last executing test programs: 1m58.967341409s ago: executing program 3 (id=587): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x219, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0), 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000740)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x4, {0x9, 0x6, "9eccdc", 0x273, 0x6c, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @remote, [], "73ee99d2d629e569"}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x0, 0x43, 0xe, 0x63}]}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) 1m56.277968433s ago: executing program 3 (id=594): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x6b38, 0x10100, 0x0, 0x1eb}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000200)={0x0, 0xab62, 0x800, 0x3, 0x147}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) r5 = socket(0x40000000015, 0x5, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x2012}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200002, 0x4) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) move_mount(r7, &(0x7f0000000080)='./bus\x00', r8, &(0x7f00000001c0)='./file0\x00', 0x1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@metacopy_on}]}) 1m55.246225901s ago: executing program 3 (id=598): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async, rerun: 64) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0x24) (async, rerun: 64) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x123401, 0x0) (async) r2 = userfaultfd(0x801) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 32) ioctl$VT_ACTIVATE(r1, 0x5606, 0xc) (async) syz_io_uring_submit(r3, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r6, 0x84, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0xe895, @local, 0x3}, @in6={0xa, 0x4e22, 0x4, @empty, 0x1ff}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41, 0xffffffff}, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x43d6b990c9433eb3, {0x41, 0x0, 0x2}}, 0x10) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) 1m55.088684188s ago: executing program 3 (id=602): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00'], 0x70}}, 0x4004040) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x34000}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0x18, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x40040) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000006010040"]) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x0, 0x400c800) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0x40) 1m52.817364769s ago: executing program 3 (id=607): socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r4 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000300)=r4, 0x1) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_VMA(0x53564d41, 0xfff4, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 1m51.376953885s ago: executing program 3 (id=612): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xd0, r1, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4e00}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4bc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff801}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xd0}}, 0x4040850) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) membarrier(0x10, 0x0) 1m50.910033567s ago: executing program 32 (id=612): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xd0, r1, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4e00}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4bc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff801}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xd0}}, 0x4040850) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) membarrier(0x10, 0x0) 8.61942609s ago: executing program 2 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 8.535454901s ago: executing program 0 (id=1037): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="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", &(0x7f0000000440)}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0xd1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r4 = socket(0x11, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, 0x0, 0x0, 0x80000000, 0x0, 0x0) fcntl$dupfd(r2, 0x406, r5) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x10, 0x40000080, @void, @value}, 0x94) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x482, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7bd}}) 8.532912538s ago: executing program 2 (id=1038): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) (async) fstat(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_open_dev$sg(&(0x7f0000000280), 0xff, 0x2a0000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000012000101000000200000000007000000", @ANYRES32=0x0, @ANYBLOB="414100000000350008001d00ff00"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000001380), 0xc45, 0x82001) sendmmsg$unix(r1, &(0x7f0000001480)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000300)="4132ab0d26e848fd421659d4e5b12801234c6fbda491dba6a72862c93ad8d8ac24fb3f0a16452bb0dc26aa2c694d51e6d6597a919cef00399fe15895b00426e5aa55eb77b3a0e4b4dcb71216ca92f1d164bb3aa18557814b655899b2be5d9f7436305e3e161271214ec4c2e0d34fa9f810aa541efb6d4fac3780785e3c65d3521ac084940013b98e9a873ed94961c6c33fd69d19e0e183013504e291c665045e848cdca0a438c615462c176c781a6dc12637599e3325b6bc61092fb282539a2cdc8b98f4b7893b1b20f92bf92902fac2935a7dc28adfba9bea4ada8863d7687ea9efa5e969ea242177d6f18c7159d71330600442492ee28f22eb9a56e9bb05073ac5631c3b7442f0aaa8927c59d7a38ac2c20b333705ec9300b3dde743a299c702ea17f02d24b4217f8c148ec4f0ae2025d5c6828093abc2e5674e7d51e34f98d78c8cdfdce444cddee067b2faef19abe19c9092ac498772fa339b1c787b666767cdae3ac20f95bdaadeb84764394ca241712873f0773cf2dc3b9dd5310d9f3c701ef376e3644f7e270f21878da93cd84e9b2d919f9da6aa98edc50b21e5d7f3046ea85e36d40ad5b8d60b7ca5cc2b0ba8282e66e06f82fed43b7a104e5da343d418873c3627482eaae87c5f1f79364ed7dd90fce8f3fbd85c9b2749519eb59324ef87b19441fb845bb060c5ffa1e1acda668a4b713f706e06aa2cde895b46aac232e9bae9c69484b287aa8804fd37070487d0fc271e050a239e3e0d8b5c7a749352bc51dfea906cb054fa7f27b2a1a6797cdb469c49a09ccd902e6cd6064b46f47193d29e3e5abfc9cd79bb559a296bdc779777843542ddaf088d3b78a6b25ade8da9b77bf446c988530881cea17c8ab4d68a52cb9db63de60da8f21f3ce6719e817b3eb81c2818188767062382f47595ebb08f65e39eef607fa5d28cb48ee72d3913e13183518362ab048f9e13b73caf3f102db6b71f6f2d5188cada4540613c076644785191d0c2971c4d60f756b3ed293782aa85d37faf2247b9c5f2cc510f5b72900fa281965f9b7471ab1761f469c2096793184331883d42272b03006538b7072f843755b79b1e16a4f8f71c6de21bd11ce09f82f58ee2392ddb9f2a14929d7c8786623a25044f976710851e0ecf1115473099857bb68add5e5690304b961e664530c06b1773be1d9fc6ad197ca7f9b4dd0080ce7caa632463765aa163303f93d2ecc726ed854185e7131c30751de9c0e1bc6788467d653b4c2368697f74cbc7b87680bf35cafb9c6de2ce5d0b466503fcd264de0d7f6704b8ea721acb0222cb8d74a9b17dcfc8319fc1a5607083beccbf2ab9f54bb7fdc77d0a047b1e095d79d23d4b75c94ee698ed0426e882d2647a57bbb5446d0c606d4d5bff34c6d2e1a01ae6fa04fb8fd1aad56302ca1aec3ded112db64d198324a79656820b666312213f3c9deefb0794bae8f3560fa98e661ee79e06362af3162f65029c3af1856958074428ce2ddd0b4258a612ee01f12399657a813a97c02c98e906c51943fe56c2a9892c1ee12c164fdcff383d0bb2216ad885a12f72c19f9ca6fa0c58dbae90b49da39405800355eb2960ad61a6eb003cbbf1f1d14a8bc44f10438d91c3c8d93aa0cb4dd4389b78e563ffc50ee2fb50116302161d8cc6f86872732e14527dda37a13a2c23a8dbf922595313def74299994fc2b68761855d03aa4574003efe2c7547b471837e9fbf7f961e878e30f594b04570f3885cd6f7d9b829eb9886034ea33373e3cd5df4736790cf4f74c9b2827105fe85e9657a34a33689f2e9f854001e1e957f39afc488b345aa0dbfbaa57440d7f75b0d1c4d905f942d34b74cb0f4ab973930d7f8c10f638f5d5850281bbcec028d17a77d5024c5074b7263fd5d64b3a807fc179a32359d440068ba830507be56c2cc5da71e6e3e7ae0009e76c3b950ef10da59ca90d844959e17793bf77fad943d268993623d82c7c88ac1f4446788c21d2b17d599232b6096619c60d4dd216b3a51c98ac278d73cf43011a501629542246d2e904be3982e1f8daabb4b32b7382208a9ce0b005c99b4f5770f36d66c8617e9a30ca30a4416c776e91d28bf0d32af3cb800e3db0ca2fe870603fbbc4d27c6302953577264bc8687f6deec074a759852f14dc4f92c5103e91b77ec7d0fe5afaf02b92eacd365dbe9626db620bf48d78acbf0ad8c06be4a252cc8181f467d226c255b02e57d64bb15b68ab02b4c674c7d9de3592e5dbf8e911f2209bbd6d3fc9113374ffaf92809168d503a4a75e15f55169bbedacbf4c70bce1d952647faf4b0c7653bd85731d0efa92cdce1a1eff646044ce0bf3d4632d909ffa44f86f1bd0b53669ea49628d9b68cb317ddcc024457c2d802320c3126afa59ab79787aa985832f5a11255d675313cc3c66c3a1ae453dff030e88a933b7869594c00cf5acc2789ad23f729bc46169c621073915d77e8332fd0f31a87a4583ab1f7635fd98083745379c93e0c680d6a02530d204f3de3bdf04bbfe5d8ea9bd974b823a885a2bbfbcd47e7528064e1e05d1086ccd29c36118716315719d9db2861992c6873b95a086ab02c232445d956225cc865b771abc8fc53db9ea74f539cbad8545fc04a1ada9157c0bf2c0e035bd2a47bc1d458e6f78d6bf231821af30ee15058690a619804db247220750286c67491d5fe3e5502cc15f69b6d8465883c5a218878da1fce3fc55b444e9b9f820124bb905213096589a38b63ace29b3cb3e917cb86d4ff5bf2f50d9f760d9ae033aaa176ee4a76f6ff5164df8d35d713a7ff7d175b4af53d1d70c9757e28aab4b360d8f9940c8056baebeaa5bef147080ae0ca9836af898ebecd53fc53b1e940b90f8f18cf992b490e37cc5005323c79b26b64e95044bd6c7408d3e3ee0465955725a6705bca8e4b8a06cda3810775dcf117347d0ce3bc4043b4925b481f8fc2f85020a75e17b0715bec45bdcf22ac4bdc51dfaaef2be79bfe206fb797242f463288c123c9f7123c679f8a8411c216297a474fb46070845b9f253a3f570c6c7d60c5010fa041952c89b2672a306b9b2e4ede94d85321ab7b5dcffa74ff289a1b12ed856defc557bdb198f4b903dd2cbfa40adf91644ea51c9cd89e848cb6f8288cee338dade52a15f7b0d0d9933d1869fec8d1e970e3fa3e5b3b2abb105e25804084e11f075290fa89fe3006bcb001b3b358b05fea5118d4bd599080ce98a8d3bb22be969b7b074c66c0ff5f2e79608edb71a716c267f25d3eaf4921277a64783d79d79e0434989d5ca5f15e76297dcfeea32576cb28f118f8adfef660c81d113e018bc6db84ccef6f14a7ade3ed78c974f0b48081de9b25c5d4b584c9382f174e305ffff92d0fa48b4ae0548f82c008baebab69a96bb30d0aae87dd0476a4f7878bce1c87fda795e2b657925830e895defaf169835a9c9e9739de8b4f7644f151aba6f990c5cd7477b0ab991c4e7b36d5ea41e52d3adf324e0958b3e511e087914985a166bc359daa07cbcf07a6a90709dc469c980e7e2ef01b23f04e95c3dedd909ecf27c6e5c75352d6974076e661da620c59f92720cfc0e5437ea25b3203d86fe90272f4b6a17848bd3d636ad45cbcd3ed446b9ad6f9417460756dc85993397de79560385df2afa38fd657fe8e0c77ba9133e9fa72b60d251a708721de3030c79cba834c7eac04e252bde8a8d028f1089ac27564128bbcc211fb5ecd2e32d90308831aac27a95c9125bab705b1e282b21ab044b79984ad5e2dcf59f517172e615b073438b73d14d75208e47952960fbb08da00433dea4a7512a0b1e8f3e1e5ffa24f8134cbf78bddf6aeadfbc22143305596257760cb94e66843be4b94adbe960e0adc407746d1d98d6976fc3b5acfe1fee611ea17d5c2e44623dc73240acc0bece7dd2d3b07e15845535beac412bd7268f2f1d34143974ec6d6c0da91f84e60d0fc1e51e4d267b49e465bce1bd70eb8014d511810527a16cd49f35b92614aef609a2a95b0cea9114df4b38531585c0b6658785b77b92dd95fa0347d7fce9058d9988579f4fcb43d2cd62089d59289e026870b9b203c0594632155917c8c4ab09f363d7cb0794cbc223f74bf5c09a3801acbeb0d0a6659a5b34c351b7dee5b59511fe5dc54f62a9fbda4f8d6c406ba53d726302650afea13ceb3d0028b91979a82e35ecd33adfff222f58d29b268d19a80242e1c5991cc4061bfe6dd131051a3304fc3351ceb16753af8c57e534f986a00b7768f4e81f558b791e01bf3c2e59dfd86e4b980fa8b1a769f54c4080305bd74704179ccd241c0e394c9a0dc16bd636cf9b7be47b8f442e7e2243c1167e38f45fd36fe8433dbbf6884583c56ad209459670a87b5ba5a46e6d4ef9d629c3e918cf8a9a9c4a0e9cc029c8a76640fe8fbdb8e1e5e23ca0b0471a0161ade59319db2d3c0a649b4e1f7bcce32538cad0172e3997cc23d9885c2d1c78b2aed385f37f40bd11475f2eead328f08ce5295868b157b0349ffb90ae87c0b4ac328f5a9ed8d3a1a5792611c440f44c6d607f5cd570d5b73afd354923dd0b75ca02a7d99325df7487159f07010ed80c3bb5b8b6cda1e9ad055c5b523f2fb19c598bf95c26c5375065db9ca4a434493eddd9582b0f47235ef2dcd635948609b0b32b1027eee78fdc922a4cb6f9eba288748a6ee03a80df6a40d7157af376e91908cc1204613fa91701789dc9f5c85a62db9e9d0fef19a223ead44550d6929df809396258e1e7b6b52215c789fa169c24814a82fa72a786a26e4b0a5f82e205e874f89228151edcc6160a1ba19d1da317aa8132dba0199d125a478b169803e189d4d2a9a6602c035b18c15b8af520bc5221e8b3828c0d21fa081e21f033ba1e5153a26afa1ede38ed67b022c936988b088ca92b84d828512b40e53479f491b30cd9b6990d6f4df19f794ebd8e8f65e2648d82c742d39689a74f8eba5ac9350623f1fc5fe0b86a509a7dbbc1e5bd63e303543861bef148b38525a53e46a07e83d69b2e44fd5881ba25c3fddb87627fb319e97c3499d01d1d7cafdd0a3bd929348513ab0788983cc3b12fd9e3e9711f7556ea39c13c37762bdc78d02a051d9544b248108823bffa910b28c2f3aaec4fa09fa74567cc38ba45f24d21ce8921641be875117adec1c9bbae3f2b7f166dbc3eafe63654686ee4aa48aa81995fd00b3ff6d8c10f6bd00ffd0cfa9d75471d1049654f3fb4b2ebf6acabd674770fe9527fb6385bac9c9b5b87cc86521cbec06d82c5c7a490fab7c7b02ecfa450e31050a9ecb6723c356005645b8fdc3353f5c174d8359496a03ba8d5bdc352c709bbabdea5036108cac224439aee9ead953de23583092b54c8a2101a953a795c707d7e289f35d382f087c4ea58fe5bc6f28794bae1471a7b1a7e3e38e512f9370f547df57d1c8145d7bfaf8194823ed40b3ab125704adc51c52a71e9c91d8b3c130932abded2d385f7f16ed681a81584ce4966c4228b903b877ad35983e7fef88820f60053cac76d56a3b886e82c89e8b864d3ec8062e401a55f9133fc755496629d56d5376bf83ab5a807fbbbb1485b8f183a7e1b8575c0ee857223d7e14ffe4bd9ab1852aeb198969aa2abcec19dfe61168586f100bb462f4421fdf61790b19fa0d645f7be59ccb609848dd638eb55edf0b368547de94dec4f0d17bea31af2cb57e75b59badf4af6dc4f03fe7f1eddcc2a780e008db6f394c7f42e4ba9109ee15f5c439935642563a6dafd82455d328318f886a53851586b28e8f02b4e32d5cb944a9194a7d027da586", 0x1000}, {&(0x7f0000000180)="3d077c67546d272ffe3c4196e4956d1234c99ad4040d5276c9acd0a2f7b1c6784df7", 0x22}, {&(0x7f00000001c0)="c35f00744928730b4e3fc36e65c254ccd3d6f40c09d941925091d81c3766b07e40fe9c00f514d63c12536c526c5b1d1a958f03b6a6ca9e2134253d6694e178212adbf713d34623bc3d4749beb4d79246cecb62c0da970e9168d4caad4fada9b8a4abf98167dd140e094f8f080272fc", 0x6f}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r3}}}, @rights={{0x28, 0x1, 0x1, [r0, r4, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r9]}}], 0xb0}}], 0x1, 0x28000000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 8.039064744s ago: executing program 2 (id=1040): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000005c0)) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000200000a400004803c0001800b00010065787468647200002c000280050002008300000008000340000000000800114000000001080006400000000a08000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$I2C_RDWR(r5, 0x5380, 0x0) lstat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r3, &(0x7f0000000940)=""/215, 0xd7) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffc}}}}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) mount$fuse(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x400, &(0x7f0000000800)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x800}}, {}], [{@appraise}, {@flag='rw'}, {@appraise}, {@fowner_lt={'fowner<', r9}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*:}?\''}}]}}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x1, 0x40) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in=@private, @in=@empty}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) 7.830602245s ago: executing program 0 (id=1041): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="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", &(0x7f0000000440)}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0xd1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r4 = socket(0x11, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, 0x0, 0x0, 0x80000000, 0x0, 0x0) fcntl$dupfd(r2, 0x406, r5) sendmsg$inet(r1, 0x0, 0x52cc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x10, 0x40000080, @void, @value}, 0x94) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x482, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7bd}}) 7.756927756s ago: executing program 2 (id=1043): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, 0x0}, 0x20000000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f0000000040)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 6.952578722s ago: executing program 0 (id=1044): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) read$char_usb(r0, &(0x7f0000000480)=""/245, 0xf5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/media#\x00'}}]}}) r4 = syz_io_uring_setup(0x3cf6, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000001e00)={0x1}) keyctl$assume_authority(0x10, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd=r7, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/208, 0xd0}], 0x3, 0x17}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000002, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) 6.825876209s ago: executing program 1 (id=1046): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2400, 0x2e) lseek(r1, 0x9, 0x0) getdents64(r1, 0x0, 0x6d0821ca1fc60d2f) keyctl$unlink(0x9, r0, r0) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00', 0x2, r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f0000000600)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffa, 0x0, 0x26, 0xc, "e36edf88ea81905446b300001000"}) r3 = syz_open_pts(r2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r9}) r10 = dup3(r3, r2, 0x0) read$FUSE(r10, 0x0, 0x0) 5.845624747s ago: executing program 4 (id=1050): socket$qrtr(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x731002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000001280)={0x2a, 0x2, 0x7ffe}, 0xc) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) sigaltstack(0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x8000) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000240)=0xd) 5.8269319s ago: executing program 1 (id=1051): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000700)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5ee, 0x3a, '%+:\x86[.', 0x3a, '', 0x3a, './file0'}, 0x2d) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x7c, 0xa1, 0x57, 0x8, 0xd46, 0x81, 0xf2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x35, 0x60, 0x9, [{{0x9, 0x4, 0x19, 0x0, 0x2, 0xea, 0x12, 0xe4, 0x52, [], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x3, 0x8, 0x3}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x0, 0x6, 0x1}}]}}]}}]}}, 0x0) 5.711410415s ago: executing program 0 (id=1052): syz_usb_connect(0x2, 0x2d, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x1, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x1, 0xa8}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xfc}}}}}]}}]}}, 0x0) 4.249434317s ago: executing program 4 (id=1055): fanotify_init(0x1, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 4.111268428s ago: executing program 2 (id=1056): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f00009bc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x1}) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000001) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x7, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000002ec0)={{0x12, 0x1, 0x300, 0xf, 0x9b, 0xe0, 0x20, 0x13b1, 0x41, 0xb069, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x8f, 0x4d, 0x1, 0xff, 0x42, 0x96, 0x0, [@hid_hid={0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x35b}}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0xc, 0x3}}]}}]}}]}}, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mlock2(&(0x7f0000076000/0x2000)=nil, 0x2000, 0x1) r4 = userfaultfd(0x801) fcntl$getownex(r4, 0x10, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000f8f000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) 4.102530351s ago: executing program 5 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) dup(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x82100, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) open(0x0, 0x400141042, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}], 0x5, 0x20, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x36, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x4, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0xd00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x8, 0x8, 0x4, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x7, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610f, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x1, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x8, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000001, 0x2, 0x4]}}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.997997101s ago: executing program 4 (id=1058): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x100}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$packet(r0, 0x0, 0xe00, 0x2000, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000480), 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9fef01389d48031b2868f8000c0000000c00080000007d84fe77000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000007f000000003206000040000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) sendmsg$can_bcm(r7, &(0x7f00000000c0)={0x0, 0x47, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r7, @ANYBLOB="6b227f303d6b8dfe975bacdf88d22724042150d5a78a38edf3f54840cfe947c74eaee128f67f8a2e77f1d529ba56ab7ca3b4d2b0a481dd0f84baa13d41f0a483c7c9c08588f6cac57817c6736899cb8a2156d681cbd4da97efd82df7565743ef7372a6df92630b880764b10ed159da0d15a1c0feedf27b40e19e78729833d40acd4138ad8393bf1133867d5c4c40018f13c44d1baa0b73c2d73973a90003de572274f3ed875e730dbdbd456c05c6fb23d6973c507137f0b14d41bd8a3d09", @ANYRES64=r9], 0x48}}, 0x20004000) sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000000000000000000000095ea32e58df460b4bfa9951ee4d02f5c37a98f3de05b850ff07a1002bbafbaef5f05737656e6ba15fc4faa6a09a041439c5d42c914569e2d61d3bc4ae820b28524a0b98694bbb46934d564d1b88cc00f68601af66506b01418da04ab5fea6c42ca6c370ef85d07b3bc04e36a0369f60ea58c497486da04de6fdafe6043e424b58debdf336b80a94a17081e19a9bbd4e6372cb4d474a603555fb4c000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000001d0b6382972f4b8f"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r10, @ANYRES32=r10, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.007391608s ago: executing program 0 (id=1059): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x244) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000080)='./file0\x00') 2.886030678s ago: executing program 0 (id=1060): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) socket$netlink(0x10, 0x3, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x28d2, 0x4) bind$packet(r9, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r9, &(0x7f0000000040)="bb53a94584285101010000853e60", 0xe, 0x4, 0x0, 0xffffffffffffffc1) recvmmsg(r9, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x2040, 0x0) 2.877187576s ago: executing program 4 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0xc, 0x41, {0x41, 0xc, "144845ae2a36294b4194efed7811b13d81246cdfa7ce7bc056f1a8435cd0053139dca2ac382548f5162adfc3dbccba1d1d284db9ac86e545d866d4dba1c3d4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000100)={0x0, 0x22, 0x12, {[@local=@item_4={0x3, 0x2, 0x2, "299e66da"}, @main=@item_012={0x2, 0x0, 0xb, "a23d"}, @main=@item_012={0x1, 0x0, 0x8, "de"}, @global=@item_4={0x3, 0x1, 0x3, "c5eb3097"}, @local=@item_012={0x2, 0x2, 0xa, "cdc6"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x586, 0x0, 0x1, {0x22, 0xed6}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x31, 0xdf, "3596cf92bd7d45b44f781808eba7b0a00c442b9043305bc46e580b4dbebc391d98909b7202ffc34eb7f1bd96e0772b0a7a9a4d537a2ed0e0e1ffc1c5b90677e99b51c2aef05b3170420a57aff3c71ce7a7919a83795fa4e8b8f27ca80654b07384f37b3c212412a939cab1f106d1bb0b2884a7ce45d3255274e4b5c3bba3dced677660723833bba2575aa0ceb24f5fb6103106053e9b17070b9d3e524928d914d2d1187c2403568c852b34e18089e1a51e3094b7a1ea76c6a867f9b72cd3fc26c204a6ca2594f1ea22eb0aa2f2d29a7440191152a5f780a4ab78d7b8dc4864"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x1, 0x82, "e05ae10d861878871575c0e912a411905c4689eaa1279a6acb8fa2358a7fc746b3f53044340248f1dd25d869ab8b1d47c14633040d480f0b96206cdb2a9c92b3ef807a7d850a1961745cb6604ab4e9bbbbd4777604bc430bef44fbaebb36384d9e82b23e9f1c24ac527f2e79c587ad9a0d466579880d9dc1bc475a0ae49708fa8d15"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x610901, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000004c0)={0x1, 0xfff}) r2 = syz_open_dev$I2C(&(0x7f0000000500), 0x5, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000540), 0xb, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@gettaction={0x20, 0x32, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) r5 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x2, r5, 0x4000) r6 = fcntl$dupfd(r0, 0x406, r2) r7 = getpid() sched_setaffinity(r7, 0x8, &(0x7f0000000680)=0x4) write$bt_hci(r1, &(0x7f00000006c0)={0x1, @remote_name_req={{0x419, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x4, 0x2091}}}, 0xe) setsockopt$inet6_buf(r6, 0x29, 0x2c, &(0x7f0000000700)="56be20759a389a73dbc886ef2a619de7953097001a42cb59fb37d47e307aa45738ecb803666c7e0b21f3159e64a3cd11e24684c2da1bd35ecbe1f1eb40a3c011df86bfed3441a21c7e1ddd759ce9986fa5661634e963bb6496db33b5ef9b1de812142096250e7da6481ae4f808fa9f648edd62b25f4cc6f0e904145a5c1639c1585509c50e608b97440f0a52762307f470ef7bdbbc816defdcfc", 0x9a) write$binfmt_misc(r1, &(0x7f00000007c0)="3b4346910cf58b4b4578ea1086a97d3dd01134b4889625f834868db1d0ff779248fb5b784cec4b5523b7c6ca707932af16349b7eb260f2b424e6ef8a5ce04fa8e64545ae28333783708eeae44c7e9e3de4749c222f4089114537745d767a07f4c77863f608a1509e46a93d4fef60bf470de90eec68b26e3ba85278f10affdad353884c714dcd9133c2d568b199f945ce8bd0b4491e4a70cfa3ca2455bc8f3bad2aac47d3a22d0923ffe4dfed30f829a38586a0ad7800056962bcc8678399589e88a288bade0ab2e58f6c42c26340299f00da56031e4c9713c3fe4398d0fa5d0304e7de41bafabd8cc4a333efc75c2c5a15049b", 0xf3) read$msr(r6, &(0x7f00000008c0)=""/73, 0x49) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000940)={0x1, 0x1, 0x9, 0x0, 0x7}) rt_tgsigqueueinfo(r5, r5, 0x1e, &(0x7f0000000980)={0x15, 0x5, 0xc}) r8 = syz_open_dev$vcsa(&(0x7f0000000a00), 0x10, 0x181ec3) close(r8) setxattr$incfs_metadata(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), &(0x7f0000000ac0)="a4203130988733fa9eb6dcabc1f0c19b9bed22ff953589f016eb84b7000593e4267809158e6e7749061bc760e120", 0x2e, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@private0}, 0x0, @in6=@empty}}, &(0x7f0000000c00)=0xe8) connect$can_bcm(r8, &(0x7f0000000c40), 0x10) shutdown(r3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'macvlan1\x00'}) dup(r1) 2.619261109s ago: executing program 1 (id=1062): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\f\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x200000000000017d, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000009001800000009000000000018330000050000000000000000000005000000b8d20000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r0, 0x3841b273) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$unix(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000007200)={&(0x7f0000005cc0)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x28}, 0x4080) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffdeffffe]}, 0x0, 0x8) r3 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r3, 0x16) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {}, {0x22f, 0x9}, {0x4}], 0x20}) rt_sigpending(&(0x7f0000000180), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() sync() 2.543553639s ago: executing program 5 (id=1063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 2.330384884s ago: executing program 5 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2402, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x305, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.867372459s ago: executing program 4 (id=1065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}}, 0x20000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x89f3, &(0x7f00000000c0)={0x0, 0x576c, 0x0, 0x7ff, 0x0, "5dee000000594000"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000020303000000000000000000ac1d9c3378e858daf418e22ea400000010"], 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xfe18}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 1.688861898s ago: executing program 5 (id=1066): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x2, 0x23}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000100000000000000000000006a4e317c865244807288bf67dc70bca026de2698dcaa7daea516baaa2efbe8a2", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x30100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'erspan0\x00', 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000005010040"]) 1.671830405s ago: executing program 1 (id=1067): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="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", &(0x7f0000000440)}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0xd1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r4 = socket(0x11, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, 0x0, 0x0, 0x80000000, 0x0, 0x0) fcntl$dupfd(r2, 0x406, r5) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x10, 0x40000080, @void, @value}, 0x94) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x482, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7bd}}) 944.665611ms ago: executing program 1 (id=1068): fanotify_init(0x1, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 177.58808ms ago: executing program 2 (id=1069): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 177.20199ms ago: executing program 5 (id=1070): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x244) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000080)='./file0\x00') 116.738157ms ago: executing program 5 (id=1071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x5f, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 50.250789ms ago: executing program 1 (id=1072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)={0x60, r1, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 6) 0s ago: executing program 4 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) dup(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x82100, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) open(0x0, 0x400141042, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}], 0x5, 0x20, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x36, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x4, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0xd00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x8, 0x8, 0x4, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x7, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610f, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x1, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x8, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000001, 0x2, 0x4]}}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kernel console output (not intermixed with test programs): lave_0 [ 239.661876][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.691283][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.742053][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.767495][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.795787][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.878725][ T58] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 239.914601][ T8226] hsr_slave_0: entered promiscuous mode [ 239.921246][ T8226] hsr_slave_1: entered promiscuous mode [ 239.928289][ T8226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.938367][ T8226] Cannot create hsr debugfs directory [ 240.383070][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 240.383086][ T30] audit: type=1400 audit(1745699427.472:564): avc: denied { lock } for pid=8307 comm="syz.2.643" path="socket:[16336]" dev="sockfs" ino=16336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 240.488876][ T8313] netlink: 'syz.2.643': attribute type 29 has an invalid length. [ 240.514279][ T8313] netlink: 'syz.2.643': attribute type 29 has an invalid length. [ 240.547895][ T8313] netlink: 500 bytes leftover after parsing attributes in process `syz.2.643'. [ 240.638992][ T5864] usb 1-1: USB disconnect, device number 27 [ 240.751137][ T30] audit: type=1400 audit(1745699427.822:565): avc: denied { read } for pid=8307 comm="syz.2.643" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 240.774730][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.844464][ T8226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.857215][ T8226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.868137][ T8226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.183050][ T5820] Bluetooth: hci2: command tx timeout [ 241.206312][ T58] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 241.220987][ T30] audit: type=1400 audit(1745699427.842:566): avc: denied { open } for pid=8307 comm="syz.2.643" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 241.245006][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.245637][ T8226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.260582][ T30] audit: type=1400 audit(1745699427.842:567): avc: denied { ioctl } for pid=8307 comm="syz.2.643" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 241.271132][ T58] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 241.375985][ T58] asix 2-1:0.0: probe with driver asix failed with error -71 [ 241.437557][ T58] usb 2-1: USB disconnect, device number 37 [ 242.077206][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.182459][ T8226] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.246824][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.254027][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.408149][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.415365][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.192386][ T8340] vlan2: entered promiscuous mode [ 243.197470][ T8340] bridge0: entered promiscuous mode [ 243.265192][ T5820] Bluetooth: hci2: command tx timeout [ 243.511861][ T5860] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 243.540302][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.620317][ T58] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 243.691795][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 243.703228][ T5860] usb 2-1: config index 0 descriptor too short (expected 81, got 10) [ 243.711764][ T5860] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 243.718987][ T5860] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 243.758290][ T5860] usb 2-1: string descriptor 0 read error: -71 [ 243.761836][ T58] usb 1-1: device descriptor read/64, error -71 [ 243.814182][ T5860] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.841429][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.860438][ T5860] usb 2-1: can't set config #1, error -71 [ 243.881694][ T8226] veth0_vlan: entered promiscuous mode [ 243.881795][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 243.897800][ T8226] veth1_vlan: entered promiscuous mode [ 243.901991][ T5860] usb 2-1: USB disconnect, device number 38 [ 243.922430][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.950274][ T8226] veth0_macvtap: entered promiscuous mode [ 243.959188][ T10] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 243.976661][ T8226] veth1_macvtap: entered promiscuous mode [ 243.982699][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.996434][ T10] usb 5-1: Product: syz [ 244.008465][ T10] usb 5-1: Manufacturer: syz [ 244.010477][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.023807][ T58] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 244.038184][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.048177][ T10] usb 5-1: SerialNumber: syz [ 244.048770][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.058727][ T10] usb 5-1: config 0 descriptor?? [ 244.064815][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.080653][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.093517][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.111109][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.142117][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.153855][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.164314][ T58] usb 1-1: device descriptor read/64, error -71 [ 244.171572][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.182522][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.192637][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.204014][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.220113][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.264641][ T8226] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.282282][ T58] usb usb1-port1: attempt power cycle [ 244.314664][ T10] usb 5-1: ignoring: not an USB2CAN converter [ 244.331793][ T8226] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.363725][ T8226] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.390229][ T8226] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.495269][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.505514][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.555722][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.566329][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.581401][ T30] audit: type=1400 audit(1745699431.662:568): avc: denied { mounton } for pid=8226 comm="syz-executor" path="/root/syzkaller.y6YkC4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 244.623761][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 244.640564][ T58] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 244.644290][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.655'. [ 244.648320][ T30] audit: type=1400 audit(1745699431.712:569): avc: denied { mounton } for pid=8226 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 244.692390][ T58] usb 1-1: device descriptor read/8, error -71 [ 244.722662][ T8369] block nbd4: shutting down sockets [ 244.765940][ T5860] usb 5-1: USB disconnect, device number 25 [ 245.011893][ T58] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 245.073202][ T58] usb 1-1: device descriptor read/8, error -71 [ 245.194194][ T58] usb usb1-port1: unable to enumerate USB device [ 245.373903][ T30] audit: type=1400 audit(1745699432.462:570): avc: denied { getopt } for pid=8387 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.606299][ T30] audit: type=1400 audit(1745699432.692:571): avc: denied { write } for pid=8394 comm="syz.2.664" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.734817][ T30] audit: type=1400 audit(1745699432.692:572): avc: denied { add_name } for pid=8394 comm="syz.2.664" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.779351][ T30] audit: type=1400 audit(1745699432.692:573): avc: denied { create } for pid=8394 comm="syz.2.664" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 245.814469][ T30] audit: type=1400 audit(1745699432.692:574): avc: denied { associate } for pid=8394 comm="syz.2.664" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 247.310146][ T30] audit: type=1400 audit(1745699434.392:575): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 247.618803][ T30] audit: type=1326 audit(1745699434.702:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8433 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc105b8e969 code=0x7ffc0000 [ 247.642029][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.666691][ T30] audit: type=1326 audit(1745699434.702:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8433 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc105b8e969 code=0x7ffc0000 [ 247.689929][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.752571][ T30] audit: type=1326 audit(1745699434.712:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8433 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fc105b8e969 code=0x7ffc0000 [ 247.775809][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.781775][ T58] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 247.823049][ T30] audit: type=1326 audit(1745699434.712:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8433 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc105b8e969 code=0x7ffc0000 [ 247.855440][ T30] audit: type=1326 audit(1745699434.712:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8433 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc105b8e969 code=0x7ffc0000 [ 247.991868][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 248.047660][ T58] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 248.113722][ T58] usb 5-1: config 0 has no interface number 0 [ 248.189767][ T58] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 248.244116][ T58] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.265714][ T58] usb 5-1: config 0 interface 2 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 248.292896][ T58] usb 5-1: config 0 interface 2 has no altsetting 0 [ 248.306139][ T58] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 248.354987][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.378858][ T58] usb 5-1: Product: syz [ 248.521905][ T58] usb 5-1: Manufacturer: syz [ 248.527812][ T58] usb 5-1: SerialNumber: syz [ 248.553566][ T58] usb 5-1: config 0 descriptor?? [ 248.992407][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.008769][ T8466] mmap: syz.0.682 (8466): VmData 25972736 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 249.048779][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.070210][ T58] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.094827][ T58] usb 5-1: invalid MIDI out EP 0 [ 249.219972][ T58] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 249.255302][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.294340][ T58] usb 5-1: USB disconnect, device number 26 [ 249.682049][ T5903] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 249.972991][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 249.995387][ T5903] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 250.004893][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.045068][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 250.067388][ T5903] usb 1-1: config 0 descriptor?? [ 250.150362][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.693'. [ 250.345236][ T5903] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 250.368101][ T5903] asix 1-1:0.0: probe with driver asix failed with error -32 [ 250.921204][ T8528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.700'. [ 251.241865][ T5864] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 251.401848][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 251.414727][ T5864] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 251.450203][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.469775][ T5864] usb 5-1: config 0 has no interface number 0 [ 251.480178][ T10] Process accounting resumed [ 251.486252][ T5864] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 251.490582][ T8549] net_ratelimit: 27 callbacks suppressed [ 251.490594][ T8549] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 251.525345][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.535073][ T5864] usb 5-1: Product: syz [ 251.539328][ T5864] usb 5-1: Manufacturer: syz [ 251.545973][ T5864] usb 5-1: SerialNumber: syz [ 251.553726][ T5864] usb 5-1: config 0 descriptor?? [ 251.572797][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 251.572812][ T30] audit: type=1400 audit(1745699438.652:613): avc: denied { append } for pid=8543 comm="syz.1.704" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 252.493340][ T10] usb 1-1: USB disconnect, device number 32 [ 252.841718][ T30] audit: type=1400 audit(1745699439.922:614): avc: denied { write } for pid=8567 comm="syz.0.709" path="socket:[19002]" dev="sockfs" ino=19002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 253.517547][ T30] audit: type=1400 audit(1745699440.422:615): avc: denied { write } for pid=8569 comm="syz.2.711" name="ipv6_route" dev="proc" ino=4026533330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 253.524751][ T5860] usb 5-1: USB disconnect, device number 27 [ 253.812372][ T30] audit: type=1400 audit(1745699440.902:616): avc: denied { bind } for pid=8581 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 253.908290][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 254.311781][ T5891] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 254.358343][ T8608] syz.4.721: attempt to access beyond end of device [ 254.358343][ T8608] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 254.371816][ T8608] hfs: can't find a HFS filesystem on dev loop4 [ 254.473379][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 254.522220][ T5891] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 254.665934][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.145906][ T5891] usb 1-1: config 0 descriptor?? [ 255.367381][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.373852][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.475279][ T5891] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 255.593325][ T5891] asix 1-1:0.0: probe with driver asix failed with error -32 [ 255.854774][ T5820] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 255.861647][ T5820] Bluetooth: Wrong link type (-22) [ 255.867944][ T5820] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 255.874725][ T5820] Bluetooth: Wrong link type (-22) [ 257.739223][ T8631] input: syz0 as /devices/virtual/input/input11 [ 257.753110][ T5891] usb 1-1: USB disconnect, device number 33 [ 257.757202][ T8640] pimreg: entered allmulticast mode [ 257.776883][ T8640] pimreg: left allmulticast mode [ 257.927878][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.732'. [ 257.970268][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.730'. [ 257.989688][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 257.993589][ T8643] bridge_slave_0: left allmulticast mode [ 258.041884][ T8643] bridge_slave_0: left promiscuous mode [ 258.051256][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.076502][ T8643] bridge_slave_1: left allmulticast mode [ 258.085392][ T8643] bridge_slave_1: left promiscuous mode [ 258.091201][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.104960][ T8643] bond0: (slave bond_slave_0): Releasing backup interface [ 258.119602][ T8643] bond0: (slave bond_slave_1): Releasing backup interface [ 258.147281][ T8643] team0: Port device team_slave_0 removed [ 258.161503][ T8643] team0: Port device team_slave_1 removed [ 258.168826][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.177024][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.186608][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.194645][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.209828][ T8648] netlink: 96 bytes leftover after parsing attributes in process `syz.0.733'. [ 258.301859][ T5860] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 258.419887][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'. [ 258.429135][ T30] audit: type=1400 audit(1745699445.502:617): avc: denied { write } for pid=8652 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 258.582692][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 258.835707][ T5860] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 258.845444][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.857746][ T5860] usb 2-1: config 0 descriptor?? [ 259.374258][ T8662] syz.4.737: attempt to access beyond end of device [ 259.374258][ T8662] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 259.390097][ T8662] hfs: can't find a HFS filesystem on dev loop4 [ 259.626243][ T5860] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 260.001852][ T5864] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 260.241868][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 260.779106][ T5864] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 260.791769][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.821008][ T5864] usb 6-1: config 0 descriptor?? [ 261.363426][ T5864] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 261.374911][ T5864] asix 6-1:0.0: probe with driver asix failed with error -32 [ 261.912077][ T5863] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 262.041832][ T5864] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 262.071755][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 262.078190][ T5863] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 262.086699][ T5863] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 262.095292][ T5863] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 262.104501][ T5863] usb 5-1: config 250 has no interface number 0 [ 262.110764][ T5863] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 262.123480][ T5863] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 262.137629][ T5863] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.148204][ T5863] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.158512][ T5863] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 262.172035][ T5863] usb 5-1: config 250 interface 228 has no altsetting 0 [ 262.180822][ T5863] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 262.190351][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 262.198806][ T5860] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 262.209667][ T5863] usb 5-1: Product: syz [ 262.214107][ T5860] asix 2-1:0.0: probe with driver asix failed with error -71 [ 262.221780][ T5863] usb 5-1: SerialNumber: syz [ 262.221900][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 262.229718][ T5860] usb 2-1: USB disconnect, device number 39 [ 262.241307][ T5864] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 262.249177][ T5863] hub 5-1:250.228: bad descriptor, ignoring hub [ 262.252315][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.267111][ T5863] hub 5-1:250.228: probe with driver hub failed with error -5 [ 262.271205][ T5864] usb 3-1: config 0 descriptor?? [ 262.290959][ T5864] as10x_usb: device has been detected [ 262.300342][ T5864] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 262.330541][ T5864] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 262.355311][ T30] audit: type=1400 audit(1745699449.442:618): avc: denied { firmware_load } for pid=5864 comm="kworker/1:5" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=271 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 262.382248][ T5864] as10x_usb: error during firmware upload part1 [ 262.388861][ T5864] Registered device nBox DVB-T Dongle [ 262.469794][ T5863] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 262.528054][ T5863] usb 3-1: USB disconnect, device number 26 [ 262.577547][ T5863] Unregistered device nBox DVB-T Dongle [ 262.579730][ T5863] as10x_usb: device has been disconnected [ 262.650394][ T5864] usb 6-1: USB disconnect, device number 2 [ 262.808640][ T30] audit: type=1326 audit(1745699449.892:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59058e969 code=0x7fc00000 [ 263.116941][ T5863] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 263.332172][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 263.355066][ T5863] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 263.386522][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.403527][ T5863] usb 3-1: config 0 descriptor?? [ 263.414503][ T5863] as10x_usb: device has been detected [ 263.426109][ T5863] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 263.848262][ T5863] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 263.860430][ T8713] syz.5.750: attempt to access beyond end of device [ 263.860430][ T8713] loop5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 263.873470][ T8713] hfs: can't find a HFS filesystem on dev loop5 [ 263.888484][ T5863] as10x_usb: error during firmware upload part1 [ 263.900813][ T5863] Registered device nBox DVB-T Dongle [ 263.914736][ T5863] usb 3-1: USB disconnect, device number 27 [ 263.971404][ T5863] Unregistered device nBox DVB-T Dongle [ 263.982437][ T5863] as10x_usb: device has been disconnected [ 264.022220][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 264.291945][ T9] usb 2-1: no configurations [ 264.305889][ T9] usb 2-1: can't read configurations, error -22 [ 264.588257][ T8721] No control pipe specified [ 264.631785][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 264.792265][ T9] usb 2-1: no configurations [ 264.797037][ T9] usb 2-1: can't read configurations, error -22 [ 264.814136][ T58] usb 5-1: USB disconnect, device number 28 [ 264.902092][ T9] usb usb2-port1: attempt power cycle [ 264.907014][ T58] usblp1: removed [ 265.725559][ T8738] lo speed is unknown, defaulting to 1000 [ 265.781752][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 265.803024][ T9] usb 2-1: no configurations [ 265.807841][ T9] usb 2-1: can't read configurations, error -22 [ 265.880524][ T8745] capability: warning: `syz.5.763' uses 32-bit capabilities (legacy support in use) [ 265.986056][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 266.032635][ T9] usb 2-1: no configurations [ 266.037370][ T9] usb 2-1: can't read configurations, error -22 [ 266.503740][ T9] usb usb2-port1: unable to enumerate USB device [ 266.862144][ T8753] syz.5.766: attempt to access beyond end of device [ 266.862144][ T8753] loop5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 266.874934][ T8753] hfs: can't find a HFS filesystem on dev loop5 [ 266.916674][ T8757] affs: No valid root block on device nullb0 [ 267.129285][ T8761] 9pnet_fd: Insufficient options for proto=fd [ 268.005264][ T30] audit: type=1400 audit(1745699455.022:620): avc: denied { read } for pid=8769 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.093095][ T30] audit: type=1400 audit(1745699455.142:621): avc: denied { write } for pid=8766 comm="syz.0.771" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 268.128728][ T8775] SELinux: syz.4.773 (8775) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 268.873437][ T8787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8787 comm=syz.4.777 [ 268.912246][ T5864] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 268.962704][ T8790] option changes via remount are deprecated (pid=8782 comm=syz.2.767) [ 269.064842][ T30] audit: type=1400 audit(1745699456.042:622): avc: denied { remount } for pid=8782 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 269.087354][ T8787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41502 sclass=netlink_route_socket pid=8787 comm=syz.4.777 [ 269.201729][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 269.258583][ T5864] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 269.274301][ T8787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8787 comm=syz.4.777 [ 269.288381][ T5864] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 269.299386][ T5864] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 269.310566][ T5864] usb 6-1: config 250 has no interface number 0 [ 269.329552][ T5864] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 269.341979][ T5864] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 269.352980][ T5864] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.363686][ T5864] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 269.374391][ T5864] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 269.390761][ T5864] usb 6-1: config 250 interface 228 has no altsetting 0 [ 269.408121][ T5864] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 269.418211][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 269.428189][ T5864] usb 6-1: Product: syz [ 269.432664][ T5864] usb 6-1: SerialNumber: syz [ 269.448579][ T5864] hub 6-1:250.228: bad descriptor, ignoring hub [ 269.455212][ T5864] hub 6-1:250.228: probe with driver hub failed with error -5 [ 269.512193][ T5860] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 269.789220][ T5860] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 270.555601][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.570989][ T5860] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 270.580360][ T5860] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 270.588676][ T5860] usb 5-1: Manufacturer: syz [ 270.598214][ T5860] usb 5-1: config 0 descriptor?? [ 270.688791][ T8806] ALSA: mixer_oss: invalid OSS volume '' [ 270.713025][ T5860] rc_core: IR keymap rc-hauppauge not found [ 270.719992][ T5860] Registered IR keymap rc-empty [ 270.740671][ T5860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 270.842398][ T5860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 270.890230][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 271.318358][ T30] audit: type=1400 audit(1745699458.402:623): avc: denied { accept } for pid=8809 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.490031][ T30] audit: type=1400 audit(1745699458.572:624): avc: denied { watch_mount } for pid=8811 comm="syz.2.782" path="/163" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 271.819465][ T5864] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 271.955001][ T8824] overlayfs: failed to resolve './file1': -2 [ 271.996089][ T8825] bond1: entered allmulticast mode [ 272.015681][ T8825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.186765][ T5864] usb 6-1: USB disconnect, device number 3 [ 272.225072][ T5864] usblp0: removed [ 272.506408][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 272.515303][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.786'. [ 272.525337][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 272.534208][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.786'. [ 272.821815][ T5860] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 272.851750][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 273.072912][ T9] usb 6-1: device descriptor read/64, error -71 [ 273.085859][ T5860] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 273.192689][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.361819][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 273.431989][ T5860] usb 1-1: config 0 descriptor?? [ 273.570632][ T5903] usb 5-1: USB disconnect, device number 29 [ 273.576877][ T9] usb 6-1: device descriptor read/64, error -71 [ 273.682657][ T5860] gspca_main: spca508-2.14.0 probing 8086:0110 [ 273.811506][ T9] usb usb6-port1: attempt power cycle [ 273.849633][ T5860] gspca_spca508: reg_read err -32 [ 273.970749][ T5860] gspca_spca508: reg_read err -32 [ 274.304679][ T5860] gspca_spca508: reg_read err -71 [ 274.309807][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 274.333179][ T5860] gspca_spca508: reg_read err -71 [ 274.352586][ T5860] gspca_spca508: reg_read err -71 [ 274.359340][ T8838] QAT: failed to copy from user cfg_data. [ 274.371912][ T5860] gspca_spca508: reg write: error -71 [ 274.381855][ T9] usb 6-1: device descriptor read/8, error -71 [ 274.393099][ T5860] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 274.431971][ T5860] usb 1-1: USB disconnect, device number 34 [ 274.712073][ T30] audit: type=1400 audit(1745699461.792:625): avc: denied { read } for pid=8839 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.796244][ T8845] syz.2.791: attempt to access beyond end of device [ 274.796244][ T8845] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 274.809475][ T8845] efs: cannot read volume header [ 275.012860][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 275.030824][ T8846] syz.4.790: attempt to access beyond end of device [ 275.030824][ T8846] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 275.043626][ T30] audit: type=1400 audit(1745699461.872:626): avc: denied { create } for pid=8839 comm="syz.2.791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.043669][ T30] audit: type=1400 audit(1745699461.882:627): avc: denied { mounton } for pid=8839 comm="syz.2.791" path="/164/file0" dev="tmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.053007][ T9] usb 6-1: device descriptor read/8, error -71 [ 275.103955][ T8846] hfs: can't find a HFS filesystem on dev loop4 [ 275.243582][ T9] usb usb6-port1: unable to enumerate USB device [ 275.361369][ T30] audit: type=1400 audit(1745699462.442:628): avc: denied { unlink } for pid=5808 comm="syz-executor" name="file0" dev="tmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.583593][ T8861] team0: No ports can be present during mode change [ 275.711893][ T2035] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 275.871787][ T2035] usb 3-1: Using ep0 maxpacket: 8 [ 275.924959][ T2035] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 275.965020][ T2035] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 276.116197][ T2035] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 276.128360][ T2035] usb 3-1: config 250 has no interface number 0 [ 276.135344][ T2035] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 276.148790][ T2035] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 276.230785][ T8877] netlink: 'syz.1.800': attribute type 2 has an invalid length. [ 276.341780][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'. [ 277.113766][ T2035] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.124240][ T2035] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 277.134650][ T2035] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 277.148335][ T2035] usb 3-1: config 250 interface 228 has no altsetting 0 [ 277.160345][ T2035] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 277.763179][ T2035] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 277.780465][ T2035] usb 3-1: Product: syz [ 277.785784][ T2035] usb 3-1: SerialNumber: syz [ 277.808252][ T2035] hub 3-1:250.228: bad descriptor, ignoring hub [ 277.819183][ T2035] hub 3-1:250.228: probe with driver hub failed with error -5 [ 278.001725][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 278.621724][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 278.640682][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 278.671702][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.680085][ T9] usb 2-1: Product: syz [ 278.685000][ T9] usb 2-1: Manufacturer: syz [ 278.689613][ T9] usb 2-1: SerialNumber: syz [ 278.701892][ T9] usb 2-1: config 0 descriptor?? [ 278.842259][ T8890] FAULT_INJECTION: forcing a failure. [ 278.842259][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 278.858934][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.5.806 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 278.858960][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 278.858973][ T8890] Call Trace: [ 278.858979][ T8890] [ 278.858985][ T8890] dump_stack_lvl+0x16c/0x1f0 [ 278.859010][ T8890] should_fail_ex+0x512/0x640 [ 278.859036][ T8890] should_failslab+0xc2/0x120 [ 278.859054][ T8890] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 278.859074][ T8890] ? sidtab_sid2str_get+0x17a/0x680 [ 278.859102][ T8890] kmemdup_noprof+0x29/0x60 [ 278.859120][ T8890] sidtab_sid2str_get+0x17a/0x680 [ 278.859146][ T8890] sidtab_entry_to_string+0x33/0x110 [ 278.859172][ T8890] security_sid_to_context_core+0x35c/0x640 [ 278.859204][ T8890] avc_audit_post_callback+0x1aa/0x8f0 [ 278.859231][ T8890] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 278.859253][ T8890] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 278.859275][ T8890] ? skb_put+0x138/0x1b0 [ 278.859297][ T8890] ? audit_log_n_string+0x253/0x540 [ 278.859329][ T8890] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 278.859353][ T8890] common_lsm_audit+0x24b/0x300 [ 278.859377][ T8890] ? __pfx_common_lsm_audit+0x10/0x10 [ 278.859399][ T8890] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 278.859418][ T8890] ? avc_update_node.isra.0+0x4c0/0xb60 [ 278.859446][ T8890] slow_avc_audit+0x186/0x210 [ 278.859472][ T8890] ? __pfx_slow_avc_audit+0x10/0x10 [ 278.859501][ T8890] ? avc_denied+0x14a/0x190 [ 278.859528][ T8890] ? avc_has_perm_noaudit+0x306/0x3b0 [ 278.859557][ T8890] avc_has_perm+0x18b/0x1c0 [ 278.859586][ T8890] ? __pfx_avc_has_perm+0x10/0x10 [ 278.859609][ T8890] ? tomoyo_mount_permission+0x1ab/0x420 [ 278.859635][ T8890] ? tomoyo_mount_permission+0x1c4/0x420 [ 278.859660][ T8890] selinux_mount+0x1df/0x380 [ 278.859681][ T8890] ? __pfx_selinux_mount+0x10/0x10 [ 278.859713][ T8890] security_sb_mount+0xc8/0x260 [ 278.859736][ T8890] path_mount+0x128/0x1f20 [ 278.859757][ T8890] ? kmem_cache_free+0x2d4/0x4d0 [ 278.859782][ T8890] ? __pfx_path_mount+0x10/0x10 [ 278.859802][ T8890] ? putname+0x154/0x1a0 [ 278.859823][ T8890] __x64_sys_mount+0x28d/0x310 [ 278.859841][ T8890] ? __pfx___x64_sys_mount+0x10/0x10 [ 278.859858][ T8890] ? rcu_is_watching+0x12/0xc0 [ 278.859885][ T8890] do_syscall_64+0xcd/0x260 [ 278.859908][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.859925][ T8890] RIP: 0033:0x7fc105b8e969 [ 278.859939][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.859954][ T8890] RSP: 002b:00007fc106979038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.859971][ T8890] RAX: ffffffffffffffda RBX: 00007fc105db5fa0 RCX: 00007fc105b8e969 [ 278.859982][ T8890] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 278.859992][ T8890] RBP: 00007fc106979090 R08: 0000200000000540 R09: 0000000000000000 [ 278.860002][ T8890] R10: 0000000002202030 R11: 0000000000000246 R12: 0000000000000002 [ 278.860012][ T8890] R13: 0000000000000000 R14: 00007fc105db5fa0 R15: 00007ffd4a1749d8 [ 278.860035][ T8890] [ 279.180054][ T30] audit: type=1400 audit(1745699465.932:629): avc: denied { remount } for pid=8889 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tsid=61 tclass=filesystem permissive=1 [ 279.205758][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.306538][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.804'. [ 279.838290][ T2035] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 279.913097][ T2035] usb 3-1: USB disconnect, device number 28 [ 279.949783][ T2035] usblp0: removed [ 279.957588][ T8899] 9p: Unknown uid 00000000004294967295 [ 280.147478][ T8900] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 280.376644][ T30] audit: type=1400 audit(1745699467.462:630): avc: denied { getopt } for pid=8907 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.485961][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 280.504908][ T9] usb 2-1: USB disconnect, device number 44 [ 281.108598][ T8926] mkiss: ax0: crc mode is auto. [ 282.005551][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.4.821'. [ 282.192060][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 282.393067][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.438561][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 282.623693][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.710351][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 282.752017][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.801279][ T9] usb 1-1: config 0 descriptor?? [ 282.824762][ T8947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.873230][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.829'. [ 283.500545][ T5860] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 284.005414][ T9] magicmouse 0003:05AC:0269.0006: hidraw0: USB HID v0.01 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 284.076352][ T30] audit: type=1400 audit(1745699471.162:631): avc: denied { map } for pid=8965 comm="syz.5.829" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 284.112247][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 284.121817][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.130523][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.203961][ T30] audit: type=1400 audit(1745699471.292:632): avc: denied { getopt } for pid=8980 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 284.228353][ T5860] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 284.241735][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.368814][ T5860] usb 2-1: Product: syz [ 284.380623][ T5860] usb 2-1: Manufacturer: syz [ 284.390744][ T5860] usb 2-1: SerialNumber: syz [ 284.436074][ T5860] usb 2-1: config 0 descriptor?? [ 284.455312][ T9] usb 1-1: USB disconnect, device number 35 [ 284.686065][ T5860] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 284.780051][ T30] audit: type=1400 audit(1745699471.862:633): avc: denied { view } for pid=8988 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 285.090253][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 286.142619][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 286.151964][ T9] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 286.163300][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 286.169906][ T9] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 286.179446][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.224649][ T5860] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 286.242171][ T5860] usb 2-1: USB disconnect, device number 45 [ 286.256932][ T9] usb 3-1: config 0 descriptor?? [ 286.487908][ T8987] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 286.487908][ T8987] The task syz.5.833 (8987) triggered the difference, watch for misbehavior. [ 286.505803][ T9004] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.716400][ T9] petalynx 0003:18B1:0037.0007: item fetching failed at offset 6/7 [ 286.742746][ T9] petalynx 0003:18B1:0037.0007: parse failed [ 286.769133][ T9] petalynx 0003:18B1:0037.0007: probe with driver petalynx failed with error -22 [ 286.931998][ T2035] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 287.120565][ T10] usb 3-1: USB disconnect, device number 29 [ 287.738591][ T2035] usb 2-1: device descriptor read/64, error -71 [ 288.041743][ T2035] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 288.191997][ T2035] usb 2-1: device descriptor read/64, error -71 [ 288.302976][ T2035] usb usb2-port1: attempt power cycle [ 288.474157][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.481442][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.522083][ T9029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.532002][ T9029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.564382][ T9029] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.573322][ T9029] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.582168][ T9029] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.591005][ T9029] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.607928][ T9029] vlan2: left allmulticast mode [ 288.612848][ T9029] erspan0: left allmulticast mode [ 288.681766][ T5864] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 288.701980][ T2035] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 288.744216][ T2035] usb 2-1: device descriptor read/8, error -71 [ 288.852070][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 288.899019][ T5864] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 288.928963][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.959341][ T5864] usb 6-1: Product: syz [ 288.989210][ T5864] usb 6-1: Manufacturer: syz [ 289.011735][ T2035] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 289.035987][ T5864] usb 6-1: SerialNumber: syz [ 289.064727][ T2035] usb 2-1: device descriptor read/8, error -71 [ 289.155114][ T5864] usb 6-1: config 0 descriptor?? [ 289.204912][ T2035] usb usb2-port1: unable to enumerate USB device [ 289.338659][ T9025] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 289.341509][ T9025] netlink: 512 bytes leftover after parsing attributes in process `syz.0.844'. [ 289.471979][ T5864] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 289.561805][ T30] audit: type=1400 audit(1745699476.642:634): avc: denied { create } for pid=9024 comm="syz.0.844" name="syz0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 289.562183][ T30] audit: type=1400 audit(1745699476.642:635): avc: denied { associate } for pid=9024 comm="syz.0.844" name="syz0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 290.514903][ T5864] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 290.686215][ T5864] usb 6-1: USB disconnect, device number 8 [ 290.728689][ T30] audit: type=1400 audit(1745699477.772:636): avc: denied { write } for pid=9057 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 290.921865][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 291.071820][ T24] usb 2-1: device descriptor read/64, error -71 [ 291.631870][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 291.653567][ T9069] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 291.761761][ T24] usb 2-1: device descriptor read/64, error -71 [ 291.872932][ T24] usb usb2-port1: attempt power cycle [ 292.211274][ T5864] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 292.231860][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 292.300841][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 292.321038][ T24] usb 2-1: device descriptor read/8, error -71 [ 292.431887][ T5864] usb 3-1: device descriptor read/64, error -71 [ 292.463487][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 292.469706][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.479878][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.489768][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.500383][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.513562][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.522664][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.591821][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 292.614193][ T24] usb 2-1: device descriptor read/8, error -71 [ 292.631765][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 292.681758][ T5864] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 292.721952][ T24] usb usb2-port1: unable to enumerate USB device [ 292.751420][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 292.757183][ T9] usbtmc 5-1:16.0: can't read capabilities [ 292.771725][ T10] usb 6-1: device descriptor read/64, error -71 [ 292.811758][ T5864] usb 3-1: device descriptor read/64, error -71 [ 292.821908][ T5903] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 292.923175][ T5864] usb usb3-port1: attempt power cycle [ 292.954606][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 292.975855][ T9] usb 5-1: USB disconnect, device number 30 [ 292.991105][ T5903] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 293.015526][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 293.024768][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.035941][ T30] audit: type=1400 audit(1745699480.122:637): avc: denied { append } for pid=9094 comm="syz.4.867" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.059937][ T5903] usb 1-1: Product: syz [ 293.066450][ T5903] usb 1-1: Manufacturer: syz [ 293.071057][ T5903] usb 1-1: SerialNumber: syz [ 293.080624][ T5903] r8152-cfgselector 1-1: Unknown version 0x0000 [ 293.086952][ T5903] r8152-cfgselector 1-1: config 0 descriptor?? [ 293.192623][ T10] usb 6-1: device descriptor read/64, error -71 [ 293.261845][ T5864] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 293.292731][ T5864] usb 3-1: device descriptor read/8, error -71 [ 293.302276][ T10] usb usb6-port1: attempt power cycle [ 293.541786][ T5864] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 293.732697][ T5864] usb 3-1: device descriptor read/8, error -71 [ 293.857715][ T5903] r8152-cfgselector 1-1: USB disconnect, device number 36 [ 293.861925][ T5864] usb usb3-port1: unable to enumerate USB device [ 293.901751][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 293.930086][ T10] usb 6-1: device descriptor read/8, error -71 [ 294.211805][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 294.232209][ T10] usb 6-1: device descriptor read/8, error -71 [ 294.303146][ T58] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 294.344184][ T10] usb usb6-port1: unable to enumerate USB device [ 294.536292][ T58] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 294.545456][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.554584][ T58] usb 2-1: Product: syz [ 294.558762][ T58] usb 2-1: Manufacturer: syz [ 294.563413][ T58] usb 2-1: SerialNumber: syz [ 294.569406][ T58] usb 2-1: config 0 descriptor?? [ 294.578802][ T58] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 294.588764][ T58] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 294.599449][ T58] usb-storage 2-1:0.0: USB Mass Storage device detected [ 294.623244][ T58] usb-storage 2-1:0.0: device ignored [ 294.781211][ T10] usb 2-1: USB disconnect, device number 54 [ 297.004106][ T9144] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.489075][ T5864] IPVS: starting estimator thread 0... [ 297.544453][ T9157] lo speed is unknown, defaulting to 1000 [ 297.550239][ T9157] lo speed is unknown, defaulting to 1000 [ 297.557239][ T9157] lo speed is unknown, defaulting to 1000 [ 297.592131][ T9157] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 297.611918][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 297.619758][ T9152] IPVS: using max 44 ests per chain, 105600 per kthread [ 297.624241][ T9157] lo speed is unknown, defaulting to 1000 [ 297.650905][ T9157] lo speed is unknown, defaulting to 1000 [ 297.670742][ T9157] lo speed is unknown, defaulting to 1000 [ 297.959311][ T9157] lo speed is unknown, defaulting to 1000 [ 297.979324][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 297.998001][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 297.999047][ T9157] lo speed is unknown, defaulting to 1000 [ 298.014278][ T9157] lo speed is unknown, defaulting to 1000 [ 298.027679][ T10] usb 2-1: config 0 has no interface number 0 [ 298.183783][ T5903] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 298.197682][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.210730][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 298.229694][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 298.276373][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 298.347216][ T5903] usb 6-1: device descriptor read/64, error -71 [ 298.579437][ T10] usb 2-1: Product: syz [ 298.591821][ T10] usb 2-1: SerialNumber: syz [ 298.614468][ T10] usb 2-1: config 0 descriptor?? [ 298.651398][ T10] usb 2-1: can't set config #0, error -71 [ 298.707138][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 298.707926][ T10] usb 2-1: USB disconnect, device number 55 [ 298.811972][ T5903] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 298.818114][ T30] audit: type=1400 audit(1745699485.902:638): avc: denied { setopt } for pid=9173 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 298.851543][ T30] audit: type=1400 audit(1745699485.932:639): avc: denied { ioctl } for pid=9173 comm="syz.2.893" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 298.876779][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.943216][ T5903] usb 6-1: device descriptor read/64, error -71 [ 299.124965][ T5903] usb usb6-port1: attempt power cycle [ 299.692271][ T5903] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 299.722345][ T5903] usb 6-1: device descriptor read/8, error -71 [ 300.078589][ T5903] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 300.331834][ T5903] usb 6-1: device descriptor read/8, error -71 [ 300.583709][ T9208] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 300.639906][ T5903] usb usb6-port1: unable to enumerate USB device [ 301.148282][ T9221] evm: overlay not supported [ 301.391825][ T58] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 301.647623][ T5864] kernel read not supported for file /dsp1 (pid: 5864 comm: kworker/1:5) [ 301.671803][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 301.682103][ T58] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 301.689776][ T58] usb 6-1: can't read configurations, error -61 [ 301.757232][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.842864][ T58] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 301.876908][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.944797][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.038500][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.051872][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 302.058771][ T58] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 302.097537][ T58] usb 6-1: can't read configurations, error -61 [ 302.126088][ T58] usb usb6-port1: attempt power cycle [ 302.318653][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 302.338657][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 302.380185][ T9239] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 302.422110][ T9239] netlink: 'syz.2.912': attribute type 2 has an invalid length. [ 302.430347][ T52] bridge_slave_1: left allmulticast mode [ 302.444484][ T5864] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 302.450671][ T52] bridge_slave_1: left promiscuous mode [ 302.462254][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.462344][ T9239] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 302.489356][ T58] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 302.505345][ T52] O3ãc¤±: left allmulticast mode [ 302.510354][ T52] O3ãc¤±: left promiscuous mode [ 302.516965][ T9239] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 302.532269][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 302.538978][ T58] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 302.548457][ T9239] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 302.548899][ T58] usb 6-1: can't read configurations, error -61 [ 302.566956][ T52] bridge0: port 1(O3ãc¤±) entered disabled state [ 302.583765][ T9239] nbd: illegal input index 65544 [ 302.661833][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 302.680042][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.694930][ T5864] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 302.704968][ T58] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 302.716523][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.725169][ T5864] usb 5-1: Product: syz [ 302.741807][ T5864] usb 5-1: Manufacturer: syz [ 302.746616][ T5864] usb 5-1: SerialNumber: syz [ 302.751387][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 302.767203][ T58] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 302.775084][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 302.805860][ T5864] usb 5-1: config 0 descriptor?? [ 302.811853][ T58] usb 6-1: can't read configurations, error -61 [ 302.821099][ T58] usb usb6-port1: unable to enumerate USB device [ 302.964905][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.989193][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.999573][ T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 303.018035][ T5864] usb 5-1: ignoring: not an USB2CAN converter [ 303.030924][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.063596][ T24] usb 1-1: config 0 descriptor?? [ 303.219353][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.242842][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.278642][ T52] bond0 (unregistering): (slave team0): Releasing backup interface [ 303.293979][ T5821] block nbd0: Receive control failed (result -107) [ 303.322328][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'. [ 303.331178][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.911'. [ 303.356497][ T52] bond0 (unregistering): Released all slaves [ 303.419218][ T9245] block nbd4: shutting down sockets [ 303.444699][ T5864] usb 5-1: USB disconnect, device number 31 [ 303.548653][ T24] hid-steam 0003:28DE:1142.0008: item fetching failed at offset 3/5 [ 303.651505][ T24] hid-steam 0003:28DE:1142.0008: steam_probe:parse of hid interface failed [ 303.653128][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 303.663978][ T24] hid-steam 0003:28DE:1142.0008: probe with driver hid-steam failed with error -22 [ 303.842635][ T9243] block nbd0: shutting down sockets [ 303.895227][ T24] usb 1-1: USB disconnect, device number 37 [ 304.003330][ T10] usb 2-1: device descriptor read/64, error -71 [ 304.242357][ T30] audit: type=1400 audit(1745699491.322:640): avc: denied { search } for pid=9266 comm="sed" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.285273][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 304.304634][ T30] audit: type=1400 audit(1745699491.332:641): avc: denied { read } for pid=9266 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.326462][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.421922][ T30] audit: type=1400 audit(1745699491.332:642): avc: denied { open } for pid=9266 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.446785][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.492106][ T30] audit: type=1400 audit(1745699491.332:643): avc: denied { getattr } for pid=9266 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.517664][ T10] usb 2-1: device descriptor read/64, error -71 [ 304.524342][ T30] audit: type=1400 audit(1745699491.362:644): avc: denied { read write } for pid=9262 comm="syz.5.919" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.548767][ T30] audit: type=1400 audit(1745699491.362:645): avc: denied { open } for pid=9262 comm="syz.5.919" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.633731][ T10] usb usb2-port1: attempt power cycle [ 304.658022][ T30] audit: type=1400 audit(1745699491.372:646): avc: denied { create } for pid=9262 comm="syz.5.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.719038][ T30] audit: type=1400 audit(1745699491.372:647): avc: denied { create } for pid=9267 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.739596][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.775853][ T52] hsr_slave_0: left promiscuous mode [ 304.788174][ T52] hsr_slave_1: left promiscuous mode [ 304.796495][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.803984][ T30] audit: type=1400 audit(1745699491.372:648): avc: denied { write } for pid=9267 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.804027][ T30] audit: type=1400 audit(1745699491.372:649): avc: denied { read } for pid=9267 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.824574][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.854769][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.863584][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.871111][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.801493][ T52] veth1_macvtap: left promiscuous mode [ 305.841573][ T52] veth0_macvtap: left promiscuous mode [ 305.848746][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 305.879518][ T10] usb 2-1: device descriptor read/8, error -71 [ 305.972434][ T52] veth1_vlan: left promiscuous mode [ 305.978081][ T52] veth0_vlan: left promiscuous mode [ 306.360736][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 306.395788][ T9304] syz.5.926: attempt to access beyond end of device [ 306.395788][ T9304] loop5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 306.408588][ T9304] hfs: can't find a HFS filesystem on dev loop5 [ 306.425520][ T10] usb 2-1: device descriptor read/8, error -71 [ 306.554540][ T10] usb usb2-port1: unable to enumerate USB device [ 307.101695][ T5864] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 307.284853][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 307.295947][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.319428][ T5864] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 307.329038][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.338220][ T5864] usb 5-1: Product: syz [ 307.344923][ T5864] usb 5-1: Manufacturer: syz [ 307.358129][ T5864] usb 5-1: SerialNumber: syz [ 307.370845][ T5864] usb 5-1: config 0 descriptor?? [ 307.583996][ T5864] usb 5-1: ignoring: not an USB2CAN converter [ 308.484094][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 308.493047][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.928'. [ 308.538042][ T9342] block nbd4: shutting down sockets [ 308.748962][ T52] team0 (unregistering): Port device team_slave_1 removed [ 308.839792][ T52] team0 (unregistering): Port device team_slave_0 removed [ 309.103254][ T5864] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 309.242574][ T5864] usb 2-1: device descriptor read/64, error -71 [ 309.575364][ T5864] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 309.590704][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 309.590718][ T30] audit: type=1400 audit(1745699496.672:713): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 309.634963][ T9340] ip6tnl1: entered promiscuous mode [ 309.640218][ T9340] ip6tnl1: entered allmulticast mode [ 309.648812][ T9340] team0: Device ip6tnl1 is of different type [ 309.739606][ T5903] usb 5-1: USB disconnect, device number 32 [ 309.742102][ T5864] usb 2-1: device descriptor read/64, error -71 [ 309.776782][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 309.917435][ T5864] usb usb2-port1: attempt power cycle [ 310.075079][ T30] audit: type=1400 audit(1745699497.162:714): avc: denied { read } for pid=9361 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.116750][ T30] audit: type=1400 audit(1745699497.192:715): avc: denied { open } for pid=9361 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.081849][ T5864] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 311.164224][ T5864] usb 2-1: device descriptor read/8, error -71 [ 311.471905][ T5864] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 311.515370][ T5864] usb 2-1: device descriptor read/8, error -71 [ 311.535863][ T30] audit: type=1400 audit(1745699498.612:716): avc: denied { mac_admin } for pid=9373 comm="syz.4.944" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 311.556737][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.699683][ T5864] usb usb2-port1: unable to enumerate USB device [ 311.881009][ T30] audit: type=1400 audit(1745699498.642:717): avc: denied { create } for pid=9380 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 312.228770][ T30] audit: type=1400 audit(1745699498.652:718): avc: denied { getopt } for pid=9380 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 312.264271][ T30] audit: type=1400 audit(1745699498.722:719): avc: denied { create } for pid=9373 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 313.073504][ T30] audit: type=1400 audit(1745699499.682:720): avc: denied { create } for pid=9386 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.095638][ T30] audit: type=1400 audit(1745699499.742:721): avc: denied { setopt } for pid=9386 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.202101][ T30] audit: type=1400 audit(1745699499.762:722): avc: denied { write } for pid=9386 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.421945][ T5864] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 313.822190][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 313.855952][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.940166][ T5864] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 314.047589][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.057190][ T5864] usb 2-1: Product: syz [ 314.064962][ T5864] usb 2-1: Manufacturer: syz [ 314.071930][ T5864] usb 2-1: SerialNumber: syz [ 314.080433][ T5864] usb 2-1: config 0 descriptor?? [ 314.171825][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 314.193257][ T58] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 314.294776][ T5864] usb 2-1: ignoring: not an USB2CAN converter [ 314.374624][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 314.400176][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.427161][ T24] usb 6-1: Product: syz [ 314.431367][ T24] usb 6-1: Manufacturer: syz [ 314.439695][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 314.456863][ T58] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 314.467694][ T24] usb 6-1: SerialNumber: syz [ 314.501821][ T58] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 314.518324][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 314.537012][ T24] r8152-cfgselector 6-1: config 0 descriptor?? [ 314.547249][ T58] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 314.580476][ T58] usb 5-1: config 250 has no interface number 0 [ 314.588953][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 314.601194][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 314.610483][ T58] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 314.630751][ T9435] block nbd1: shutting down sockets [ 314.658658][ T58] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 314.671306][ T5864] usb 2-1: USB disconnect, device number 64 [ 314.720075][ T58] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.746188][ T58] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 314.759991][ T58] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 314.787804][ T58] usb 5-1: config 250 interface 228 has no altsetting 0 [ 314.798712][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 314.808003][ T58] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 314.827232][ T58] usb 5-1: Product: syz [ 314.833073][ T58] usb 5-1: SerialNumber: syz [ 314.843942][ T58] hub 5-1:250.228: bad descriptor, ignoring hub [ 314.850269][ T58] hub 5-1:250.228: probe with driver hub failed with error -5 [ 314.997555][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 314.997571][ T30] audit: type=1400 audit(1745699502.082:732): avc: denied { create } for pid=9414 comm="syz.5.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 315.033642][ T30] audit: type=1400 audit(1745699502.112:733): avc: denied { connect } for pid=9414 comm="syz.5.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 315.077487][ T5903] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 315.116916][ T30] audit: type=1400 audit(1745699502.162:734): avc: denied { create } for pid=9413 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.212635][ T5864] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 315.293305][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 315.295575][ T58] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 315.315567][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.339319][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.364960][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.394496][ T5903] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.434409][ T5903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.457477][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.459346][ T30] audit: type=1400 audit(1745699502.172:735): avc: denied { ioctl } for pid=9414 comm="syz.5.951" path="socket:[22042]" dev="sockfs" ino=22042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.520844][ T5864] usb 3-1: device descriptor read/64, error -71 [ 315.794329][ T9458] tipc: Enabling of bearer rejected, already enabled [ 316.060461][ T30] audit: type=1400 audit(1745699502.682:736): avc: denied { setopt } for pid=9413 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.164372][ T30] audit: type=1400 audit(1745699502.682:737): avc: denied { bind } for pid=9413 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.216003][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 316.235437][ T24] r8152-cfgselector 6-1: bad CDC descriptors [ 316.248435][ T30] audit: type=1400 audit(1745699502.682:738): avc: denied { write } for pid=9413 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.278727][ T24] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 316.297311][ T5864] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 316.325512][ T30] audit: type=1400 audit(1745699502.682:739): avc: denied { read } for pid=9413 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.361936][ T30] audit: type=1400 audit(1745699503.332:740): avc: denied { connect } for pid=9460 comm="syz.1.960" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.366767][ T5903] usb 1-1: GET_CAPABILITIES returned 0 [ 316.401801][ T30] audit: type=1400 audit(1745699503.332:741): avc: denied { setopt } for pid=9460 comm="syz.1.960" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.405102][ T5903] usbtmc 1-1:16.0: can't read capabilities [ 316.443690][ T5864] usb 3-1: device descriptor read/64, error -71 [ 316.554222][ T5864] usb usb3-port1: attempt power cycle [ 316.673235][ T5891] usb 1-1: USB disconnect, device number 38 [ 316.786491][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.793169][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.855878][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.962'. [ 316.911687][ T5864] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 316.942556][ T5864] usb 3-1: device descriptor read/8, error -71 [ 317.257027][ T5820] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 317.271941][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: kworker/u9:4 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 317.271970][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 317.271982][ T5820] Workqueue: hci2 hci_rx_work [ 317.272011][ T5820] Call Trace: [ 317.272021][ T5820] [ 317.272030][ T5820] dump_stack_lvl+0x16c/0x1f0 [ 317.272059][ T5820] sysfs_warn_dup+0x7f/0xa0 [ 317.272089][ T5820] sysfs_create_dir_ns+0x24b/0x2b0 [ 317.272118][ T5820] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 317.272145][ T5820] ? find_held_lock+0x2b/0x80 [ 317.272170][ T5820] ? do_raw_spin_unlock+0x172/0x230 [ 317.272190][ T5820] kobject_add_internal+0x2c4/0x9b0 [ 317.272220][ T5820] kobject_add+0x16e/0x240 [ 317.272242][ T5820] ? __pfx_kobject_add+0x10/0x10 [ 317.272270][ T5820] ? kobject_put+0xab/0x5a0 [ 317.272298][ T5820] device_add+0x288/0x1a70 [ 317.272320][ T5820] ? __pfx_dev_set_name+0x10/0x10 [ 317.272343][ T5820] ? __pfx_device_add+0x10/0x10 [ 317.272364][ T5820] ? mgmt_send_event_skb+0x2fb/0x460 [ 317.272393][ T5820] hci_conn_add_sysfs+0x17e/0x230 [ 317.272419][ T5820] le_conn_complete_evt+0x1075/0x1d70 [ 317.272447][ T5820] ? irqentry_exit+0x3b/0x90 [ 317.272468][ T5820] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 317.272508][ T5820] hci_le_conn_complete_evt+0x23c/0x370 [ 317.272536][ T5820] hci_le_meta_evt+0x2f3/0x5e0 [ 317.272560][ T5820] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 317.272586][ T5820] hci_event_packet+0x669/0x1190 [ 317.272609][ T5820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 317.272634][ T5820] ? __pfx_hci_event_packet+0x10/0x10 [ 317.272662][ T5820] ? kcov_remote_start+0x3d9/0x6d0 [ 317.272685][ T5820] hci_rx_work+0x2c5/0x16b0 [ 317.272715][ T5820] process_one_work+0x9cc/0x1b70 [ 317.272745][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 317.272771][ T5820] ? assign_work+0x1a0/0x250 [ 317.272790][ T5820] worker_thread+0x6c8/0xf10 [ 317.272821][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 317.272839][ T5820] kthread+0x3c2/0x780 [ 317.272856][ T5820] ? __pfx_kthread+0x10/0x10 [ 317.272870][ T5820] ? __pfx_kthread+0x10/0x10 [ 317.272884][ T5820] ? __pfx_kthread+0x10/0x10 [ 317.272898][ T5820] ? __pfx_kthread+0x10/0x10 [ 317.272913][ T5820] ? rcu_is_watching+0x12/0xc0 [ 317.272934][ T5820] ? __pfx_kthread+0x10/0x10 [ 317.272951][ T5820] ret_from_fork+0x45/0x80 [ 317.272968][ T5820] ? __pfx_kthread+0x10/0x10 [ 317.272984][ T5820] ret_from_fork_asm+0x1a/0x30 [ 317.273022][ T5820] [ 317.508766][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.525634][ T9] usb 5-1: USB disconnect, device number 33 [ 317.531760][ T5820] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 317.546507][ T5820] Bluetooth: hci2: failed to register connection device [ 317.555133][ T5820] Bluetooth: hci2: link tx timeout [ 317.560415][ T5820] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 317.569639][ T5820] Bluetooth: hci2: link tx timeout [ 317.575154][ T5864] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 317.583188][ T5820] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 317.596974][ T9] usblp0: removed [ 317.618711][ T5864] usb 3-1: device descriptor read/8, error -71 [ 317.752782][ T5864] usb usb3-port1: unable to enumerate USB device [ 317.762338][ T9512] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 317.912332][ T9517] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 317.940109][ T9517] netlink: 48 bytes leftover after parsing attributes in process `syz.0.965'. [ 318.358956][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 318.841853][ T5903] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 319.306107][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 319.315122][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.332309][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 319.355019][ T5903] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 319.373566][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.389886][ T5903] usb 6-1: Product: syz [ 319.398367][ T5903] usb 6-1: Manufacturer: syz [ 319.406134][ T5903] usb 6-1: SerialNumber: syz [ 319.419226][ T5903] usb 6-1: config 0 descriptor?? [ 319.502021][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 319.510060][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.643835][ T5903] usb 6-1: ignoring: not an USB2CAN converter [ 319.650010][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.661909][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 319.728314][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.789392][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.973'. [ 319.796131][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.868782][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.908851][ T9560] No control pipe specified [ 319.917218][ T9] usb 3-1: config 0 descriptor?? [ 319.958841][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.969'. [ 319.995007][ T9561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.969'. [ 320.011772][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 320.011787][ T30] audit: type=1400 audit(1745699507.092:767): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 320.052582][ T9567] block nbd5: shutting down sockets [ 320.112558][ T5864] usb 6-1: USB disconnect, device number 22 [ 320.137271][ T30] audit: type=1400 audit(1745699507.222:768): avc: denied { read write } for pid=9568 comm="syz.4.976" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 320.201354][ T30] audit: type=1400 audit(1745699507.222:769): avc: denied { open } for pid=9568 comm="syz.4.976" path="/dev/vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 320.226795][ T30] audit: type=1400 audit(1745699507.282:770): avc: denied { ioctl } for pid=9568 comm="syz.4.976" path="/dev/vbi9" dev="devtmpfs" ino=1007 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 320.226821][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 320.263953][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.273011][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.286044][ T9574] batman_adv: batadv0: Removing interface: macsec1 [ 320.389069][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 320.432441][ T5891] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 320.518833][ T30] audit: type=1400 audit(1745699507.572:771): avc: denied { mount } for pid=9572 comm="syz.1.977" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 320.631824][ T5891] usb 5-1: device descriptor read/64, error -71 [ 320.902427][ T5891] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 321.094133][ T5891] usb 5-1: device descriptor read/64, error -71 [ 321.169591][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.177160][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.184561][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.191824][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.199064][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.206645][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.214147][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.221397][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.228653][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 321.238782][ T9] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 321.249314][ T9] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 321.260773][ T9] microsoft 0003:045E:07DA.0009: no inputs found [ 321.267841][ T9] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 321.279641][ T9] usb 3-1: USB disconnect, device number 38 [ 321.286292][ T5891] usb usb5-port1: attempt power cycle [ 321.319681][ T30] audit: type=1400 audit(1745699508.402:772): avc: denied { read } for pid=9583 comm="syz.5.978" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.442468][ T30] audit: type=1400 audit(1745699508.402:773): avc: denied { open } for pid=9583 comm="syz.5.978" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.503959][ T30] audit: type=1400 audit(1745699508.402:774): avc: denied { ioctl } for pid=9583 comm="syz.5.978" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 321.532368][ T30] audit: type=1400 audit(1745699508.432:775): avc: denied { read } for pid=9585 comm="syz.2.979" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.565040][ T30] audit: type=1400 audit(1745699508.432:776): avc: denied { open } for pid=9585 comm="syz.2.979" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.702815][ T5891] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 321.721883][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 321.731659][ T5891] usb 5-1: device descriptor read/8, error -71 [ 321.742096][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 321.923821][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 321.936401][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 321.949830][ T24] usb 6-1: config 127 has an invalid interface number: 158 but max is 0 [ 321.958357][ T24] usb 6-1: config 127 has no interface number 0 [ 321.965100][ T24] usb 6-1: config 127 interface 158 has no altsetting 0 [ 321.976806][ T24] usb 6-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5 [ 321.985963][ T5891] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 321.994788][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 321.996280][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.010774][ T24] usb 6-1: Product: syz [ 322.021840][ T24] usb 6-1: Manufacturer: syz [ 322.026884][ T5891] usb 5-1: device descriptor read/8, error -71 [ 322.041736][ T24] usb 6-1: SerialNumber: syz [ 322.163680][ T5891] usb usb5-port1: unable to enumerate USB device [ 322.182994][ T10] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 322.195486][ T10] usb 3-1: config 0 has no interface number 0 [ 322.227008][ T10] usb 3-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 322.259998][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.279258][ T10] usb 3-1: config 0 interface 11 has no altsetting 0 [ 322.286944][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.296796][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 322.322777][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.374443][ T10] usb 3-1: config 0 descriptor?? [ 322.433614][ T9591] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 322.450971][ T24] comedi comedi0: could not switch to alternate setting 1 [ 322.460272][ T10] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 322.465761][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.984'. [ 322.479230][ T24] usbduxfast 6-1:127.158: driver 'usbduxfast' failed to auto-configure device. [ 322.591799][ T24] usb 6-1: USB disconnect, device number 23 [ 322.913025][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 322.920896][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 322.962623][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 323.001754][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 323.066318][ T9610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.203153][ T9610] nfs: Unknown parameter '' [ 323.207982][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 323.501201][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 323.531264][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 323.542513][ T9615] No control pipe specified [ 323.590031][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 323.637068][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 323.742447][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 323.750739][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 323.760261][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 323.768685][ T10] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 323.780219][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 324.262695][ T10] usb 3-1: USB disconnect, device number 39 [ 324.379368][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 324.399810][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 324.421127][ T10] keyspan 3-1:0.11: device disconnected [ 324.660334][ T9641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.743312][ T9644] netlink: 44 bytes leftover after parsing attributes in process `syz.0.993'. [ 325.051224][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 325.051240][ T30] audit: type=1400 audit(1745699512.137:798): avc: denied { block_suspend } for pid=9636 comm="syz.5.992" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.213261][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 325.359356][ T30] audit: type=1400 audit(1745699512.437:799): avc: denied { mount } for pid=9651 comm="syz.0.996" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 325.397225][ T30] audit: type=1400 audit(1745699512.437:800): avc: denied { setattr } for pid=9651 comm="syz.0.996" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.420223][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.521529][ T30] audit: type=1400 audit(1745699512.477:801): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 325.634532][ T9658] No control pipe specified [ 325.861809][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 326.136692][ T9661] SELinux: policydb version -942496647 does not match my version range 15-34 [ 326.146415][ T30] audit: type=1400 audit(1745699513.227:802): avc: denied { load_policy } for pid=9660 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 326.166605][ T9661] SELinux: failed to load policy [ 326.599641][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 326.614240][ T24] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 326.624299][ T24] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 326.633188][ T24] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 326.642539][ T24] usb 5-1: config 250 has no interface number 0 [ 326.648833][ T24] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 326.660953][ T24] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 326.671957][ T24] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.689491][ T24] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 326.720105][ T24] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 326.745850][ T24] usb 5-1: config 250 interface 228 has no altsetting 0 [ 326.763079][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 326.779627][ T24] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 326.792283][ T24] usb 5-1: Product: syz [ 326.796709][ T24] usb 5-1: SerialNumber: syz [ 326.848989][ T24] hub 5-1:250.228: bad descriptor, ignoring hub [ 326.857173][ T24] hub 5-1:250.228: probe with driver hub failed with error -5 [ 327.254605][ T24] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 327.275618][ T30] audit: type=1400 audit(1745699514.367:803): avc: denied { write } for pid=9681 comm="syz.2.1005" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 327.758477][ T30] audit: type=1400 audit(1745699514.387:804): avc: denied { open } for pid=9681 comm="syz.2.1005" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 327.781656][ T30] audit: type=1400 audit(1745699514.387:805): avc: denied { ioctl } for pid=9681 comm="syz.2.1005" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 327.801824][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1006'. [ 328.177403][ T9710] No control pipe specified [ 329.042006][ T24] usb 5-1: USB disconnect, device number 38 [ 329.060868][ T24] usblp0: removed [ 329.381738][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 329.534779][ T24] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 329.543117][ T5864] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 329.551655][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.564858][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 329.576198][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 329.586357][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.599626][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.609032][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.619433][ T24] usb 5-1: config 0 descriptor?? [ 329.763122][ T5864] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 329.797861][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.817658][ T5864] usb 6-1: config 0 descriptor?? [ 329.855283][ T30] audit: type=1400 audit(1745699516.947:806): avc: denied { read } for pid=9737 comm="syz.0.1017" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 329.878324][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.906422][ T30] audit: type=1400 audit(1745699516.947:807): avc: denied { open } for pid=9737 comm="syz.0.1017" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 330.074871][ T9736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.085624][ T24] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 330.095689][ T5891] usb 6-1: USB disconnect, device number 24 [ 330.105092][ T24] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 330.112562][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 330.112575][ T30] audit: type=1400 audit(1745699517.197:809): avc: denied { create } for pid=9742 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 330.278709][ T9745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.648094][ T9744] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 330.728473][ T30] audit: type=1400 audit(1745699517.197:810): avc: denied { getopt } for pid=9742 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 330.748391][ T30] audit: type=1400 audit(1745699517.287:811): avc: denied { ioctl } for pid=9739 comm="syz.2.1018" path="socket:[22497]" dev="sockfs" ino=22497 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.776026][ T24] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 330.867889][ T5903] usb 5-1: USB disconnect, device number 39 [ 330.875174][ T30] audit: type=1400 audit(1745699517.947:812): avc: denied { audit_read } for pid=9750 comm="syz.0.1021" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.081381][ T30] audit: type=1400 audit(1745699518.167:813): avc: denied { create } for pid=9748 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.177067][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.186043][ T30] audit: type=1400 audit(1745699518.197:814): avc: denied { ioctl } for pid=9748 comm="syz.2.1020" path="socket:[22512]" dev="sockfs" ino=22512 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.210796][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.382473][ T9768] No control pipe specified [ 331.503701][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.054469][ T9791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7953 sclass=netlink_route_socket pid=9791 comm=syz.0.1026 [ 332.232916][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.565820][ T30] audit: type=1400 audit(1745699519.647:815): avc: denied { sys_module } for pid=9769 comm="syz.0.1026" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 332.678223][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.705783][ T5821] Bluetooth: hci0: command tx timeout [ 333.365934][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 333.492596][ T9803] syz.1.1030: attempt to access beyond end of device [ 333.492596][ T9803] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 333.507155][ T9803] hfs: can't find a HFS filesystem on dev loop1 [ 333.742778][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.807341][ T30] audit: type=1400 audit(1745699520.877:816): avc: denied { relabelfrom } for pid=9769 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 333.849799][ T30] audit: type=1400 audit(1745699520.917:817): avc: denied { relabelto } for pid=9769 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 333.884323][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 333.895042][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.908746][ T30] audit: type=1400 audit(1745699520.997:818): avc: denied { write } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.937574][ T9] usb 5-1: config 0 descriptor?? [ 333.962630][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 334.234781][ T9] gspca_spca508: reg_read err -32 [ 334.671900][ T9] gspca_spca508: reg_read err -71 [ 334.693962][ T9] gspca_spca508: reg_read err -71 [ 334.708965][ T9] gspca_spca508: reg_read err -71 [ 334.727073][ T9] gspca_spca508: reg write: error -71 [ 334.737443][ T9] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 334.760487][ T9823] No control pipe specified [ 334.766659][ T9] usb 5-1: USB disconnect, device number 40 [ 334.785437][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.834020][ T9794] lo speed is unknown, defaulting to 1000 [ 334.843291][ T9794] lo speed is unknown, defaulting to 1000 [ 335.264423][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.345881][ T9842] overlayfs: missing 'lowerdir' [ 335.461097][ T9847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.462024][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 335.462037][ T30] audit: type=1400 audit(1745699522.547:828): avc: denied { read write } for pid=9841 comm="syz.2.1040" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 335.947261][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.962081][ T30] audit: type=1400 audit(1745699522.547:829): avc: denied { open } for pid=9841 comm="syz.2.1040" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 335.992172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.011701][ T30] audit: type=1400 audit(1745699522.547:830): avc: denied { ioctl } for pid=9841 comm="syz.2.1040" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 336.038157][ T30] audit: type=1400 audit(1745699522.567:831): avc: denied { create } for pid=9841 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 336.057438][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.534525][ T30] audit: type=1400 audit(1745699523.617:832): avc: denied { read } for pid=9864 comm="syz.0.1044" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 336.557938][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.624340][ T30] audit: type=1400 audit(1745699523.617:833): avc: denied { open } for pid=9864 comm="syz.0.1044" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 336.648482][ T5891] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 336.659406][ T30] audit: type=1400 audit(1745699523.627:834): avc: denied { ioctl } for pid=9864 comm="syz.0.1044" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 336.703723][ T30] audit: type=1400 audit(1745699523.627:835): avc: denied { ioctl } for pid=9864 comm="syz.0.1044" path="socket:[23684]" dev="sockfs" ino=23684 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 336.728321][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.780347][ T30] audit: type=1400 audit(1745699523.867:836): avc: denied { mount } for pid=9872 comm="syz.1.1046" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 336.809521][ T30] audit: type=1400 audit(1745699523.867:837): avc: denied { mounton } for pid=9872 comm="syz.1.1046" path="/198/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 336.832493][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 336.847799][ T5891] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 336.860344][ T5891] usb 3-1: config 179 has no interface number 0 [ 336.894362][ T5891] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 336.927877][ T5891] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 337.022034][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.060033][ T9878] syz.4.1047: attempt to access beyond end of device [ 337.060033][ T9878] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 337.068150][ T5891] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.085655][ T9878] hfs: can't find a HFS filesystem on dev loop4 [ 337.088555][ T5891] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 337.291116][ T5891] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 337.353394][ T5891] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 337.410613][ T9885] No control pipe specified [ 337.411646][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.460577][ T9861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.062465][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.166943][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.268577][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.309317][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.501746][ T5891] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 338.564972][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 338.597858][ T10] usb 3-1: USB disconnect, device number 40 [ 338.597859][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 338.691779][ T5891] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 338.717103][ T5891] usb 1-1: config 8 has no interface number 0 [ 338.729610][ T5891] usb 1-1: config 8 interface 177 has no altsetting 0 [ 338.737702][ T5891] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 338.768436][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.771013][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 338.853164][ T9915] syz.5.1054: attempt to access beyond end of device [ 338.853164][ T9915] loop5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 338.866377][ T9915] hfs: can't find a HFS filesystem on dev loop5 [ 339.076360][ T9] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 339.101673][ T9] usb 2-1: config 0 has no interface number 0 [ 339.107808][ T9] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 339.121839][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.210482][ T9] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice= f.2b [ 339.220501][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.260486][ T9] usb 2-1: Product: syz [ 339.277624][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.278630][ T9] usb 2-1: Manufacturer: syz [ 339.321420][ T9] usb 2-1: SerialNumber: syz [ 339.327345][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.349667][ T5891] usb 1-1: string descriptor 0 read error: -71 [ 339.379433][ T9] usb 2-1: config 0 descriptor?? [ 339.382517][ T5891] ir_toy 1-1:8.177: required endpoints not found [ 339.492253][ T792] Bluetooth: Error in BCSP hdr checksum [ 339.548518][ T5891] usb 1-1: USB disconnect, device number 39 [ 339.932439][ T5820] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 340.143895][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.240493][ T9] kobil_sct 2-1:0.25: KOBIL USB smart card terminal converter detected [ 340.270492][ T9] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 340.271807][ T5897] Bluetooth: Error in BCSP hdr checksum [ 340.317850][ T9] usb 2-1: USB disconnect, device number 65 [ 340.347654][ T9938] No control pipe specified [ 340.362312][ T5903] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 340.371529][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 340.419993][ T9] kobil_sct 2-1:0.25: device disconnected [ 340.519251][ T5897] Bluetooth: Error in BCSP hdr checksum [ 340.578373][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 340.585649][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.596797][ T5903] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 340.613401][ T5903] usb 3-1: config 0 has no interface number 0 [ 340.616945][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 340.616958][ T30] audit: type=1400 audit(1745699527.707:840): avc: denied { shutdown } for pid=9945 comm="syz.4.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.629843][ T5903] usb 3-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 340.674567][ T5903] usb 3-1: config 0 interface 143 has no altsetting 0 [ 340.696210][ T5903] usb 3-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 340.706065][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.717642][ T5903] usb 3-1: Product: syz [ 340.796402][ T5903] usb 3-1: Manufacturer: syz [ 340.801463][ T5903] usb 3-1: SerialNumber: syz [ 340.801787][ T5891] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 340.809970][ T5903] r8152-cfgselector 3-1: Unknown version 0x0000 [ 340.816752][ T8341] Bluetooth: Error in BCSP hdr checksum [ 340.820669][ T5903] r8152-cfgselector 3-1: config 0 descriptor?? [ 340.845064][ T5903] r8152 3-1:0.143: Expected endpoints are not found [ 340.845153][ T30] audit: type=1326 audit(1745699527.927:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 340.875202][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.890008][ T30] audit: type=1326 audit(1745699527.927:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 340.916931][ T30] audit: type=1326 audit(1745699527.927:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 340.940169][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.980568][ T30] audit: type=1326 audit(1745699527.927:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 341.031728][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 341.064586][ T5897] Bluetooth: Error in BCSP hdr checksum [ 341.067037][ T30] audit: type=1326 audit(1745699527.927:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 341.093433][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.103774][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.120191][ T5891] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 341.139707][ T5891] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 341.175043][ T5891] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 341.184777][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.239935][ T58] r8152-cfgselector 3-1: USB disconnect, device number 41 [ 341.249207][ T5891] usb 1-1: config 250 has no interface number 0 [ 341.267378][ T5891] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 341.287128][ T5891] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 341.298085][ T30] audit: type=1326 audit(1745699527.927:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 341.322732][ T5891] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.334755][ T5891] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 341.366112][ T30] audit: type=1326 audit(1745699527.927:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 341.368287][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.389356][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.391200][ T5891] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 341.454228][ T30] audit: type=1326 audit(1745699527.927:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 341.477554][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.512957][ T5891] usb 1-1: config 250 interface 228 has no altsetting 0 [ 341.527010][ T30] audit: type=1326 audit(1745699527.927:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8d8558e969 code=0x7ffc0000 [ 341.550430][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 341.550668][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 341.577725][ T5891] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 341.605248][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 341.620598][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 341.670372][ T5891] usb 1-1: Product: syz [ 341.693034][ T5891] usb 1-1: SerialNumber: syz [ 341.831262][ T9978] syz.1.1067: attempt to access beyond end of device [ 341.831262][ T9978] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 341.846241][ T9978] hfs: can't find a HFS filesystem on dev loop1 [ 341.896436][ T5891] hub 1-1:250.228: bad descriptor, ignoring hub [ 341.898390][ T9971] macvtap1: entered promiscuous mode [ 341.913079][ T9971] batadv0: entered promiscuous mode [ 341.919620][ T5891] hub 1-1:250.228: probe with driver hub failed with error -5 [ 341.923759][ T9971] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 342.048925][ T5891] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 342.409743][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.067804][ T9971] batadv0: left promiscuous mode [ 343.202323][ T9993] No control pipe specified [ 343.255868][ T9996] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1071'. [ 343.378996][T10006] FAULT_INJECTION: forcing a failure. [ 343.378996][T10006] name failslab, interval 1, probability 0, space 0, times 0 [ 343.407001][T10006] CPU: 1 UID: 0 PID: 10006 Comm: syz.1.1072 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 343.407028][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 343.407038][T10006] Call Trace: [ 343.407045][T10006] [ 343.407051][T10006] dump_stack_lvl+0x16c/0x1f0 [ 343.407075][T10006] should_fail_ex+0x512/0x640 [ 343.407095][T10006] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 343.407122][T10006] should_failslab+0xc2/0x120 [ 343.407141][T10006] __kmalloc_cache_noprof+0x6a/0x3e0 [ 343.407164][T10006] ? netlbl_cipsov4_add+0x378/0x2440 [ 343.407190][T10006] netlbl_cipsov4_add+0x378/0x2440 [ 343.407212][T10006] ? __nla_parse+0x40/0x60 [ 343.407236][T10006] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 343.407255][T10006] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 343.407277][T10006] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 343.407304][T10006] genl_family_rcv_msg_doit+0x206/0x2f0 [ 343.407326][T10006] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 343.407355][T10006] ? bpf_lsm_capable+0x9/0x10 [ 343.407379][T10006] ? security_capable+0x7e/0x260 [ 343.407403][T10006] genl_rcv_msg+0x55c/0x800 [ 343.407426][T10006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.407446][T10006] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 343.407469][T10006] ? __lock_acquire+0xaa4/0x1ba0 [ 343.407505][T10006] netlink_rcv_skb+0x16a/0x440 [ 343.407522][T10006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.407544][T10006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.407574][T10006] ? __pfx_down_read+0x10/0x10 [ 343.407597][T10006] ? netlink_deliver_tap+0x1ae/0xd30 [ 343.407630][T10006] genl_rcv+0x28/0x40 [ 343.407646][T10006] netlink_unicast+0x53a/0x7f0 [ 343.407667][T10006] ? __pfx_netlink_unicast+0x10/0x10 [ 343.407691][T10006] netlink_sendmsg+0x8d1/0xdd0 [ 343.407713][T10006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.407739][T10006] ____sys_sendmsg+0xa95/0xc70 [ 343.407759][T10006] ? copy_msghdr_from_user+0x10a/0x160 [ 343.407783][T10006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.407814][T10006] ___sys_sendmsg+0x134/0x1d0 [ 343.407838][T10006] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.407892][T10006] __sys_sendmsg+0x16d/0x220 [ 343.407917][T10006] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.407950][T10006] ? rcu_is_watching+0x12/0xc0 [ 343.407976][T10006] do_syscall_64+0xcd/0x260 [ 343.407998][T10006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.408014][T10006] RIP: 0033:0x7f8d8558e969 [ 343.408028][T10006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.408045][T10006] RSP: 002b:00007f8d863d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.408062][T10006] RAX: ffffffffffffffda RBX: 00007f8d857b5fa0 RCX: 00007f8d8558e969 [ 343.408072][T10006] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 343.408083][T10006] RBP: 00007f8d863d8090 R08: 0000000000000000 R09: 0000000000000000 [ 343.408092][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.408102][T10006] R13: 0000000000000000 R14: 00007f8d857b5fa0 R15: 00007ffe548399a8 [ 343.408126][T10006] [ 343.512112][T10008] ------------[ cut here ]------------ [ 343.512422][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.517492][T10008] platform vkms: [drm] vblank wait timed out on crtc 0 [ 343.523751][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.559963][T10008] WARNING: CPU: 0 PID: 10008 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x2f6/0x5b0 [ 343.577074][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.581863][T10008] Modules linked in: [ 343.768423][T10008] CPU: 0 UID: 0 PID: 10008 Comm: syz.4.1073 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 343.780826][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 343.791238][T10008] RIP: 0010:drm_wait_one_vblank+0x2f6/0x5b0 [ 343.798074][T10008] Code: ed 0f 84 12 02 00 00 e8 58 37 4b fc 48 89 ef e8 60 67 8d 00 44 89 e1 4c 89 ea 48 c7 c7 20 27 0a 8c 48 89 c6 e8 5b c4 0a fc 90 <0f> 0b 90 90 e9 4e fe ff ff e8 2c 37 4b fc 48 89 ef e8 b4 bd fe 05 [ 343.817941][T10008] RSP: 0018:ffffc90003227b20 EFLAGS: 00010286 [ 343.824983][T10008] RAX: 0000000000000000 RBX: ffff8880258cc000 RCX: ffffc9000d9f5000 [ 343.833472][T10008] RDX: 0000000000080000 RSI: ffffffff817ac005 RDI: 0000000000000001 [ 343.841453][T10008] RBP: ffff888025862010 R08: 0000000000000001 R09: 0000000000000000 [ 343.849768][T10008] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 343.858384][T10008] R13: ffff8881423b5d00 R14: 1ffff92000644f67 R15: 0000000000004ed3 [ 343.866974][T10008] FS: 00007f09519f66c0(0000) GS:ffff8881249e4000(0000) knlGS:0000000000000000 [ 343.876372][T10008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.883693][T10008] CR2: 000000110c392121 CR3: 000000005e3ee000 CR4: 00000000003526f0 [ 343.892035][T10008] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.900012][T10008] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.908452][T10008] Call Trace: [ 343.912604][T10008] [ 343.915562][T10008] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 343.921235][T10008] ? __pfx_autoremove_wake_function+0x10/0x10 [ 343.927836][T10008] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.933942][T10008] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 343.939773][T10008] ? drm_vblank_get+0x150/0x290 [ 343.945142][T10008] drm_fb_helper_ioctl+0x156/0x1a0 [ 343.951509][T10008] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 343.957662][T10008] do_fb_ioctl+0x3d2/0x7e0 [ 343.962587][T10008] ? __pfx_do_fb_ioctl+0x10/0x10 [ 343.967563][T10008] ? do_vfs_ioctl+0x512/0x1990 [ 343.973298][T10008] ? selinux_file_ioctl+0x180/0x270 [ 343.978539][T10008] fb_ioctl+0xe5/0x150 [ 343.983123][T10008] ? __pfx_fb_ioctl+0x10/0x10 [ 343.987824][T10008] __x64_sys_ioctl+0x190/0x200 [ 343.993539][T10008] do_syscall_64+0xcd/0x260 [ 343.998077][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.004746][T10008] RIP: 0033:0x7f0953b8e969 [ 344.009655][T10008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.029847][T10008] RSP: 002b:00007f09519f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.039480][T10008] RAX: ffffffffffffffda RBX: 00007f0953db5fa0 RCX: 00007f0953b8e969 [ 344.048088][T10008] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 344.056544][T10008] RBP: 00007f0953c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 344.065418][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.074164][T10008] R13: 0000000000000000 R14: 00007f0953db5fa0 R15: 00007ffd7ad14078 [ 344.082679][T10008] [ 344.085714][T10008] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 344.093005][T10008] CPU: 0 UID: 0 PID: 10008 Comm: syz.4.1073 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 344.105075][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 344.115144][T10008] Call Trace: [ 344.118429][T10008] [ 344.121362][T10008] dump_stack_lvl+0x3d/0x1f0 [ 344.125967][T10008] panic+0x71c/0x800 [ 344.129877][T10008] ? __pfx_panic+0x10/0x10 [ 344.134317][T10008] ? show_trace_log_lvl+0x29b/0x3e0 [ 344.139537][T10008] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 344.144833][T10008] check_panic_on_warn+0xab/0xb0 [ 344.149787][T10008] __warn+0xf6/0x3c0 [ 344.153691][T10008] ? preempt_schedule_notrace+0x62/0xe0 [ 344.159250][T10008] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 344.164545][T10008] report_bug+0x3c3/0x580 [ 344.168884][T10008] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 344.174182][T10008] handle_bug+0x184/0x210 [ 344.178511][T10008] exc_invalid_op+0x17/0x50 [ 344.183007][T10008] asm_exc_invalid_op+0x1a/0x20 [ 344.187842][T10008] RIP: 0010:drm_wait_one_vblank+0x2f6/0x5b0 [ 344.193726][T10008] Code: ed 0f 84 12 02 00 00 e8 58 37 4b fc 48 89 ef e8 60 67 8d 00 44 89 e1 4c 89 ea 48 c7 c7 20 27 0a 8c 48 89 c6 e8 5b c4 0a fc 90 <0f> 0b 90 90 e9 4e fe ff ff e8 2c 37 4b fc 48 89 ef e8 b4 bd fe 05 [ 344.213373][T10008] RSP: 0018:ffffc90003227b20 EFLAGS: 00010286 [ 344.219462][T10008] RAX: 0000000000000000 RBX: ffff8880258cc000 RCX: ffffc9000d9f5000 [ 344.227425][T10008] RDX: 0000000000080000 RSI: ffffffff817ac005 RDI: 0000000000000001 [ 344.235387][T10008] RBP: ffff888025862010 R08: 0000000000000001 R09: 0000000000000000 [ 344.243341][T10008] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 344.251292][T10008] R13: ffff8881423b5d00 R14: 1ffff92000644f67 R15: 0000000000004ed3 [ 344.259263][T10008] ? __warn_printk+0x1a5/0x350 [ 344.264026][T10008] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 344.269648][T10008] ? __pfx_autoremove_wake_function+0x10/0x10 [ 344.275707][T10008] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.280893][T10008] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 344.286685][T10008] ? drm_vblank_get+0x150/0x290 [ 344.291530][T10008] drm_fb_helper_ioctl+0x156/0x1a0 [ 344.296653][T10008] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 344.302305][T10008] do_fb_ioctl+0x3d2/0x7e0 [ 344.306725][T10008] ? __pfx_do_fb_ioctl+0x10/0x10 [ 344.311657][T10008] ? do_vfs_ioctl+0x512/0x1990 [ 344.316438][T10008] ? selinux_file_ioctl+0x180/0x270 [ 344.321646][T10008] fb_ioctl+0xe5/0x150 [ 344.325727][T10008] ? __pfx_fb_ioctl+0x10/0x10 [ 344.330404][T10008] __x64_sys_ioctl+0x190/0x200 [ 344.335166][T10008] do_syscall_64+0xcd/0x260 [ 344.339658][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.345536][T10008] RIP: 0033:0x7f0953b8e969 [ 344.349936][T10008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.369529][T10008] RSP: 002b:00007f09519f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.377931][T10008] RAX: ffffffffffffffda RBX: 00007f0953db5fa0 RCX: 00007f0953b8e969 [ 344.385887][T10008] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 344.393839][T10008] RBP: 00007f0953c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 344.401793][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.409744][T10008] R13: 0000000000000000 R14: 00007f0953db5fa0 R15: 00007ffd7ad14078 [ 344.417724][T10008] [ 344.420923][T10008] Kernel Offset: disabled [ 344.425241][T10008] Rebooting in 86400 seconds..