last executing test programs: 2m33.226746383s ago: executing program 1 (id=712): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0xe, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) syz_pidfd_open(r0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x2e, 0x8, 0x4, 0x4, 0x6, 0x28, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @empty]}, 0x48) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2800a000}, 0x8010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) r8 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYBLOB="0000000000000000140012800c000100", @ANYRES32=r11, @ANYBLOB="080003"], 0x44}}, 0x0) 2m32.122647414s ago: executing program 1 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m31.297446478s ago: executing program 1 (id=716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getcwd(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020508030200000000017c"], 0x10}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ptrace$pokeuser(0x6, r1, 0x358, 0x0) 2m28.418548221s ago: executing program 3 (id=722): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffd80, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000940)={{}, {0x0, 0xfd}, 0x802, 0x7, 0x40}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x70) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x101400, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0xa41) ioctl$int_in(r3, 0x5452, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0xa0042, 0x182) write$tcp_mem(r5, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8000000, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1000000}) 2m28.242990516s ago: executing program 1 (id=723): getgid() io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x6, 0x5, 0x0, 0x2, 0x6, 0x40, 0x401, 0x9}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x238, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x1, 0x3a6, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = msgget(0x3, 0x200) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe, 0x110, r3, 0x10000000) syz_io_uring_submit(r5, r8, 0x0) msgrcv(r7, 0x0, 0x0, 0x0, 0x1400) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x0, 0x9000000}) r10 = inotify_init() io_submit(r0, 0x2, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xffff, r1, 0x0, 0x0, 0x3, 0x0, 0x1, r1}]) close_range(0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) memfd_create(&(0x7f0000000200)='keyring\x00', 0x5) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) 2m27.301495605s ago: executing program 3 (id=725): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800e9ffffe4aa652189f17b08d25fc7bfe0c0b6db8400000c"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) add_key$keyring(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioperm(0xfffffffe, 0x40000007, 0x5) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESDEC]) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) lseek(r3, 0x1003ff, 0x4) 2m21.069351817s ago: executing program 3 (id=735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getpgid(0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000440012800e0001006970366772657461700000063000028014000700ff0100000000000000000002000000010500170000e8ff0006000f0001000000050016000200000008001300", @ANYRES32=r6, @ANYBLOB], 0xe8}}, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000740)=""/206, 0xce}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000a40)=""/140, 0x8c}, {&(0x7f0000000b00)=""/197, 0xc5}], 0x7, &(0x7f0000000c80)=""/75, 0x4b}, 0x3f}], 0x1, 0x12163, &(0x7f0000000d00)) 2m19.457961678s ago: executing program 3 (id=737): r0 = socket$netlink(0x10, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20008000) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xd5, 0x0, 0x63}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) 2m17.352842738s ago: executing program 3 (id=738): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioperm(0xfffffffe, 0x40000007, 0x5) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) eventfd(0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESDEC]) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f0000000180)) ftruncate(0xffffffffffffffff, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lseek(0xffffffffffffffff, 0x1003ff, 0x4) 2m16.178366513s ago: executing program 1 (id=741): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0xe, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) syz_pidfd_open(r0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x2e, 0x8, 0x4, 0x4, 0x6, 0x28, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @empty]}, 0x48) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2800a000}, 0x8010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) r8 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r11, @ANYBLOB="080003"], 0x44}}, 0x0) 2m15.523174003s ago: executing program 3 (id=742): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800e9ffffe4aa652189f17b08d25fc7bfe0c0b6db8400000c"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) add_key$keyring(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioperm(0xfffffffe, 0x40000007, 0x5) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESDEC]) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) lseek(r3, 0x1003ff, 0x4) 2m14.216673594s ago: executing program 1 (id=746): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m59.363162229s ago: executing program 32 (id=742): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800e9ffffe4aa652189f17b08d25fc7bfe0c0b6db8400000c"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) add_key$keyring(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioperm(0xfffffffe, 0x40000007, 0x5) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESDEC]) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) lseek(r3, 0x1003ff, 0x4) 1m58.084074636s ago: executing program 33 (id=746): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m50.514212346s ago: executing program 2 (id=761): r0 = socket$netlink(0x10, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20008000) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xd5, 0x0, 0x63}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) 1m49.295804089s ago: executing program 0 (id=762): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) lseek(r3, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000040)={0x57, 0x5, 0x1, {0x8, 0x100}, {0x1ff, 0x401}, @period={0x5c, 0xf, 0xffff, 0x8, 0xd7, {0x1000, 0xed, 0x3, 0x4a00}, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000002c0)='\b', 0x1, 0x8004c61) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"d1c6f90ba4bb7f288f70f5bde5f28d04082bc5e077ba95a9afe209b5f11e8f0f"}) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2000000000000084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', r2, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 1m36.513781942s ago: executing program 2 (id=763): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000007a40e02940bdd84d71bc6b10ba70591fac3a3fc2ddb826e72718ecfd110f944d087e30a38f6ef6db55d9e1e1fcba0da7a503f6fc1314eac5ba360102425cf94401d413d174bd03136aee48af5878a91f95ea1159370fc7b0d2e748e5f90332e21095106709ff189a6ad32492cc154ea081448aab280437426d9f709d35815844f5b3027b6b690c3db8ef03f7f8ab221a0ebe7ed777c570d92f59c8982cbd73bc1490a463c64b937becf01cf4c03b", @ANYRES32=0x0, @ANYBLOB="01980000000000"], 0x20}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) 1m36.512919589s ago: executing program 4 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1m35.614495551s ago: executing program 0 (id=765): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffd80, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000940)={{}, {0x0, 0xfd}, 0x802, 0x7, 0x40}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x70) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x101400, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0xa41) ioctl$int_in(r3, 0x5452, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0xa0042, 0x182) write$tcp_mem(r5, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8000000, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1000000}) 1m34.48874083s ago: executing program 0 (id=766): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00LN\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3008808c, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioprio_get$pid(0x2, r3) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m33.069073021s ago: executing program 2 (id=767): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00LN\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3008808c, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioprio_get$pid(0x2, r3) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m32.825329722s ago: executing program 4 (id=768): r0 = socket$inet(0x2, 0x6, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19}) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x4, 0xa000}}}, 0x78) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 1m32.485115732s ago: executing program 0 (id=769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ftruncate(0xffffffffffffffff, 0x1000000000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x82840, 0x8) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x18, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x40}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r5, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m31.202845362s ago: executing program 2 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7400000000010104000000000000000002000008240001801400018008000100e000000108000200e00000010c00028005000100000000003c00188008000340000000100800024000000005080003400000001e0800034000000003040002"], 0x74}}, 0x0) 1m30.875255313s ago: executing program 0 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000000000)=""/35, 0x23) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000090) 1m30.87489947s ago: executing program 2 (id=772): syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r3, &(0x7f0000000040), &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x85) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r6, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000450f46ae9eed6ead00000ee132696809a7120000"]) fchmod(r5, 0x184) r7 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0xffffffff) 1m28.038249384s ago: executing program 4 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m25.994890988s ago: executing program 4 (id=774): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r7, &(0x7f00003e8000/0x1000)=nil, 0x4000) 1m25.527390391s ago: executing program 0 (id=775): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f00030100600009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1ff, 0x8000029, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000001c0)=0x7, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0314", 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x1008000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000180), 0x24, 0x0) 1m24.082439874s ago: executing program 2 (id=776): syz_emit_ethernet(0x122, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) r7 = syz_open_procfs(r3, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6bf3}}}, 0x24}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x404, 0x7fe2, 0xf3, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) 1m21.916949769s ago: executing program 4 (id=777): r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f00000001c0)='./file0\x00', 0x80) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="100026bd7000fbdbdf25010000001eadaba563f0bd6e787aff503e02de3f9ecd9f146a2d2fd404dd9ba87f10ec73bd83687a42da60f30aa8206be231ad44b79176828f9b1cf6af73"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x8f) r3 = dup2(r1, 0xffffffffffffffff) ioctl$NBD_SET_SIZE(r3, 0xab02, 0xffffffffffffffdf) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1m21.519604656s ago: executing program 4 (id=778): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000020000000000000000ee0000", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x9, 0x0, &(0x7f0000000000)="259a53f271a76d2688", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x27, 0x3, 0x80000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x52}, @rr={0x7, 0x3, 0x64}]}}}], 0x18}}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r6, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) 0s ago: executing program 34 (id=775): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f00030100600009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1ff, 0x8000029, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000001c0)=0x7, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0314", 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x1008000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000180), 0x24, 0x0) kernel console output (not intermixed with test programs): e [ 55.680153][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.747850][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.842451][ T5818] veth0_vlan: entered promiscuous mode [ 55.885835][ T5818] veth1_vlan: entered promiscuous mode [ 55.903334][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.912687][ T5821] veth0_vlan: entered promiscuous mode [ 55.931326][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.952459][ T5818] veth0_macvtap: entered promiscuous mode [ 55.980676][ T5821] veth1_vlan: entered promiscuous mode [ 56.000235][ T5818] veth1_macvtap: entered promiscuous mode [ 56.023390][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.059914][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.076035][ T5819] veth0_vlan: entered promiscuous mode [ 56.087631][ T5821] veth0_macvtap: entered promiscuous mode [ 56.099202][ T5819] veth1_vlan: entered promiscuous mode [ 56.126807][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.136568][ T5830] veth0_vlan: entered promiscuous mode [ 56.144182][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.153042][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.168658][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.178249][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.196969][ T5821] veth1_macvtap: entered promiscuous mode [ 56.212405][ T5819] veth0_macvtap: entered promiscuous mode [ 56.227443][ T5830] veth1_vlan: entered promiscuous mode [ 56.240399][ T5819] veth1_macvtap: entered promiscuous mode [ 56.253018][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.267415][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.279147][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.302811][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.313416][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.325267][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.337848][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.350203][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.361198][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.371939][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.383174][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.396792][ T5817] veth0_vlan: entered promiscuous mode [ 56.404432][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.413261][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.423426][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.432298][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.454681][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.469929][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.480088][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.490698][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.502445][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.512066][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.521367][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.530153][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.539148][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.570930][ T5817] veth1_vlan: entered promiscuous mode [ 56.594473][ T5831] Bluetooth: hci1: command tx timeout [ 56.608062][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.619934][ T5830] veth0_macvtap: entered promiscuous mode [ 56.626733][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.660296][ T5817] veth0_macvtap: entered promiscuous mode [ 56.668806][ T5830] veth1_macvtap: entered promiscuous mode [ 56.685795][ T5831] Bluetooth: hci3: command tx timeout [ 56.688451][ T5817] veth1_macvtap: entered promiscuous mode [ 56.691203][ T5831] Bluetooth: hci2: command tx timeout [ 56.717374][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.730593][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.742274][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.750431][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.761805][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.764440][ T5831] Bluetooth: hci0: command tx timeout [ 56.772479][ T55] Bluetooth: hci4: command tx timeout [ 56.785811][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.795768][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.806303][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.817211][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.831601][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.842747][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.852853][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.863635][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.873435][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.883984][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.893808][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.904258][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.915610][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.931116][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.946305][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.956250][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.966814][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.976642][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.987097][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.999196][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.008121][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.018677][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.029442][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.039872][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.049941][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.060385][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.070297][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.080759][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.091186][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.102672][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.111451][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.127615][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.137712][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.146476][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.156420][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.168319][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.177589][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.186403][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.195124][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.210762][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.218136][ T29] audit: type=1400 audit(1740719129.158:112): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.6IIicI/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.223340][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.251031][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.259002][ T29] audit: type=1400 audit(1740719129.188:113): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.267854][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.282693][ T29] audit: type=1400 audit(1740719129.188:114): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.6IIicI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.317710][ T29] audit: type=1400 audit(1740719129.188:115): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.347057][ T29] audit: type=1400 audit(1740719129.208:116): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.6IIicI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.376884][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.390037][ T29] audit: type=1400 audit(1740719129.208:117): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.6IIicI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.392363][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.429161][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.430782][ T29] audit: type=1400 audit(1740719129.208:118): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.474931][ T29] audit: type=1400 audit(1740719129.288:119): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.498957][ T29] audit: type=1400 audit(1740719129.288:120): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=6770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.613193][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.622487][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.656458][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.686623][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.737987][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.756565][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.798345][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.822770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.834339][ T5158] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.914061][ C0] hrtimer: interrupt took 49749 ns [ 58.015069][ T5158] usb 1-1: Using ep0 maxpacket: 16 [ 58.028622][ T5158] usb 1-1: config 255 has an invalid interface number: 47 but max is 0 [ 58.043883][ T5158] usb 1-1: config 255 has no interface number 0 [ 58.057773][ T5158] usb 1-1: config 255 interface 47 has no altsetting 0 [ 58.065540][ T5917] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 58.069436][ T5158] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 58.090633][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.100533][ T5158] usb 1-1: Product: syz [ 58.128426][ T5917] Cannot find set identified by id 0 to match [ 58.135249][ T5158] usb 1-1: Manufacturer: syz [ 58.152840][ T5158] usb 1-1: SerialNumber: syz [ 58.333854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.607704][ T5158] legousbtower 1-1:255.47: interrupt endpoints not found [ 58.646962][ T5158] usb 1-1: USB disconnect, device number 2 [ 58.677412][ T55] Bluetooth: hci1: command tx timeout [ 58.753929][ T55] Bluetooth: hci3: command tx timeout [ 58.753985][ T5831] Bluetooth: hci2: command tx timeout [ 58.876847][ T5831] Bluetooth: hci4: command tx timeout [ 58.884001][ T55] Bluetooth: hci0: command tx timeout [ 60.628661][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 60.628686][ T29] audit: type=1400 audit(1740719132.568:170): avc: denied { create } for pid=5950 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 60.677674][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.753720][ T5831] Bluetooth: hci1: command tx timeout [ 60.840495][ T5831] Bluetooth: hci3: command tx timeout [ 60.846102][ T55] Bluetooth: hci2: command tx timeout [ 60.847945][ T29] audit: type=1400 audit(1740719132.638:171): avc: denied { bind } for pid=5959 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.913793][ T5831] Bluetooth: hci4: command tx timeout [ 60.919248][ T55] Bluetooth: hci0: command tx timeout [ 60.985518][ T29] audit: type=1400 audit(1740719132.638:172): avc: denied { name_bind } for pid=5959 comm="syz.4.17" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 61.025485][ T29] audit: type=1400 audit(1740719132.638:173): avc: denied { node_bind } for pid=5959 comm="syz.4.17" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 61.047319][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.130533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 61.634090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.035787][ T29] audit: type=1400 audit(1740719133.948:174): avc: denied { create } for pid=5975 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.119603][ T29] audit: type=1400 audit(1740719133.948:175): avc: denied { write } for pid=5975 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.223814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.375122][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 62.390303][ T5994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=5994 comm=syz.0.28 [ 62.625650][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.793704][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 62.921934][ T47] usb 3-1: config 255 has an invalid interface number: 47 but max is 0 [ 63.085999][ T47] usb 3-1: config 255 has no interface number 0 [ 63.190974][ T47] usb 3-1: config 255 interface 47 has no altsetting 0 [ 63.211993][ T47] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 63.228336][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.240028][ T47] usb 3-1: Product: syz [ 63.266205][ T47] usb 3-1: Manufacturer: syz [ 63.284531][ T47] usb 3-1: SerialNumber: syz [ 63.324602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.333008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.398120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.417657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.426062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.437763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.534114][ T47] legousbtower 3-1:255.47: interrupt endpoints not found [ 63.568050][ T47] usb 3-1: USB disconnect, device number 2 [ 63.943759][ T5158] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.233946][ T5158] usb 2-1: Using ep0 maxpacket: 8 [ 64.242001][ T5158] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.262372][ T5158] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.279520][ T5158] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.300358][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.324974][ T5158] usb 2-1: Product: syz [ 64.329150][ T5158] usb 2-1: Manufacturer: syz [ 64.341380][ T5158] usb 2-1: SerialNumber: syz [ 64.667115][ T29] audit: type=1400 audit(1740719136.578:176): avc: denied { create } for pid=6028 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.581848][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 65.682434][ T29] audit: type=1400 audit(1740719137.618:177): avc: denied { create } for pid=6034 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.938146][ T29] audit: type=1400 audit(1740719137.778:178): avc: denied { write } for pid=6034 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.072581][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 66.155657][ T29] audit: type=1400 audit(1740719138.088:179): avc: denied { ioctl } for pid=6017 comm="syz.1.35" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.326971][ T29] audit: type=1400 audit(1740719138.088:180): avc: denied { unlink } for pid=6017 comm="syz.1.35" name="#1" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.515843][ T6036] infiniband syz1: set active [ 66.522332][ T6036] infiniband syz1: added syz_tun [ 66.527532][ T5896] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 66.544126][ T29] audit: type=1400 audit(1740719138.098:181): avc: denied { mount } for pid=6017 comm="syz.1.35" name="/" dev="overlay" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.582670][ T6036] RDS/IB: syz1: added [ 66.613260][ T6036] smc: adding ib device syz1 with port count 1 [ 66.642461][ T6036] smc: ib device syz1 port 1 has pnetid [ 66.780538][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 66.795347][ T5896] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 66.804672][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.812738][ T5896] usb 3-1: Product: syz [ 66.817247][ T5896] usb 3-1: Manufacturer: syz [ 66.821857][ T5896] usb 3-1: SerialNumber: syz [ 66.835866][ T5896] usb 3-1: config 0 descriptor?? [ 66.880972][ T5896] gspca_main: se401-2.14.0 probing 047d:5003 [ 67.416171][ T5158] usb 2-1: cannot find UAC_HEADER [ 67.467603][ T5158] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 67.555181][ T5158] usb 2-1: USB disconnect, device number 2 [ 67.562507][ T5896] gspca_se401: ExtraFeatures: 104 [ 67.574321][ T5896] gspca_se401: Too many frame sizes [ 67.773795][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.775260][ T29] audit: type=1400 audit(1740719139.708:182): avc: denied { ioctl } for pid=6041 comm="syz.2.44" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.828831][ T5158] usb 3-1: USB disconnect, device number 3 [ 68.263708][ T29] audit: type=1400 audit(1740719140.198:183): avc: denied { create } for pid=6057 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.366423][ T29] audit: type=1400 audit(1740719140.198:184): avc: denied { bind } for pid=6057 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.448900][ T29] audit: type=1400 audit(1740719140.258:185): avc: denied { setopt } for pid=6057 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.497052][ T6078] Zero length message leads to an empty skb [ 68.968316][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.55'. [ 68.977174][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 69.529088][ T29] audit: type=1400 audit(1740719140.888:186): avc: denied { read } for pid=6087 comm="syz.0.55" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.424188][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.433574][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.792523][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 71.792537][ T29] audit: type=1400 audit(1740719143.728:190): avc: denied { accept } for pid=6110 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.932343][ T29] audit: type=1400 audit(1740719143.738:191): avc: denied { write } for pid=6110 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.953295][ T29] audit: type=1400 audit(1740719143.738:192): avc: denied { read } for pid=6110 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.957322][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 73.033623][ T973] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.189879][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 73.198662][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 73.763610][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 73.775417][ T973] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 73.788482][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.802869][ T973] usb 2-1: Product: syz [ 73.836243][ T973] usb 2-1: Manufacturer: syz [ 73.851538][ T973] usb 2-1: SerialNumber: syz [ 73.877066][ T973] usb 2-1: config 0 descriptor?? [ 73.920410][ T973] gspca_main: se401-2.14.0 probing 047d:5003 [ 74.318695][ T29] audit: type=1400 audit(1740719146.258:193): avc: denied { getopt } for pid=6160 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.326050][ T973] gspca_se401: ExtraFeatures: 104 [ 74.374372][ T973] gspca_se401: Too many frame sizes [ 74.382954][ T29] audit: type=1400 audit(1740719146.258:194): avc: denied { name_connect } for pid=6160 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 74.554722][ T973] usb 2-1: USB disconnect, device number 3 [ 75.570385][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 75.579154][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 76.536723][ T25] cfg80211: failed to load regulatory.db [ 77.295017][ T29] audit: type=1400 audit(1740719149.228:195): avc: denied { write } for pid=6193 comm="syz.2.85" name="ip_tables_names" dev="proc" ino=4026533462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 77.377502][ T29] audit: type=1400 audit(1740719149.318:196): avc: denied { read write } for pid=6204 comm="syz.3.87" name="vbi5" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.433146][ T29] audit: type=1400 audit(1740719149.348:197): avc: denied { open } for pid=6204 comm="syz.3.87" path="/dev/vbi5" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.798834][ T29] audit: type=1400 audit(1740719149.738:198): avc: denied { create } for pid=6213 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.714463][ T29] audit: type=1400 audit(1740719150.648:199): avc: denied { ioctl } for pid=6213 comm="syz.1.92" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.853577][ T6220] use of bytesused == 0 is deprecated and will be removed in the future, [ 78.882903][ T6220] use the actual size instead. [ 80.223188][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 80.231899][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 80.575050][ T29] audit: type=1400 audit(1740719152.518:200): avc: denied { ioctl } for pid=6213 comm="syz.1.92" path="socket:[8711]" dev="sockfs" ino=8711 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.953118][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.4.106'. [ 82.975334][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 83.410238][ T5869] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 84.084407][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.094808][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.103717][ T5869] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 84.125490][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 27763, setting to 64 [ 84.149167][ T5869] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.171363][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.335294][ T6273] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.411405][ T5869] hub 5-1:1.0: bad descriptor, ignoring hub [ 84.426206][ T5869] hub 5-1:1.0: probe with driver hub failed with error -5 [ 84.454381][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 84.459603][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 84.486629][ T5869] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 85.696772][ T29] audit: type=1400 audit(1740719157.138:201): avc: denied { shutdown } for pid=6272 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 85.777370][ T29] audit: type=1400 audit(1740719157.138:202): avc: denied { read } for pid=6272 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 85.944593][ T47] usb 5-1: USB disconnect, device number 2 [ 86.314918][ T29] audit: type=1400 audit(1740719158.258:203): avc: denied { create } for pid=6305 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.875688][ T6311] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 87.647154][ T29] audit: type=1400 audit(1740719158.808:204): avc: denied { write } for pid=6305 comm="syz.2.118" path="socket:[9717]" dev="sockfs" ino=9717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 87.739046][ T29] audit: type=1400 audit(1740719158.808:205): avc: denied { mounton } for pid=6305 comm="syz.2.118" path="/24/file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.755889][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 87.756038][ T6316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'. [ 89.187403][ T6314] tty tty2: ldisc open failed (-12), clearing slot 1 [ 90.842068][ T6356] VFS: could not find a valid V7 on nullb0. [ 93.083839][ T29] audit: type=1400 audit(1740719165.018:206): avc: denied { create } for pid=6382 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.883633][ T29] audit: type=1400 audit(1740719165.628:207): avc: denied { write } for pid=6382 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 94.449711][ T25] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 94.476092][ T6401] befs: (nullb0): No write support. Marking filesystem read-only [ 94.486024][ T6401] befs: (nullb0): invalid magic header [ 94.511667][ T6401] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 94.547494][ T29] audit: type=1400 audit(1740719166.398:208): avc: denied { watch watch_reads } for pid=6394 comm="syz.0.141" path="/34" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.915361][ T6401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.954205][ T29] audit: type=1400 audit(1740719166.538:209): avc: denied { ioctl } for pid=6394 comm="syz.0.141" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9888 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.274828][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.285066][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.294589][ T25] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 95.928986][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 27763, setting to 64 [ 95.941398][ T25] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 95.952363][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.071369][ T6391] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 96.086580][ T25] hub 5-1:1.0: bad descriptor, ignoring hub [ 96.233596][ T25] hub 5-1:1.0: probe with driver hub failed with error -5 [ 96.291150][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 96.351249][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 96.593609][ T25] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 96.636272][ T6422] CUSE: unknown device info "" [ 96.641156][ T6422] CUSE: zero length info key specified [ 98.443839][ T8] usb 5-1: USB disconnect, device number 3 [ 98.698292][ T29] audit: type=1400 audit(1740719170.618:210): avc: denied { read write } for pid=6432 comm="syz.1.150" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 98.722428][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.088397][ T29] audit: type=1400 audit(1740719170.618:211): avc: denied { open } for pid=6432 comm="syz.1.150" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 101.588171][ T6460] overlayfs: missing 'workdir' [ 102.483564][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.659258][ T6486] bridge_slave_1: left allmulticast mode [ 102.665163][ T6486] bridge_slave_1: left promiscuous mode [ 102.672583][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.133649][ T29] audit: type=1400 audit(1740719174.588:212): avc: denied { create } for pid=6480 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.184619][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 103.195998][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.215399][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.242083][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.285307][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.328843][ T8] usb 2-1: Product: syz [ 103.339100][ T8] usb 2-1: Manufacturer: syz [ 103.363796][ T8] usb 2-1: SerialNumber: syz [ 104.250510][ T29] audit: type=1400 audit(1740719175.568:213): avc: denied { read } for pid=6492 comm="syz.3.167" dev="sockfs" ino=9187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.354875][ T29] audit: type=1400 audit(1740719175.578:214): avc: denied { write } for pid=6492 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.870457][ T8] usb 2-1: cannot find UAC_HEADER [ 105.881528][ T8] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.020633][ T8] usb 2-1: USB disconnect, device number 4 [ 106.643721][ T29] audit: type=1400 audit(1740719178.058:215): avc: denied { create } for pid=6512 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.720880][ T6520] fuse: Bad value for 'fd' [ 106.763757][ T29] audit: type=1400 audit(1740719178.608:216): avc: denied { execute } for pid=6514 comm="syz.0.173" name="file0" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.828397][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.768146][ T29] audit: type=1400 audit(1740719180.708:217): avc: denied { create } for pid=6543 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.133378][ T29] audit: type=1400 audit(1740719180.728:218): avc: denied { bind } for pid=6543 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.277295][ T29] audit: type=1400 audit(1740719180.728:219): avc: denied { connect } for pid=6543 comm="syz.1.181" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.373338][ T29] audit: type=1400 audit(1740719180.798:220): avc: denied { write } for pid=6543 comm="syz.1.181" laddr=::1 lport=38 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.513695][ T5899] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.575019][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 110.584748][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.648531][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.713049][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.753573][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.768137][ T5899] usb 5-1: Product: syz [ 110.782545][ T5899] usb 5-1: Manufacturer: syz [ 110.793638][ T5899] usb 5-1: SerialNumber: syz [ 110.868719][ T29] audit: type=1400 audit(1740719182.808:221): avc: denied { create } for pid=6564 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.706265][ T6582] sp0: Synchronizing with TNC [ 111.794881][ T6583] random: crng reseeded on system resumption [ 111.809792][ T29] audit: type=1400 audit(1740719183.738:222): avc: denied { write } for pid=6564 comm="syz.0.186" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 111.877026][ T29] audit: type=1400 audit(1740719183.738:223): avc: denied { open } for pid=6564 comm="syz.0.186" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.056225][ T29] audit: type=1400 audit(1740719183.998:224): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.281436][ T29] audit: type=1400 audit(1740719183.998:225): avc: denied { read } for pid=5489 comm="dhcpcd" name="n100" dev="tmpfs" ino=2546 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.303138][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.641798][ T29] audit: type=1400 audit(1740719183.998:226): avc: denied { open } for pid=5489 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2546 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.838668][ T29] audit: type=1400 audit(1740719183.998:227): avc: denied { getattr } for pid=5489 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2546 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.904896][ T6595] fuse: Bad value for 'fd' [ 113.210327][ T29] audit: type=1400 audit(1740719185.148:228): avc: denied { bind } for pid=6596 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.669953][ T6593] process 'syz.3.194' launched './file0' with NULL argv: empty string added [ 113.690004][ T5899] usb 5-1: cannot find UAC_HEADER [ 113.769952][ T5899] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 113.784635][ T5899] usb 5-1: USB disconnect, device number 4 [ 113.792281][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 113.869750][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 113.880530][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 114.010842][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.107880][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 114.413616][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 114.413649][ T29] audit: type=1400 audit(1740719186.288:232): avc: denied { write } for pid=6614 comm="syz.2.202" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.199842][ T29] audit: type=1400 audit(1740719187.138:233): avc: denied { execute } for pid=6623 comm="syz.2.205" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 115.255736][ T29] audit: type=1400 audit(1740719187.188:234): avc: denied { write } for pid=6623 comm="syz.2.205" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.278248][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.374219][ T29] audit: type=1400 audit(1740719187.188:235): avc: denied { ioctl } for pid=6623 comm="syz.2.205" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.398595][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.639557][ T29] audit: type=1400 audit(1740719187.418:236): avc: denied { connect } for pid=6617 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.229174][ T29] audit: type=1400 audit(1740719187.528:237): avc: denied { read } for pid=6617 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.248743][ T29] audit: type=1400 audit(1740719187.568:238): avc: denied { read } for pid=6617 comm="syz.3.203" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.583580][ T29] audit: type=1400 audit(1740719187.568:239): avc: denied { open } for pid=6617 comm="syz.3.203" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.607178][ T29] audit: type=1400 audit(1740719187.658:240): avc: denied { ioctl } for pid=6617 comm="syz.3.203" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.645655][ T29] audit: type=1400 audit(1740719188.208:241): avc: denied { getopt } for pid=6617 comm="syz.3.203" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.465452][ T6631] fuseblk: Bad value for 'fd' [ 118.679954][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 118.710904][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.212'. [ 118.870897][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 119.443772][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.611979][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 119.628209][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.645429][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.787772][ T5899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.804201][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.812984][ T5899] usb 4-1: Product: syz [ 119.817738][ T5899] usb 4-1: Manufacturer: syz [ 119.822353][ T5899] usb 4-1: SerialNumber: syz [ 120.083953][ T6690] sp0: Synchronizing with TNC [ 120.320414][ T6692] random: crng reseeded on system resumption [ 120.687036][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 120.687052][ T29] audit: type=1400 audit(1740719192.628:244): avc: denied { ioctl } for pid=6677 comm="syz.0.218" path="socket:[11385]" dev="sockfs" ino=11385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.719885][ T6694] bdev: Unknown parameter 'gppquotaYOz3f&{I͢F2v6' [ 122.051949][ T6708] fuseblk: Bad value for 'fd' [ 122.328726][ T6717] netlink: 124 bytes leftover after parsing attributes in process `syz.4.227'. [ 123.019959][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 123.318517][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 123.342892][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'. [ 124.041509][ T5899] usb 4-1: cannot find UAC_HEADER [ 124.077343][ T5899] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 124.096047][ T5899] usb 4-1: USB disconnect, device number 2 [ 124.203990][ T6742] overlayfs: missing 'lowerdir' [ 124.217268][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 124.359144][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 124.365381][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.176938][ T6756] bridge_slave_1: left allmulticast mode [ 125.182618][ T6756] bridge_slave_1: left promiscuous mode [ 125.189157][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.465549][ T6763] netlink: 124 bytes leftover after parsing attributes in process `syz.2.239'. [ 126.600889][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 126.711387][ T6774] VFS: could not find a valid V7 on nullb0. [ 127.215478][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.433555][ T47] usb 5-1: device descriptor read/64, error -71 [ 127.778192][ T47] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.992349][ T6790] random: crng reseeded on system resumption [ 128.342581][ T6787] sp0: Synchronizing with TNC [ 128.428684][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 128.483575][ T47] usb 5-1: device descriptor read/64, error -71 [ 128.594025][ T47] usb usb5-port1: attempt power cycle [ 128.743678][ T5158] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.757041][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.811118][ T29] audit: type=1400 audit(1740719200.748:245): avc: denied { create } for pid=6799 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.963626][ T5158] usb 2-1: Using ep0 maxpacket: 8 [ 128.976721][ T29] audit: type=1400 audit(1740719200.868:246): avc: denied { setopt } for pid=6799 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.000864][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 129.011414][ T29] audit: type=1400 audit(1740719200.878:247): avc: denied { ioctl } for pid=6799 comm="syz.0.251" path="socket:[10792]" dev="sockfs" ino=10792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.050920][ T5158] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 129.092097][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.100224][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.113775][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.125260][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.135844][ T47] usb 5-1: device descriptor read/8, error -71 [ 129.186078][ T5158] usb 2-1: Product: syz [ 129.186171][ T5864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.199643][ T5158] usb 2-1: Manufacturer: syz [ 129.205264][ T5158] usb 2-1: SerialNumber: syz [ 129.210783][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.219829][ T5864] usb 4-1: Product: syz [ 129.244542][ T5158] usb 2-1: config 0 descriptor?? [ 129.250731][ T5864] usb 4-1: Manufacturer: syz [ 129.258387][ T5158] gspca_main: se401-2.14.0 probing 047d:5003 [ 129.265583][ T5864] usb 4-1: SerialNumber: syz [ 129.270494][ T29] audit: type=1400 audit(1740719200.888:248): avc: denied { write } for pid=6799 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.308860][ T29] audit: type=1400 audit(1740719200.938:249): avc: denied { getopt } for pid=6799 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 129.329827][ T29] audit: type=1400 audit(1740719201.168:250): avc: denied { setopt } for pid=6796 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.423605][ T47] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.644433][ T47] usb 5-1: device descriptor read/8, error -71 [ 129.668891][ T5158] gspca_se401: ExtraFeatures: 104 [ 129.674616][ T5158] gspca_se401: Too many frame sizes [ 129.705326][ T6806] netlink: 124 bytes leftover after parsing attributes in process `syz.0.252'. [ 129.755057][ T47] usb usb5-port1: unable to enumerate USB device [ 130.015865][ T5864] usb 4-1: cannot find UAC_HEADER [ 130.175423][ T5864] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 130.832173][ T5864] usb 4-1: USB disconnect, device number 3 [ 130.884063][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.103515][ T29] audit: type=1400 audit(1740719203.028:251): avc: denied { ioctl } for pid=6815 comm="syz.0.254" path="socket:[11526]" dev="sockfs" ino=11526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.445860][ T5899] usb 2-1: USB disconnect, device number 5 [ 133.112281][ T6836] befs: (nullb0): No write support. Marking filesystem read-only [ 133.120870][ T6836] befs: (nullb0): invalid magic header [ 133.136180][ T6836] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 133.146816][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.153203][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.681577][ T6836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.429551][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 136.619429][ T29] audit: type=1400 audit(1740719208.558:252): avc: denied { create } for pid=6875 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.842901][ T5865] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.918177][ T29] audit: type=1400 audit(1740719208.858:253): avc: denied { ioctl } for pid=6875 comm="syz.4.271" path="socket:[11613]" dev="sockfs" ino=11613 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.072673][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 137.090043][ T5865] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 137.099341][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.105633][ T29] audit: type=1400 audit(1740719209.038:254): avc: denied { bind } for pid=6885 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.128266][ T5865] usb 3-1: Product: syz [ 137.154206][ T5865] usb 3-1: Manufacturer: syz [ 137.199190][ T5865] usb 3-1: SerialNumber: syz [ 137.210639][ T5865] usb 3-1: config 0 descriptor?? [ 137.227793][ T5865] gspca_main: se401-2.14.0 probing 047d:5003 [ 137.863335][ T5865] gspca_se401: ExtraFeatures: 104 [ 137.868759][ T5865] gspca_se401: Too many frame sizes [ 138.279304][ T5899] usb 3-1: USB disconnect, device number 4 [ 140.339391][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 140.603675][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.835808][ T5899] usb 1-1: device descriptor read/64, error -71 [ 141.094551][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.343560][ T5899] usb 1-1: device descriptor read/64, error -71 [ 141.689595][ T5899] usb usb1-port1: attempt power cycle [ 141.781764][ T6945] netlink: 124 bytes leftover after parsing attributes in process `syz.3.293'. [ 142.553777][ T5899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.709902][ T6954] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.720981][ T6954] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 142.779809][ T29] audit: type=1400 audit(1740719214.628:255): avc: denied { mount } for pid=6948 comm="syz.2.296" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.801585][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.101230][ T5899] usb 1-1: device descriptor read/8, error -71 [ 144.605810][ T5899] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.673075][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 144.685069][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.741937][ T5899] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 144.800499][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.840481][ T5899] usb 1-1: Product: syz [ 144.879659][ T5899] usb 1-1: Manufacturer: syz [ 144.914363][ T5899] usb 1-1: SerialNumber: syz [ 144.952394][ T5899] usb 1-1: config 0 descriptor?? [ 145.037452][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 145.227411][ T5158] usb 1-1: USB disconnect, device number 6 [ 145.276109][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 145.469911][ T6990] netlink: 124 bytes leftover after parsing attributes in process `syz.3.306'. [ 146.453602][ T5865] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.513543][ T29] audit: type=1326 audit(1740719218.418:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 146.554046][ T29] audit: type=1326 audit(1740719218.418:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 146.594454][ T5865] usb 3-1: device descriptor read/64, error -71 [ 146.603912][ T29] audit: type=1326 audit(1740719218.428:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 146.628259][ T29] audit: type=1400 audit(1740719218.428:259): avc: denied { create } for pid=6993 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.650474][ T29] audit: type=1326 audit(1740719218.428:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 146.683577][ T29] audit: type=1326 audit(1740719218.428:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 146.709537][ T29] audit: type=1326 audit(1740719218.428:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 146.788573][ T29] audit: type=1400 audit(1740719218.428:263): avc: denied { bind } for pid=6993 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.812311][ T29] audit: type=1326 audit(1740719218.428:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 146.849718][ T5865] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.983578][ T5865] usb 3-1: device descriptor read/64, error -71 [ 147.124979][ T5865] usb usb3-port1: attempt power cycle [ 147.793718][ T5865] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.969331][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 147.969345][ T29] audit: type=1326 audit(1740719219.908:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe91f384127 code=0x7ffc0000 [ 147.999565][ T5865] usb 3-1: device descriptor read/8, error -71 [ 148.108058][ T29] audit: type=1326 audit(1740719219.908:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe91f329359 code=0x7ffc0000 [ 148.138989][ T29] audit: type=1326 audit(1740719219.908:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 148.171516][ T29] audit: type=1326 audit(1740719220.008:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe91f384127 code=0x7ffc0000 [ 148.197317][ T29] audit: type=1326 audit(1740719220.008:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe91f329359 code=0x7ffc0000 [ 148.273803][ T5865] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.289446][ T29] audit: type=1326 audit(1740719220.008:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 148.335264][ T5865] usb 3-1: device descriptor read/8, error -71 [ 148.386478][ T29] audit: type=1326 audit(1740719220.008:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe91f384127 code=0x7ffc0000 [ 148.410275][ T29] audit: type=1326 audit(1740719220.008:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe91f329359 code=0x7ffc0000 [ 148.446247][ T5865] usb usb3-port1: unable to enumerate USB device [ 148.500504][ T29] audit: type=1326 audit(1740719220.008:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe91f38d169 code=0x7ffc0000 [ 148.551144][ T29] audit: type=1326 audit(1740719220.018:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe91f384127 code=0x7ffc0000 [ 149.457732][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 149.896831][ T7030] netlink: 124 bytes leftover after parsing attributes in process `syz.2.319'. [ 151.321448][ T7039] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 151.352531][ T7039] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 151.573610][ T7045] sp0: Synchronizing with TNC [ 151.693144][ T7047] random: crng reseeded on system resumption [ 153.161032][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 154.581187][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.2.332'. [ 158.011910][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 158.659645][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 158.659660][ T29] audit: type=1400 audit(1740719230.598:493): avc: denied { setopt } for pid=7110 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 158.688799][ T7112] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.699858][ T7112] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 159.936023][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 160.029800][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'. [ 162.835812][ T7143] TCP: TCP_TX_DELAY enabled [ 162.842519][ T29] audit: type=1400 audit(1740719234.768:494): avc: denied { name_bind } for pid=7142 comm="syz.4.352" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 162.925608][ T29] audit: type=1400 audit(1740719234.828:495): avc: denied { read } for pid=7142 comm="syz.4.352" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.064757][ T29] audit: type=1400 audit(1740719234.828:496): avc: denied { open } for pid=7142 comm="syz.4.352" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.087695][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.073738][ T5899] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.118161][ T7177] netlink: 124 bytes leftover after parsing attributes in process `syz.1.357'. [ 165.671241][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 166.322984][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.389757][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.465996][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.488784][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.511483][ T5899] usb 5-1: Product: syz [ 166.519289][ T5899] usb 5-1: Manufacturer: syz [ 166.534849][ T5899] usb 5-1: SerialNumber: syz [ 166.667557][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 168.485713][ T7208] VFS: could not find a valid V7 on nullb0. [ 168.998753][ T5899] usb 5-1: cannot find UAC_HEADER [ 169.045758][ T5899] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 169.221924][ T5899] usb 5-1: USB disconnect, device number 9 [ 169.244950][ T7210] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.256048][ T7210] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 170.470521][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.093604][ T973] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 173.393560][ T973] usb 5-1: Using ep0 maxpacket: 32 [ 173.556791][ T973] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.570340][ T973] usb 5-1: config 0 has no interface number 0 [ 173.581343][ T973] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 173.611383][ T973] usb 5-1: config 0 interface 1 has no altsetting 0 [ 173.633163][ T29] audit: type=1400 audit(1740719245.568:497): avc: denied { setopt } for pid=7243 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.633982][ T973] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 173.694797][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.702934][ T973] usb 5-1: Product: syz [ 173.711285][ T973] usb 5-1: Manufacturer: syz [ 173.730003][ T973] usb 5-1: SerialNumber: syz [ 173.737277][ T973] usb 5-1: config 0 descriptor?? [ 173.799474][ T5864] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.923670][ T5865] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 173.969411][ T973] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 173.973837][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 173.989116][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.995500][ T973] cx231xx 5-1:0.1: Failed to read PCB config [ 174.002819][ T5864] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.016658][ T5864] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.031294][ T973] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 174.039237][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.039261][ T5864] usb 3-1: Product: syz [ 174.039274][ T5864] usb 3-1: Manufacturer: syz [ 174.039287][ T5864] usb 3-1: SerialNumber: syz [ 174.072000][ T973] usb 5-1: USB disconnect, device number 10 [ 174.093591][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 174.101159][ T5865] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.113107][ T5865] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.130902][ T5865] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.142690][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.152407][ T5865] usb 4-1: Product: syz [ 174.159654][ T5865] usb 4-1: Manufacturer: syz [ 174.189601][ T5865] usb 4-1: SerialNumber: syz [ 175.893809][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 175.927420][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 175.941859][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 175.965736][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 175.977082][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 176.668905][ T5864] usb 3-1: cannot find UAC_HEADER [ 176.947760][ T5864] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 176.963571][ T5864] usb 3-1: USB disconnect, device number 9 [ 177.022798][ T5865] usb 4-1: 0:2 : does not exist [ 177.041279][ T5865] usb 4-1: USB disconnect, device number 4 [ 177.133498][ T29] audit: type=1400 audit(1740719249.068:498): avc: denied { relabelfrom } for pid=7282 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 177.189081][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.217135][ T7291] overlay: filesystem on ./bus not supported as upperdir [ 177.240716][ T7293] fuse: Invalid rootmode [ 177.334754][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.353949][ T29] audit: type=1400 audit(1740719249.068:499): avc: denied { relabelto } for pid=7282 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 177.412476][ T29] audit: type=1400 audit(1740719249.158:500): avc: denied { mounton } for pid=7287 comm="syz.1.391" path="/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 177.434251][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.543924][ T7314] netlink: 124 bytes leftover after parsing attributes in process `syz.2.394'. [ 179.610445][ T7326] befs: (nullb0): No write support. Marking filesystem read-only [ 179.619476][ T7326] befs: (nullb0): invalid magic header [ 179.645531][ T7326] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 180.064592][ T7326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.711019][ T7338] random: crng reseeded on system resumption [ 181.050840][ T7334] sp0: Synchronizing with TNC [ 181.120991][ T7344] overlayfs: missing 'workdir' [ 181.296912][ T7349] overlay: filesystem on ./bus not supported as upperdir [ 181.381980][ T7351] ======================================================= [ 181.381980][ T7351] WARNING: The mand mount option has been deprecated and [ 181.381980][ T7351] and is ignored by this kernel. Remove the mand [ 181.381980][ T7351] option from the mount to silence this warning. [ 181.381980][ T7351] ======================================================= [ 181.416963][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.427540][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 181.633522][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 181.670372][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.838488][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.861151][ T5864] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.872829][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.890972][ T5864] usb 5-1: Product: syz [ 181.910447][ T5864] usb 5-1: Manufacturer: syz [ 182.863573][ T5864] usb 5-1: SerialNumber: syz [ 183.451339][ T7367] befs: (nullb0): No write support. Marking filesystem read-only [ 183.459394][ T7367] befs: (nullb0): invalid magic header [ 183.468879][ T7367] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 183.653283][ T7367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.058332][ T7384] netlink: 124 bytes leftover after parsing attributes in process `syz.3.410'. [ 185.502068][ T5864] usb 5-1: cannot find UAC_HEADER [ 186.141373][ T5864] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 186.152219][ T5864] usb 5-1: USB disconnect, device number 11 [ 186.914344][ T7382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.413'. [ 186.936426][ T29] audit: type=1400 audit(1740719258.858:501): avc: denied { write } for pid=7379 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.983203][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.013041][ T29] audit: type=1400 audit(1740719258.858:502): avc: denied { nlmsg_write } for pid=7379 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.286077][ T7407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.298037][ T7407] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 187.329616][ T7408] overlayfs: failed to resolve './file0': -2 [ 188.877338][ T7433] netlink: 124 bytes leftover after parsing attributes in process `syz.4.424'. [ 189.493589][ T973] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.943660][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 191.249615][ T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.369479][ T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.395464][ T973] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.446866][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.455991][ T973] usb 2-1: Product: syz [ 191.460515][ T973] usb 2-1: Manufacturer: syz [ 191.466396][ T973] usb 2-1: SerialNumber: syz [ 191.844713][ T973] usb 2-1: cannot find UAC_HEADER [ 192.004933][ T29] audit: type=1400 audit(1740719263.948:503): avc: denied { create } for pid=7453 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.043653][ T973] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 192.054060][ T973] usb 2-1: USB disconnect, device number 6 [ 192.390760][ T7447] fuseblk: Bad value for 'fd' [ 193.729431][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.031423][ T7472] overlay: filesystem on ./bus not supported as upperdir [ 194.278169][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.290642][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.613896][ T29] audit: type=1400 audit(1740719266.558:504): avc: denied { connect } for pid=7453 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.694309][ T5158] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.748064][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.853616][ T5158] usb 1-1: Using ep0 maxpacket: 8 [ 194.907271][ T5158] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.126785][ T5158] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.413663][ T5158] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.458228][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.496387][ T5158] usb 1-1: Product: syz [ 195.514938][ T5158] usb 1-1: Manufacturer: syz [ 195.519550][ T5158] usb 1-1: SerialNumber: syz [ 196.853545][ T5867] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 197.183516][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 197.348053][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.361507][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.401248][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.421711][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.564272][ T5867] usb 2-1: Product: syz [ 197.576292][ T5867] usb 2-1: Manufacturer: syz [ 197.588129][ T5867] usb 2-1: SerialNumber: syz [ 198.384632][ T5158] usb 1-1: cannot find UAC_HEADER [ 198.449625][ T7516] befs: (nullb0): No write support. Marking filesystem read-only [ 198.458540][ T7516] befs: (nullb0): invalid magic header [ 198.483486][ T7516] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 198.552274][ T7516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.651357][ T5158] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 198.885653][ T5158] usb 1-1: USB disconnect, device number 7 [ 199.243460][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.065101][ T29] audit: type=1400 audit(1740719271.958:505): avc: denied { create } for pid=7523 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 200.088822][ T29] audit: type=1400 audit(1740719271.968:506): avc: denied { read } for pid=7523 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 200.111159][ T29] audit: type=1400 audit(1740719271.968:507): avc: denied { write } for pid=7523 comm="syz.0.450" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 200.140218][ T29] audit: type=1400 audit(1740719271.968:508): avc: denied { open } for pid=7523 comm="syz.0.450" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 200.838646][ T29] audit: type=1400 audit(1740719272.768:509): avc: denied { mount } for pid=7532 comm="syz.0.454" name="/" dev="ramfs" ino=13678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 200.873201][ T5867] usb 2-1: cannot find UAC_HEADER [ 201.156132][ T5867] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 201.234854][ T5867] usb 2-1: USB disconnect, device number 7 [ 201.253624][ T5158] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.477315][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.443997][ T5158] usb 1-1: Using ep0 maxpacket: 16 [ 202.889123][ T5158] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.195923][ T5158] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.226134][ T5158] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.245711][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.249392][ T7555] fuse: Unknown parameter 'grou00000000000000000000' [ 203.352438][ T5158] usb 1-1: Product: syz [ 203.357441][ T5158] usb 1-1: Manufacturer: syz [ 203.362142][ T5158] usb 1-1: SerialNumber: syz [ 203.525413][ T7561] sp0: Synchronizing with TNC [ 203.653496][ T7562] random: crng reseeded on system resumption [ 204.008042][ T5158] usb 1-1: 0:2 : does not exist [ 204.026544][ T5158] usb 1-1: USB disconnect, device number 8 [ 204.269627][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.774807][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 206.473528][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 206.483946][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.608407][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.619383][ T5899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.629560][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.663389][ T5899] usb 4-1: Product: syz [ 206.667642][ T5899] usb 4-1: Manufacturer: syz [ 206.681102][ T5899] usb 4-1: SerialNumber: syz [ 206.984353][ T7605] VFS: could not find a valid V7 on nullb0. [ 207.830118][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 208.895620][ T5899] usb 4-1: cannot find UAC_HEADER [ 208.984644][ T5899] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 209.052497][ T5899] usb 4-1: USB disconnect, device number 5 [ 209.176867][ T7620] netlink: 124 bytes leftover after parsing attributes in process `syz.1.473'. [ 210.325200][ T7626] evm: overlay not supported [ 211.374138][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 211.963822][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 211.973166][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.069373][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.222853][ T5899] usb 4-1: string descriptor 0 read error: -71 [ 212.239380][ T5899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.290754][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.320468][ T5899] usb 4-1: can't set config #1, error -71 [ 212.330245][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.331448][ T5899] usb 4-1: USB disconnect, device number 6 [ 213.773604][ T5158] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.011838][ T5158] usb 4-1: Using ep0 maxpacket: 8 [ 215.081776][ T5158] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.141242][ T5158] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.410137][ T5158] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.419575][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.433614][ T5158] usb 4-1: Product: syz [ 215.437857][ T5158] usb 4-1: Manufacturer: syz [ 215.442464][ T5158] usb 4-1: SerialNumber: syz [ 216.012267][ T5158] usb 4-1: cannot find UAC_HEADER [ 216.036402][ T5158] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 216.058387][ T5158] usb 4-1: USB disconnect, device number 7 [ 216.160536][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 216.309580][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.463633][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.557497][ T7697] befs: (nullb0): No write support. Marking filesystem read-only [ 216.566821][ T7697] befs: (nullb0): invalid magic header [ 216.581856][ T7697] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 217.258531][ T7697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.398772][ T7699] sp0: Synchronizing with TNC [ 217.614435][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 217.620008][ T7704] fuse: Unknown parameter 'group_i00000000000000000000' [ 217.632894][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.653222][ T7699] random: crng reseeded on system resumption [ 217.661486][ T5901] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.698073][ T5901] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 217.721432][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.749944][ T5901] usb 2-1: Product: syz [ 217.773841][ T5901] usb 2-1: Manufacturer: syz [ 217.778467][ T5901] usb 2-1: SerialNumber: syz [ 217.834461][ T5901] usb 2-1: config 0 descriptor?? [ 219.417284][ T5865] usb 2-1: USB disconnect, device number 8 [ 220.243508][ T5901] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.035798][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 221.238258][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.254339][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.298097][ T5901] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.309347][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.318805][ T5901] usb 1-1: Product: syz [ 221.378226][ T5901] usb 1-1: Manufacturer: syz [ 221.382925][ T5901] usb 1-1: SerialNumber: syz [ 221.711546][ T7744] fuse: Unknown parameter '00000000000000000000' [ 223.773672][ T5901] usb 1-1: cannot find UAC_HEADER [ 223.811965][ T5901] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 223.817518][ T5901] usb 1-1: USB disconnect, device number 9 [ 223.993984][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.050580][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 224.646254][ T5901] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 224.813570][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 224.814827][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.814851][ T5901] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.816396][ T5901] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 224.816420][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.816439][ T5901] usb 1-1: Product: syz [ 224.816454][ T5901] usb 1-1: Manufacturer: syz [ 224.816468][ T5901] usb 1-1: SerialNumber: syz [ 224.818143][ T5901] usb 1-1: config 0 descriptor?? [ 225.085262][ T29] audit: type=1400 audit(1740719297.008:510): avc: denied { nlmsg_read } for pid=7778 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 226.012917][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.339681][ T5901] usb 1-1: USB disconnect, device number 10 [ 228.578360][ T7817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.589403][ T7817] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 229.809304][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.531'. [ 233.536962][ T7875] overlay: filesystem on ./bus not supported as upperdir [ 234.774106][ T5901] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 234.948033][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 234.958297][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.004856][ T5901] usb 3-1: config 0 has no interface number 0 [ 235.023600][ T5901] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 235.055423][ T5901] usb 3-1: config 0 interface 1 has no altsetting 0 [ 235.064755][ T5901] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 235.086875][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.121527][ T5901] usb 3-1: Product: syz [ 235.150295][ T5901] usb 3-1: Manufacturer: syz [ 235.167986][ T5901] usb 3-1: SerialNumber: syz [ 235.194489][ T5901] usb 3-1: config 0 descriptor?? [ 235.494216][ T5901] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 235.519426][ T5901] cx231xx 3-1:0.1: Failed to read PCB config [ 235.528087][ T5901] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 235.556740][ T5901] usb 3-1: USB disconnect, device number 10 [ 236.537362][ T29] audit: type=1400 audit(1740719308.478:511): avc: denied { ioctl } for pid=7913 comm="syz.1.555" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 236.566194][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.555'. [ 236.622132][ T7914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7914 comm=syz.1.555 [ 237.011987][ T7923] befs: (nullb0): No write support. Marking filesystem read-only [ 237.020396][ T7923] befs: (nullb0): invalid magic header [ 237.037954][ T7923] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 238.050686][ T7923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.767716][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 239.791329][ T29] audit: type=1400 audit(1740719311.728:512): avc: denied { name_bind } for pid=7939 comm="syz.1.561" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 239.838393][ T7943] netlink: 'syz.1.561': attribute type 9 has an invalid length. [ 240.396778][ T29] audit: type=1400 audit(1740719311.728:513): avc: denied { map } for pid=7939 comm="syz.1.561" path="socket:[14776]" dev="sockfs" ino=14776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 240.528139][ T973] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 240.611444][ T7959] fuse: Unknown parameter 'group_id00000000000000000000' [ 240.813498][ T973] usb 1-1: Using ep0 maxpacket: 8 [ 240.832271][ T973] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 240.851252][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.869301][ T973] usb 1-1: Product: syz [ 240.879961][ T973] usb 1-1: Manufacturer: syz [ 240.889418][ T973] usb 1-1: SerialNumber: syz [ 240.906806][ T973] usb 1-1: config 0 descriptor?? [ 240.921444][ T973] gspca_main: se401-2.14.0 probing 047d:5003 [ 241.373397][ T973] gspca_se401: ExtraFeatures: 104 [ 241.402616][ T973] gspca_se401: Too many frame sizes [ 241.747845][ T5868] usb 1-1: USB disconnect, device number 11 [ 243.695840][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 244.970553][ T8008] fuseblk: Bad value for 'fd' [ 245.342617][ T8018] netlink: 'syz.4.580': attribute type 9 has an invalid length. [ 246.173286][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 246.853641][ T5158] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 247.013502][ T5158] usb 2-1: Using ep0 maxpacket: 8 [ 247.022257][ T5158] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 247.032525][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.136642][ T5158] usb 2-1: Product: syz [ 247.136663][ T5158] usb 2-1: Manufacturer: syz [ 247.136676][ T5158] usb 2-1: SerialNumber: syz [ 247.164207][ T5158] usb 2-1: config 0 descriptor?? [ 247.169444][ T5158] gspca_main: se401-2.14.0 probing 047d:5003 [ 247.859237][ T5158] gspca_se401: ExtraFeatures: 104 [ 248.632654][ T5158] gspca_se401: Too many frame sizes [ 248.985602][ T5901] usb 2-1: USB disconnect, device number 9 [ 249.297833][ T8056] VFS: could not find a valid V7 on nullb0. [ 249.904098][ T29] audit: type=1400 audit(1740719321.828:514): avc: denied { bind } for pid=8057 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.973754][ T29] audit: type=1400 audit(1740719321.828:515): avc: denied { getopt } for pid=8057 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.658048][ T8088] VFS: could not find a valid V7 on nullb0. [ 254.373517][ T5869] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 254.696315][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 254.782486][ T8110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 255.245279][ T5869] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 255.282272][ T5869] usb 2-1: config 0 has no interface number 0 [ 255.324766][ T5869] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.465508][ T5869] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 255.475172][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.517899][ T5869] usb 2-1: Product: syz [ 255.538202][ T5869] usb 2-1: Manufacturer: syz [ 255.561828][ T5869] usb 2-1: SerialNumber: syz [ 255.631242][ T5869] usb 2-1: config 0 descriptor?? [ 255.753667][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.759961][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.787339][ T5869] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 255.908563][ T3503] usb 2-1: Failed to submit usb control message: -71 [ 255.933773][ T5865] usb 2-1: USB disconnect, device number 10 [ 255.969876][ T3503] usb 2-1: unable to send the bmi data to the device: -71 [ 256.258127][ T3503] usb 2-1: unable to get target info from device [ 256.297174][ T3503] usb 2-1: could not get target info (-71) [ 256.354535][ T3503] usb 2-1: could not probe fw (-71) [ 257.482664][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.903798][ T5869] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 258.097764][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.147194][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.203691][ T5158] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 258.248948][ T5869] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 258.610867][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 27763, setting to 64 [ 258.638548][ T5158] usb 3-1: Using ep0 maxpacket: 32 [ 258.654979][ T5869] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 258.664450][ T5158] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 258.681114][ T5158] usb 3-1: config 0 has no interface number 0 [ 258.738542][ T5158] usb 3-1: config 0 interface 12 has no altsetting 0 [ 258.757613][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.813593][ T5158] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 258.931058][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.056741][ T5158] usb 3-1: Product: syz [ 259.125251][ T5158] usb 3-1: Manufacturer: syz [ 259.164941][ T8134] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.180288][ T5158] usb 3-1: SerialNumber: syz [ 259.194159][ T5869] hub 5-1:1.0: bad descriptor, ignoring hub [ 259.209341][ T5158] usb 3-1: config 0 descriptor?? [ 259.221731][ T5869] hub 5-1:1.0: probe with driver hub failed with error -5 [ 259.235972][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 259.241716][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 259.247885][ T5869] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 259.909868][ T8160] netlink: 'syz.1.616': attribute type 9 has an invalid length. [ 261.402039][ T5868] usb 5-1: USB disconnect, device number 12 [ 263.219664][ T5158] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 263.228923][ T5158] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 263.236819][ T5158] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 263.244761][ T5158] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 263.321786][ T5158] usb 3-1: USB disconnect, device number 11 [ 263.376961][ T8196] sp0: Synchronizing with TNC [ 263.473241][ T8197] random: crng reseeded on system resumption [ 265.204042][ T8209] bdev: Unknown parameter 'gppquotaYOz3f&{I͢F2v6' [ 265.684298][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 265.953658][ T5869] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 266.108063][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 266.118265][ T5869] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 266.118320][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.118369][ T5869] usb 5-1: Product: syz [ 266.118489][ T5869] usb 5-1: Manufacturer: syz [ 266.118534][ T5869] usb 5-1: SerialNumber: syz [ 266.504081][ T5869] usb 5-1: config 0 descriptor?? [ 266.507743][ T5869] gspca_main: se401-2.14.0 probing 047d:5003 [ 267.061966][ T5868] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 267.935421][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 267.941952][ T5868] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.950340][ T5868] usb 4-1: config 0 has no interface number 0 [ 267.987171][ T5868] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 268.026460][ T5868] usb 4-1: config 0 interface 1 has no altsetting 0 [ 268.056850][ T5868] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 268.084503][ T5869] gspca_se401: read req failed req 0x06 error -19 [ 268.097009][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.120557][ T5869] usb 5-1: USB disconnect, device number 13 [ 268.136793][ T5868] usb 4-1: Product: syz [ 268.140966][ T5868] usb 4-1: Manufacturer: syz [ 268.162861][ T5868] usb 4-1: SerialNumber: syz [ 268.188591][ T5868] usb 4-1: config 0 descriptor?? [ 268.524723][ T5868] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 268.541307][ T5868] cx231xx 4-1:0.1: Failed to read PCB config [ 268.553373][ T5868] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 268.663251][ T5868] usb 4-1: USB disconnect, device number 8 [ 269.336051][ T8252] fuse: Bad value for 'rootmode' [ 276.974733][ T5829] Bluetooth: hci4: unexpected event for opcode 0x2036 [ 279.823478][ T973] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 280.645273][ T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.743776][ T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.902690][ T973] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 281.025828][ T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 27763, setting to 64 [ 281.071210][ T973] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 281.096208][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2036 [ 281.104281][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.115038][ T8362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 281.124379][ T973] hub 2-1:1.0: bad descriptor, ignoring hub [ 281.130294][ T973] hub 2-1:1.0: probe with driver hub failed with error -5 [ 281.141319][ T973] cdc_wdm 2-1:1.0: skipping garbage [ 281.147574][ T973] cdc_wdm 2-1:1.0: skipping garbage [ 281.152819][ T973] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 281.514924][ T8383] bridge_slave_1: left allmulticast mode [ 281.520674][ T8383] bridge_slave_1: left promiscuous mode [ 281.527028][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.694312][ T8384] CUSE: unknown device info "" [ 281.761730][ T8384] CUSE: zero length info key specified [ 283.571180][ T8391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.763794][ T973] usb 2-1: USB disconnect, device number 11 [ 283.781917][ T8402] fuse: Bad value for 'user_id' [ 283.804756][ T8402] fuse: Bad value for 'user_id' [ 283.866639][ T8404] netlink: 96 bytes leftover after parsing attributes in process `syz.1.680'. [ 284.714388][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2036 [ 284.824655][ T8418] VFS: could not find a valid V7 on nullb0. [ 285.652525][ T8429] sp0: Synchronizing with TNC [ 285.711294][ T8430] random: crng reseeded on system resumption [ 285.733495][ T5896] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 285.940028][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 285.972645][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.982985][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.015038][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.034284][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.059698][ T5896] usb 1-1: Product: syz [ 286.075624][ T5896] usb 1-1: Manufacturer: syz [ 286.097107][ T5896] usb 1-1: SerialNumber: syz [ 287.333215][ T8449] netlink: 'syz.3.689': attribute type 9 has an invalid length. [ 287.429182][ T29] audit: type=1326 audit(1740719359.368:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 287.511087][ T29] audit: type=1326 audit(1740719359.368:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 287.542611][ T29] audit: type=1326 audit(1740719359.398:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb16984127 code=0x7ffc0000 [ 287.579624][ T29] audit: type=1326 audit(1740719359.398:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb16929359 code=0x7ffc0000 [ 287.619053][ T29] audit: type=1326 audit(1740719359.398:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 287.649888][ T29] audit: type=1326 audit(1740719359.398:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 287.678042][ T29] audit: type=1326 audit(1740719359.398:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 287.690600][ T8453] netlink: 96 bytes leftover after parsing attributes in process `syz.1.693'. [ 287.705520][ T29] audit: type=1326 audit(1740719359.398:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 287.740661][ T29] audit: type=1326 audit(1740719359.398:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb16984127 code=0x7ffc0000 [ 287.769488][ T29] audit: type=1326 audit(1740719359.398:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb16929359 code=0x7ffc0000 [ 288.131046][ T8454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.554543][ T5896] usb 1-1: cannot find UAC_HEADER [ 288.629176][ T5896] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 288.792583][ T5896] usb 1-1: USB disconnect, device number 12 [ 289.613832][ T8226] udevd[8226]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.676857][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'. [ 289.873602][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 290.160420][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 290.167567][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.177921][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.188869][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.198018][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.206653][ T5896] usb 1-1: Product: syz [ 290.210893][ T5896] usb 1-1: Manufacturer: syz [ 290.217682][ T5896] usb 1-1: SerialNumber: syz [ 290.283457][ T8490] befs: (nullb0): No write support. Marking filesystem read-only [ 290.292178][ T8490] befs: (nullb0): invalid magic header [ 290.317455][ T8490] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 290.401444][ T8490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.113845][ T8496] sp0: Synchronizing with TNC [ 291.241955][ T8497] random: crng reseeded on system resumption [ 292.282342][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.860470][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.712'. [ 293.350289][ T5896] usb 1-1: cannot find UAC_HEADER [ 293.505500][ T5896] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 293.553711][ T5896] usb 1-1: USB disconnect, device number 13 [ 294.318058][ T8226] udevd[8226]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.231958][ T8540] befs: (nullb0): No write support. Marking filesystem read-only [ 296.242871][ T8540] befs: (nullb0): invalid magic header [ 296.280570][ T8540] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 296.346163][ T8540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.821141][ T8548] netlink: 124 bytes leftover after parsing attributes in process `syz.4.720'. [ 298.418991][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.724'. [ 299.610453][ T8572] VFS: could not find a valid V7 on nullb0. [ 302.577286][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 302.577308][ T29] audit: type=1326 audit(1740719374.518:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 302.688741][ T29] audit: type=1326 audit(1740719374.518:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb16984127 code=0x7ffc0000 [ 302.720220][ T29] audit: type=1326 audit(1740719374.518:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb16929359 code=0x7ffc0000 [ 303.328845][ T29] audit: type=1326 audit(1740719374.518:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 303.474114][ T29] audit: type=1326 audit(1740719374.548:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb16984127 code=0x7ffc0000 [ 303.959608][ T29] audit: type=1326 audit(1740719374.548:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb16929359 code=0x7ffc0000 [ 304.281712][ T29] audit: type=1326 audit(1740719374.548:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 304.660828][ T29] audit: type=1326 audit(1740719374.548:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1698d169 code=0x7ffc0000 [ 305.056033][ T29] audit: type=1326 audit(1740719374.578:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb16984127 code=0x7ffc0000 [ 305.149016][ T29] audit: type=1326 audit(1740719374.578:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb16929359 code=0x7ffc0000 [ 305.536112][ T8610] netlink: 124 bytes leftover after parsing attributes in process `syz.3.735'. [ 305.761040][ T8585] fuseblk: Bad value for 'fd' [ 307.117659][ T8617] befs: (nullb0): No write support. Marking filesystem read-only [ 307.131188][ T8617] befs: (nullb0): invalid magic header [ 307.226180][ T8617] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 308.049970][ T8617] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 310.482166][ T8635] netlink: 96 bytes leftover after parsing attributes in process `syz.0.743'. [ 317.157714][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.164078][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.253420][ C1] sched: DL replenish lagged too much [ 327.218028][ T8671] VFS: could not find a valid V7 on nullb0. [ 327.977585][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.999674][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.037774][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.116973][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.124420][ T5824] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 328.131585][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.165003][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 328.165021][ T29] audit: type=1400 audit(1740719400.078:846): avc: denied { mounton } for pid=8674 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 328.192450][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.242377][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.254205][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.262689][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.270783][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.278294][ T5829] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 328.286474][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.469888][ T8685] netlink: 96 bytes leftover after parsing attributes in process `syz.0.755'. [ 329.498671][ T8678] chnl_net:caif_netlink_parms(): no params data found [ 329.640093][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 329.960613][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 330.194206][ T5829] Bluetooth: hci5: command tx timeout [ 330.353604][ T5829] Bluetooth: hci6: command tx timeout [ 331.647699][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.767021][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.767075][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.767243][ T8678] bridge_slave_0: entered allmulticast mode [ 331.768006][ T8678] bridge_slave_0: entered promiscuous mode [ 331.769234][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.769275][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.769372][ T8678] bridge_slave_1: entered allmulticast mode [ 331.770111][ T8678] bridge_slave_1: entered promiscuous mode [ 331.839682][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.841376][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.951917][ T8678] team0: Port device team_slave_0 added [ 331.965843][ T8678] team0: Port device team_slave_1 added [ 332.011983][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.130964][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 332.299334][ T5829] Bluetooth: hci5: command tx timeout [ 332.463488][ T5829] Bluetooth: hci6: command tx timeout [ 332.531583][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.539437][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.539450][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.539471][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.540831][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.540843][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.540863][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.732957][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.733005][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.733114][ T8674] bridge_slave_0: entered allmulticast mode [ 332.734305][ T8674] bridge_slave_0: entered promiscuous mode [ 332.735599][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.735647][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.735746][ T8674] bridge_slave_1: entered allmulticast mode [ 332.736549][ T8674] bridge_slave_1: entered promiscuous mode [ 333.074613][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.116675][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.152482][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.607075][ T8678] hsr_slave_0: entered promiscuous mode [ 333.607574][ T8678] hsr_slave_1: entered promiscuous mode [ 333.607912][ T8678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.607953][ T8678] Cannot create hsr debugfs directory [ 333.693211][ T8674] team0: Port device team_slave_0 added [ 333.967627][ T8674] team0: Port device team_slave_1 added [ 334.374877][ T5829] Bluetooth: hci5: command tx timeout [ 334.505313][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.505328][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.505349][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.515409][ T5829] Bluetooth: hci6: command tx timeout [ 334.524445][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.524458][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.524479][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.830741][ T12] bridge_slave_1: left allmulticast mode [ 334.830817][ T12] bridge_slave_1: left promiscuous mode [ 334.831815][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.006220][ T12] bridge_slave_0: left allmulticast mode [ 335.014204][ T12] bridge_slave_0: left promiscuous mode [ 335.036093][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.433513][ T5829] Bluetooth: hci5: command tx timeout [ 336.460828][ T8723] befs: (nullb0): No write support. Marking filesystem read-only [ 336.468867][ T8723] befs: (nullb0): invalid magic header [ 336.536996][ T8723] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 336.594319][ T5829] Bluetooth: hci6: command tx timeout [ 346.033336][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.055310][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.075254][ T12] bond0 (unregistering): Released all slaves [ 346.250859][ T12] bond1 (unregistering): Released all slaves [ 346.292292][ T8723] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 346.311973][ T8674] hsr_slave_0: entered promiscuous mode [ 346.355814][ T8674] hsr_slave_1: entered promiscuous mode [ 346.379621][ T8674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.409904][ T8674] Cannot create hsr debugfs directory [ 346.478257][ T29] audit: type=1400 audit(1740719418.418:847): avc: denied { read } for pid=8731 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.558574][ T29] audit: type=1400 audit(1740719418.448:848): avc: denied { open } for pid=8731 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.664761][ T29] audit: type=1400 audit(1740719418.448:849): avc: denied { getattr } for pid=8731 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.941393][ T29] audit: type=1400 audit(1740719418.878:850): avc: denied { write } for pid=8730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.069893][ T29] audit: type=1400 audit(1740719418.878:851): avc: denied { add_name } for pid=8730 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.183952][ T29] audit: type=1400 audit(1740719418.878:852): avc: denied { create } for pid=8730 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.249494][ T29] audit: type=1400 audit(1740719418.878:853): avc: denied { write } for pid=8730 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.299092][ T8678] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 347.318507][ T29] audit: type=1400 audit(1740719418.878:854): avc: denied { append } for pid=8730 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.347557][ T8678] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 347.365641][ T29] audit: type=1400 audit(1740719419.118:855): avc: denied { remove_name } for pid=8743 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.439406][ T8678] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 347.550592][ T8678] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.572465][ T29] audit: type=1400 audit(1740719419.118:856): avc: denied { unlink } for pid=8743 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.753088][ T12] hsr_slave_0: left promiscuous mode [ 347.789242][ T12] hsr_slave_1: left promiscuous mode [ 347.800786][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.819328][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.857435][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.872557][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.919178][ T12] veth1_macvtap: left promiscuous mode [ 347.933165][ T12] veth0_macvtap: left promiscuous mode [ 347.960341][ T12] veth1_vlan: left promiscuous mode [ 347.973692][ T12] veth0_vlan: left promiscuous mode [ 348.826795][ T12] team0 (unregistering): Port device team_slave_1 removed [ 348.886551][ T12] team0 (unregistering): Port device team_slave_0 removed [ 351.581159][ T8674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.598261][ T8674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.618025][ T8674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.719515][ T8674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.870617][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 352.870633][ T29] audit: type=1400 audit(1740719424.808:858): avc: denied { read write } for pid=8793 comm="syz.4.768" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 352.917319][ T29] audit: type=1400 audit(1740719424.838:859): avc: denied { open } for pid=8793 comm="syz.4.768" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 352.948558][ T29] audit: type=1400 audit(1740719424.838:860): avc: denied { ioctl } for pid=8793 comm="syz.4.768" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.153933][ T5899] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 353.280832][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.766100][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.791403][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.816318][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.863697][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 353.876820][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.946731][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 27763, setting to 64 [ 353.961823][ T8678] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.999825][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.006960][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.394526][ T5899] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 354.442549][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.478601][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.486805][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.545716][ T8794] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.584694][ T5899] hub 5-1:1.0: bad descriptor, ignoring hub [ 354.605406][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.612612][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.632828][ T5899] hub 5-1:1.0: probe with driver hub failed with error -5 [ 354.663682][ T5899] cdc_wdm 5-1:1.0: skipping garbage [ 354.668934][ T5899] cdc_wdm 5-1:1.0: skipping garbage [ 354.771768][ T5899] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 354.798877][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.806023][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.908887][ T8812] CUSE: unknown device info "" [ 354.918252][ T8812] CUSE: zero length info key specified [ 357.058808][ T8678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.233783][ T8678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.481860][ T5899] usb 5-1: USB disconnect, device number 14 [ 357.910483][ T8826] sp0: Synchronizing with TNC [ 357.918623][ T8674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.373307][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.672727][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.585066][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.726523][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.148000][ T8871] random: crng reseeded on system resumption [ 361.179682][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.224821][ T5865] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 361.652575][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.688564][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 361.709366][ T5865] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.754047][ T8678] veth0_vlan: entered promiscuous mode [ 361.773973][ T5865] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.819826][ T8678] veth1_vlan: entered promiscuous mode [ 361.831737][ T5865] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.853211][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.896118][ T5865] usb 1-1: Product: syz [ 361.928731][ T8678] veth0_macvtap: entered promiscuous mode [ 361.935504][ T5865] usb 1-1: Manufacturer: syz [ 361.940112][ T5865] usb 1-1: SerialNumber: syz [ 362.047997][ T8678] veth1_macvtap: entered promiscuous mode [ 362.134423][ T8674] veth0_vlan: entered promiscuous mode [ 362.216156][ T8674] veth1_vlan: entered promiscuous mode [ 362.256794][ T12] bridge_slave_0: left allmulticast mode [ 362.274329][ T12] bridge_slave_0: left promiscuous mode [ 362.283074][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.934085][ T8901] fuse: Unknown parameter 'user_id00000000000000000000' [ 371.823313][ T5865] usb 1-1: cannot find UAC_HEADER [ 378.724673][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.397543][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.214924][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.225243][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.339433][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 453.895600][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 502.004876][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.015132][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.073553][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.607247][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.603526][ T30] INFO: task kworker/u8:7:3503 blocked for more than 144 seconds. [ 522.611411][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 522.763409][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.772133][ T30] task:kworker/u8:7 state:D stack:23416 pid:3503 tgid:3503 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 522.973392][ T30] Workqueue: events_unbound linkwatch_event [ 522.979388][ T30] Call Trace: [ 522.982670][ T30] [ 523.103461][ T30] __schedule+0xf43/0x5890 [ 523.107936][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 523.113174][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 523.253396][ T30] ? __pfx___schedule+0x10/0x10 [ 523.258309][ T30] ? schedule+0x298/0x350 [ 523.263101][ T30] ? __pfx_lock_release+0x10/0x10 [ 523.423426][ T30] ? lock_acquire+0x2f/0xb0 [ 523.428028][ T30] ? schedule+0x1fd/0x350 [ 523.432371][ T30] schedule+0xe7/0x350 [ 523.563427][ T30] schedule_preempt_disabled+0x13/0x30 [ 523.569383][ T30] __mutex_lock+0x6bd/0xb10 [ 523.668278][ T30] ? linkwatch_event+0x51/0xc0 [ 523.715708][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 523.720806][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 523.833548][ T30] ? rcu_is_watching+0x12/0xc0 [ 523.838383][ T30] ? linkwatch_event+0x51/0xc0 [ 523.843161][ T30] linkwatch_event+0x51/0xc0 [ 524.003508][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 524.008876][ T30] ? rcu_is_watching+0x12/0xc0 [ 524.093367][ T30] process_one_work+0x9c5/0x1ba0 [ 524.118655][ T30] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 524.191595][ T30] ? __pfx_process_one_work+0x10/0x10 [ 524.213383][ T30] ? assign_work+0x1a0/0x250 [ 524.218030][ T30] worker_thread+0x6c8/0xf00 [ 524.222644][ T30] ? __pfx_worker_thread+0x10/0x10 [ 524.366773][ T30] kthread+0x3af/0x750 [ 524.370914][ T30] ? __pfx_kthread+0x10/0x10 [ 524.507162][ T30] ? lock_acquire+0x2f/0xb0 [ 524.511745][ T30] ? __pfx_kthread+0x10/0x10 [ 524.537847][ T30] ret_from_fork+0x45/0x80 [ 524.542321][ T30] ? __pfx_kthread+0x10/0x10 [ 524.626774][ T30] ret_from_fork_asm+0x1a/0x30 [ 524.631608][ T30] [ 524.641360][ T12] bond0 (unregistering): Released all slaves [ 524.657756][ T30] INFO: task kworker/u8:9:3541 blocked for more than 146 seconds. [ 524.793459][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 524.826478][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.873958][ T30] task:kworker/u8:9 state:D stack:23616 pid:3541 tgid:3541 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 524.963372][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 524.969414][ T30] Call Trace: [ 524.972694][ T30] [ 525.033437][ T30] __schedule+0xf43/0x5890 [ 525.037905][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 525.043114][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 525.123407][ T30] ? __pfx___schedule+0x10/0x10 [ 525.128336][ T30] ? schedule+0x298/0x350 [ 525.132669][ T30] ? __pfx_lock_release+0x10/0x10 [ 525.223828][ T30] ? __mutex_trylock_common+0x78/0x250 [ 525.229373][ T30] ? lock_acquire+0x2f/0xb0 [ 525.293404][ T30] ? schedule+0x1fd/0x350 [ 525.297797][ T30] schedule+0xe7/0x350 [ 525.301875][ T30] schedule_preempt_disabled+0x13/0x30 [ 525.403361][ T30] __mutex_lock+0x6bd/0xb10 [ 525.407927][ T30] ? __lock_acquire+0x15a9/0x3c40 [ 525.513462][ T30] ? addrconf_dad_work+0x121/0x14e0 [ 525.533941][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 525.539021][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 525.623381][ T30] ? lock_acquire+0x2f/0xb0 [ 525.643913][ T30] ? addrconf_dad_work+0x121/0x14e0 [ 525.649159][ T30] ? rtnl_lock+0x9/0x20 [ 525.719367][ T30] addrconf_dad_work+0x121/0x14e0 [ 525.763368][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 525.768884][ T30] ? process_one_work+0x921/0x1ba0 [ 525.853424][ T30] ? lock_acquire+0x2f/0xb0 [ 525.857988][ T30] ? process_one_work+0x921/0x1ba0 [ 525.863141][ T30] process_one_work+0x9c5/0x1ba0 [ 525.983441][ T30] ? __pfx_bond_alb_monitor+0x10/0x10 [ 525.988878][ T30] ? __pfx_process_one_work+0x10/0x10 [ 526.074170][ T30] ? assign_work+0x1a0/0x250 [ 526.078845][ T30] worker_thread+0x6c8/0xf00 [ 526.138365][ T30] ? __pfx_worker_thread+0x10/0x10 [ 526.203437][ T30] kthread+0x3af/0x750 [ 526.207591][ T30] ? __pfx_kthread+0x10/0x10 [ 526.212214][ T30] ? lock_acquire+0x2f/0xb0 [ 526.313382][ T30] ? __pfx_kthread+0x10/0x10 [ 526.318032][ T30] ret_from_fork+0x45/0x80 [ 526.322456][ T30] ? __pfx_kthread+0x10/0x10 [ 526.413422][ T30] ret_from_fork_asm+0x1a/0x30 [ 526.418256][ T30] [ 526.503470][ T30] INFO: task dhcpcd:5489 blocked for more than 148 seconds. [ 526.510820][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 526.626544][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.713439][ T30] task:dhcpcd state:D stack:22624 pid:5489 tgid:5489 ppid:5488 task_flags:0x400140 flags:0x00000002 [ 526.803904][ T30] Call Trace: [ 526.807226][ T30] [ 526.810190][ T30] __schedule+0xf43/0x5890 [ 526.893382][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 526.898635][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 526.973432][ T30] ? __pfx___schedule+0x10/0x10 [ 526.978357][ T30] ? schedule+0x298/0x350 [ 526.982693][ T30] ? __pfx_lock_release+0x10/0x10 [ 527.083376][ T30] ? __mutex_trylock_common+0x78/0x250 [ 527.088884][ T30] ? lock_acquire+0x2f/0xb0 [ 527.154167][ T30] ? schedule+0x1fd/0x350 [ 527.158591][ T30] schedule+0xe7/0x350 [ 527.213412][ T30] schedule_preempt_disabled+0x13/0x30 [ 527.218918][ T30] __mutex_lock+0x6bd/0xb10 [ 527.293433][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 527.299398][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 527.383375][ T30] ? devinet_ioctl+0x26e/0x1f50 [ 527.388290][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 527.463428][ T30] ? rcu_is_watching+0x12/0xc0 [ 527.468267][ T30] ? bpf_lsm_capable+0x9/0x10 [ 527.508272][ T30] ? security_capable+0x7e/0x260 [ 527.513257][ T30] ? devinet_ioctl+0x26e/0x1f50 [ 527.633442][ T30] devinet_ioctl+0x26e/0x1f50 [ 527.638176][ T30] ? __might_fault+0xe3/0x190 [ 527.642860][ T30] ? __might_fault+0xe3/0x190 [ 527.763416][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 527.806890][ T30] ? _copy_from_user+0x59/0xd0 [ 527.811740][ T30] inet_ioctl+0x3aa/0x3f0 [ 527.883442][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 527.888364][ T30] ? tomoyo_path_number_perm+0x190/0x590 [ 527.963366][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 527.969326][ T30] sock_do_ioctl+0x116/0x280 [ 528.063461][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 528.068629][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 528.163380][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 528.169963][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 528.253413][ T30] sock_ioctl+0x228/0x6c0 [ 528.257797][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 528.262703][ T30] ? selinux_file_ioctl+0x180/0x270 [ 528.373557][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 528.378777][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 528.433598][ T30] __x64_sys_ioctl+0x190/0x200 [ 528.438421][ T30] do_syscall_64+0xcd/0x250 [ 528.442936][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.523365][ T30] RIP: 0033:0x7f923f9d1d49 [ 528.527858][ T30] RSP: 002b:00007ffc41623ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.613426][ T30] RAX: ffffffffffffffda RBX: 00007f923f9036c0 RCX: 00007f923f9d1d49 [ 528.621448][ T30] RDX: 00007ffc41633ca8 RSI: 0000000000008914 RDI: 0000000000000018 [ 528.753408][ T30] RBP: 00007ffc41643e68 R08: 00007ffc41633c68 R09: 00007ffc41633c18 [ 528.761451][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.853468][ T30] R13: 00007ffc41633ca8 R14: 0000000000000028 R15: 0000000000008914 [ 528.861529][ T30] [ 528.933409][ T30] INFO: task kworker/0:7:5901 blocked for more than 150 seconds. [ 528.941167][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 529.073444][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.082178][ T30] task:kworker/0:7 state:D stack:24640 pid:5901 tgid:5901 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 529.223457][ T30] Workqueue: events switchdev_deferred_process_work [ 529.230131][ T30] Call Trace: [ 529.293452][ T30] [ 529.296448][ T30] __schedule+0xf43/0x5890 [ 529.300881][ T30] ? __pfx_mark_lock+0x10/0x10 [ 529.383381][ T30] ? mark_held_locks+0x9f/0xe0 [ 529.388214][ T30] ? __pfx___schedule+0x10/0x10 [ 529.393099][ T30] ? schedule+0x298/0x350 [ 529.513439][ T30] ? __pfx_lock_release+0x10/0x10 [ 529.526150][ T30] ? _raw_spin_unlock_irq+0x29/0x50 [ 529.531464][ T30] schedule+0xe7/0x350 [ 529.593428][ T30] schedule_preempt_disabled+0x13/0x30 [ 529.598944][ T30] __mutex_lock+0x6bd/0xb10 [ 529.683385][ T30] ? lock_acquire+0x2f/0xb0 [ 529.687951][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 529.743409][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 529.748487][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 529.826951][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 529.832195][ T30] ? process_one_work+0x921/0x1ba0 [ 529.904234][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 529.910384][ T30] switchdev_deferred_process_work+0xe/0x20 [ 529.973471][ T30] process_one_work+0x9c5/0x1ba0 [ 529.978497][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 530.033464][ T30] ? __pfx_process_one_work+0x10/0x10 [ 530.038899][ T30] ? assign_work+0x1a0/0x250 SYZFAIL: failed to send rpc fd=3 want=154688 sent=0 n=-1 (errno 32: Broken pipe) [ 530.133581][ T30] worker_thread+0x6c8/0xf00 [ 530.138236][ T30] ? __kthread_parkme+0x148/0x220 [ 530.143293][ T30] ? __pfx_worker_thread+0x10/0x10 [ 530.208568][ T30] kthread+0x3af/0x750 [ 530.212678][ T30] ? __pfx_kthread+0x10/0x10 [ 530.263422][ T30] ? lock_acquire+0x2f/0xb0 [ 530.267981][ T30] ? __pfx_kthread+0x10/0x10 [ 530.272580][ T30] ret_from_fork+0x45/0x80 [ 530.327503][ T30] ? __pfx_kthread+0x10/0x10 [ 530.332145][ T30] ret_from_fork_asm+0x1a/0x30 [ 530.353461][ T30] [ 530.363187][ T30] INFO: task syz-executor:8674 blocked for more than 152 seconds. [ 530.393489][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 530.423985][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.448691][ T30] task:syz-executor state:D stack:22864 pid:8674 tgid:8674 ppid:1 task_flags:0x400140 flags:0x00004006 [ 530.483368][ T30] Call Trace: [ 530.486686][ T30] [ 530.489631][ T30] __schedule+0xf43/0x5890 [ 530.518694][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 530.532179][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 530.558249][ T30] ? __pfx___schedule+0x10/0x10 [ 530.563182][ T30] ? schedule+0x298/0x350 [ 530.573495][ T30] ? __pfx_lock_release+0x10/0x10 [ 530.578599][ T30] ? __mutex_trylock_common+0x78/0x250 [ 530.603696][ T30] ? lock_acquire+0x2f/0xb0 [ 530.608258][ T30] ? schedule+0x1fd/0x350 [ 530.612622][ T30] schedule+0xe7/0x350 [ 530.638615][ T30] schedule_preempt_disabled+0x13/0x30 [ 530.653534][ T30] __mutex_lock+0x6bd/0xb10 [ 530.658092][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 530.663236][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 530.697667][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.706763][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.716674][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.729324][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.737650][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 530.745340][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.766476][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 530.772333][ T30] ? hlock_class+0x4e/0x130 [ 530.777319][ T30] ? inet_rtm_newaddr+0x316/0x1560 [ 530.782460][ T30] ? rtnl_lock+0x9/0x20 [ 530.786974][ T30] inet_rtm_newaddr+0x316/0x1560 [ 530.791928][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 530.798593][ T30] ? find_held_lock+0x2d/0x110 [ 530.803576][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 530.808973][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 530.815465][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 530.820428][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 530.826360][ T30] netlink_rcv_skb+0x16b/0x440 [ 530.831149][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 530.837278][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.843012][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 530.848687][ T30] netlink_unicast+0x53c/0x7f0 [ 530.863741][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 530.869084][ T30] netlink_sendmsg+0x8b8/0xd70 [ 530.874145][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.879485][ T30] __sys_sendto+0x488/0x4f0 [ 530.884447][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 530.889523][ T30] ? __fput+0x68d/0xb70 [ 530.894060][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 530.898835][ T30] ? do_syscall_64+0x91/0x250 [ 530.905507][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 530.910755][ T30] do_syscall_64+0xcd/0x250 [ 530.920236][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.926473][ T30] RIP: 0033:0x7f42b038effc [ 530.930897][ T30] RSP: 002b:00007ffc36f63760 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 530.943400][ T30] RAX: ffffffffffffffda RBX: 00007f42b10d4620 RCX: 00007f42b038effc [ 530.956392][ T30] RDX: 0000000000000028 RSI: 00007f42b10d4670 RDI: 0000000000000003 [ 530.971158][ T30] RBP: 0000000000000000 R08: 00007ffc36f637b4 R09: 000000000000000c [ 530.983397][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 530.991393][ T30] R13: 0000000000000000 R14: 00007f42b10d4670 R15: 0000000000000000 [ 531.004055][ T30] [ 531.047463][ T30] INFO: task syz-executor:8678 blocked for more than 153 seconds. [ 531.067069][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 531.102949][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.143515][ T30] task:syz-executor state:D stack:23296 pid:8678 tgid:8678 ppid:1 task_flags:0x400140 flags:0x00004004 [ 531.173876][ T30] Call Trace: [ 531.177223][ T30] [ 531.180159][ T30] __schedule+0xf43/0x5890 [ 531.208521][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 531.227788][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 531.231313][ T5865] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 531.233033][ T30] ? __pfx___schedule+0x10/0x10 [ 531.272679][ T30] ? schedule+0x298/0x350 [ 531.277397][ T30] ? __pfx_lock_release+0x10/0x10 [ 531.282449][ T30] ? __mutex_trylock_common+0x78/0x250 [ 531.288347][ T30] ? lock_acquire+0x2f/0xb0 [ 531.292899][ T30] ? schedule+0x1fd/0x350 [ 531.302145][ T30] schedule+0xe7/0x350 [ 531.306597][ T30] schedule_preempt_disabled+0x13/0x30 [ 531.312091][ T30] __mutex_lock+0x6bd/0xb10 [ 531.319097][ T30] ? rcu_is_watching+0x12/0xc0 [ 531.324152][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 531.328956][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 531.334359][ T30] ? cap_capable+0xb3/0x250 [ 531.338890][ T30] ? ns_capable+0xd7/0x110 [ 531.345819][ T30] ? rtnl_newlink+0x5d9/0x1d60 [ 531.350604][ T30] rtnl_newlink+0x5d9/0x1d60 [ 531.356227][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 531.361742][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 531.367333][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 531.373242][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 531.379869][ T30] ? find_held_lock+0x2d/0x110 [ 531.386405][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 531.391539][ T30] ? __pfx_lock_release+0x10/0x10 [ 531.396947][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 531.402160][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 531.410870][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 531.416047][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 531.421532][ T30] netlink_rcv_skb+0x16b/0x440 [ 531.428295][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 531.434082][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.439394][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 531.445098][ T30] netlink_unicast+0x53c/0x7f0 [ 531.449880][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 531.456225][ T30] netlink_sendmsg+0x8b8/0xd70 [ 531.461036][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.467182][ T30] __sys_sendto+0x488/0x4f0 [ 531.471721][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 531.479022][ T30] ? __fput+0x68d/0xb70 [ 531.483217][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 531.500733][ T30] ? do_syscall_64+0x91/0x250 [ 531.505640][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 531.510878][ T30] do_syscall_64+0xcd/0x250 [ 531.526253][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.532214][ T30] RIP: 0033:0x7f5b9238effc [ 531.538702][ T30] RSP: 002b:00007ffd2281d840 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 531.550664][ T30] RAX: ffffffffffffffda RBX: 00007f5b930d4620 RCX: 00007f5b9238effc [ 531.562611][ T30] RDX: 000000000000002c RSI: 00007f5b930d4670 RDI: 0000000000000003 [ 531.577346][ T30] RBP: 0000000000000000 R08: 00007ffd2281d894 R09: 000000000000000c [ 531.587456][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 531.598822][ T30] R13: 0000000000000000 R14: 00007f5b930d4670 R15: 0000000000000000 [ 531.608764][ T30] [ 531.622759][ T30] INFO: task syz.2.776:8886 blocked for more than 153 seconds. [ 531.638808][ T30] Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 531.650078][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.664637][ T30] task:syz.2.776 state:D stack:26992 pid:8886 tgid:8884 ppid:5830 task_flags:0x400140 flags:0x00000004 [ 531.681022][ T30] Call Trace: [ 531.686539][ T30] [ 531.689488][ T30] __schedule+0xf43/0x5890 [ 531.710851][ T8736] udevd[8736]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.727694][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 531.732926][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 531.742350][ T30] ? __pfx___schedule+0x10/0x10 [ 531.748938][ T30] ? schedule+0x298/0x350 [ 531.753290][ T30] ? __pfx_lock_release+0x10/0x10 [ 531.769292][ T30] ? __mutex_trylock_common+0x78/0x250 [ 531.776582][ T30] ? lock_acquire+0x2f/0xb0 [ 531.781112][ T30] ? schedule+0x1fd/0x350 [ 531.785545][ T30] schedule+0xe7/0x350 [ 531.789618][ T30] schedule_preempt_disabled+0x13/0x30 [ 531.795138][ T30] __mutex_lock+0x6bd/0xb10 [ 531.799644][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 531.805644][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 531.811921][ T30] ? devinet_ioctl+0x26e/0x1f50 [ 531.816807][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 531.821833][ T30] ? rcu_is_watching+0x12/0xc0 [ 531.826731][ T30] ? bpf_lsm_capable+0x9/0x10 [ 531.831412][ T30] ? security_capable+0x7e/0x260 [ 531.836377][ T30] ? devinet_ioctl+0x26e/0x1f50 [ 531.841234][ T30] devinet_ioctl+0x26e/0x1f50 [ 531.847956][ T30] ? __might_fault+0xe3/0x190 [ 531.852650][ T30] ? __might_fault+0xe3/0x190 [ 531.859015][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 531.868739][ T30] ? _copy_from_user+0x59/0xd0 [ 531.874213][ T30] inet_ioctl+0x3aa/0x3f0 [ 531.878589][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 531.883839][ T30] ? tomoyo_path_number_perm+0x190/0x590 [ 531.889489][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.895764][ T30] sock_do_ioctl+0x116/0x280 [ 531.900361][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 531.906509][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 531.913054][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 531.919948][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 531.927097][ T30] sock_ioctl+0x228/0x6c0 [ 531.931436][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 531.936599][ T30] ? selinux_file_ioctl+0x180/0x270 [ 531.941809][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 531.947302][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 531.952159][ T30] __x64_sys_ioctl+0x190/0x200 [ 531.959939][ T30] do_syscall_64+0xcd/0x250 [ 531.967700][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.974228][ T30] RIP: 0033:0x7febdab8d169 [ 531.978683][ T30] RSP: 002b:00007febdba71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.987483][ T30] RAX: ffffffffffffffda RBX: 00007febdada5fa0 RCX: 00007febdab8d169 [ 531.996441][ T30] RDX: 0000400000000080 RSI: 0000000000008916 RDI: 0000000000000007 [ 532.004748][ T30] RBP: 00007febdac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 532.012748][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.021077][ T30] R13: 0000000000000000 R14: 00007febdada5fa0 R15: 00007ffe838b12b8 [ 532.029356][ T30] [ 532.049229][ T30] [ 532.049229][ T30] Showing all locks held in the system: [ 532.071820][ T30] 5 locks held by kworker/u8:1/12: [ 532.090046][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 532.102246][ T30] #1: ffffc90000117d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 532.117426][ T30] #2: ffffffff8fee14d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 532.127861][ T30] #3: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x512/0xb30 [ 532.142022][ T30] #4: ffffffff8e1c8138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 532.153193][ T30] 3 locks held by ksoftirqd/0/16: [ 532.162506][ T30] 1 lock held by khungtaskd/30: [ 532.168426][ T30] #0: ffffffff8e1bccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 532.183400][ T30] 3 locks held by kworker/u8:7/3503: [ 532.192466][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 532.211799][ T30] #1: ffffc9000d22fd18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 532.223469][ T30] #2: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 532.232617][ T30] 3 locks held by kworker/u8:9/3541: [ 532.243016][ T30] #0: ffff88814d409948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 532.260800][ T30] #1: ffffc9000cfcfd18 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 532.278774][ T30] #2: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x121/0x14e0 [ 532.290643][ T30] 1 lock held by dhcpcd/5489: [ 532.300402][ T30] #0: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26e/0x1f50 [ 532.310523][ T30] 2 locks held by getty/5572: [ 532.315632][ T30] #0: ffff8880325bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 532.328535][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 532.338949][ T30] 1 lock held by syz-executor/5817: [ 532.344384][ T30] #0: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 532.355198][ T30] 3 locks held by kworker/0:7/5901: [ 532.360427][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 532.371232][ T30] #1: ffffc9000458fd18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 532.382586][ T30] #2: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 532.396121][ T30] 3 locks held by kworker/u8:13/7673: [ 532.401508][ T30] 1 lock held by syz-executor/8674: [ 532.407033][ T30] #0: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 532.421276][ T30] 1 lock held by syz-executor/8678: [ 532.426769][ T30] #0: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 532.443373][ T30] 1 lock held by syz.0.775/8896: [ 532.448328][ T30] #0: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 532.467307][ T30] 1 lock held by syz.2.776/8886: [ 532.472265][ T30] #0: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26e/0x1f50 [ 532.488551][ T30] 1 lock held by syz-executor/8919: [ 532.494844][ T30] #0: ffffffff8fef71e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 532.522820][ T30] [ 532.533464][ T30] ============================================= [ 532.533464][ T30] [ 532.557919][ T30] NMI backtrace for cpu 1 [ 532.557934][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 532.557954][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 532.557964][ T30] Call Trace: [ 532.557969][ T30] [ 532.557976][ T30] dump_stack_lvl+0x116/0x1f0 [ 532.558002][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 532.558029][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 532.558052][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 532.558080][ T30] watchdog+0xf62/0x12b0 [ 532.558108][ T30] ? __pfx_watchdog+0x10/0x10