wireguard: wg1: Could not create IPv4 socket [ 747.595064][T15608] wireguard: wg2: Could not create IPv4 socket [ 747.997304][T15691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2410'. [ 748.017299][ T30] audit: type=1400 audit(2000000401.252:1607): avc: denied { ioctl } for pid=15690 comm="syz.3.2410" path="socket:[56779]" dev="sockfs" ino=56779 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 748.119753][ T976] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 748.270752][ T976] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32 [ 748.279906][ T976] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config [ 748.290505][ T976] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249 [ 748.301631][ T976] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 748.310969][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.318927][ T976] usb 2-1: Product: syz [ 748.323171][ T976] usb 2-1: Manufacturer: syz [ 748.327751][ T976] usb 2-1: SerialNumber: syz [ 748.542082][T15687] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 748.550041][T15687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2409'. [ 748.558967][T15687] openvswitch: netlink: Flow key attr not present in new flow. [ 749.288816][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 749.298319][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 749.306942][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 749.315784][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 749.323532][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 749.358070][T15703] Failed to initialize the IGMP autojoin socket (err -2) [ 749.392473][T15708] tmpfs: Bad value for 'mpol' [ 749.466437][T15711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.478851][T15711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.507756][T15711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.517921][T15711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.563748][T15711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2417'. [ 750.120214][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.128924][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.144748][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 750.144762][ T30] audit: type=1400 audit(2000000403.402:1611): avc: denied { getopt } for pid=15725 comm="syz.2.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 750.369877][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 750.611792][T12155] usb 2-1: USB disconnect, device number 101 [ 750.717858][T15734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.730657][T15734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.794769][ T30] audit: type=1400 audit(2000000404.052:1612): avc: denied { mount } for pid=15733 comm="syz.2.2426" name="/" dev="autofs" ino=57639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 750.823449][ T30] audit: type=1400 audit(2000000404.082:1613): avc: denied { append } for pid=15733 comm="syz.2.2426" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 751.066590][ T30] audit: type=1400 audit(2000000404.312:1614): avc: denied { read } for pid=15731 comm="syz.1.2425" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 751.380136][ T5134] Bluetooth: hci3: command tx timeout [ 751.392203][ T30] audit: type=1400 audit(2000000404.652:1615): avc: denied { ioctl } for pid=15739 comm="syz.3.2427" path="socket:[57715]" dev="sockfs" ino=57715 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 751.600826][T15745] FAULT_INJECTION: forcing a failure. [ 751.600826][T15745] name failslab, interval 1, probability 0, space 0, times 0 [ 751.613699][T15745] CPU: 1 UID: 0 PID: 15745 Comm: syz.1.2428 Not tainted syzkaller #0 PREEMPT(full) [ 751.613722][T15745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 751.613732][T15745] Call Trace: [ 751.613738][T15745] [ 751.613742][T15745] dump_stack_lvl+0x16c/0x1f0 [ 751.613763][T15745] should_fail_ex+0x512/0x640 [ 751.613776][T15745] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 751.613794][T15745] should_failslab+0xc2/0x120 [ 751.613807][T15745] kmem_cache_alloc_node_noprof+0x78/0x770 [ 751.613823][T15745] ? __alloc_skb+0x2b2/0x380 [ 751.613840][T15745] ? __alloc_skb+0x2b2/0x380 [ 751.613851][T15745] __alloc_skb+0x2b2/0x380 [ 751.613864][T15745] ? __pfx___alloc_skb+0x10/0x10 [ 751.613876][T15745] ? inet_diag_rcv_msg_compat+0x1b4/0x2d0 [ 751.613888][T15745] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 751.613904][T15745] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 751.613920][T15745] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 751.613938][T15745] netlink_ack+0x15d/0xb80 [ 751.613967][T15745] netlink_rcv_skb+0x332/0x420 [ 751.613982][T15745] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 751.613996][T15745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 751.614016][T15745] ? netlink_deliver_tap+0x1ae/0xd30 [ 751.614033][T15745] netlink_unicast+0x5aa/0x870 [ 751.614050][T15745] ? __pfx_netlink_unicast+0x10/0x10 [ 751.614071][T15745] netlink_sendmsg+0x8c8/0xdd0 [ 751.614088][T15745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.614109][T15745] ____sys_sendmsg+0xa98/0xc70 [ 751.614119][T15745] ? copy_msghdr_from_user+0x10a/0x160 [ 751.614134][T15745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.614150][T15745] ___sys_sendmsg+0x134/0x1d0 [ 751.614165][T15745] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.614178][T15745] ? __lock_acquire+0x622/0x1c90 [ 751.614211][T15745] __sys_sendmsg+0x16d/0x220 [ 751.614225][T15745] ? __pfx___sys_sendmsg+0x10/0x10 [ 751.614247][T15745] do_syscall_64+0xcd/0xfa0 [ 751.614258][T15745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.614269][T15745] RIP: 0033:0x7f238398f6c9 [ 751.614279][T15745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.614288][T15745] RSP: 002b:00007f238485f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.614299][T15745] RAX: ffffffffffffffda RBX: 00007f2383be5fa0 RCX: 00007f238398f6c9 [ 751.614305][T15745] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 751.614312][T15745] RBP: 00007f238485f090 R08: 0000000000000000 R09: 0000000000000000 [ 751.614318][T15745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.614324][T15745] R13: 00007f2383be6038 R14: 00007f2383be5fa0 R15: 00007ffd027a9ac8 [ 751.614337][T15745] [ 752.094404][ T30] audit: type=1400 audit(2000000405.352:1616): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 752.282326][ T976] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 752.404988][T15703] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 752.416410][T15703] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 752.421040][ T976] usb 2-1: device descriptor read/64, error -71 [ 752.433393][T15703] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 752.445205][T15703] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 752.671046][ T976] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 752.822373][ T976] usb 2-1: device descriptor read/64, error -71 [ 752.856701][T15703] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 752.878491][T15703] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 752.899038][T15703] wireguard: wg0: Could not create IPv4 socket [ 752.909396][T15703] wireguard: wg1: Could not create IPv4 socket [ 752.918115][T15703] wireguard: wg2: Could not create IPv4 socket [ 752.930248][ T976] usb usb2-port1: attempt power cycle [ 753.269886][ T976] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 753.290218][ T976] usb 2-1: device descriptor read/8, error -71 [ 753.549994][ T976] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 753.570475][ T976] usb 2-1: device descriptor read/8, error -71 [ 753.690107][ T976] usb usb2-port1: unable to enumerate USB device [ 753.736455][T15763] fuse: Unknown parameter 'group_Źd' [ 754.061637][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 754.074147][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 754.082620][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 754.090776][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 754.100718][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 754.123663][T15771] Failed to initialize the IGMP autojoin socket (err -2) [ 754.952654][ T30] audit: type=1400 audit(2000000408.212:1617): avc: denied { getopt } for pid=15775 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 755.014740][ T30] audit: type=1400 audit(2000000408.272:1618): avc: denied { bind } for pid=15779 comm="syz.3.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 755.056944][ T30] audit: type=1400 audit(2000000408.292:1619): avc: denied { read } for pid=15775 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 755.077497][ T30] audit: type=1400 audit(2000000408.302:1620): avc: denied { mount } for pid=15777 comm="syz.1.2435" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 755.100489][T10618] block nbd0: Possible stuck request ffff8880262a7000: control (read@0,1024B). Runtime 390 seconds [ 755.111801][T10618] block nbd0: Possible stuck request ffff8880262a71c0: control (read@1024,1024B). Runtime 390 seconds [ 755.122934][T10618] block nbd0: Possible stuck request ffff8880262a7380: control (read@2048,1024B). Runtime 390 seconds [ 755.134044][T10618] block nbd0: Possible stuck request ffff8880262a7540: control (read@3072,1024B). Runtime 390 seconds [ 755.354931][ T30] audit: type=1400 audit(2000000408.612:1621): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 755.563988][T15771] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 755.585350][T15771] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 755.603585][T15771] wireguard: wg0: Could not create IPv4 socket [ 755.612263][T15771] wireguard: wg1: Could not create IPv4 socket [ 755.620577][T15771] wireguard: wg2: Could not create IPv4 socket [ 755.639887][T10226] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 755.791373][T10226] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.802168][T10226] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 755.815107][T10226] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.824369][T10226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.834229][T10226] usb 2-1: config 0 descriptor?? [ 755.842612][T10226] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 756.808860][ T30] audit: type=1400 audit(2000000410.062:1622): avc: denied { mount } for pid=15809 comm="syz.3.2443" name="/" dev="ramfs" ino=58227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 756.843041][ T30] audit: type=1400 audit(2000000410.102:1623): avc: denied { execute } for pid=15809 comm="syz.3.2443" path="/file1" dev="ramfs" ino=58228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 756.905514][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2443'. [ 756.975040][ T30] audit: type=1400 audit(2000000410.232:1624): avc: denied { create } for pid=15795 comm="syz.1.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 758.725483][T15818] netlink: 'syz.3.2445': attribute type 10 has an invalid length. [ 758.734191][T15817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.839844][ T5867] usb 2-1: USB disconnect, device number 106 [ 759.041947][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.058627][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 759.067240][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.072733][T15829] overlayfs: missing 'lowerdir' [ 759.086020][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.093884][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 759.115160][T15830] /dev/nullb0: Can't open blockdev [ 759.175687][T15830] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.185843][T15830] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.313011][T15826] Failed to initialize the IGMP autojoin socket (err -2) [ 759.414697][T15830] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.455372][T15830] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.701047][ T5867] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 760.255464][T15830] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.267167][T15830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.580579][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.625976][ T5867] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 760.675132][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.748142][ T5867] usb 2-1: config 0 descriptor?? [ 760.754022][T15830] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.779711][T15830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.790786][ T5867] ttusbir 2-1:0.0: cannot find expected altsetting [ 761.058559][ T2945] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.067088][ T2945] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.082732][ T2945] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.120173][ T2945] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.138753][ T2945] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.150443][ T2945] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.208701][ T2945] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.217414][ T2945] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.220183][ T5817] Bluetooth: hci3: command tx timeout [ 761.243601][T10226] usb 2-1: USB disconnect, device number 107 [ 761.383433][T15826] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 761.393933][T15826] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 761.404845][T15826] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 761.415938][T15826] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 761.660847][T15826] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 761.679114][T15826] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 761.696927][T15826] wireguard: wg0: Could not create IPv4 socket [ 761.705715][T15826] wireguard: wg1: Could not create IPv4 socket [ 761.713332][T15826] wireguard: wg2: Could not create IPv4 socket [ 762.539974][ T30] audit: type=1400 audit(2000000415.772:1625): avc: denied { watch watch_reads } for pid=15864 comm="syz.3.2455" path="/543" dev="tmpfs" ino=2929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 763.274027][ T30] audit: type=1400 audit(2000000416.012:1626): avc: denied { setopt } for pid=15863 comm="syz.2.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 763.397422][T15870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2455'. [ 763.428139][ T30] audit: type=1400 audit(2000000416.392:1627): avc: denied { create } for pid=15862 comm="syz.1.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 763.460260][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 763.504455][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2456'. [ 763.534352][ T30] audit: type=1400 audit(2000000416.392:1628): avc: denied { write } for pid=15862 comm="syz.1.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 763.606413][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 763.620741][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 763.629014][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 763.637550][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 763.646401][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 763.671435][T15877] Failed to initialize the IGMP autojoin socket (err -2) [ 764.802914][T15906] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.2464'. [ 765.096524][ T30] audit: type=1400 audit(2000000418.352:1629): avc: denied { append } for pid=15913 comm="syz.2.2466" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 765.339698][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 765.699685][ T5817] Bluetooth: hci3: command tx timeout [ 765.939698][T15877] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 765.983560][T15877] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 766.036597][T15877] wireguard: wg0: Could not create IPv4 socket [ 766.051945][T15877] wireguard: wg1: Could not create IPv4 socket [ 766.072053][T15877] wireguard: wg2: Could not create IPv4 socket [ 766.326471][T15936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.343388][T15936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.437995][T15937] Failed to initialize the IGMP autojoin socket (err -2) [ 766.899658][T10226] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 767.051545][T10226] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 767.060506][T10226] usb 2-1: config 0 has no interface number 0 [ 767.083982][T10226] usb 2-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 767.094523][T10226] usb 2-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 767.109053][T10226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.119976][T10226] usb 2-1: config 0 descriptor?? [ 767.165319][T15945] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 767.177641][T10226] pl2303 2-1:0.183: required endpoints missing [ 767.385892][T15945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.394647][T15945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.407646][ T30] audit: type=1400 audit(2000000420.672:1630): avc: denied { write } for pid=15944 comm="syz.1.2473" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 767.431292][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.438194][ T30] audit: type=1400 audit(2000000420.672:1631): avc: denied { open } for pid=15944 comm="syz.1.2473" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 767.582873][T15951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61216 sclass=netlink_route_socket pid=15951 comm=syz.1.2473 [ 769.735814][ T5867] usb 2-1: USB disconnect, device number 108 [ 770.535137][ T30] audit: type=1326 audit(2000000423.322:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 770.818402][ T30] audit: type=1326 audit(2000000423.322:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 770.907179][ T30] audit: type=1326 audit(2000000423.322:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 770.972233][ T30] audit: type=1326 audit(2000000423.322:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 770.997290][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 771.018332][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.030865][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.038407][ T30] audit: type=1326 audit(2000000423.322:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 771.062755][ T30] audit: type=1326 audit(2000000423.322:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 771.086991][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.094811][ T30] audit: type=1326 audit(2000000423.322:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 771.118751][ T30] audit: type=1326 audit(2000000423.322:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 771.142829][ T30] audit: type=1326 audit(2000000423.322:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 771.167157][ T30] audit: type=1326 audit(2000000423.322:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238398f6c9 code=0x7ffc0000 [ 771.251300][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.286344][T15975] Failed to initialize the IGMP autojoin socket (err -2) [ 772.688851][T15975] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 772.699171][T15975] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 772.710931][T15975] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 772.721309][T15975] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 772.956884][T15975] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 772.975705][T15975] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 772.993096][T15975] wireguard: wg0: Could not create IPv4 socket [ 773.001290][T15975] wireguard: wg1: Could not create IPv4 socket [ 773.008470][T15975] wireguard: wg2: Could not create IPv4 socket [ 774.084832][T16010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.118705][T16010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.225826][T16013] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.2488'. [ 774.735083][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 774.759317][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 774.767681][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 774.776200][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 774.786441][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 774.814504][T16029] Failed to initialize the IGMP autojoin socket (err -2) [ 774.998123][T16039] tipc: Enabled bearer , priority 0 [ 775.023836][T16039] syzkaller0: entered promiscuous mode [ 775.029425][T16039] syzkaller0: entered allmulticast mode [ 775.045632][T16039] tipc: Resetting bearer [ 775.060595][T16038] tipc: Resetting bearer [ 775.090318][T16038] tipc: Disabling bearer [ 775.922081][T16054] Failed to initialize the IGMP autojoin socket (err -2) [ 776.365277][T16069] tipc: Enabled bearer , priority 0 [ 776.373643][T16069] syzkaller0: entered promiscuous mode [ 776.379270][T16069] syzkaller0: entered allmulticast mode [ 776.399158][T16069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.918314][ T5134] Bluetooth: hci3: command tx timeout [ 776.928213][ T31] INFO: task syz.0.2094:13731 blocked for more than 143 seconds. [ 776.930199][T16069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.939184][ T31] Not tainted syzkaller #0 [ 776.948965][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 776.948977][ T31] task:syz.0.2094 state:D stack:26744 pid:13731 tgid:13730 ppid:5816 task_flags:0x400140 flags:0x00080002 [ 776.949037][ T31] Call Trace: [ 776.949044][ T31] [ 776.949056][ T31] __schedule+0x1190/0x5de0 [ 776.949087][ T31] ? look_up_lock_class+0x6b/0x150 [ 776.949110][ T31] ? __lock_acquire+0x622/0x1c90 [ 776.949140][ T31] ? __pfx___schedule+0x10/0x10 [ 776.949167][ T31] ? find_held_lock+0x2b/0x80 [ 776.949190][ T31] ? schedule+0x2d7/0x3a0 [ 776.949216][ T31] ? bdev_open+0x41a/0xe40 [ 776.949239][ T31] schedule+0xe7/0x3a0 [ 776.949265][ T31] schedule_preempt_disabled+0x13/0x30 [ 776.949293][ T31] __mutex_lock+0x818/0x1060 [ 776.949312][ T31] ? bdev_open+0x41a/0xe40 [ 776.949339][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 776.949372][ T31] ? bdev_open+0x41a/0xe40 [ 776.949393][ T31] bdev_open+0x41a/0xe40 [ 776.949418][ T31] ? iput+0x35/0x40 [ 776.949442][ T31] blkdev_open+0x34e/0x4f0 [ 776.949470][ T31] do_dentry_open+0x982/0x1530 [ 776.949490][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 776.949521][ T31] vfs_open+0x82/0x3f0 [ 776.950069][ T31] path_openat+0x1de4/0x2cb0 [ 776.950102][ T31] ? __pfx_path_openat+0x10/0x10 [ 776.950123][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 776.950155][ T31] do_filp_open+0x20b/0x470 [ 776.950176][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 776.950216][ T31] ? alloc_fd+0x471/0x7d0 [ 776.950243][ T31] do_sys_openat2+0x11b/0x1d0 [ 776.950266][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 776.950289][ T31] ? find_held_lock+0x2b/0x80 [ 776.950312][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 776.950344][ T31] __x64_sys_openat+0x174/0x210 [ 776.950369][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 776.950395][ T31] ? do_user_addr_fault+0x843/0x1370 [ 776.950424][ T31] do_syscall_64+0xcd/0xfa0 [ 776.950444][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.950464][ T31] RIP: 0033:0x7f26ecd8df10 [ 776.950481][ T31] RSP: 002b:00007f26edcb4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 776.950500][ T31] RAX: ffffffffffffffda RBX: 0000000000062200 RCX: 00007f26ecd8df10 [ 776.950513][ T31] RDX: 0000000000062200 RSI: 00007f26edcb4c10 RDI: 00000000ffffff9c [ 776.950525][ T31] RBP: 00007f26edcb4c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 776.950538][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 776.950550][ T31] R13: 00007f26ecfe6038 R14: 00007f26ecfe5fa0 R15: 00007fff37120858 [ 776.950576][ T31] [ 776.950605][ T31] [ 776.950605][ T31] Showing all locks held in the system: [ 776.950614][ T31] 3 locks held by kworker/0:0/9: [ 776.950623][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 776.950666][ T31] #1: ffffc900000e7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 776.950712][ T31] #2: ffff888031c49240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 776.950776][ T31] 1 lock held by khungtaskd/31: [ 776.950787][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 776.950856][ T31] 2 locks held by getty/5569: [ 776.950867][ T31] #0: ffff8880359b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 776.950916][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 776.950967][ T31] 1 lock held by udevd/5977: [ 776.951030][ T31] #0: ffff888143b2f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 776.951082][ T31] 3 locks held by kworker/0:1/10226: [ 776.951092][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 776.951136][ T31] #1: ffffc90004aafd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 776.951182][ T31] #2: ffff88802e475240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 776.951235][ T31] 1 lock held by syz.0.2094/13731: [ 776.951245][ T31] #0: ffff888143b2f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 776.951288][ T31] 1 lock held by syz-executor/15975: [ 776.951296][ T31] #0: ffffffff8e3cfbc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 776.951338][ T31] 2 locks held by syz-executor/16029: [ 776.951348][ T31] 1 lock held by syz.1.2500/16053: [ 776.951360][ T31] [ 776.951365][ T31] ============================================= [ 776.951365][ T31] [ 776.951372][ T31] NMI backtrace for cpu 0 [ 776.951384][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 776.951403][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 776.951413][ T31] Call Trace: [ 776.951419][ T31] [ 776.951426][ T31] dump_stack_lvl+0x116/0x1f0 [ 776.951454][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 776.951476][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 776.951502][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 776.951526][ T31] watchdog+0xf3f/0x1170 [ 776.951553][ T31] ? rcu_is_watching+0x12/0xc0 [ 776.951575][ T31] ? __pfx_watchdog+0x10/0x10 [ 776.951593][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 776.951621][ T31] ? __kthread_parkme+0x19e/0x250 [ 776.951647][ T31] ? __pfx_watchdog+0x10/0x10 [ 776.951668][ T31] kthread+0x3c5/0x780 [ 776.951686][ T31] ? __pfx_kthread+0x10/0x10 [ 776.951704][ T31] ? rcu_is_watching+0x12/0xc0 [ 776.951725][ T31] ? __pfx_kthread+0x10/0x10 [ 776.951751][ T31] ret_from_fork+0x675/0x7d0 [ 776.951766][ T31] ? __pfx_kthread+0x10/0x10 [ 776.951784][ T31] ret_from_fork_asm+0x1a/0x30 [ 776.951820][ T31] [ 776.951827][ T31] Sending NMI from CPU 0 to CPUs 1: [ 776.951851][ C1] NMI backtrace for cpu 1 [ 776.951860][ C1] CPU: 1 UID: 0 PID: 16029 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 776.951877][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 776.951885][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 776.951904][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 fb f8 c7 f5 cc [ 776.951918][ C1] RSP: 0018:ffffc90003547a88 EFLAGS: 00000092 [ 776.951930][ C1] RAX: 0000000000000001 RBX: ffffffff8e3c4760 RCX: ffffffff8457737d [ 776.951939][ C1] RDX: 0000000000000000 RSI: ffffffff8db1afc3 RDI: ffffffff8bf07040 [ 776.951948][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 776.951956][ C1] R10: 0000000000000001 R11: 0000000000000004 R12: ffffffff84576c4a [ 776.951964][ C1] R13: 0000000000000206 R14: ffff88807858c900 R15: ffff888031b66300 [ 776.951974][ C1] FS: 000055559190c500(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 776.951994][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.952003][ C1] CR2: 00002000003cd000 CR3: 000000007db1a000 CR4: 00000000003526f0 [ 776.952013][ C1] Call Trace: [ 776.952017][ C1] [ 776.952023][ C1] lock_release+0x9c/0x2f0 [ 776.952038][ C1] avc_has_extended_perms+0x33f/0x1090 [ 776.952062][ C1] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 776.952080][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 776.952094][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 776.952115][ C1] ? find_held_lock+0x2b/0x80 [ 776.952133][ C1] ? tomoyo_path_number_perm+0x18d/0x580 [ 776.952163][ C1] ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 776.952180][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 776.952198][ C1] ? fd_install+0x225/0x750 [ 776.952212][ C1] ? hook_file_ioctl_common+0x145/0x410 [ 776.952233][ C1] ? selinux_file_ioctl+0x180/0x270 [ 776.952247][ C1] selinux_file_ioctl+0x180/0x270 [ 776.952263][ C1] security_file_ioctl+0xc6/0x240 [ 776.952279][ C1] __x64_sys_ioctl+0xb7/0x210 [ 776.952299][ C1] do_syscall_64+0xcd/0xfa0 [ 776.952312][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.952326][ C1] RIP: 0033:0x7f1e0038f2cb [ 776.952337][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 776.952349][ C1] RSP: 002b:00007ffe89995760 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.952362][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f1e0038f2cb [ 776.952370][ C1] RDX: 00007ffe899957c0 RSI: 0000000000008933 RDI: 0000000000000005 [ 776.952379][ C1] RBP: 00007ffe899957c0 R08: 0000000000000001 R09: 00305f6576616c73 [ 776.952387][ C1] R10: 000000000000001b R11: 0000000000000246 R12: 00007ffe8999584c [ 776.952396][ C1] R13: 00007f1e004131e6 R14: 00007f1e01114620 R15: 00007f1e004131e6 [ 776.952411][ C1] [ 776.968641][T16069] tipc: Resetting bearer [ 776.971286][T16068] tipc: Resetting bearer [ 776.994455][T16068] tipc: Disabling bearer [ 777.012643][T16029] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 777.017737][T16029] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 777.916582][T16029] wireguard: wg0: Could not create IPv4 socket [ 777.934084][T16029] wireguard: wg1: Could not create IPv4 socket [ 777.951214][T16029] wireguard: wg2: Could not create IPv4 socket [ 781.065365][ T5183] udevd[5183]: worker [5977] /devices/virtual/block/nbd0 timeout; kill it [ 781.074530][ T5183] udevd[5183]: seq 15532 '/devices/virtual/block/nbd0' killed [ 785.139793][T10618] block nbd0: Possible stuck request ffff8880262a7000: control (read@0,1024B). Runtime 420 seconds [ 785.150902][T10618] block nbd0: Possible stuck request ffff8880262a71c0: control (read@1024,1024B). Runtime 420 seconds [ 785.162514][T10618] block nbd0: Possible stuck request ffff8880262a7380: control (read@2048,1024B). Runtime 420 seconds [ 785.174159][T10618] block nbd0: Possible stuck request ffff8880262a7540: control (read@3072,1024B). Runtime 420 seconds