last executing test programs: 4m21.009945214s ago: executing program 2 (id=210): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}}, 0x0) r10 = socket(0x10, 0x2, 0x0) write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4m19.20440028s ago: executing program 2 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="280000004e000000feffffffffffffff0500000000000000"], 0x404) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r5, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r6, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) 4m14.878802753s ago: executing program 2 (id=217): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x60, 0x32, 0x400, 0x8070bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) fsopen(0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="31a1b1bb81a6", 'wlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 4m13.368164209s ago: executing program 2 (id=220): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, 0x0, 0x7ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='@', 0x1}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/30, 0x1e}], 0x1}, 0x2140) r4 = socket(0x11, 0x2, 0x13) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000100)) setsockopt(r4, 0x107, 0x1, &(0x7f00000001c0)="110000000000060000071a80010061cc", 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 4m11.175843366s ago: executing program 2 (id=221): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r3 = getpgrp(0xffffffffffffffff) waitid(0x3, r3, &(0x7f0000000440), 0x4, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7fffffff) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 3m57.537126933s ago: executing program 2 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) unshare(0x6a040000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x9bc8, 0x8, 0x4, 0x494e], 0x1, 0x0, 0x0, [{}]}, 0x88) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) preadv2(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000440)=""/135, 0x87}], 0x0, 0x300, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x29, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) 3m41.965856492s ago: executing program 32 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) unshare(0x6a040000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x9bc8, 0x8, 0x4, 0x494e], 0x1, 0x0, 0x0, [{}]}, 0x88) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) preadv2(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000440)=""/135, 0x87}], 0x0, 0x300, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x29, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) 21.977569625s ago: executing program 5 (id=1165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xb}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) 21.507474221s ago: executing program 5 (id=1166): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x3, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) pipe2$9p(0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x6) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r3, 0x0, 0xffffffbf) 21.461562876s ago: executing program 5 (id=1167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2804c, 0x40001}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4007, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x640}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xeb\a\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xc9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\x95\x9cA\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t\xa6A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000700)='source', &(0x7f00000002c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfc\a\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d\xf5\x02;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K$\xa5/2Y\x10\x18=U\xbb\xd86\x02BpT\x98p\x89\x93v\xae\x95\a+\vB\x8c\x8b\xba\x1f\xcf\xf6\x94\xa10\xd9a-\x9b\xe8\x05\xc2\x98\xf3Wz2:\vx0M\xde\x80\xf1\xc1Dr\x92\xf2\xb5j[JN&[\x11\xc6\xb3\xfc\xec\x18', 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000e000000000000008100000086dd0101fe800000000040000000000000000018fe80000000"], 0x0) close(r8) 20.294601012s ago: executing program 5 (id=1172): socket$inet_smc(0x2b, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x47fff, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000014c0), 0x4080, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 16.945997006s ago: executing program 5 (id=1178): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x2, 0x0, 0x4000000000008, 0xfffffffd, 0x6e, {0x3, 0xfffffffffffffffb, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0xfff, 0x8, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 13.322352011s ago: executing program 3 (id=1185): syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b05e6, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x17}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0xf60d, 0x7f2e, 0x0, 0xfffffffd, 0x6, 0x7ffffffe, 0xfffffffe, 0xffff2ede, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x7, 0x0, 0x80000001, 0x0, 0x1ff, 0x20002, 0x0, 0x5, 0x40000000, 0x3ff}}) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xe0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r6, 0x9f) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r7, 0xffffffffffffffff, 0x0) 10.851512712s ago: executing program 4 (id=1191): socket$kcm(0x2, 0xa, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0xa0902) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.714284026s ago: executing program 0 (id=1192): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r1 = fsopen(&(0x7f0000000600)='pstore\x00', 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 10.166715408s ago: executing program 4 (id=1194): syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000000c0)=0x4, 0x4) r0 = memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x14080, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @value=r0}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x240c0091) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd74066ba8c9c8189, 0x8031, 0xffffffffffffffff, 0x28f43000) 10.163724915s ago: executing program 3 (id=1195): preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r3, &(0x7f00000002c0), 0x0}, 0x20) 9.042310247s ago: executing program 3 (id=1196): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0xfffffffffffffffe, 0x98) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x2, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) 7.327962243s ago: executing program 3 (id=1197): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x1, 0x2004c044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc000080) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x2, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0x1002, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x2, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r0, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.313252961s ago: executing program 0 (id=1198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0x8, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x3, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 6.687670178s ago: executing program 0 (id=1200): syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 6.650727383s ago: executing program 4 (id=1201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 5.571762443s ago: executing program 4 (id=1203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="2000128008000100687372001400"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.026121737s ago: executing program 1 (id=1204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff2}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xf, 0xd, 0x6, 0xb, 0xe, 0x4, 0x10, 0xd, 0xf, 0x1, 0x2, 0xf, 0xf, 0x2, 0x4, 0xf], 0x1, [0x8, 0x5, 0x2, 0xc25, 0x6, 0x7, 0x7, 0x8, 0xffff, 0x81, 0x5, 0x6, 0xa6f3, 0x1, 0x4000, 0x1], [0x7, 0x3, 0x0, 0x4f0, 0x800, 0xffff, 0xffff, 0x23, 0xa9, 0x5, 0x9, 0x40, 0x101, 0xff, 0x81, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 5.022919164s ago: executing program 0 (id=1205): rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f00000056c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0xfe}], 0x2}], 0x1, 0x20000800) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3021830b", @ANYRES16=0x0, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000005100000008009f000600"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "0500", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffff9d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.449487269s ago: executing program 1 (id=1206): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) 3.772347766s ago: executing program 3 (id=1207): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00ff0010e200000000000000000600", [0x0, 0x400]}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000500)="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", 0x1f6, 0x200000c0, &(0x7f00000001c0)={0xa, 0x2, 0x8001, @loopback, 0x8}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKRRPART(r1, 0x125f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.883749097s ago: executing program 5 (id=1208): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d"], 0x0) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e240000000922cbe0c027c2e0856d97e0d6e2d0a40000000000000000000000000000000007000000000000007d8030b02e6a6fcad1b5d02aed8292940575496c2d563c915856ac2f6acfb27c2df0132b458fc8005a4bda904815cf571695c5e25e6a78ff1be3647baab67653e5d206"], 0x80}, 0x1, 0x7}, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 2.72574579s ago: executing program 4 (id=1209): ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$unix(0x1, 0x1, 0x0) inotify_init1(0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 2.56885324s ago: executing program 1 (id=1210): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc000080) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x2, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0x1002, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x2, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r0, 0x1) 1.690664053s ago: executing program 0 (id=1211): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x1ff, 0x2000) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x81, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @ext={0x67, &(0x7f0000000340)="953c012a1f6442b30e6eac325ff2954fbf7d59bf515865703f2ea846b70c467e75420697f4e1df3c86d1e160336f9200b6847a493be4334f1e0a923099752d5a263fdcca1e9053ab14c52d5b3b3396b0772419fc3deb5d7f17b42a7386cd1ff603689fe8440be0"}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xffeffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0xf27, 0xd7b, 0x1, 0x8, 0x6, 0x9, 0x4, 0x9, 0x4, 0xfd, 0x2, 0x1, 0x1, 0x6, 0x9, 0x3, 0x8000, 0xc7c, 0x7, 0x40000003, 0x2, 0xcaa7, 0x0, 0xfffffffc, 0x6, 0x5, 0x9, 0x10001, 0x100040c6, 0x3, 0x8]}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 1.470656558s ago: executing program 1 (id=1212): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open$dir(0x0, 0x0, 0x13c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) 1.184327264s ago: executing program 0 (id=1213): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 731.906375ms ago: executing program 4 (id=1214): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f00000015c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x4001) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) fchdir(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0xb) 426.553481ms ago: executing program 1 (id=1215): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 93.656998ms ago: executing program 3 (id=1216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x5c3dc885e93f44d6, 0x0) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @empty}}, 0x1e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) sched_rr_get_interval(r2, &(0x7f0000000280)) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) setrlimit(0xf, &(0x7f0000000100)={0x9, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0], 0xa, 0x2, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 0s ago: executing program 1 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): [ 289.964623][ T6828] usb 2-1: SerialNumber: syz [ 290.095056][ T8023] netlink: 'syz.3.606': attribute type 15 has an invalid length. [ 290.109341][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 290.217206][ T6828] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 290.256613][ T6828] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 290.283800][ T8027] netlink: 56 bytes leftover after parsing attributes in process `syz.3.608'. [ 290.430540][ T8032] netlink: 84 bytes leftover after parsing attributes in process `syz.3.611'. [ 290.614409][ T6828] usb 2-1: 2:1 : can't get Cluster Descriptor [ 290.971147][ T6828] usb 2-1: USB disconnect, device number 13 [ 291.193473][ T8058] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 291.721166][ T5617] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 291.806925][ T8082] netlink: 56 bytes leftover after parsing attributes in process `syz.3.634'. [ 291.839923][ T5728] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 291.860068][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 291.891376][ T5617] usb 6-1: Using ep0 maxpacket: 16 [ 291.916116][ T5617] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.932976][ T5617] usb 6-1: config 0 interface 0 has no altsetting 0 [ 291.939588][ T5617] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 291.948953][ T5617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.960165][ T5617] usb 6-1: config 0 descriptor?? [ 292.041554][ T5728] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.051539][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 292.061726][ T5728] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.074330][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.084967][ T5728] usb 2-1: SerialNumber: syz [ 292.090865][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 292.112067][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.139718][ T9] usb 5-1: config 0 descriptor?? [ 292.160345][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 292.171971][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 292.171995][ T29] audit: type=1400 audit(1780193511.938:739): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 292.436905][ T8105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.645'. [ 292.449488][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8107 comm=syz.0.646 [ 292.468347][ T8107] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 292.472886][ T5617] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 292.511716][ T8107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.803946][ T5728] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 292.857234][ T29] audit: type=1400 audit(1780193512.628:740): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 292.923507][ T5728] usb 2-1: USB disconnect, device number 14 [ 292.954693][ T5728] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 292.962840][ T29] audit: type=1400 audit(1780193512.628:741): avc: denied { read } for pid=5279 comm="dhcpcd" name="n31" dev="tmpfs" ino=4594 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.004858][ T5617] usb 6-1: USB disconnect, device number 6 [ 293.013641][ T29] audit: type=1400 audit(1780193512.628:742): avc: denied { open } for pid=5279 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4594 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.060066][ T29] audit: type=1400 audit(1780193512.628:743): avc: denied { getattr } for pid=5279 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4594 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.191684][ T9] gspca_sq930x: ucbus_write failed -71 [ 293.201088][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 293.232562][ T9] usb 5-1: USB disconnect, device number 14 [ 293.254498][ T29] audit: type=1400 audit(1780193513.028:744): avc: denied { read } for pid=8120 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.372998][ T29] audit: type=1400 audit(1780193513.028:745): avc: denied { read open } for pid=8120 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.439836][ T29] audit: type=1400 audit(1780193513.028:746): avc: denied { getattr } for pid=8120 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.672398][ T29] audit: type=1400 audit(1780193513.448:747): avc: denied { append } for pid=8130 comm="syz.5.652" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 294.051738][ T29] audit: type=1400 audit(1780193513.818:748): avc: denied { write } for pid=8118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.141158][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 294.278125][ T8155] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.659'. [ 294.290477][ T5617] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 294.320036][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 294.335942][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 294.350657][ T8155] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 294.362573][ T9] usb 2-1: config 0 has no interface number 0 [ 294.386604][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.416802][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 294.444586][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 294.457778][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.481957][ T9] usb 2-1: Product: syz [ 294.489225][ T9] usb 2-1: Manufacturer: syz [ 294.499023][ T5617] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.520092][ T9] usb 2-1: SerialNumber: syz [ 294.527725][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 294.544347][ T9] usb 2-1: config 0 descriptor?? [ 294.565417][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 294.600539][ T5617] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 294.618543][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.657930][ T5617] usb 4-1: Product: syz [ 294.678470][ T5617] usb 4-1: Manufacturer: syz [ 294.688207][ T5617] usb 4-1: SerialNumber: syz [ 294.718011][ T5617] usb 4-1: config 0 descriptor?? [ 294.730489][ T8147] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 294.862433][ T5617] rc_core: IR keymap rc-streamzap not found [ 294.874768][ T5617] Registered IR keymap rc-empty [ 294.888621][ T5617] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 294.920773][ T5617] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 295.050401][ T5617] usb 4-1: USB disconnect, device number 11 [ 295.324998][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 295.359996][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input13 [ 295.484649][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 295.513704][ T8151] lo speed is unknown, defaulting to 1000 [ 295.775636][ T6828] usb 2-1: USB disconnect, device number 15 [ 295.879303][ T6828] appletouch 2-1:0.85: input: appletouch disconnected [ 295.960364][ T5707] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 296.042044][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'. [ 296.131278][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.151985][ T5728] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 296.178773][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.204681][ T5707] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 296.214507][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.240554][ T5707] usb 1-1: config 0 descriptor?? [ 296.391944][ T5728] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.411568][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.421824][ T5728] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.435467][ T5728] usb 4-1: string descriptor 0 read error: -22 [ 296.442148][ T5728] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 296.451469][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.479422][ T5728] usb 4-1: selecting invalid altsetting 1 [ 296.496205][ T5728] usb 4-1: unit 3 not found! [ 296.584020][ T8209] netlink: 'syz.1.676': attribute type 12 has an invalid length. [ 296.593146][ T8209] netlink: 'syz.1.676': attribute type 29 has an invalid length. [ 296.601647][ T8209] netlink: 148 bytes leftover after parsing attributes in process `syz.1.676'. [ 296.613743][ T8209] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 296.622894][ T8209] netlink: 'syz.1.676': attribute type 2 has an invalid length. [ 296.630780][ T8209] netlink: 11 bytes leftover after parsing attributes in process `syz.1.676'. [ 296.690603][ T5728] usb 4-1: cannot request logical cluster ID: 0 (err: -5) [ 296.712260][ T5728] usb 4-1: invalid MIXER UNIT descriptor 6 [ 296.754290][ T5707] hid-steam 0003:28DE:1142.0008: unexpected long global item [ 296.786752][ T5707] hid-steam 0003:28DE:1142.0008: steam_probe:parse of hid interface failed [ 296.820309][ T5707] hid-steam 0003:28DE:1142.0008: probe with driver hid-steam failed with error -22 [ 296.842484][ T8212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.880564][ T5728] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 296.897570][ T8217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.910584][ T5728] usb 4-1: USB disconnect, device number 12 [ 297.090275][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 297.149937][ T5707] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 297.241133][ T9] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 297.249583][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.262369][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.274170][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.287756][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.297601][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.308414][ T9] usb 6-1: config 0 descriptor?? [ 297.313922][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 297.321808][ T5707] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 297.334093][ T5707] usb 5-1: config 0 has no interface number 0 [ 297.342554][ T5707] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 297.352129][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.360635][ T5707] usb 5-1: Product: syz [ 297.366545][ T5707] usb 5-1: Manufacturer: syz [ 297.371947][ T5707] usb 5-1: SerialNumber: syz [ 297.383067][ T5707] usb 5-1: config 0 descriptor?? [ 297.400777][ T5707] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 297.509574][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 297.509604][ T29] audit: type=1400 audit(1780193517.278:762): avc: denied { bind } for pid=8222 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 297.631573][ T5707] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 297.646231][ T5707] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 297.770062][ T9] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 297.836256][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 297.854342][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 298.067652][ T6828] usb 6-1: USB disconnect, device number 7 [ 298.102703][ T10] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.116881][ T5707] usb 5-1: USB disconnect, device number 15 [ 298.124265][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.135213][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 298.135379][ T8232] lo speed is unknown, defaulting to 1000 [ 298.146415][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 298.146439][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.159645][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 298.179609][ T8227] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 298.201654][ T5707] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 298.224509][ T5707] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 298.240216][ T5707] quatech2 5-1:0.51: device disconnected [ 298.633593][ T8240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8240 comm=syz.3.689 [ 298.658393][ T8240] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 298.730808][ T6828] usb 1-1: USB disconnect, device number 14 [ 298.825167][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.693'. [ 299.000541][ T10] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 299.516227][ T8240] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.636702][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input16 [ 299.672625][ T10] usb 2-1: USB disconnect, device number 16 [ 299.672688][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 299.761337][ T29] audit: type=1400 audit(1780193519.528:763): avc: denied { name_bind } for pid=8259 comm="syz.5.694" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 300.272643][ T8272] input: syz0 as /devices/virtual/input/input17 [ 300.373340][ T29] audit: type=1400 audit(1780193520.148:764): avc: denied { mount } for pid=8278 comm="syz.1.702" name="/" dev="autofs" ino=21014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 300.495665][ T29] audit: type=1400 audit(1780193520.228:765): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 300.561763][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 300.655138][ T29] audit: type=1400 audit(1780193520.418:766): avc: denied { ioctl } for pid=8288 comm="syz.1.705" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 300.851695][ T29] audit: type=1400 audit(1780193520.628:767): avc: denied { read } for pid=8295 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 301.374655][ T29] audit: type=1400 audit(1780193521.148:768): avc: denied { write } for pid=8309 comm="syz.3.711" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 301.490146][ T6828] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 301.510159][ T8312] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 301.579058][ T8315] netlink: 'syz.5.713': attribute type 2 has an invalid length. [ 301.619942][ T8315] netlink: 7 bytes leftover after parsing attributes in process `syz.5.713'. [ 301.692784][ T6828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.712920][ T6828] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.740692][ T6828] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.783138][ T6828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 301.803885][ T6828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.831555][ T6828] usb 1-1: Product: syz [ 301.843244][ T6828] usb 1-1: Manufacturer: syz [ 301.850890][ T5728] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 301.864574][ T6828] usb 1-1: SerialNumber: syz [ 301.886735][ T6828] hub 1-1:1.0: bad descriptor, ignoring hub [ 301.908909][ T6828] hub 1-1:1.0: probe with driver hub failed with error -5 [ 301.919904][ T29] audit: type=1400 audit(1780193521.688:769): avc: denied { write } for pid=8320 comm="syz.5.716" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 302.030213][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 302.043383][ T5728] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 302.059901][ T5728] usb 4-1: config 0 has no interface number 0 [ 302.069813][ T5728] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 302.095609][ T6828] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 302.107214][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.118574][ T5616] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 302.125540][ T5616] Bluetooth: hci2: Invalid handle: 0xff00 > 0x0eff [ 302.129947][ T29] audit: type=1400 audit(1780193521.898:770): avc: denied { connect } for pid=8322 comm="syz.5.717" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.136591][ T5728] usb 4-1: Product: syz [ 302.159722][ T5728] usb 4-1: Manufacturer: syz [ 302.164436][ T4934] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 302.173072][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.179417][ T5728] usb 4-1: SerialNumber: syz [ 302.190977][ T5728] usb 4-1: config 0 descriptor?? [ 302.197793][ T8325] xt_hashlimit: size too large, truncated to 1048576 [ 302.338018][ T29] audit: type=1400 audit(1780193522.108:771): avc: denied { read write } for pid=8305 comm="syz.0.710" name="lp0" dev="devtmpfs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 302.412076][ T5728] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 302.430188][ T5728] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 302.455474][ T5728] usb 4-1: USB disconnect, device number 13 [ 303.030603][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 303.030632][ T29] audit: type=1400 audit(1780193522.798:773): avc: denied { write } for pid=8336 comm="syz.1.721" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 303.063558][ T29] audit: type=1400 audit(1780193522.808:774): avc: denied { ioctl } for pid=8336 comm="syz.1.721" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 303.108723][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 303.118543][ T5617] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 303.153407][ T9] usb 1-1: USB disconnect, device number 15 [ 303.176967][ T9] usblp0: removed [ 303.271354][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 303.284724][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 303.295429][ T5617] usb 6-1: Using ep0 maxpacket: 8 [ 303.300040][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 303.303029][ T10] usb 4-1: config 0 has no interface number 0 [ 303.309433][ T8347] netlink: 'syz.4.726': attribute type 13 has an invalid length. [ 303.311087][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 303.324897][ T5617] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 303.324940][ T5617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.324987][ T5617] usb 6-1: Product: syz [ 303.325002][ T5617] usb 6-1: Manufacturer: syz [ 303.325033][ T5617] usb 6-1: SerialNumber: syz [ 303.328726][ T5617] usb 6-1: config 0 descriptor?? [ 303.377781][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 303.379059][ T8347] netlink: 'syz.4.726': attribute type 13 has an invalid length. [ 303.388071][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.405475][ T10] usb 4-1: Product: syz [ 303.411461][ T10] usb 4-1: Manufacturer: syz [ 303.419425][ T10] usb 4-1: SerialNumber: syz [ 303.437645][ T10] usb 4-1: config 0 descriptor?? [ 303.550943][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 303.628205][ T5617] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 303.660943][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 303.673527][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 303.686466][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 303.699126][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 303.727127][ T10] usb 4-1: USB disconnect, device number 14 [ 303.750131][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 303.761045][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.775082][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.788768][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 303.847206][ T5617] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 303.857659][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 303.867430][ T8361] syzkaller1: entered promiscuous mode [ 303.867447][ T8361] syzkaller1: entered allmulticast mode [ 303.882093][ T5617] usb 6-1: USB disconnect, device number 8 [ 303.888275][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.905018][ T9] usb 1-1: config 0 descriptor?? [ 304.037989][ T29] audit: type=1400 audit(1780193523.808:775): avc: denied { connect } for pid=8364 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.065569][ T29] audit: type=1400 audit(1780193523.818:776): avc: denied { getopt } for pid=8364 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.316223][ T8367] lo speed is unknown, defaulting to 1000 [ 304.381998][ T9] hid (null): report_id 0 is invalid [ 304.404597][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000A/input/input18 [ 304.442706][ T5728] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 304.584168][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'. [ 304.602641][ T5728] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.621427][ T5728] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.671884][ T5728] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 304.696837][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000A/input/input19 [ 304.709414][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.381904][ T5721] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 305.396264][ T5728] usb 4-1: usb_control_msg returned -32 [ 305.417919][ T5728] usbtmc 4-1:16.0: can't read capabilities [ 305.450121][ T9] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 305.590007][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 305.613278][ T5721] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 305.652121][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.685480][ T5721] usb 2-1: Product: syz [ 305.730085][ T5721] usb 2-1: Manufacturer: syz [ 305.755492][ T5721] usb 2-1: SerialNumber: syz [ 305.776408][ T5721] usb 2-1: config 0 descriptor?? [ 306.090778][ T5721] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 306.532611][ T5721] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 306.664265][ T5721] usb 2-1: USB disconnect, device number 17 [ 307.007767][ T9] usb 1-1: USB disconnect, device number 16 [ 307.070364][ T8417] capability: warning: `syz.5.751' uses deprecated v2 capabilities in a way that may be insecure [ 307.264272][ T6828] usb 4-1: USB disconnect, device number 15 [ 307.490126][ T5721] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 307.619975][ T6828] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 307.673064][ T5721] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 307.682291][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 307.690349][ T5721] usb 5-1: Product: syz [ 307.694569][ T5721] usb 5-1: SerialNumber: syz [ 307.706441][ T5721] usb 5-1: config 0 descriptor?? [ 307.711542][ T804] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 307.780009][ T6828] usb 4-1: Using ep0 maxpacket: 16 [ 307.795109][ T6828] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 307.809968][ T6828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.818780][ T6828] usb 4-1: Product: syz [ 307.829758][ T6828] usb 4-1: Manufacturer: syz [ 307.835167][ T6828] usb 4-1: SerialNumber: syz [ 307.844043][ T6828] usb 4-1: config 0 descriptor?? [ 307.881534][ T804] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.903130][ T804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.924098][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.936952][ T5721] hso 5-1:0.0: Can't find BULK endpoints [ 307.945260][ T804] usb 1-1: Product: syz [ 307.953289][ T804] usb 1-1: Manufacturer: syz [ 307.958476][ T804] usb 1-1: SerialNumber: syz [ 308.077696][ T6828] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 308.088891][ T6828] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 308.111145][ T8448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.146678][ T9] usb 5-1: USB disconnect, device number 16 [ 308.318157][ T10] usb 4-1: USB disconnect, device number 16 [ 308.486336][ T8455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.995574][ T804] cdc_ncm 1-1:1.0: failed to get mac address [ 309.141904][ T29] audit: type=1400 audit(1780193528.908:777): avc: denied { read } for pid=8472 comm="syz.3.775" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 309.168092][ T29] audit: type=1400 audit(1780193528.928:778): avc: denied { open } for pid=8472 comm="syz.3.775" path="/168/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 309.168873][ T8473] sd 0:0:1:0: PR command failed: 1026 [ 309.191008][ T29] audit: type=1400 audit(1780193528.928:779): avc: denied { ioctl } for pid=8472 comm="syz.3.775" path="/168/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 309.196835][ T804] cdc_ncm 1-1:1.0: bind() failure [ 309.210475][ T8473] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 309.236748][ T8473] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 309.263311][ T804] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 309.275052][ T804] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 309.291908][ T804] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 309.315315][ T804] usb 1-1: USB disconnect, device number 17 [ 309.342266][ T29] audit: type=1400 audit(1780193529.118:780): avc: denied { listen } for pid=8477 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.381009][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 309.517384][ T29] audit: type=1400 audit(1780193529.288:781): avc: denied { read write } for pid=8484 comm="syz.1.780" name="mouse0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 309.563220][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.567476][ T29] audit: type=1400 audit(1780193529.298:782): avc: denied { open } for pid=8484 comm="syz.1.780" path="/dev/input/mouse0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 309.579242][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.667169][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.677946][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.806781][ T8496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.225221][ T29] audit: type=1326 audit(1780193529.998:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39f7f9ce59 code=0x0 [ 310.776170][ T10] usb 5-1: usb_control_msg returned -32 [ 310.790351][ T10] usbtmc 5-1:16.0: can't read capabilities [ 310.960131][ T804] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 311.032952][ T8520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8520 comm=syz.5.792 [ 311.047374][ T8520] netlink: 'syz.5.792': attribute type 1 has an invalid length. [ 311.092742][ T8520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.120018][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 311.131792][ T804] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 311.145308][ T804] usb 2-1: config 0 has no interface number 0 [ 311.153359][ T804] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 311.163467][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.171971][ T804] usb 2-1: Product: syz [ 311.176928][ T804] usb 2-1: Manufacturer: syz [ 311.181871][ T804] usb 2-1: SerialNumber: syz [ 311.238621][ T804] usb 2-1: config 0 descriptor?? [ 311.509624][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.519639][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.598434][ T29] audit: type=1400 audit(1780193531.368:784): avc: denied { connect } for pid=8511 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.658519][ T29] audit: type=1400 audit(1780193531.428:785): avc: denied { read } for pid=8511 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.702436][ T8512] usb usb8: usbfs: process 8512 (syz.1.789) did not claim interface 0 before use [ 312.023400][ T29] audit: type=1400 audit(1780193531.798:786): avc: denied { append } for pid=8536 comm="syz.3.798" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 312.167025][ T5728] usb 5-1: USB disconnect, device number 17 [ 312.241224][ T6828] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 312.254632][ T8541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8541 comm=syz.4.800 [ 312.281351][ T8541] netlink: 'syz.4.800': attribute type 1 has an invalid length. [ 312.353020][ T8541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.376676][ T8544] bond2: (slave vlan2): making interface the new active one [ 312.400432][ T8544] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 312.411917][ T6828] usb 6-1: Using ep0 maxpacket: 16 [ 312.423319][ T6828] usb 6-1: unable to get BOS descriptor or descriptor too short [ 312.434677][ T6828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.445711][ T6828] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 312.454784][ T6828] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.470214][ T6828] usb 6-1: config 1 interface 1 has no altsetting 0 [ 312.481683][ T6828] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 312.492807][ T6828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.501526][ T6828] usb 6-1: Product: syz [ 312.508899][ T6828] usb 6-1: Manufacturer: syz [ 312.526304][ T6828] usb 6-1: SerialNumber: syz [ 312.929596][ T6828] usb 6-1: interface 2 not found [ 312.943465][ T6828] usb 6-1: selecting invalid altsetting 0 [ 312.968332][ T6828] usb 6-1: selecting invalid altsetting 0 [ 312.977697][ T6828] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 313.001189][ T6828] usb 6-1: selecting invalid altsetting 0 [ 313.011801][ T8550] netlink: 'syz.0.803': attribute type 8 has an invalid length. [ 313.019674][ T6828] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 313.028970][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 313.038259][ T6828] usb 6-1: selecting invalid altsetting 0 [ 313.046286][ T6828] snd-ua101 6-1:1.1: probe with driver snd-ua101 failed with error -22 [ 313.060614][ T8550] bond0: entered promiscuous mode [ 313.078793][ T8550] bond_slave_0: entered promiscuous mode [ 313.086940][ T6828] usb 6-1: USB disconnect, device number 9 [ 313.093740][ T8550] bond_slave_1: entered promiscuous mode [ 313.111627][ T8550] gretap0: entered promiscuous mode [ 313.123729][ T8550] erspan0: entered promiscuous mode [ 313.134075][ T8550] hsr1: entered promiscuous mode [ 313.841469][ T6828] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 313.857284][ T804] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 313.871365][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.809'. [ 313.882901][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 313.913152][ T804] usb 2-1: USB disconnect, device number 18 [ 314.041231][ T6828] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 314.067582][ T6828] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 314.098117][ T6828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.130841][ T6828] usb 5-1: Product: syz [ 314.148112][ T6828] usb 5-1: Manufacturer: syz [ 314.159566][ T6828] usb 5-1: SerialNumber: syz [ 314.192196][ T6828] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 314.324755][ T5728] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.390005][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 314.760025][ T804] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 314.831450][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.938432][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.990022][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 315.058646][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.126530][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.224761][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.244030][ T804] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 315.295217][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.308442][ T6828] usb 5-1: USB disconnect, device number 18 [ 315.329256][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 315.353804][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.356885][ T804] usb 2-1: Product: syz [ 315.372584][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.384503][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 315.394887][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.406995][ T804] usb 2-1: Manufacturer: syz [ 315.414302][ T804] usb 2-1: SerialNumber: syz [ 315.422648][ T9] usb 4-1: config 0 descriptor?? [ 315.427158][ T804] usb 2-1: config 0 descriptor?? [ 315.442204][ T9] hub 4-1:0.0: USB hub found [ 315.467578][ T804] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 315.524397][ T8581] lo speed is unknown, defaulting to 1000 [ 315.531640][ T5721] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 315.590812][ T5728] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 315.598464][ T5728] ath9k_htc: Failed to initialize the device [ 315.607655][ T6828] usb 5-1: ath9k_htc: USB layer deinitialized [ 315.642882][ T9] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 315.660155][ T46] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 315.707889][ T804] usb 2-1: USB disconnect, device number 19 [ 315.714048][ T137] usb 2-1: Failed to submit usb control message: -71 [ 315.722594][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 315.726849][ T137] usb 2-1: unable to send the bmi data to the device: -71 [ 315.733058][ T5721] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 315.736766][ T137] usb 2-1: unable to get target info from device [ 315.743976][ T5721] usb 1-1: config 179 has no interface number 0 [ 315.750543][ T137] usb 2-1: could not get target info (-71) [ 315.756401][ T5721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 315.756429][ T5721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 315.756455][ T5721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.756480][ T5721] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 315.756504][ T5721] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.756540][ T5721] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 315.756560][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.761245][ T8590] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 315.763318][ T137] usb 2-1: could not probe fw (-71) [ 315.853539][ T46] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.866840][ T46] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.898057][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.911092][ T46] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.923407][ T46] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.932458][ T46] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.944419][ T46] usb 6-1: Product: syz [ 315.948631][ T46] usb 6-1: Manufacturer: syz [ 315.956198][ T6828] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 315.971535][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 315.976931][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 315.986001][ T46] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 315.992078][ T46] cdc_wdm 6-1:1.0: Unknown control protocol [ 316.062180][ T804] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input20 [ 316.064066][ T9] hid_parser_main: 138 callbacks suppressed [ 316.064099][ T9] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0 [ 316.106125][ T9] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 316.130214][ T6828] usb 5-1: Using ep0 maxpacket: 32 [ 316.149377][ T6828] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 316.167242][ T6828] usb 5-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08 [ 316.188967][ T6828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.199576][ T46] usb 6-1: USB disconnect, device number 10 [ 316.212563][ T6828] usb 5-1: Product: syz [ 316.244306][ T6828] usb 5-1: Manufacturer: syz [ 316.259019][ T6828] usb 5-1: SerialNumber: syz [ 316.266640][ T9] usb 1-1: USB disconnect, device number 18 [ 316.266677][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 316.281445][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 316.334929][ T6828] mos7840 5-1:1.0: missing endpoints [ 316.361129][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.373879][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.582799][ T5617] usb 5-1: USB disconnect, device number 19 [ 316.588633][ T6828] usb 4-1: USB disconnect, device number 17 [ 316.710376][ T46] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 316.723752][ T8604] cgroup: fork rejected by pids controller in /syz1 [ 316.911458][ T46] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.958412][ T46] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.023204][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.059345][ T46] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.096445][ T46] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.132383][ T46] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.146328][ T46] usb 6-1: Product: syz [ 317.151209][ T46] usb 6-1: Manufacturer: syz [ 317.221915][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 317.239112][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 317.301872][ T46] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 317.316726][ T46] cdc_wdm 6-1:1.0: Unknown control protocol [ 317.706049][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.842544][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.984582][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.004859][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.025021][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.032847][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.046732][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.056099][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.078289][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 318.078312][ T29] audit: type=1400 audit(1780193537.848:788): avc: denied { mounton } for pid=8633 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 318.190014][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.439927][ T5728] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 318.534549][ T29] audit: type=1400 audit(1780193538.308:789): avc: denied { read } for pid=8646 comm="syz.3.829" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.574017][ T29] audit: type=1400 audit(1780193538.308:790): avc: denied { open } for pid=8646 comm="syz.3.829" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.600969][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 318.609775][ T29] audit: type=1400 audit(1780193538.308:791): avc: denied { ioctl } for pid=8646 comm="syz.3.829" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.611967][ T5728] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 318.694762][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.759508][ T5728] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 318.775729][ T12] bridge_slave_1: left allmulticast mode [ 318.791786][ T12] bridge_slave_1: left promiscuous mode [ 318.821445][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.839309][ T8651] KVM: debugfs: duplicate directory 8651-5 [ 318.850366][ T12] bridge_slave_0: left allmulticast mode [ 318.856005][ T12] bridge_slave_0: left promiscuous mode [ 318.861724][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.232801][ T29] audit: type=1400 audit(1780193539.008:792): avc: denied { write } for pid=8650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.265076][ T8663] overlayfs: failed to resolve './file0': -2 [ 319.374386][ T12] bond0 (unregistering): (slave vlan2): Releasing active interface [ 319.395672][ T5728] usb 6-1: USB disconnect, device number 11 [ 319.416857][ T12] bond0 (unregistering): Released all slaves [ 319.436198][ T29] audit: type=1400 audit(1780193539.208:793): avc: denied { write } for pid=8665 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.485801][ T8633] lo speed is unknown, defaulting to 1000 [ 319.496294][ T46] usb 5-1: USB disconnect, device number 20 [ 319.653648][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.670244][ T5622] Bluetooth: hci1: command 0x1003 tx timeout [ 319.683091][ T4934] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 319.866196][ T8673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 320.140121][ T4934] Bluetooth: hci3: command tx timeout [ 320.321238][ T8682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.351181][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.367501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.387959][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.402988][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.457078][ T12] veth1_macvtap: left promiscuous mode [ 320.479981][ T12] veth0_macvtap: left promiscuous mode [ 320.499206][ T12] veth1_vlan: left promiscuous mode [ 320.505447][ T29] audit: type=1400 audit(1780193540.278:794): avc: denied { execute } for pid=8687 comm="syz.5.836" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=23603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 320.512971][ T12] veth0_vlan: left promiscuous mode [ 320.914345][ T29] audit: type=1400 audit(1780193540.688:795): avc: denied { create } for pid=8703 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.001790][ T29] audit: type=1400 audit(1780193540.688:796): avc: denied { write } for pid=8703 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.080051][ T29] audit: type=1400 audit(1780193540.758:797): avc: denied { read } for pid=8703 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.459708][ T12] team0 (unregistering): Port device team_slave_1 removed [ 321.533919][ T12] team0 (unregistering): Port device team_slave_0 removed [ 322.074411][ T6828] lo speed is unknown, defaulting to 1000 [ 322.099981][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 322.111478][ T6828] syz0: Port: 1 Link DOWN [ 322.126849][ T48] smbdirect: ib_dev[syz0] removed [ 322.130911][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 322.232149][ T4934] Bluetooth: hci3: command tx timeout [ 322.326096][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 322.368589][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.424231][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.494327][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 322.538371][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.577462][ T9] usb 6-1: config 0 descriptor?? [ 322.650966][ T9] hub 6-1:0.0: USB hub found [ 322.687243][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.711266][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.721185][ T8633] bridge_slave_0: entered allmulticast mode [ 322.733520][ T8633] bridge_slave_0: entered promiscuous mode [ 322.742066][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.749174][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.756266][ T8633] bridge_slave_1: entered allmulticast mode [ 322.763387][ T8633] bridge_slave_1: entered promiscuous mode [ 322.858878][ T9] hub 6-1:0.0: 1 port detected [ 322.928281][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.965904][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.075785][ T9] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 323.114942][ T9] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 323.128070][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 323.128082][ T29] audit: type=1400 audit(1780193542.898:801): avc: denied { write } for pid=8736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.151904][ T8633] team0: Port device team_slave_0 added [ 323.167103][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 323.184084][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 323.212549][ T8633] team0: Port device team_slave_1 added [ 323.254443][ T9] usb 6-1: USB disconnect, device number 12 [ 323.397996][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.425725][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.473270][ T29] audit: type=1400 audit(1780193543.248:802): avc: denied { write } for pid=8758 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.498855][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.548021][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.569541][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.632264][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.661511][ T29] audit: type=1400 audit(1780193543.418:803): avc: denied { set_context_mgr } for pid=8765 comm="syz.0.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 323.707449][ T8766] binder: BINDER_SET_CONTEXT_MGR already set [ 323.713605][ T8766] binder: 8765:8766 ioctl 4018620d 200000004a80 returned -16 [ 323.719567][ T8633] hsr_slave_0: entered promiscuous mode [ 323.727316][ T8633] hsr_slave_1: entered promiscuous mode [ 323.734228][ T8633] debugfs: 'hsr0' already exists in 'hsr' [ 323.743061][ T8633] Cannot create hsr debugfs directory [ 323.754653][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 323.919663][ T8770] tipc: Started in network mode [ 323.925838][ T8770] tipc: Node identity 9e58342e1815, cluster identity 4711 [ 323.950317][ T8770] tipc: Enabled bearer , priority 0 [ 324.065065][ T8775] syzkaller0: entered promiscuous mode [ 324.070721][ T8775] syzkaller0: entered allmulticast mode [ 324.079172][ T8775] tipc: Resetting bearer [ 324.244081][ T8769] tipc: Resetting bearer [ 324.301240][ T4934] Bluetooth: hci3: command tx timeout [ 324.452102][ T8796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8796 comm=syz.0.860 [ 324.465305][ T8796] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 325.019330][ T29] audit: type=1400 audit(1780193544.788:804): avc: denied { write } for pid=8779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.329711][ T29] audit: type=1400 audit(1780193545.098:805): avc: denied { write } for pid=8812 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.601191][ T29] audit: type=1400 audit(1780193545.368:806): avc: denied { write } for pid=8817 comm="syz.4.863" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 326.451016][ T4934] Bluetooth: hci3: command tx timeout [ 328.192070][ T8769] tipc: Disabling bearer [ 328.222772][ T8796] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 328.259991][ T5707] tipc: Node number set to 2253206574 [ 328.306414][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 328.377077][ T8822] : entered promiscuous mode [ 328.627002][ T29] audit: type=1400 audit(1780193548.398:807): avc: denied { create } for pid=8847 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.656890][ T29] audit: type=1400 audit(1780193548.398:808): avc: denied { setopt } for pid=8847 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.915744][ T29] audit: type=1400 audit(1780193548.688:809): avc: denied { bind } for pid=8850 comm="syz.4.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 329.037203][ T29] audit: type=1400 audit(1780193548.808:810): avc: denied { watch watch_reads } for pid=8854 comm="syz.3.872" path="/200/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 329.161903][ T29] audit: type=1400 audit(1780193548.938:811): avc: denied { cmd } for pid=8861 comm="syz.4.873" path="socket:[23924]" dev="sockfs" ino=23924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 329.556474][ T29] audit: type=1400 audit(1780193549.328:812): avc: denied { write } for pid=8856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.779228][ T29] audit: type=1400 audit(1780193549.548:813): avc: denied { write } for pid=8876 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.876722][ T8633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.907201][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.942260][ T8633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.992011][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.004459][ T8633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.016293][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.025126][ T8881] openvswitch: netlink: IP tunnel dst address not specified [ 330.029178][ T29] audit: type=1400 audit(1780193549.798:814): avc: denied { ioctl } for pid=8878 comm="syz.0.876" path="ipc:[4026532788]" dev="nsfs" ino=4026532788 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 330.069569][ T8881] random: crng reseeded on system resumption [ 330.077258][ T8633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.118028][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.156009][ T8884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8884 comm=syz.0.878 [ 330.194720][ T8884] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 330.286856][ T8884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.348820][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.731466][ T8633] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.772334][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.779446][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.835526][ T544] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.842681][ T544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.892588][ T29] audit: type=1400 audit(1780193550.658:815): avc: denied { mounton } for pid=8908 comm="syz.4.881" path="/194/file0" dev="tmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 330.943163][ T29] audit: type=1400 audit(1780193550.658:816): avc: denied { write } for pid=8890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.658106][ T8931] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 331.910062][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 331.942973][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.080883][ T8633] veth0_vlan: entered promiscuous mode [ 332.083657][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.128485][ T8633] veth1_vlan: entered promiscuous mode [ 332.156266][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 332.188516][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.199516][ T8633] veth0_macvtap: entered promiscuous mode [ 332.230521][ T10] usb 4-1: config 0 descriptor?? [ 332.243825][ T8633] veth1_macvtap: entered promiscuous mode [ 332.260822][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 332.329227][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.375760][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.410159][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.455187][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.503127][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.538912][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.702466][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 332.728240][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 332.752863][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 332.789837][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.807179][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 332.827600][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.843815][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 332.896849][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 332.909239][ T544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.926984][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 332.948894][ T544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.170980][ T5729] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 333.224202][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 333.234856][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 333.254656][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 333.283746][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 333.314810][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 333.384537][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 333.396238][ T5729] usb 6-1: Using ep0 maxpacket: 16 [ 333.441954][ T5729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 333.459652][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 333.489544][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 333.517395][ T5729] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 333.545243][ T10] pwc: Registered as video103. [ 333.554809][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.577690][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 333.598997][ T5729] usb 6-1: Product: syz [ 333.603165][ T5729] usb 6-1: Manufacturer: syz [ 333.607753][ T5729] usb 6-1: SerialNumber: syz [ 333.655483][ T10] usb 4-1: USB disconnect, device number 18 [ 333.704492][ T5729] usb 6-1: config 0 descriptor?? [ 333.746068][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 333.746081][ T29] audit: type=1400 audit(1780193553.508:829): avc: denied { write } for pid=8967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.856676][ T5729] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 333.888200][ T5729] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 334.062701][ T29] audit: type=1400 audit(1780193553.838:830): avc: denied { write } for pid=8995 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.106859][ T8999] syzkaller0: entered promiscuous mode [ 334.113597][ T8999] syzkaller0: entered allmulticast mode [ 334.115672][ T29] audit: type=1400 audit(1780193553.888:831): avc: denied { write } for pid=8996 comm="syz.0.898" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 334.159392][ T29] audit: type=1400 audit(1780193553.888:832): avc: denied { open } for pid=8996 comm="syz.0.898" path="/179/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 334.186634][ T29] audit: type=1400 audit(1780193553.888:833): avc: denied { ioctl } for pid=8996 comm="syz.0.898" path="/179/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 334.403823][ T5729] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 334.561761][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 334.689744][ T29] audit: type=1400 audit(1780193554.458:834): avc: denied { write } for pid=9002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.721003][ T5707] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 334.760551][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 334.769877][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 334.793126][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.813429][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.833720][ T5729] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 334.844255][ T29] audit: type=1400 audit(1780193554.588:835): avc: denied { write } for pid=9019 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.848013][ T5729] em28xx 6-1:0.0: board has no eeprom [ 334.883633][ T10] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 334.905489][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.918141][ T10] usb 1-1: Product: syz [ 334.923538][ T10] usb 1-1: Manufacturer: syz [ 334.930187][ T10] usb 1-1: SerialNumber: syz [ 334.935041][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.946311][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 334.971191][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 334.983053][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 334.993704][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 335.018460][ T5707] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 335.028632][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 335.037320][ T5707] usb 4-1: Product: syz [ 335.041971][ T5707] usb 4-1: Manufacturer: syz [ 335.046916][ T5707] usb 4-1: SerialNumber: syz [ 335.056864][ T5707] usb 4-1: config 0 descriptor?? [ 335.174193][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 335.185517][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 335.280199][ T5707] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 335.291411][ T5707] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 335.480797][ T5707] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 335.488811][ T5707] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 335.501867][ T5707] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 335.679155][ T10] usb 1-1: USB disconnect, device number 19 [ 335.690234][ T5707] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 335.900343][ T5622] Bluetooth: hci3: command 0x0405 tx timeout [ 335.995912][ T8969] em28xx 6-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 336.049612][ T5729] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 336.068846][ T5729] em28xx 6-1:0.0: dvb set to bulk mode. [ 336.075341][ T10] em28xx 6-1:0.0: Binding DVB extension [ 336.100625][ T5729] usb 6-1: USB disconnect, device number 13 [ 336.134871][ T5729] em28xx 6-1:0.0: Disconnecting em28xx [ 336.177310][ T10] em28xx 6-1:0.0: Registering input extension [ 336.196128][ T5729] em28xx 6-1:0.0: Closing input extension [ 336.317667][ T5729] em28xx 6-1:0.0: Freeing device [ 337.229463][ T5707] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 337.795010][ T5707] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 338.012273][ T5707] usb 4-1: USB disconnect, device number 19 [ 339.476257][ T9068] bridge_slave_0: left allmulticast mode [ 339.518552][ T9068] bridge_slave_0: left promiscuous mode [ 339.543252][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 339.573215][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.631701][ T9068] bridge_slave_1: left allmulticast mode [ 339.659756][ T9068] bridge_slave_1: left promiscuous mode [ 339.685751][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.780769][ T9068] bond0: (slave bond_slave_0): Releasing backup interface [ 339.843141][ T9068] bond0: (slave bond_slave_1): Releasing backup interface [ 339.982808][ T9068] team0: Port device team_slave_0 removed [ 340.284350][ T9068] team0: Port device team_slave_1 removed [ 340.297548][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.314118][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.367150][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.415186][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.458703][ T9068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.648118][ T9081] netlink: 628 bytes leftover after parsing attributes in process `syz.5.920'. [ 340.693803][ T9081] netlink: 628 bytes leftover after parsing attributes in process `syz.5.920'. [ 341.043642][ T9091] binder: 9087:9091 unknown command 0 [ 341.049172][ T9091] binder: 9087:9091 ioctl c0306201 200000000480 returned -22 [ 341.271999][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 341.347636][ T29] audit: type=1400 audit(1780193561.118:836): avc: denied { write } for pid=9098 comm="syz.1.926" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 341.347701][ T9097] IPv6: sit1: Disabled Multicast RS [ 341.390889][ T9097] sit1: entered allmulticast mode [ 341.409085][ T29] audit: type=1400 audit(1780193561.148:837): avc: denied { getopt } for pid=9096 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 341.899240][ T29] audit: type=1400 audit(1780193561.668:838): avc: denied { setopt } for pid=9096 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 341.929078][ T9105] binder: 9104:9105 ioctl c0306201 200000000080 returned -14 [ 342.515847][ T9103] syz.1.927 (9103): drop_caches: 2 [ 342.734096][ T9119] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 342.761243][ T29] audit: type=1400 audit(1780193562.538:839): avc: denied { setopt } for pid=9120 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.248308][ T9129] syz_tun: entered allmulticast mode [ 343.283431][ T9129] lo: entered allmulticast mode [ 343.350194][ T9128] lo: left allmulticast mode [ 343.599437][ T9134] loop5: detected capacity change from 0 to 7 [ 343.695733][ T9134] loop5: [POWERTEC] p1 p2 p3 p4 [ 343.761442][ T9134] loop5: p1 size 1153433600 extends beyond EOD, truncated [ 343.856394][ T9134] loop5: p2 size 327680 extends beyond EOD, truncated [ 343.878814][ T9145] random: crng reseeded on system resumption [ 343.904334][ T9134] loop5: p3 start 589824 is beyond EOD, truncated [ 343.934832][ T9134] loop5: p4 start 1848407154 is beyond EOD, truncated [ 344.142093][ T6751] udevd[6751]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 344.144691][ T5604] udevd[5604]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 344.270919][ T5707] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 344.294115][ T29] audit: type=1400 audit(1780193564.068:840): avc: denied { write } for pid=9131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.325805][ T5616] Bluetooth: hci5: command 0x0405 tx timeout [ 344.460427][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 344.475505][ T5707] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 344.486518][ T5707] usb 2-1: config 0 has no interface number 0 [ 344.493403][ T5707] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 344.506016][ T5707] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 48704, setting to 1024 [ 344.535372][ T5707] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 344.553760][ T5707] usb 2-1: config 0 interface 41 has no altsetting 0 [ 344.573377][ T5707] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 344.585136][ T29] audit: type=1400 audit(1780193564.338:841): avc: denied { write } for pid=9166 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.594482][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.658166][ T5707] usb 2-1: Product: syz [ 344.678739][ T5707] usb 2-1: Manufacturer: syz [ 344.709638][ T5707] usb 2-1: SerialNumber: syz [ 344.758368][ T5707] usb 2-1: config 0 descriptor?? [ 344.792429][ T9150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.816963][ T9150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.838216][ T9177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9177 comm=syz.0.945 [ 344.899751][ T9177] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 344.977749][ T9177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.176450][ T9147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 345.184706][ T9147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.217372][ T5707] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, ea:2c:00:8c:ce:75 [ 346.217514][ T29] audit: type=1400 audit(1780193565.988:842): avc: denied { write } for pid=9173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.246311][ T5707] usb 2-1: USB disconnect, device number 20 [ 346.264787][ T46] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 346.275338][ T5707] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 346.417028][ T29] audit: type=1400 audit(1780193566.178:843): avc: denied { write } for pid=9210 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.459947][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 346.469660][ T46] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 346.478200][ T46] usb 5-1: config 0 has no interface number 0 [ 346.486663][ T46] usb 5-1: config 0 interface 184 has no altsetting 0 [ 346.515959][ T46] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 346.532643][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.555505][ T46] usb 5-1: Product: syz [ 346.560834][ T46] usb 5-1: Manufacturer: syz [ 346.574085][ T46] usb 5-1: SerialNumber: syz [ 346.590861][ T46] usb 5-1: config 0 descriptor?? [ 347.007625][ T9230] binder: 9229:9230 ioctl 8080aea1 0 returned -22 [ 347.030328][ T9230] binder: 9229:9230 ioctl c0306201 200000000240 returned -14 [ 347.187887][ T4934] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 347.229174][ T29] audit: type=1400 audit(1780193566.998:844): avc: denied { mount } for pid=9233 comm="syz.3.959" name="/" dev="ramfs" ino=26361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 347.320844][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 347.362384][ T29] audit: type=1400 audit(1780193567.078:845): avc: denied { write } for pid=9213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.394721][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 347.464797][ T29] audit: type=1400 audit(1780193567.158:846): avc: denied { create } for pid=9237 comm="syz.1.960" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 347.531669][ T29] audit: type=1400 audit(1780193567.188:847): avc: denied { mounton } for pid=9237 comm="syz.1.960" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 347.605210][ T29] audit: type=1400 audit(1780193567.348:848): avc: denied { write } for pid=9240 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.343864][ T9247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9247 comm=syz.1.962 [ 348.360691][ T9247] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 349.027415][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 349.039934][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 349.050443][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 349.060103][ T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 349.070521][ T46] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 349.354291][ T46] usb 5-1: USB disconnect, device number 21 [ 350.016411][ T4934] Bluetooth: hci2: unexpected event for opcode 0x080d [ 350.039624][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'. [ 350.050541][ T9266] netlink: 'syz.4.968': attribute type 3 has an invalid length. [ 350.058195][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'. [ 350.069924][ T9266] netlink: 'syz.4.968': attribute type 3 has an invalid length. [ 351.901543][ T6828] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 351.921379][ T29] audit: type=1400 audit(1780193571.698:849): avc: denied { sys_admin } for pid=9289 comm="syz.5.976" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 352.163365][ T29] audit: type=1400 audit(1780193571.928:850): avc: denied { append } for pid=9295 comm="syz.1.977" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 352.222819][ T6828] usb 5-1: Using ep0 maxpacket: 32 [ 352.231594][ T6828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.277886][ T6828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.340936][ T6828] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 352.438788][ T6828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.587928][ T6828] usb 5-1: config 0 descriptor?? [ 352.647979][ T6828] hub 5-1:0.0: USB hub found [ 352.909634][ T6828] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 353.238309][ T9300] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 353.344604][ T6828] hid-generic 0003:046D:C31C.000C: unknown main item tag 0x0 [ 353.435670][ T6828] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 354.367644][ T9284] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 354.426612][ T9284] usb 5-1: device reset changed ep0 maxpacket size! [ 354.477416][ T6828] usb 5-1: USB disconnect, device number 22 [ 354.650063][ T6828] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 354.720567][ T804] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 354.824358][ T6828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.838246][ T6828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.858622][ T6828] usb 5-1: New USB device found, idVendor=6181, idProduct=2377, bcdDevice= 0.00 [ 354.877391][ T6828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.889896][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 354.896527][ T804] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 354.908278][ T6828] usb 5-1: config 0 descriptor?? [ 354.915325][ T804] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.954884][ T6828] usb 5-1: can't set config #0, error -71 [ 354.968418][ T804] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.985586][ T6828] usb 5-1: USB disconnect, device number 23 [ 355.009932][ T46] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 355.017856][ T804] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.033072][ T804] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.046797][ T804] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.057281][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.191495][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.218191][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 355.237716][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 355.250944][ T46] usb 4-1: Product: syz [ 355.259931][ T46] usb 4-1: Manufacturer: syz [ 355.269630][ T46] usb 4-1: SerialNumber: syz [ 355.292407][ T804] usb 2-1: usb_control_msg returned -32 [ 355.308543][ T804] usbtmc 2-1:16.0: can't read capabilities [ 355.410035][ T6828] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 355.516408][ T46] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 355.572203][ T6828] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.593512][ T6828] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 355.621486][ T6828] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.641655][ T6828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.673643][ T9325] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 355.695968][ T6828] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.737128][ T5707] usb 4-1: USB disconnect, device number 20 [ 355.784742][ T5707] usblp1: removed [ 355.910792][ T46] usb 5-1: USB disconnect, device number 24 [ 356.087791][ T6828] usb 2-1: USB disconnect, device number 21 [ 356.450376][ T804] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 356.590269][ T5707] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 357.014070][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.138198][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.174710][ T5707] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 357.214745][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.451272][ T5707] usb 4-1: config 0 descriptor?? [ 357.809911][ T804] usb 1-1: Using ep0 maxpacket: 8 [ 357.829009][ T804] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 357.862899][ T804] usb 1-1: config 179 has no interface number 0 [ 357.870382][ T9335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.889967][ T804] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 357.894536][ T9335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.909355][ T804] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 357.944755][ T804] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 357.966020][ T804] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.994291][ T804] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 358.033470][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.185618][ T5707] usbhid 4-1:0.0: can't add hid device: -71 [ 358.192182][ T5707] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 358.204262][ T9331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 358.213769][ T5707] usb 4-1: USB disconnect, device number 21 [ 359.102761][ T9331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.163662][ T9331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.183739][ T5729] usb 1-1: USB disconnect, device number 20 [ 359.974633][ T29] audit: type=1400 audit(1780193579.748:851): avc: denied { execute_no_trans } for pid=9363 comm="syz.5.999" path=2F6D656D66643A2D45D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=26652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 360.011585][ T9366] binder: BINDER_SET_CONTEXT_MGR already set [ 360.024928][ T9366] binder: 9364:9366 ioctl 4018620d 200000004a80 returned -16 [ 360.241814][ T9373] syzkaller0: entered promiscuous mode [ 360.257726][ T9373] syzkaller0: entered allmulticast mode [ 362.247585][ T9388] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 362.579427][ T9385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.354703][ T9404] tipc: Enabled bearer , priority 0 [ 363.522213][ T9403] tipc: Disabling bearer [ 363.584929][ T9412] binder: BINDER_SET_CONTEXT_MGR already set [ 363.595254][ T9412] binder: 9411:9412 ioctl 4018620d 2000000002c0 returned -16 [ 367.141782][ T9433] syzkaller0: entered promiscuous mode [ 367.176414][ T9433] syzkaller0: entered allmulticast mode [ 367.326206][ T29] audit: type=1804 audit(1780193587.098:852): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1023" name="/newroot/226/bus/bus" dev="overlay" ino=1191 res=1 errno=0 [ 367.612010][ T9438] tipc: Started in network mode [ 367.631616][ T9438] tipc: Node identity 961b3b11b1b4, cluster identity 4711 [ 367.695250][ T9438] tipc: Enabled bearer , priority 0 [ 367.885378][ T9439] syzkaller0: entered promiscuous mode [ 367.908254][ T9439] syzkaller0: entered allmulticast mode [ 367.935935][ T9439] tipc: Resetting bearer [ 368.043103][ T9437] tipc: Resetting bearer [ 368.547475][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 368.802741][ T9452] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1028'. [ 369.859787][ T29] audit: type=1400 audit(1780193589.628:853): avc: denied { create } for pid=9467 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 370.902119][ T9437] tipc: Disabling bearer [ 371.030401][ T804] tipc: Node number set to 665795345 [ 371.042727][ T9455] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 371.124790][ T9481] serio: Serial port ptm0 [ 371.298633][ T29] audit: type=1400 audit(1780193591.068:854): avc: denied { ioctl } for pid=9490 comm="syz.1.1037" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 371.402725][ T9492] batman_adv: batadv0: Adding interface: dummy0 [ 371.434550][ T9492] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.558546][ T9492] batman_adv: batadv0: Interface activated: dummy0 [ 371.975481][ T29] audit: type=1400 audit(1780193591.748:855): avc: denied { write } for pid=9476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.021015][ T9488] batadv0: mtu less than device minimum [ 372.125218][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.137343][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.148656][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.160548][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.171802][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.183046][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.194284][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.205525][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.216650][ T9488] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.397171][ T29] audit: type=1400 audit(1780193592.168:856): avc: denied { write } for pid=9510 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.006775][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.015321][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.084169][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.336509][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.088059][ T29] audit: type=1400 audit(1780193593.858:857): avc: denied { write } for pid=9516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.213303][ T9549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9549 comm=syz.4.1047 [ 374.244378][ T9549] netlink: 'syz.4.1047': attribute type 1 has an invalid length. [ 374.275988][ T9549] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.806659][ T29] audit: type=1400 audit(1780193594.578:858): avc: denied { write } for pid=9554 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.764269][ T9571] fuse: fd is not a fuse device [ 377.559540][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1060'. [ 377.646379][ T29] audit: type=1400 audit(1780193597.408:859): avc: denied { write } for pid=9568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.953742][ T29] audit: type=1400 audit(1780193597.728:860): avc: denied { write } for pid=9598 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.102895][ T9601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9601 comm=syz.1.1061 [ 378.158875][ T9601] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 378.944019][ T9601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.093958][ T9621] trusted_key: encrypted_key: insufficient parameters specified [ 379.107434][ T9621] 9p: Bad value for 'rfdno' [ 380.049300][ T29] audit: type=1400 audit(1780193599.818:861): avc: denied { write } for pid=9607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.356838][ T29] audit: type=1400 audit(1780193600.128:862): avc: denied { wake_alarm } for pid=9634 comm="syz.4.1070" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 380.917144][ T29] audit: type=1400 audit(1780193600.678:863): avc: denied { write } for pid=9633 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.146409][ T29] audit: type=1400 audit(1780193600.918:864): avc: denied { cmd } for pid=9644 comm="syz.1.1081" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 381.237677][ T29] audit: type=1400 audit(1780193600.988:865): avc: denied { map } for pid=9644 comm="syz.1.1081" path="/dev/ublkc0" dev="devtmpfs" ino=3208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 381.682813][ T29] audit: type=1400 audit(1780193601.458:866): avc: denied { write } for pid=9647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.732479][ T9659] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 381.763008][ T6380] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.804928][ T6380] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.844703][ T6380] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.877109][ T6380] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.993333][ T29] audit: type=1400 audit(1780193601.768:867): avc: denied { write } for pid=9664 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.100960][ T5721] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.111138][ T5721] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.124277][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.134323][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.216103][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.225350][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.261435][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.270684][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.318795][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.328028][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.366129][ T46] ldm_validate_partition_table(): Disk read failed. [ 382.397787][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.407043][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.492601][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.501857][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.537854][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.547108][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.774096][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.783382][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 382.865293][ T46] Dev ublkb0: unable to read RDB block 0 [ 382.897702][ T46] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.906966][ T46] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 383.016976][ T46] ublkb0: unable to read partition table [ 383.047805][ T46] ublkb0: partition table beyond EOD, truncated [ 383.214229][ T29] audit: type=1400 audit(1780193602.978:868): avc: denied { write } for pid=9673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.389460][ T9704] syzkaller0: entered promiscuous mode [ 383.539931][ T9704] syzkaller0: entered allmulticast mode [ 384.397271][ T29] audit: type=1400 audit(1780193604.168:869): avc: denied { write } for pid=9708 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.795999][ T9737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9737 comm=syz.1.1089 [ 385.922239][ T9740] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 387.258716][ T9746] syz.4.1091 (9746): drop_caches: 2 [ 387.457116][ T9740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.227485][ T9737] bond2: (slave vlan2): Enslaving as an active interface with a down link [ 388.777381][ T9752] dummy0: entered promiscuous mode [ 388.785330][ T9752] macvlan2: entered promiscuous mode [ 388.806266][ T9752] dummy0: left promiscuous mode [ 389.334247][ T9771] tipc: Enabling of bearer rejected, failed to enable media [ 392.108342][ T9789] vlan3: entered promiscuous mode [ 392.115220][ T9789] hsr0: entered promiscuous mode [ 392.129449][ T9789] vlan3: entered allmulticast mode [ 392.136071][ T9789] hsr0: entered allmulticast mode [ 392.142945][ T9789] hsr_slave_0: entered allmulticast mode [ 392.151632][ T9789] hsr_slave_1: entered allmulticast mode [ 393.666306][ T9805] syzkaller0: entered promiscuous mode [ 393.672760][ T9805] syzkaller0: entered allmulticast mode [ 393.692440][ T9805] tipc: Enabled bearer , priority 0 [ 393.711105][ T9800] syzkaller0: entered promiscuous mode [ 393.719790][ T9800] syzkaller0: entered allmulticast mode [ 393.735458][ T9804] tipc: Resetting bearer [ 393.760654][ T9804] tipc: Disabling bearer [ 393.818683][ T9808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9808 comm=syz.5.1108 [ 393.833135][ T9808] netlink: 'syz.5.1108': attribute type 1 has an invalid length. [ 393.889888][ T5728] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 393.956681][ T9808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.047719][ T9817] syzkaller0: entered promiscuous mode [ 394.053975][ T9817] syzkaller0: entered allmulticast mode [ 394.061999][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.078079][ T9817] tipc: Enabled bearer , priority 0 [ 394.084828][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 394.101618][ T9817] tipc: Resetting bearer [ 394.107485][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 394.120148][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 394.130208][ T9816] tipc: Resetting bearer [ 394.136108][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.159006][ T9816] tipc: Disabling bearer [ 394.167061][ T5728] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 394.179641][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.189262][ T5728] usb 5-1: Product: syz [ 394.195307][ T5728] usb 5-1: Manufacturer: syz [ 394.201854][ T5728] usb 5-1: SerialNumber: syz [ 394.209151][ T5728] usb 5-1: config 0 descriptor?? [ 394.229015][ T5728] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 394.249662][ T5728] imon 5-1:0.0: unable to initialize intf0, err -90 [ 394.256814][ T5728] imon:imon_probe: failed to initialize context! [ 394.276553][ T5728] imon 5-1:0.0: unable to register, err -19 [ 394.527944][ T9] usb 5-1: USB disconnect, device number 25 [ 394.590247][ T29] audit: type=1400 audit(1780193614.358:870): avc: denied { map } for pid=9819 comm="syz.0.1111" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 394.674851][ T29] audit: type=1400 audit(1780193614.358:871): avc: denied { execute } for pid=9819 comm="syz.0.1111" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 395.129946][ T5728] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 395.234771][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 395.330572][ T5728] usb 4-1: Using ep0 maxpacket: 16 [ 395.352873][ T5728] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.379748][ T9836] bridge1: port 1(veth3) entered blocking state [ 395.396672][ T5728] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.419170][ T5728] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 395.422970][ T9836] bridge1: port 1(veth3) entered disabled state [ 395.478166][ T9836] veth3: entered allmulticast mode [ 395.524080][ T9836] veth3: entered promiscuous mode [ 395.560670][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.569091][ T5728] usb 4-1: Product: syz [ 395.573299][ T5728] usb 4-1: Manufacturer: syz [ 395.577882][ T5728] usb 4-1: SerialNumber: syz [ 395.602363][ T5728] usb 4-1: config 0 descriptor?? [ 395.650018][ T9835] bridge1: port 2(veth5) entered blocking state [ 395.657197][ T9835] bridge1: port 2(veth5) entered disabled state [ 395.670201][ T9835] veth5: entered allmulticast mode [ 395.704284][ T9835] veth5: entered promiscuous mode [ 396.130008][ T9841] ip6t_srh: unknown srh invflags 4000 [ 396.495009][ T5728] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 396.933283][ T9854] Invalid source name [ 400.020060][ T5728] rc_core: IR keymap rc-imon-pad not found [ 400.138623][ T5728] Registered IR keymap rc-empty [ 400.219879][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 400.233715][ T5728] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 400.365191][ T5728] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 400.854649][ T9868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9868 comm=syz.5.1124 [ 400.883945][ T5728] imon:send_packet: packet tx failed (-71) [ 400.896113][ T9868] netlink: 'syz.5.1124': attribute type 1 has an invalid length. [ 400.910268][ T5728] imon 4-1:0.0: remote input dev register failed [ 400.918259][ T5728] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 401.026264][ T29] audit: type=1400 audit(1780193620.788:872): avc: denied { create } for pid=9869 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 401.065203][ T9868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.093298][ T9880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9880 comm=syz.3.1126 [ 401.114189][ T5728] imon 4-1:0.0: unable to initialize intf0, err 0 [ 401.136456][ T5728] imon:imon_probe: failed to initialize context! [ 401.156271][ T5728] imon 4-1:0.0: unable to register, err -19 [ 401.178514][ T9880] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 401.198214][ T5728] usb 4-1: USB disconnect, device number 22 [ 401.261140][ T29] audit: type=1400 audit(1780193621.038:873): avc: denied { unmount } for pid=8633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 401.531625][ T9880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 402.258804][ T9897] binder_alloc: 9887: binder_alloc_buf, no vma [ 402.356409][ T5616] Bluetooth: hci3: link tx timeout [ 402.371350][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.396032][ T5616] Bluetooth: hci3: link tx timeout [ 402.401714][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.419355][ T5616] Bluetooth: hci3: link tx timeout [ 402.424979][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.437417][ T5616] Bluetooth: hci3: link tx timeout [ 402.447262][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.455260][ T5616] Bluetooth: hci3: link tx timeout [ 402.460927][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.468817][ T5616] Bluetooth: hci3: link tx timeout [ 402.475773][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.483706][ T5616] Bluetooth: hci3: link tx timeout [ 402.489722][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.506002][ T5616] Bluetooth: hci3: link tx timeout [ 402.511409][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.520078][ T5616] Bluetooth: hci3: link tx timeout [ 402.526906][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.534954][ T5616] Bluetooth: hci3: link tx timeout [ 402.542206][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.550845][ T5616] Bluetooth: hci3: link tx timeout [ 402.556362][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.564272][ T5616] Bluetooth: hci3: link tx timeout [ 402.569691][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.582789][ T5616] Bluetooth: hci3: link tx timeout [ 402.874966][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 403.944246][ T9917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9917 comm=syz.4.1137 [ 403.977937][ T9917] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 404.083305][ T9917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.092875][ T9922] syz_tun: entered allmulticast mode [ 404.460381][ T5616] Bluetooth: hci3: command 0x0405 tx timeout [ 407.467986][ T9957] syz_tun: entered allmulticast mode [ 408.745122][ T5729] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 408.965329][ T29] audit: type=1400 audit(1780193628.738:874): avc: denied { watch } for pid=9950 comm="syz.4.1146" path="/253/file0" dev="tmpfs" ino=1334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 409.008610][ T5729] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 409.947873][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.103242][ T5729] usb 1-1: Product: syz [ 410.182834][ T5729] usb 1-1: Manufacturer: syz [ 410.207077][ T5729] usb 1-1: SerialNumber: syz [ 410.234777][ T5729] usb 1-1: config 0 descriptor?? [ 410.466835][ T5729] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.694609][ T9972] tipc: Enabled bearer , priority 0 [ 410.713148][ T9972] syzkaller0: entered promiscuous mode [ 410.730099][ T9972] syzkaller0: entered allmulticast mode [ 410.730201][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 410.782046][ T9972] tipc: Resetting bearer [ 410.802055][ T9971] tipc: Resetting bearer [ 410.832059][ T9971] tipc: Disabling bearer [ 410.902303][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.924652][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.955855][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.000489][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.030854][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.070670][ T10] usb 2-1: config 0 descriptor?? [ 411.568251][ T29] audit: type=1400 audit(1780193631.338:875): avc: denied { listen } for pid=9969 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.664618][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.676215][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.720676][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.801167][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.819416][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.842579][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.879438][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 412.113030][ T5729] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 412.148060][ T5729] usb 1-1: USB disconnect, device number 21 [ 412.176585][ T10] usb 2-1: USB disconnect, device number 22 [ 414.960315][ T5728] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 415.094349][ T5729] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 415.140194][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 415.162153][ T5728] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 415.192756][T10015] binder_alloc: 10014: binder_alloc_buf, no vma [ 415.206040][ T5728] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.237008][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 415.269930][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 415.278604][ T5728] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.287654][ T5729] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 415.314442][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 415.321523][ T5729] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 415.361090][ T5729] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 415.387065][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 415.387107][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.421696][T10028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10028 comm=syz.5.1167 [ 415.437757][ T5729] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 415.448388][ T5728] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 415.450610][T10028] netlink: 'syz.5.1167': attribute type 1 has an invalid length. [ 415.474950][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 415.520268][ T5728] usb 4-1: config 168 interface 0 has no altsetting 0 [ 415.533977][ T5729] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 415.551565][ T5728] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 415.555471][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.587982][ T5728] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.624074][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 415.643613][T10028] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.650771][ T5728] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.666032][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 415.667598][ T5729] usb 1-1: config 0 descriptor?? [ 415.678063][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 415.699981][ T5728] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 415.733541][ T5728] usb 4-1: config 168 interface 0 has no altsetting 0 [ 415.743259][ T5728] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 415.752469][ T5728] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.799713][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 415.856669][ T5728] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.912638][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.027509][ T5728] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 416.100728][ T5728] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 416.144880][ T5728] usb 4-1: config 168 interface 0 has no altsetting 0 [ 416.370082][ T5728] usb 4-1: string descriptor 0 read error: -22 [ 416.376516][ T5728] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 416.386616][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.514391][ T5728] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 416.743217][ T5729] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 416.971907][ T5729] usb 1-1: USB disconnect, device number 22 [ 417.579703][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 417.656853][ T5729] usblp1: removed [ 417.663173][ T5728] usb 4-1: USB disconnect, device number 23 [ 418.180101][ T5729] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 418.312728][ T29] audit: type=1400 audit(1780193638.088:876): avc: denied { bind } for pid=10056 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.733480][ T29] audit: type=1400 audit(1780193638.088:877): avc: denied { setopt } for pid=10056 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.760389][ T29] audit: type=1400 audit(1780193638.088:878): avc: denied { listen } for pid=10056 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.833818][ T29] audit: type=1400 audit(1780193638.608:879): avc: denied { connect } for pid=10056 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.906807][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 419.055592][ T29] audit: type=1400 audit(1780193638.618:880): avc: denied { accept } for pid=10056 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 419.239799][ T29] audit: type=1400 audit(1780193638.618:881): avc: denied { write } for pid=10056 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 419.337497][ T29] audit: type=1400 audit(1780193638.678:882): avc: denied { read } for pid=10056 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.070906][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1177'. [ 420.133598][T10070] random: crng reseeded on system resumption [ 420.289581][T10069] Restarting kernel threads ... [ 420.295674][T10069] Done restarting kernel threads. [ 420.317124][T10071] input: syz1 as /devices/virtual/input/input25 [ 421.285425][ T29] audit: type=1400 audit(1780193641.038:883): avc: denied { read } for pid=10072 comm="syz.5.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 421.355772][ T29] audit: type=1400 audit(1780193641.098:884): avc: denied { write } for pid=10072 comm="syz.5.1178" path="socket:[29714]" dev="sockfs" ino=29714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 421.716011][T10083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10083 comm=syz.1.1181 [ 421.766296][T10083] netlink: 'syz.1.1181': attribute type 1 has an invalid length. [ 422.052932][T10083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.762651][ T29] audit: type=1400 audit(1780193642.538:885): avc: denied { setopt } for pid=10088 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 423.717176][T10103] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 423.744936][T10103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.753643][T10103] IPv6: NLM_F_CREATE should be set when creating new route [ 423.899551][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 423.899578][ T29] audit: type=1326 audit(1780193643.668:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10100 comm="syz.3.1185" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99ce59 code=0x0 [ 424.159512][T10105] net_ratelimit: 10 callbacks suppressed [ 424.159529][T10105] TC_ACT_REPEAT abuse ? [ 424.721639][T10107] program syz.0.1188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.731383][T10107] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 424.839897][ T5721] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 425.020536][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 425.048408][ T5721] usb 2-1: config 0 has no interfaces? [ 425.068146][ T5721] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 425.125053][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.187658][ T5721] usb 2-1: Product: syz [ 425.225651][ T5721] usb 2-1: Manufacturer: syz [ 425.266517][ T5721] usb 2-1: SerialNumber: syz [ 425.431152][ T5721] usb 2-1: config 0 descriptor?? [ 425.932595][ T5721] usb 2-1: USB disconnect, device number 23 [ 426.703699][T10123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10123 comm=syz.1.1193 [ 426.749448][T10123] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 427.894774][T10123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 429.322857][ T29] audit: type=1400 audit(1780193648.568:890): avc: denied { open } for pid=10136 comm="syz.3.1196" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 431.956073][T10156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10156 comm=syz.4.1203 [ 432.039231][T10159] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1204'. [ 432.518274][ T5729] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 432.950828][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 433.617349][ T5729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.804618][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 433.949921][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 434.090857][ T5729] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 434.131063][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.169471][ T5729] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 434.179112][ T5729] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 434.189073][ T5729] usb 1-1: Manufacturer: syz [ 434.196609][T10174] loop9: detected capacity change from 0 to 2640 [ 434.217931][ T5729] usb 1-1: config 0 descriptor?? [ 434.327217][ T5605] buffer_io_error: 3 callbacks suppressed [ 434.327228][ T5605] Buffer I/O error on dev loop9, logical block 0, async page read [ 434.382362][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.388927][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.427021][T10174] Buffer I/O error on dev loop9, logical block 0, async page read [ 434.456957][ T5605] Buffer I/O error on dev loop9, logical block 0, async page read [ 434.618440][ T5605] Buffer I/O error on dev loop9, logical block 0, async page read [ 434.630722][ T5605] Buffer I/O error on dev loop9, logical block 0, async page read [ 434.640625][ T5605] Buffer I/O error on dev loop9, logical block 0, async page read [ 434.659769][T10174] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.006166][T10174] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.093858][T10174] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.128547][T10174] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.374827][T10174] ldm_validate_partition_table(): Disk read failed. [ 435.403513][ T5729] rc_core: IR keymap rc-hauppauge not found [ 435.410849][ T5729] Registered IR keymap rc-empty [ 435.416429][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.443325][T10174] Dev loop9: unable to read RDB block 0 [ 435.449585][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.468371][T10174] loop9: unable to read partition table [ 435.513085][T10174] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 435.715996][ T5729] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 435.733524][ T5729] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 436.074454][T10180] ldm_validate_partition_table(): Disk read failed. [ 436.099390][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.151798][T10180] Dev loop9: unable to read RDB block 0 [ 436.152608][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.301253][T10180] loop9: unable to read partition table [ 436.440159][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.461072][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.490045][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.569008][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.621407][ T29] audit: type=1400 audit(1780193656.358:891): avc: denied { write } for pid=10199 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.669356][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.733338][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.791834][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.832872][ T5729] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 436.874820][ T5729] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 437.152129][ T5729] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 437.196269][ T5729] usb 1-1: USB disconnect, device number 24 [ 542.449797][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 542.456793][ C1] rcu: 0-...!: (1 GPs behind) idle=7d8c/0/0x1 softirq=43073/43074 fqs=1 [ 542.466335][ C1] rcu: (detected by 1, t=10505 jiffies, g=46365, q=3488 ncpus=2) [ 542.474127][ C1] Sending NMI from CPU 1 to CPUs 0: [ 542.474149][ C0] NMI backtrace for cpu 0 [ 542.474162][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.474181][ C0] Tainted: [L]=SOFTLOCKUP [ 542.474186][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.474193][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 542.474213][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 db dd e8 f5 cc [ 542.474225][ C0] RSP: 0018:ffffc90000007dd0 EFLAGS: 00000046 [ 542.474237][ C0] RAX: 0000000080010002 RBX: ffff88803480e300 RCX: ffffffff899a67e0 [ 542.474246][ C0] RDX: ffffffff8e4955c0 RSI: ffffffff899a61d3 RDI: ffffffff8e4955c0 [ 542.474255][ C0] RBP: ffff88802e9b6400 R08: 0000000000000005 R09: 0000000000000000 [ 542.474263][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 542.474271][ C0] R13: ffffffff8e496138 R14: dffffc0000000000 R15: ffff8880b8428650 [ 542.474280][ C0] FS: 0000000000000000(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 542.474295][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.474303][ C0] CR2: 0000001b3081bff8 CR3: 000000007784f000 CR4: 00000000003526f0 [ 542.474312][ C0] Call Trace: [ 542.474316][ C0] [ 542.474321][ C0] advance_sched+0x1a3/0xd20 [ 542.474342][ C0] ? find_held_lock+0x2b/0x80 [ 542.474357][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 542.474374][ C0] ? __pfx_advance_sched+0x10/0x10 [ 542.474393][ C0] __hrtimer_run_queues+0x470/0xa00 [ 542.474415][ C0] hrtimer_interrupt+0x3e5/0x940 [ 542.474439][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 542.474458][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 542.474474][ C0] [ 542.474478][ C0] [ 542.474483][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 542.474498][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 542.474513][ C0] Code: e5 92 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 41 22 00 fb f4 fc 43 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 542.474525][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 542.474535][ C0] RAX: 0000000001e6822b RBX: ffffffff8e4955c0 RCX: ffffffff8b895285 [ 542.474544][ C0] RDX: 0000000000000000 RSI: ffffffff8df0f551 RDI: ffffffff8c1c4400 [ 542.474552][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 542.474561][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 542.474569][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d70c50 [ 542.474580][ C0] ? ct_kernel_exit+0x125/0x180 [ 542.474598][ C0] default_idle+0x9/0x10 [ 542.474616][ C0] default_idle_call+0x6c/0xb0 [ 542.474639][ C0] do_idle+0x464/0x590 [ 542.474659][ C0] ? __pfx_do_idle+0x10/0x10 [ 542.474680][ C0] cpu_startup_entry+0x4f/0x60 [ 542.474692][ C0] rest_init+0x251/0x260 [ 542.474703][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 542.474718][ C0] start_kernel+0x484/0x490 [ 542.474731][ C0] x86_64_start_reservations+0x24/0x30 [ 542.474744][ C0] x86_64_start_kernel+0x12b/0x130 [ 542.474757][ C0] common_startup_64+0x13e/0x148 [ 542.474780][ C0] [ 542.475145][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g46365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 542.804090][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 542.814038][ C1] rcu: RCU grace-period kthread stack dump: [ 542.819904][ C1] task:rcu_preempt state:R running task stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 542.833380][ C1] Call Trace: [ 542.836645][ C1] [ 542.839564][ C1] __schedule+0x1295/0x67a0 [ 542.844076][ C1] ? __pfx___schedule+0x10/0x10 [ 542.848913][ C1] ? find_held_lock+0x2b/0x80 [ 542.853576][ C1] ? schedule+0x2bf/0x390 [ 542.857897][ C1] schedule+0xdd/0x390 [ 542.861956][ C1] schedule_timeout+0x127/0x280 [ 542.866795][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 542.872155][ C1] ? __pfx_process_timeout+0x10/0x10 [ 542.877428][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 542.883225][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 542.888677][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 542.893435][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 542.898714][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 542.904166][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 542.909095][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 542.914280][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 542.920078][ C1] rcu_gp_kthread+0x179/0x230 [ 542.924746][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 542.929934][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 542.935737][ C1] ? __kthread_parkme+0x18c/0x230 [ 542.940761][ C1] ? kthread+0x13a/0x450 [ 542.945002][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 542.950200][ C1] kthread+0x370/0x450 [ 542.954265][ C1] ? __pfx_kthread+0x10/0x10 [ 542.958846][ C1] ret_from_fork+0x72b/0xd50 [ 542.963435][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 542.968547][ C1] ? __switch_to+0x800/0x1100 [ 542.973233][ C1] ? __pfx_kthread+0x10/0x10 [ 542.977821][ C1] ret_from_fork_asm+0x1a/0x30 [ 542.982595][ C1] [ 542.985602][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 542.991915][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.002403][ C1] Tainted: [L]=SOFTLOCKUP [ 543.006708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.016751][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 543.022377][ C1] Code: e5 92 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 41 22 00 fb f4 fc 43 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 543.041975][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 543.048035][ C1] RAX: 000000000200e989 RBX: ffff88801e2b2540 RCX: ffffffff8b895285 [ 543.055996][ C1] RDX: 0000000000000000 RSI: ffffffff8df0f551 RDI: ffffffff8c1c4400 [ 543.063956][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 543.071914][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 543.079875][ C1] R13: ffffed1003c564a8 R14: 0000000000000001 R15: ffffffff90d70c50 [ 543.087831][ C1] FS: 0000000000000000(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 543.096751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.103323][ C1] CR2: 00007f6f83c49070 CR3: 0000000074a9d000 CR4: 00000000003526f0 [ 543.111281][ C1] Call Trace: [ 543.114548][ C1] [ 543.117464][ C1] default_idle+0x9/0x10 [ 543.121703][ C1] default_idle_call+0x6c/0xb0 [ 543.126462][ C1] do_idle+0x464/0x590 [ 543.130529][ C1] ? __pfx_do_idle+0x10/0x10 [ 543.135121][ C1] cpu_startup_entry+0x4f/0x60 [ 543.139874][ C1] start_secondary+0x21d/0x2d0 [ 543.144628][ C1] ? __pfx_start_secondary+0x10/0x10 [ 543.149905][ C1] common_startup_64+0x13e/0x148 [ 543.154846][ C1]