last executing test programs: 2m38.394266365s ago: executing program 0 (id=960): socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x3000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m36.751967448s ago: executing program 0 (id=967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000006c0)=""/185, 0x3dbf7297e0015883, 0x0, 0x3, 0x3}}, 0x48) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 2m35.638826996s ago: executing program 0 (id=972): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2007, &(0x7f0000000100)={[{@huge_always}], [{@flag='lazytime'}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x62, 0x34, 0x33, 0x37, 0x54, 0x899a2e6e1c3b7175], 0x2d, [0x33, 0x61, 0x34, 0x33], 0x2d, [0x36, 0x35, 0x62, 0x61], 0x2d, [0x33, 0x39, 0x34, 0x9b8d98ce610c4b3f], 0x2d, [0x37, 0x35, 0xdb89618a26c6bd5e, 0x39, 0x66, 0x31, 0x30, 0x2]}}}, {@smackfsdef={'smackfsdef', 0x3d, '+d)]'}}]}) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0xbe) lseek(r0, 0x0, 0x4) 2m34.946583961s ago: executing program 0 (id=974): socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m31.650168111s ago: executing program 0 (id=981): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}}, 0x64000) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008016}, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000080)={0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x109101, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x4004743c, 0xf0ff1f00000000) 2m29.62410534s ago: executing program 0 (id=987): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) socket(0x6, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x700c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) landlock_restrict_self(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) pidfd_getfd(r2, r2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) 2m14.331026372s ago: executing program 32 (id=987): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) socket(0x6, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x700c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) landlock_restrict_self(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) pidfd_getfd(r2, r2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) 42.666009882s ago: executing program 5 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a6cf027d8abf2c1324dca51fd9a06d8f2bd08bc5d55c79f6cf57a57a6994d95f242e1e6053fd6a218511c6fea18b2753482613a7dee20cf21a9c8d4362d81783b33c3b316e0d860d7f4fce333f535f6e162d7ffd34aaab1fa57ac4e02d37d508f3b2f22c33db0c644b14039143511899470f766ac8726d87dbfd4ac57fd28eb33ed3e3595ee00f7a0133489fb2e5820"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc0000000300000006"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x24040090}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r7, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0xfd, 0x1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4) connect$inet(r6, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x4, @empty, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x674e, 0x4) 41.607334431s ago: executing program 5 (id=1383): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3f81, 0x8, 0x4086, 0x0, 0xfffffff8]}) 39.836424843s ago: executing program 5 (id=1391): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0xfffffffb}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0x81, 0xfd, 0x8, 0x6, 0xff, 0x0, 0x7, 0x5, 0xfc, 0x3, 0x7, 0xfa, '\x00', 0x0, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f00000003c0)=ANY=[]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x6}}, 0x20) r3 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x3a) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xc, 0x42031, 0xffffffffffffffff, 0x180000000) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@private0}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x54}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x44044) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2d}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) 37.29793146s ago: executing program 5 (id=1397): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x10, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x10, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0) (async) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000200)=0x4) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 36.963295985s ago: executing program 5 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r6, 0x89e9, &(0x7f00000004c0)="ae87349028fafb5b9258e27a47a2f87a95de6532b5e46275090a69da406e68b2ef3c49247c88e77ab5dd88728df575f3cee80ed87d04958bf3145f5a703a088c60e6723e5424cab2ac0e5b943f960e3f516d6e561b141c83147a9d3a4cc26b6b9d8b800e2f93ef0173fc6561bc998bf7507db0b8db56394a8c26fa121af9df21e95a8c590f9fb5a69f0539a4ba8c38072144c2d57c89e221fd79ef0970963a9466616cee497fe5635980c803a1d56fa3917b61bab5f9a8b90f369e228a951a82792bb5e2efcddbb39ca82e980dbe9b4d7459d0d80dee93b6") sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 36.037446666s ago: executing program 5 (id=1402): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xd94, 0xfffffffffffffff4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$setopts(0xffffffffffffffff, r5, 0x1000, 0x2a) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x2, 0x4048884) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_io_uring_setup(0x6641, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x1bb}, &(0x7f0000000180), &(0x7f0000000280)) 35.329316782s ago: executing program 33 (id=1402): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xd94, 0xfffffffffffffff4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$setopts(0xffffffffffffffff, r5, 0x1000, 0x2a) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x2, 0x4048884) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_io_uring_setup(0x6641, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x1bb}, &(0x7f0000000180), &(0x7f0000000280)) 11.542342478s ago: executing program 3 (id=1474): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10138, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) r8 = socket(0x14, 0x800, 0x80000001) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_rxfh_indir={0x38, 0x6, [0x1, 0x4, 0x2, 0x737, 0x3, 0x5]}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) write$selinux_load(r1, &(0x7f0000000e80)={0xf97cff8c, 0x8}, 0x10) close_range(r0, r0, 0x0) 10.494836846s ago: executing program 3 (id=1477): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x20) 10.013107857s ago: executing program 3 (id=1480): r0 = syz_open_dev$evdev(0x0, 0x3e, 0x208604) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="006ce63e08550e9b2636850a3eaa517de322b321623a"]}, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x34}], 0x1, 0x0, 0x0, 0x800}, 0x4001) syz_usb_control_io(r1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000a000000000008020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101000, 0x1) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x10000a, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,=\x00\x00\x00\x00\x00', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r9, 0x3b88, &(0x7f0000000000)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(r9, 0x3b66, 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r10, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0xc0189436, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000044045130830000f000000010902240001000000000904000001030000000921000000000800090581030044000000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 9.819376271s ago: executing program 2 (id=1481): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) (fail_nth: 3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close(r0) 9.748049205s ago: executing program 2 (id=1482): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/104}) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x90, "febbad541a00"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='@!\f\x00\x00\x00\f!'], 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000040), 0x4) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x8f, @loopback, 0x1}}, 0x9caa, 0x6, 0x9, 0x3, 0x6}, &(0x7f00000001c0)=0x98) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x4b45, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0084}, 0x95) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="00004305", 0x4, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0xfb, 0x6, @broadcast}, 0x14) 9.657300574s ago: executing program 1 (id=1483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r2, &(0x7f0000000540), 0x0, 0x4040880) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @random="96d16f2e2569", 'wlan1\x00'}}, 0x1e) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x777218d308c23048, 0x9, 0x3, 0xb49, 0x8000, 0x5, 0x0, 0x1}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000380)={0x2, 0x20001000, 0x4000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0xffffffffffffffb5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x2) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0xffffffffffffffe7, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd7200000800000500000c000000000000007098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe26f1472a067cc5771b049bdf909cda144b46a10cf11494410f9ab43cf1ecb1a22ba85aa6"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r9, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x38, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x408d4) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x24}}, 0x0) 7.984364645s ago: executing program 6 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x10bc01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f00000002c0), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000144"], 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000000)={0x8, 'pim6reg\x00', {'team_slave_0\x00'}, 0x5d55}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000020000000000000000000000850000007d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095000000000000007bd2007f800729d58a75252e89115c039d6036c3a40034ffa055aaafa0a72c97ebc0ce1e21b791ce46fd3dcef1ef6022605b49744373ca9fb2e9d4474762f36ef657014936"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x8, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x2}, {0x4, 0x1, 0x0, 0x7}, {0x9, 0x7, 0x9}, {0x4, 0x3, 0x80}, {0x2, 0x7, 0x2, 0x1}, {0xdda2, 0x4c, 0x1, 0x466}, {0x4, 0x4, 0x9, 0x6}, {0x8001, 0xe0, 0x80, 0x5}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="c96cae8b33b3e0d11e1bede3f06bd5e78ab39f58d542a60a7c688a151f9f77d722e174a40b2bbcaaf5524fdd36f95ef4957424bc3fce6d8b820e59a3052739e66a5679d916cd747d09ab6adbc1c58fcb5c9a3aafa1dc4c03f3ef49776197f0aacbb0ff51cbefae63b85907072e87e654131227c76a0e0cdca22d52116d788f88ce676fc975d50bb9e94d2dbbd09246734ff47bdff63593d5f777ed36c317914601a4156b2aba10cd962d75659cc05653c8847bfe3d5054cf661be0abbb690f2bd868507f", 0xc4}, {0x0}], 0x2}}], 0x1, 0x40) sendto$inet(r3, &(0x7f0000000580)="17", 0x1, 0x24008010, 0x0, 0x0) 7.98244183s ago: executing program 4 (id=1488): r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(r0, r0, 0x0) 7.895758622s ago: executing program 4 (id=1489): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x82, 0x3a, 0x59, 0x40, 0x763, 0x1011, 0x72a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0xc0, 0x3, 0x1, 0xff, 0xea, 0xb0, 0x9, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x40, 0x6, 0x8}}]}}]}}]}}, 0x0) 6.917160626s ago: executing program 6 (id=1490): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0xfffffffc, 0x4, 0x4, 0x80000000, 0x7, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0xfff, 0xed, 0x1, 0x6, 0x101, 0x20000000, 0x20d, 0x1, 0x40000003, 0x8d, 0xcaa3, 0xffffffff, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x3, 0xfffffff8]}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x20) 6.916728277s ago: executing program 3 (id=1491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801bf001a000100feffffff0001000000000000000000000000ffff", @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.768662011s ago: executing program 6 (id=1492): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 64) 6.653090486s ago: executing program 2 (id=1493): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0xfffffffa) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000365000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040906097c0c5bc900"], 0x9) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75be13698ed3a59bbcd1287d9d0d8453fb845cfb503ca780d32d963d63b9e225e36ff47f499760c77ddf280fe3df76df5341f455bec3e523ce880ce2f51495facc170763f1e6f46e0dc58e97d6fa99334b92a6f7d1198045d205189ab399a959b587d3f1f258836a185ea94d56e7ebcf05bdd384badcb1e6774f20b7cab5b6c81e6253233b080b7c38785d483a9787b121ebe996cfa0ad8780032e1afefd5aa0e230ed3108797bb91e1cd4c9b3dd46c5805ceb1f832bffb2a69a0a5c9aed3e525780029ccad325334a2c9784"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x40000, 0x8000, 0x200, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80, 0x4}}, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c76657273696f6e3d3970323030302e752c6d73697a65666791a03030303030303030303030303030342c6163636573733d", @ANYRESDEC=r8, @ANYBLOB=',mmap,k']) 6.500652611s ago: executing program 6 (id=1494): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0xe, 0x72, {0x72, 0x2, "32ef1013ac0e51226a0b99540e8cd08b95d2045d0e26940398749bda9fc2db1a68709f789edc53a33eb03956d5ffe7ca6a07d19f615b4cdb93b5df36cb83bcabbe9e853d2bef84efe71c71aceec3d78de8a71c0db348089e79161674118f62df98054aa2a0cf6b162c00ed564bc45635"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x96, "c90e21e22488df2887a514346aad81eeccb06930816b9662c3e79d212921d1686821163a9dee6d8ae6bce947e15ab8f34c7de301e136def8c4e04a136563c6a85a87e80902e2f40e8c6c34525c1c092fd3464d2673b141b96dcc6fa0f5b954d0635d008c912058355b7ee42252712805beb5cdaa70872b8f48c0393de800e2cb6c321df2341c4e890a5503cf799a4ef62c92c5cde0c6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x0, 0xe, 0x2, {0x2, 0xf}}, 0x0, &(0x7f0000000140), 0x0}, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000180), 0x1004) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.914931374s ago: executing program 1 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x34d4ddce7c5c73c0}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000000080)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) openat$vcsu(0xffffffffffffff9c, &(0x7f000001b000), 0x40801, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) syz_emit_ethernet(0x67, &(0x7f0000000000)=ANY=[], 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000002900000004000000d40000000000000018000000000000002900000002"], 0x30}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.356497641s ago: executing program 3 (id=1496): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000008800000005000000000000000600000000000000f3ffe5db000000000000000000000000f8000000000000000000000000000000000000000000000009000000ff7fffff08000000000000000c00000000000000010000000000008000"/318]) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r8, 0x400, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x181299a0aeacaf84}, 0x98) socket$inet(0x2, 0x4, 0x2) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000008) ioctl$TIOCSTI(r8, 0x5412, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) 5.353602097s ago: executing program 1 (id=1497): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) fcntl$setsig(r1, 0xa, 0x28) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xdd7b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xc, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x1b, 0x0, 0x5f, 0x2}, @fwd={0x5}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x3, 0x8}, {0xb, 0xf}, {0xf, 0x6}, {0xd, 0x3}]}, @struct={0x5, 0x9, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x1, 0xbf1d}, {0xd, 0x2, 0x58f4}, {0xf, 0x3, 0x1618}, {0x2, 0x0, 0xde1}, {0x0, 0x5, 0x8}, {0x10, 0x3, 0x4}, {0x6, 0x2, 0x98ea}, {0x0, 0x3, 0xe}, {0x6, 0x4, 0xfffffffc}]}, @fwd={0x6}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e, 0x0, 0x61, 0x61, 0x30, 0x61, 0x0]}}, &(0x7f0000000380)=""/124, 0xf0, 0x7c, 0x0, 0xb}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x66, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r7 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @generic={0x0, 0x0, 0x9, 0xea, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x2d, &(0x7f0000000240)=""/45, 0x41000, 0x68, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000440)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x8, 0xf0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6, r7, r8], 0x0, 0x10, 0x8}, 0x94) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x1, 0x4, [0x91, 0xf, 0x1b, 0x10]}, &(0x7f00000006c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000700)={r9, 0x6, 0x60, "127bedb5f99e5503048fd04dcd74911e1d222866829faab203945b26b6894c5a21a19aba5a40e58d507bbcb820fdd8afd481bd8cc594b88d2a879e70e85f8d310d8f96bda59577cfb63287e28496278d30d28058c4d973d6df2856b024382d86"}, 0x68) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000780)={r9, 0x7, 0x20, 0x6}, &(0x7f00000007c0)=0x18) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001800)={r0, r7, 0x4, 0x1000, &(0x7f0000000800)="003525b5dde3255f73cf8df4560c99c1c0e02c62a3b793ee2a21adfc7c12661bdbb517c8c929057875741b6e56c97a2dd4b202890629831e417519205af96207e210d9a04d071bbfb3636dc48eb4fd1759e898d8b744716c1a74104c9844f9ba20bd00c67d1f833b9cf986256d16d9ac9c3bf88f9eae30a32f3f0c0143e896c4d689a26886822ea39b6e68b9db540093d7d9316a91bffa153ac672d09fb67382f49f113829c3c9d18192a3e453af2d7345995899e9524047c897f7dbdb788ef1fa78f7f91b82f263fda57b45009c0a735a75ab4f3c84110d4671d27f1ac89f32de227830bae3c9d9897eb57b9503fdf6a0288877a59d7f7a657648f284ae613397b04a45e86af96778625644ee125345bf9a6a06a8d76295a9beaa0ab0c99969f8476b0413b2010b3c79288dd6cc3aaa828034c1d8934fda7d69f0b19e26a6dca816fc0f94a19c02fce1227dfb75e9482dff11c000d883d3a95f2a27c3ba4300d9a01400a8af1bca628e3a70d4759c77ff1ae93e7c2d2525afb4158764f3fecb26a37886376d5588ac2a69c2c1e6632352e36c44f4fe7108da4e03ce9387fe68f3ea551f1f8a5d50193f56421e6d2b05a112c1399fab6274848526ff0b0a397ace673bf254449326d51812b493fb7666a0cef9b486e016aaf0282c1ab5e8fb98a46704410ce11989dcfca35a629e5fc7bf0ff4f9897fbc3daf69a70c2bba3b2a7c141c1fcb51dde9f1fad360ec90689559b949cbe40ee82c963973471a78e5c0a781b52b3d63029cd481a845bccf7e47e5bfa04e962210e7b98fb976777f6cab7ac7a37a7d3b0bb8dde96b2ce69b1c53c522d534f59618a43c3d53c8bab3aeea7d52b4eea42537f7a2375381335d7b03e00503b8b83b9e45ec0f8bb7823b91782d17e2b26882a69a9aca226b51df21d37e282d7fafba8c96fdc64bc3bc24ed46342c84ba4b10be246c47139283909f57508cc20c6391f678c4298bef8717284bc2a2d83f5922e7ff6d0aaa9416e4b6d5b5c6f6d9a185e7c365e11a569c2ac04cef43377f37b484b11959e2086fb67cd372d6d2950107f754504fcd4310d5215366d1471ebd53503ed0534dfbbc592d80c4d4ae06720b99a581e9d5afd87a82630d50b2644dd671e6d1127e74e325eb3f3653d0f1af4f70480da601c30d5c015d6a5ef05a3260fb99666e0a4e7974750cd4023f4817fdb5712e25dbefda47cfb4040f67be9feffd9007938242db0df86d84e7595dc606bbe0b54c41044acdc6734a4c0a166aba47dbbf149c6183bce513f861d9bb45b75c23048b7cc192f7bbc9ea7a38c2204bbd887820434639a56c1a4545ec8492cee36783976fd64cc69078f8648c6abc7e5c5806ff996064238f2866ace0556d7e4896b382910e8715b0dd792e4c2d47f60d94edcea4db3c004d132f5b882c7da8bd5e001c2875906d1f70bdc7f5f1205e581094a692ebb13cdac365280ae7c91fc7d4c4f7535906f5d3fbe700c7034a06316ebe939d69ab4fe12331070539456481620efe2c345ddfbd90a73a94ddd3c9d94d45b10163616c24c16c5e5779d9ef9daa020e7b3608b59ff121f0210a9af5e7a66c0286c88043dd286d4ddb4ccd871b94ca7bdb9cbac0cea0ef3a1297c0c8a28f625d91fed3c915ab32eb9ba0387aa2006a788a14e1ef685fdb9cdb57f6516f3a0d6fb7625caf4b81ecbfae2e5939f0fac6cbe8fef9e890ea6dfa3490a9c9c6869fd718a234c7ca717efb1c45a55ac3486891b71b9bf59cbc3f485e48d71318e361d6eee3eda9e92e05a7adfbe7d48c0b5a399260002a468140b315d43d3ccc2aa614afab062fc46ffc7fd4588317d71d3920951902d9879d653e676309b11f35df6e8b693ebdcb89c2ddd9688832c99650d9ea3a946c9bd06669863ceec9169bbbf1069cebd9b3306679d096e5cb1e299d12f4123983c08b93b47d14cd2a2e6efd500a378f353564c6cff69315349b688f42b15f4303a6eb7920b229233e6eeda649efbfc1a60004f3c02cc2e73111b03663219f5bd5267f092245cd013414096f75c6048857fc3c621ae5f354abc29e60e95f92aa2b634f91547e4e1d56c9f78e480ec30cf25515d2c757fa9764a97bd2e1db6270fa3a14bd881187ffed35825c05f33ad88109941e1903a40034371d6edd9780dba972d3a83e69ce47a55c042b9e7fcc066c448cc72d37a7a321a450c115ebfb7297a8bcd488e990d6e06fdd1dd380fa3d9102ed4a4693d5e15247d3b8717d137fee9a44b70e0b215e96c6b665f4b4273ae17fcb2cef9604e4ab2817b8e36696090a4971f75b6bf1f53edbb2cf2ffda54e144626b39d9b473495fff26551aa102c63311d648ed3419946a259fc2dab5cae2426d8f27e59f78da4a17cebd37e4c9f7f37a83f889eff8bc07f576137c6820c7f9792de609c1fbc9fde1617eaabcfb928481d2d832480e83b522fa1e6b2dfd58754d19d6da04bd639eb947369e5c884da92454fe55f18c33af40bd964dfae2b85a56d0058294902a1eda0fae719d42a41e1e531fa70faf56f6e458c253ff430262b5e93576cc207379f22d0149c79b49757b286fbbde17169a74327d9b81fc33c0826b8f1ce8feb9a28d86fd4ef1cf0d94e4136a98f6ae8fa35a9a9a6546bbc681ca0ec650af2f5eba121f0f855b5518063bf7f41c3d340b1d6ce2b678f6dc6ce7a45f0ccb4ef08cc5c15d26548007fd5b1ac641b01a5f853cadf60f0bae8cdf7ecf3fb3df65b7363ddf332e6673fc849f48d4179bb48c1a3405c6ef26f6a2652af9d22101e83caa9ea1c695549ff06cc0b2a475b746949ea0ddc6722213b05ef8c0fed23173ab483a3e2715345f5e27c72cef14f96c38a442791de6228a66f85de86057ba7464ad5ea2a6ffa043b845205ae9046252a7d16aa5d15c1eba22b267d43ff16eec5a5b80ece2eebb7e9209476bdb211a58a19d12f2d6bded8a86b0aac2979def655461ae47a24033c2819fd51c5aec978cd7c211c85dd620ec79ef96e6d5b3a4d8f9e2017a38641272f142e3bc5de5533519852f0cdbf6fc55c22960c2aecb7e966f4e40297e4176202046e8a4eceda5c8acf78a979e8535f869281c3fcf2f8f0e3f840268250dd0339d7683ca402065f55f23a1a43e7e70da1214815207cd77d9ff3eabaf840d58879746fc3a7f98d0113c2a65cba4c67fb97134cf3bec8e2a2a8fe49dc722d11324e9e360cf09dc065b18057dda00f1daff31a0954654c4b4723682bc112655cafc725a72d1d0ea37a3207ca2c4c62357d10bb1be4e30f2d65e2c95c2dc247c090a5ca7443aac72496d700f8e8b0b4e0cb8d717465132a535d7cc30465a29650a75d82fd4ffb0ed8f7ba8f3a26bede04b268aebf6b521ed7127b6e6ac1176df63739087fdf9f68cb3443ff0d65a4c9c6355856408dce1c4b183b893775c1e25be879f379489326aa995acf9b282a719c36253e0c94423f9c6a4825f850194dd770505fe1c3f9a58163d9de2de9d029a548c0a2f408280a0cf95540935b0a3c3d9c5f228508956240abbe51c9b9e65fd0424e47eeb5b473ad7d09df1ebb2f1f95687a6dc5f857dac9889afcc9283d62e8f900468b2a082e931cd9145e4a1086775c783d0f9696de079308c7a8882f05d5c6d51ad4444f2d2d2645dcf1e795a2ab3583ddc6462b3f8497afcdd63995e469fb9594568431cedf5e4b5aa4db5903fad6ae09e4435662c017e7c1ea964305bff717e261845476b51f418f7a6595b8e23f36bab46efc984301909219c7d6d85998635f86c2deb55790dafc0edb949081b056ecccfd40e0c2d5320cb865e09fba0454849fa2c2711d00df75b4154c2dadc5502390d2430cb869e769417d2d7b5c9f0e4ace4f1e33f21102faf5d1701151d55deeddb9e77e3d5e91a730611b790199bef52eb0f54d4ca79fa353619dfdc2d247bcd23d838fd0384c818997a4827f1bfafb31c1eb50caac80db234c791b6622d06882302c0e8de90e132ea231f894197ec15330136e5ba787f281a0c9048d4e3b45de7c3edd2f41e9eb38ab33fd9d4349d0d0850e0ee12d96f9aa4867a617b79acca14621f13391dfa23844ea76b2edf0b75d498fa2a9e47f1382fdfca0b4871cbe107e92f7f1e8260cbbc6c7cb36f3fb529f987d29fd26caedbfdc0f9769fe62d7a3308a024c2e91d2e4be90755b0f21cb51e027933e3f9937725bfb3147178752d39ab19b69d78f1a9c73f450df1674108fe2f01a1f33d8512a59eb24b396a88d296db7e96735100f609a9b3647aa2c9d7cacd6329779e7c81cf14376627b8c383ec2d6a0e6a7763acb7ed23a34e8115351147c20fa185d45d2a2e57cf2cf7bdbbf2a676db3a48badc4f3761e6426c4c571ab3a3907e329a26f38de6f94f33b03c9e89253191af951ab68009947dc952afa92efec5a382107a767cbc86517b10fc9285fd8967c295f21e7ab50a018fe25f6a975b50d0da63eec48cb62d32b2b004ef4279735b2ab289cb202d1668aa1f1035facc01e36c518f351687201bad0c198cbd701c0adf3a12755c17893fe92b95bd5ff6961978936ad3dc18a4b0918050ea842e8ab250084ceb660bb285ffae8d6271167baab660a7f312bd79016d0287e8b7b341cafc6f219013244bd16f62f5007220e7a41311febf42a1de79d96f99bbd8c9908c985a02dfd91fe7bb7ff2cdb0134f4a0c51d2b5018ab80ff850ca1269421358ae1829fc2001e411c0119492add5e597eb69e807f3504c8f4c115a17e582a7898998a5a038ab2df0853e96ab3bf35dffab8bd4db24965c26b8e9967677e22c025a7baaa9e4bea4ae45f13e2d0b579298416574cab9a0311727180815522b7039e1c20d5e01e40607b51ec7e306162833fbca52cc965b7901fa2cf7f6e423ddb010722fdc3274e06b64a8aa146a7d9b82e56a69de98efbd8302dca34007dc633fa4039c17a98b474783cc1764f9d4aeccc2a398381ca561542451d0a67691f024fe1b722d146fd62ca8b686fc1fbb4795ae79d85ce29999b4220ee995fda0a6f3d0b1416dd7c69852c0868e7d9c351cad8a101f7fb292ed9150209d2c78c9c9dcb30dfb99e45688a9674959b8417af40696333acf9ae25d1d7c48e42b7e2c7c68f8fc5fe1b1b6c4b72205f924e558bc1f18062a64c4701155b958c282c8a5f1b8671f389cb85839aaa7ce2ea7ce49e1cd983ec8d4d83c8dd19603bd30d38222cce0fc41c3f22b967383636f12d905cbfe6c8be900dbe8dd553b654b666c2b57b9e380e5194c9fefe6cb4ccca125d2e9814220eca658ff0b41d685954c9a67f703558b5c88594de9cf02f53c1dd7532d440a17e250a46fb879fa33c0f6a7735809e7753d536849bbd9fe337216913293e3914f9aa7439b9fe1c9b4d013b98fd75264e88c4da8fa12c9ad5d94a6e5f446b06c641c2539f07b48f450e76901babfcf0d925cfae5ce557380feadffad8f45748323a5eebca1cf8a0679d1327ff4bccef2f554dae2cf2e2e8cdf3df49daf14108c1afb1f3453853e90819fa4fdbee938b76208fa3dd457ccc5ac26729607effe1a39d44a17606831fb61e087f9d1928fd5b23af8d6cc5e4de33a966b06b91a1e36d90445144eaad284dd8b54a5708f4597022c21ac09e96293d2108759ca2af345c85c19afa8b698d061b3348341e5440cecdad1650d9d414314a2a0943d004878ca4616288a5510d71b0a9e49578d1f061765f444ba676d98c216c71cdfa743d44a41c3bed15bb5f6f63a563a7ef2b455c12bdd2c23f6f49a63c94a815512ccbcdec7252d668d25a6509dac73592", 0x0, 0x9, 0x1, 0xf000, 0x1, 0x3, 0x4, 'syz1\x00'}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001900), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x4c, r10, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x855) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000001a40)={0x2c, 0xd, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x9a, 0xa, [0x0, 0x1ff, 0x4, 0x3, 0x2]}}, @generic={0xb6, 0x2d, "6126d5495aa7ef7900922b35c2100bd37683657358135831aac9455ee74882d10a12f60d509ff53c5190b41774"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x78) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r4) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001bc0)={&(0x7f0000001ac0), 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r11, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4d}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x60000000) r12 = add_key$fscrypt_v1(&(0x7f0000001c00), &(0x7f0000001c40)={'fscrypt:', @desc2}, &(0x7f0000001c80)={0x0, "bb700c44bd684a384e36b924d1d67cf5330c303471a379888c6082a921e680d21a023dc926968b8f22cd05490a2c0d1329e3f8faac8280cab2580a7cc8cbf933", 0x2f}, 0x48, 0xfffffffffffffffa) r13 = add_key$keyring(&(0x7f0000001d00), &(0x7f0000001d40)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$link(0x8, r12, r13) newfstatat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, r14, &(0x7f0000001e40)) io_setup(0xff, &(0x7f0000001e80)=0x0) io_cancel(r15, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x8, 0xa, r3, &(0x7f0000001ec0), 0x0, 0xd, 0x0, 0x2}, &(0x7f0000001f40)) 5.108124773s ago: executing program 2 (id=1498): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = socket(0x10, 0x80002, 0x0) (async, rerun: 64) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x40000000000013f, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}}, 0x4000010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) clock_settime(0x1ed5d7403, &(0x7f0000000080)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) (async) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) 5.107672588s ago: executing program 1 (id=1499): timerfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) userfaultfd(0x1) r4 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x10, 0xe87e, 0x0, 0x3, 0x80000000}}) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000009b00000085000000070000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x16, 0x8, &(0x7f00000000c0)="0021714a6334b76c3f4273f8c2f56c6a0abbcd216771", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x9, 0x10001, 0x4, 0x8, 0x2, 0x6a2c, 0xa, 0xffff}, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 4.135232246s ago: executing program 1 (id=1500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delnexthop={0x18, 0x69, 0xb}, 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x24000840) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='sched\x00') read$nci(r6, &(0x7f0000000280)=""/134, 0x86) 4.110379079s ago: executing program 4 (id=1501): preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x44e2125032e4302}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000001c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.355783862s ago: executing program 2 (id=1502): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10400, 0x180}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x62}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200800000f1401002cbd7000fedbdf2508004500737270000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004044}, 0x4000800) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32], 0x1c}}, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026b47000fcdbdf250200000008000100", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001080)=0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000400)={0x27, 0x0, 0x1, 0x2, 0x3f, 0x7, "c42859537289f16fee0f066fe1687a14ca1c0d81f7f7ef95b564f2e12b50377c5003f2c463bc522aec2053d8a22be496218cac9bac7123d6564c2d9ea127f7", 0x23}, 0x60, &(0x7f0000000100)=[{&(0x7f0000000480)="041e34382b48ac67c0e7ea0eeefcbef50a4e57c50b4467f4ebed64fabfb7f0c954214aeb581fa6b8bbfcf131152a136e2d8f1edf2af2cb4d5c2ecceea2835e9e7015d8b977052a4adf31aa501456f3dd4a371598fa52", 0x56}, {&(0x7f0000000500)="2c9ce7ccf333a0a4f585ea36a91fd0c1261955d10ae65ba4457bcf0d1d4c687362f2a7166c01a9027534caa685d55ba0e7245752772ca634d5b916444e3b132aa0ceda99512163772e99b94eb23fc1507db11ff7eb04190a1cdeab3574ecb1b649ed3ceaa78dd333679bdd01ac20652b0a5755306c52db263a50539bbe57f4206146d4784ec3a66b61cda5953b9d3e5927638a7c005ef9160679", 0x9a}, {&(0x7f00000005c0)="16fad57ee2a56b5a8433db00f432341915fd8cf7df97ece8e4fdf4cf20f2e45b99d014b1b30ccb05fa8189545a3a2ff47b5332d62a2eca4d5084f14deff57740c4e6e46d6586d0ee4de3165c28340d92f5435169cc09aff917f088311e77e851814ba3ba8eea2dbe7a6a196bf306cb23d4f57d63e88af59f63dfb329a955b3c9ea54cb45dbb8b904915067b9b685b19827cffc719e3119a4cf14891593bb5bc98db9d1a876cb2e28eaa09da51813a0d579d11bec769f08bb3f40b98bb4dfe7eacd3e08b9f79ff8b306db988c12e392aa1bdca5619ae42dccd7", 0xd9}, {&(0x7f00000006c0)="c00de377187da4f9653309d0628fa67199bbcc405bc245c70f5ce300fea488702ea8393f365b785100a774a1f9c61a14d93cfdefd674ad06c5a9e251182804f794b95b8e6c88877e66cea7f358c6656ee4eb0ef2dd91c804466971bee625d2c0d1ab3e22b8df108500164e1d26f3afd5e4118224dc71580843bcd2fd8cee0a0e5084bb26c30c824a47948f014f1c0ebc6a49bf95b941328dc87de7ecb385b87031ff4a3218bfe2e25da842e568b8", 0xae}], 0x4, &(0x7f0000000780)={0xf8, 0x17, 0x7f, "787de583fdc86040b57842402a61ce0bc186146dea7bf98b21210535d8b23e136690b213feb7d343933c5ce3363e76eb8806ba8e64220fc8a9df0eab21145b2000de138e3e9808b0512f76daa09b786792b9d3b864c951b8ab367797645f88dd090753856214a2a8ad056476d3222a7d5a790087d82970f89279bb04e3f9c00fb0eaa08dbe9b43b05070244b90a0d496667bf49792dfd4973af9cf7e00b5c27fa965e7fdf30fd9beb7346551879f6567e7db60120773107d16ad173cfa29697aeb981eb1ef3aadae17563167efff41859dd0244f0362e2337d73fe44ec2faf4fa5"}, 0xf8, 0x10}, {&(0x7f0000000880)={0x27, r11, 0xffffffffffffffff, 0x7, 0x2, 0x80, "0d30913cfa5381341fc6645c79161194dcf32eb204c1aba16ce707af18a379cefba1493b7091042f83f16025ca39e6a80b5e9f0425e6379b9063dbe62e5be0", 0x1a}, 0x60, &(0x7f0000000b00)=[{&(0x7f00000001c0)="37650d77aaab2a518594b87e208245b0f90b", 0x12}, {&(0x7f0000000900)="12de696ef5a048cbc19390a334d3ce574715ddf5e5d98063d2564ef35ab0d3ba12c10a89e128b57049fdaa278762", 0x2e}, {&(0x7f0000000940)="f3a590b4fcac1f5e950e478cbc", 0xd}, {&(0x7f0000000980)="775b4151dbd042ab88ceefb9a5c0ee6ec227ca07d17026b3f8e6986e37824adb65b7b353e84178df1745c0cc0c6875d81eb4bbf182eb2de7059462492cea5110ed1b8f6b1a0832cb26ea3539a08b10367103b750f17d1d7af58778f998180ac19d5df8147a413f22e550fb690f4923fdfcf5d7d2af6f7087b7618691bb38fe6369dd6eee952a81cbccc12c21c682ef9f96c738555d208b51a0bce9450daadd321b8e9d214f5c63b9e6523809360a6d23640e4bd8f3b28346485cc1af3f0fc5f27f6a8b07569b3f8a1052186bf3aaffc9", 0xd0}, {&(0x7f0000000a80)="1ee887158aafe4d8cda83c051af71fc92c769adb1ee62633cade071347d7daa703cc9ce48231e144b4256bee4dc22a23987e0399c4366323550c7d58e7dc4f0e4dbcffb0d138034cc26eef20d7602d32e9bfc7b28fb423cafabcf034c9f4961d58fa38e45192", 0x66}], 0x5, &(0x7f0000000b80)={0x98, 0x104, 0xfffffff9, "9907ce2ac442ac9264a3ac19445ab4331050034cb415a436f15b1ff87fee8eca75e76eb175f7090ae6f5bab476960096705740a8f8b7c149f3912741ee8d95943e5bc5bbe8cb2a3c26bc74b5307fae8a7114ec1eebb2636167c08bd3a227c6daa439e5406555739506a4f2ba72e1aeafe41026f2f77c5b443aff605e61cc0c1278e7a2c173d244"}, 0x98, 0x40000}, {&(0x7f0000000c80)={0x27, r12, 0xffffffffffffffff, 0x4, 0x7, 0x2, "bb75a145aa574e946946512bd016189f48bedb179f85de742f6e52073b8f37504a44af9587c14361dc371f91c63636b455120c69239a08dea87d7bce7602f6", 0x2c}, 0x60, &(0x7f0000001000)=[{&(0x7f0000000d00)="1dd9a72b088a35b938e62e1516b680bff562dbfeee6b1f2af6df991ef30659d692a5b4", 0x23}, {&(0x7f0000000d40)}, {&(0x7f0000002440)="7e6dce071fad7a54e54cac6d075fd87975879d0175051f36211246e3327178c27b44f0280414b67b4d14d704214a87e15698fe21578b3e7397d8c4422494a5e4549ac15d39fd6e7d56a302ebcfec22eed1ca60225b07c67e4136f43730103c7c9a304929522f0b427f6cd11372c1612a8e4f08664abb13288ee3103c9c998bd9bc193299bf2a6953e6b633bb3d555d2ac0e3093d1eb91e3563177e3c936853c9f09fab55188661f1c396832a4f1477562a96308d", 0xb4}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="e2b7692d36ab1270283aa9df5c96e02d557d8289a64541802f12725c83e1bdd9d07b8144e2f2ecb3c3406e9fbd116a9bd14ea1083852fd1c92386bc3fe18dd3f2b0d3b271fdac8189c6ab67549f76905e1b5d3bf18114433909902dc9daf1ddae3cac50197", 0x65}, {&(0x7f0000000f00)="798ddf39d1d4bc", 0x7}, {&(0x7f0000000f40)="f04cf911c9496eb46ab1a61a1ffa2e1b5ed57e98315ae4b337fcc230cfb6d14430b25e1acbc34c36544307557211577981cf829245127359d91c50b9106978e3c4c6a57bd85feb32f57c6b32fff3210193214bd33e7a6ef418ad1c7be919b7b26463743013a15a97ee32c06ff8d971a69cec04413be6d501ba7afd5835c3", 0x7e}, {&(0x7f0000000fc0)="9f7bccb192611e285c", 0x9}], 0x8, 0x0, 0x0, 0x48000}, {&(0x7f00000010c0)={0x27, r13, 0x0, 0x3, 0x9, 0x0, "40801c0a919a6fd32a0ae39029b8a8be30724c008b73fe8d4f2e8970bcd0afe01e2af4d38a483b7f2d1d5af3c13de2b31a23db0e14d0529fa5f1585b10d26c", 0xc}, 0x60, &(0x7f0000002240)=[{&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000002140)="17af42eee44a850810e09ffa0b459a644cadc400d7ee0f02a080d7966e7904a680187468083507c58bfe963bc58736effa1a74f0b3e2739db5e3c1010ed95c512bacb9a6506dea8a59f03da92d779dac8ce43b8a1cb93cfe3599dc7eb2cb", 0x5e}, {&(0x7f00000021c0)="caed052507ad3a5d63bc8922fd5f6cbc6c56320d1ae386bd46cf6f8199d6d4e61ed8fe4155929a30feb003e9f75e10add375dd67d41368614e69ae988766", 0x3e}, {&(0x7f0000002200)="39ba11918d6bf17d4c0259fcf758d9df5cb7a9c36c3f", 0x16}], 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="a00000000000000010010000050000001a1c33e3e1a56250deab42854b7ab050ad0e98c9383457dd79656f2509a705109bb2c27ada78063d7a2f460bda024ae3bf100a009efbf2f4a9548aed833f59b835b18d3fdbdb07bad99a2c06923ed77493d19eae1b335ad7fe13c3b57d2f4343d0b97bf3c98d4134daa3d335306b233463e2841a1068e0b4269d697b09d1f737ecd48f22c8e0c3e02dcc000000000000915dfc"], 0xa0, 0x40}], 0x4, 0x4000044) (async) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 3.306614269s ago: executing program 6 (id=1503): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x4) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0xc, {0xc, 0x22, "fd7dbd0b342790b332c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x40, 0x23, 0x7, {0x7, 0x22, "e2a3f0901d"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r4, &(0x7f0000000100)=""/74, 0x4a) syz_usb_disconnect(r1) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800000f130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 3.143956154s ago: executing program 1 (id=1504): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x63, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902510002040800070904880400f7f98a060724060000d2cf0524001c620d240f01000000000200050002090403080353ee970509050f0300040609fe09050d00000402070e00"/99], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r3, 0x0, &(0x7f0000000340)) 2.602957184s ago: executing program 3 (id=1505): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) r6 = fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{}], 0x1) 2.471953391s ago: executing program 2 (id=1506): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x7fff, r1, 0x0, {0xd463}, 0x2}, 0x1) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000140)={0x3, 0x2, 0x5}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='ns\x00') renameat2(r5, &(0x7f0000000380)='./mnt\x00', r5, &(0x7f00000003c0)='./mnt\x00', 0x5) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/12]) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x33, 0x1, 0x0, 0x0, "717eeada5be8517e6bf37df6f6699c3c63f3c30a0f949bc62e33e90073d11457d1e60bfc83915dc150e28b489e84d06eadbc8c2ae635df4693b50ed2b12b10ab"}}}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/45) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$P9_RSTATFS(r5, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x4, 0x2, 0x3, 0x6, 0x2, 0x6, 0x9, 0x8, 0x100}}, 0x43) 2.469228215s ago: executing program 4 (id=1507): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801bf001a000100feffffff0001000000000000000000000000ffff", @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.144305132s ago: executing program 4 (id=1508): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) 89.370707ms ago: executing program 4 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) (async, rerun: 32) r5 = socket(0x10, 0x2, 0x81) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000380)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0xfffffffc, '\x00', @p_u8=&(0x7f0000000100)=0x4}}) (async) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000700)=0x9, 0x4) (async) r10 = socket$inet6(0xa, 0x2, 0x3a) (async) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r11, &(0x7f0000000680)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x300000, 0x6) setsockopt$inet6_int(r10, 0x29, 0x4e, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x80801, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x0, 0x2, 0x1, 0x0, 0x80}) 0s ago: executing program 6 (id=1510): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8108}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="4eaa000000000000711017de0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r1 = fanotify_init(0x8, 0x400) write$binfmt_elf64(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4622"], 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYRES16], 0x48) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x400) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000180)=0x3) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) kernel console output (not intermixed with test programs): 78eba9 code=0x7ffc0000 [ 326.653518][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.662267][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.675395][ T5916] vp7045: USB control message 'in' went wrong. [ 326.702020][ T5916] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 326.753063][ T5916] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 326.760776][ T30] audit: type=1326 audit(326.242:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224f78eba9 code=0x7ffc0000 [ 326.796520][ T5916] usb 4-1: USB disconnect, device number 33 [ 326.844335][ T30] audit: type=1400 audit(326.642:1004): avc: denied { mount } for pid=10129 comm="syz.3.953" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 326.939097][ T30] audit: type=1400 audit(326.712:1005): avc: denied { mount } for pid=10148 comm="syz.4.959" name="/" dev="hugetlbfs" ino=26019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 326.975321][ T2149] kernel read not supported for file /sequencer (pid: 2149 comm: kworker/1:2) [ 327.085534][ T30] audit: type=1400 audit(326.892:1006): avc: denied { read write } for pid=10150 comm="syz.2.958" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 327.149184][ T30] audit: type=1400 audit(326.892:1007): avc: denied { open } for pid=10150 comm="syz.2.958" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 327.599887][ T30] audit: type=1400 audit(327.032:1008): avc: denied { create } for pid=10150 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 327.673255][ T30] audit: type=1400 audit(327.252:1009): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 328.029945][ T30] audit: type=1400 audit(328.002:1010): avc: denied { ioctl } for pid=10168 comm="syz.3.964" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 328.150330][T10176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 328.196679][T10178] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 328.595712][ T30] audit: type=1400 audit(328.582:1011): avc: denied { read } for pid=10181 comm="syz.0.967" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 329.528345][T10197] netlink: 56 bytes leftover after parsing attributes in process `syz.3.971'. [ 329.541217][T10195] netlink: 56 bytes leftover after parsing attributes in process `syz.4.970'. [ 329.580119][ T5916] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 329.749946][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 329.757364][ T5916] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 329.767221][ T5916] usb 3-1: config 0 has no interface number 0 [ 329.785464][ T5916] usb 3-1: config 0 interface 101 has no altsetting 0 [ 330.131186][ T5916] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 330.140273][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.195102][ T5916] usb 3-1: config 0 descriptor?? [ 330.213071][ T5916] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 330.922276][ T5930] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 331.091984][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 331.100342][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.118647][ T5930] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.148652][ T5930] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.176650][ T5930] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 331.207938][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.234154][ T5930] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 331.261009][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.285980][ T5930] usb 4-1: config 0 descriptor?? [ 331.779787][ T5916] gspca_sonixj: i2c_w8 err -71 [ 332.100931][ T5916] sonixj 3-1:0.101: probe with driver sonixj failed with error -71 [ 332.129266][ T5916] usb 3-1: USB disconnect, device number 36 [ 332.268886][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.278949][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.184329][ T5930] hid-thrustmaster 0003:044F:B65D.000A: reserved main item tag 0xd [ 333.275659][ T5930] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 333.351631][ T5930] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 333.369587][ C0] hid-thrustmaster 0003:044F:B65D.000A: URB to get model id failed with error -71 [ 333.413974][ T5930] usb 4-1: USB disconnect, device number 34 [ 333.517244][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.979'. [ 333.820022][ T5916] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 333.840090][ T5923] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 334.005029][ T5923] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 334.014448][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.062378][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 334.276815][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 334.321816][ T5923] usb 1-1: Product: syz [ 334.325989][ T5923] usb 1-1: Manufacturer: syz [ 334.331294][ T5923] usb 1-1: SerialNumber: syz [ 334.380469][ T5923] usb 1-1: config 0 descriptor?? [ 334.562176][ T5916] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 334.573162][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.581973][ T5916] usb 3-1: Product: syz [ 334.586124][ T5916] usb 3-1: Manufacturer: syz [ 334.595613][T10250] syz.0.981 (10250) used obsolete PPPIOCDETACH ioctl [ 334.603630][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 334.603638][ T30] audit: type=1400 audit(334.582:1013): avc: denied { write } for pid=10248 comm="syz.0.981" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 334.633274][ T5916] usb 3-1: SerialNumber: syz [ 334.647214][ T5916] usb 3-1: config 0 descriptor?? [ 334.885029][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.894688][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.908855][ T5923] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 334.924607][ T5923] asix 1-1:0.0: probe with driver asix failed with error -71 [ 334.986909][ T5923] usb 1-1: USB disconnect, device number 25 [ 336.040646][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 336.258342][ T10] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 336.354864][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 336.475707][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.551706][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 336.555022][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.563807][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 336.575865][ T10] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 336.585539][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.606858][ T10] usb 4-1: config 0 descriptor?? [ 336.634377][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.652169][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.677312][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.714309][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.780339][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.822668][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.866806][ T24] usb 2-1: Product: syz [ 336.889160][ T24] usb 2-1: Manufacturer: syz [ 336.909322][ T24] usb 2-1: SerialNumber: syz [ 337.035967][ T5916] usb 3-1: USB disconnect, device number 37 [ 337.150801][ T10] hid (null): invalid report_size 14954242 [ 337.163903][ T10] razer 0003:1532:010E.000B: invalid report_size 14954242 [ 337.176971][ T10] razer 0003:1532:010E.000B: item 0 4 1 7 parsing failed [ 337.188370][ T10] razer 0003:1532:010E.000B: probe with driver razer failed with error -22 [ 337.214681][ T24] usb 2-1: 0:2 : does not exist [ 337.227579][ T24] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 337.321473][ T24] usb 2-1: USB disconnect, device number 43 [ 337.577856][T10305] netlink: 260 bytes leftover after parsing attributes in process `syz.4.993'. [ 337.939784][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 338.100578][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 338.110861][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 338.123318][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 338.133028][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 338.141659][ T24] usb 2-1: Product: syz [ 338.145896][ T24] usb 2-1: Manufacturer: syz [ 338.150581][ T24] usb 2-1: SerialNumber: syz [ 338.156743][ T24] usb 2-1: config 0 descriptor?? [ 338.162358][T10303] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 338.359919][ T5923] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 338.385331][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.410114][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.434563][T10317] loop2: detected capacity change from 0 to 7 [ 338.443795][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.450038][ T24] usb 4-1: USB disconnect, device number 35 [ 338.454881][ T5856] Dev loop2: unable to read RDB block 7 [ 338.464023][ T5856] loop2: AHDI p1 p2 p3 [ 338.468356][ T5856] loop2: partition table partially beyond EOD, truncated [ 338.478178][ T5856] loop2: p1 start 1601398130 is beyond EOD, truncated [ 338.485848][ T5856] loop2: p2 start 1702059890 is beyond EOD, truncated [ 338.494877][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.509327][T10317] Dev loop2: unable to read RDB block 7 [ 338.523949][T10317] loop2: AHDI p1 p2 p3 [ 338.529863][T10317] loop2: partition table partially beyond EOD, truncated [ 338.530794][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 338.551044][T10317] loop2: p1 start 1601398130 is beyond EOD, truncated [ 338.554469][ T5923] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 338.557856][T10317] loop2: p2 start 1702059890 is beyond EOD, [ 338.567084][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.567394][T10317] truncated [ 338.578224][ T5923] usb 3-1: Product: syz [ 338.593283][ T5923] usb 3-1: Manufacturer: syz [ 338.598040][ T5923] usb 3-1: SerialNumber: syz [ 338.622819][ T5923] usb 3-1: config 0 descriptor?? [ 338.653023][ T5916] usb 2-1: USB disconnect, device number 44 [ 338.736653][ T30] audit: type=1400 audit(338.722:1014): avc: denied { create } for pid=10326 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 338.741210][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.767780][ T24] kernel read not supported for file /sequencer (pid: 24 comm: kworker/1:0) [ 338.768169][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.847750][ T5923] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 339.199886][ T5916] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 339.354093][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 339.360881][ T5916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 339.392614][ T5916] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 339.403750][ T30] audit: type=1400 audit(339.392:1015): avc: denied { watch } for pid=10330 comm="syz.4.1001" path="/223/bus" dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 339.404589][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 339.431069][ T30] audit: type=1400 audit(339.392:1016): avc: denied { watch_sb watch_reads } for pid=10330 comm="syz.4.1001" path="/223/bus" dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 339.435488][ T5916] usb 2-1: Product: syz [ 339.457563][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.468275][ T5916] usb 2-1: Manufacturer: syz [ 339.473312][ T5916] usb 2-1: SerialNumber: syz [ 339.497210][ T5916] usb 2-1: config 0 descriptor?? [ 339.503625][T10303] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 339.649726][ T2149] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 339.809759][ T2149] usb 4-1: Using ep0 maxpacket: 16 [ 339.816360][ T2149] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 339.825492][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.835160][ T2149] usb 4-1: config 0 descriptor?? [ 339.842895][ T2149] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 340.272088][ T5923] usb write operation failed. (-71) [ 340.280581][ T5923] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 340.291557][ T5923] dvbdev: DVB: registering new adapter (Terratec H7) [ 340.298247][ T5923] usb 3-1: media controller created [ 340.304019][ T5923] usb read operation failed. (-71) [ 340.309357][ T5923] usb write operation failed. (-71) [ 340.316832][ T5923] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 340.330154][ T5923] usb 3-1: USB disconnect, device number 38 [ 340.539633][T10342] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1005'. [ 340.549042][T10342] netem: unknown loss type 0 [ 340.553976][T10342] netem: change failed [ 341.289933][ T2149] gspca_sonixj: i2c_w8 err -71 [ 341.341391][ T2149] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 341.358226][ T24] usb 2-1: USB disconnect, device number 45 [ 341.402169][ T2149] usb 4-1: USB disconnect, device number 36 [ 341.523542][T10350] hfs: unable to load iocharset "io#harset" [ 341.588916][ T30] audit: type=1400 audit(341.522:1017): avc: denied { getopt } for pid=10345 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.625912][T10351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.640171][T10351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.891869][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 342.091714][ T24] usb 2-1: device descriptor read/64, error -71 [ 342.329770][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 342.460138][ T24] usb 2-1: device descriptor read/64, error -71 [ 342.571256][ T24] usb usb2-port1: attempt power cycle [ 343.330650][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 343.349740][ T2149] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 343.361969][ T24] usb 2-1: device descriptor read/8, error -71 [ 343.499716][ T2149] usb 4-1: Using ep0 maxpacket: 16 [ 343.509487][ T2149] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 343.519052][ T2149] usb 4-1: config 0 has no interface number 0 [ 343.528031][ T2149] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 343.547008][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.556313][ T2149] usb 4-1: Product: syz [ 343.561156][ T2149] usb 4-1: Manufacturer: syz [ 343.566112][ T2149] usb 4-1: SerialNumber: syz [ 343.598623][ T2149] usb 4-1: config 0 descriptor?? [ 343.606541][ T2149] radioshark2 4-1:0.206: Invalid radioSHARK2 device [ 343.613624][ T2149] radioshark2 4-1:0.206: probe with driver radioshark2 failed with error -22 [ 343.622596][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 343.630820][ T2149] usbhid 4-1:0.206: couldn't find an input interrupt endpoint [ 343.659223][ T24] usb 2-1: device descriptor read/8, error -71 [ 343.790008][ T24] usb usb2-port1: unable to enumerate USB device [ 343.816731][ T5923] usb 4-1: USB disconnect, device number 37 [ 344.372244][ T30] audit: type=1400 audit(344.362:1018): avc: denied { setopt } for pid=10387 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.869720][ T5916] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 344.909911][ T2149] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 345.020023][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 345.026415][ T5916] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 345.038659][ T5916] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 345.048707][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 345.058857][ T5916] usb 4-1: Product: syz [ 345.064367][ T5916] usb 4-1: Manufacturer: syz [ 345.068963][ T5916] usb 4-1: SerialNumber: syz [ 345.076328][ T5916] usb 4-1: config 0 descriptor?? [ 345.106981][ T2149] usb 2-1: Using ep0 maxpacket: 8 [ 345.114189][T10395] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 345.712166][ T30] audit: type=1400 audit(345.132:1019): avc: denied { read write } for pid=10405 comm="syz.4.1022" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 345.744947][ T30] audit: type=1400 audit(345.132:1020): avc: denied { open } for pid=10405 comm="syz.4.1022" path="/231/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 345.775662][ T30] audit: type=1400 audit(345.142:1021): avc: denied { create } for pid=10405 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 345.832226][ T30] audit: type=1400 audit(345.152:1022): avc: denied { setopt } for pid=10405 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 345.864005][ T2149] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 345.877536][ T2149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.920274][ T2149] usb 2-1: Product: syz [ 345.924477][ T2149] usb 2-1: Manufacturer: syz [ 345.929093][ T2149] usb 2-1: SerialNumber: syz [ 345.942888][ T2149] usb 2-1: config 0 descriptor?? [ 345.954777][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.980078][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.988784][ T30] audit: type=1400 audit(345.972:1023): avc: denied { append } for pid=10409 comm="syz.2.1023" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 345.992853][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.026644][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.153106][ T5923] usb 4-1: USB disconnect, device number 38 [ 346.166779][ T2149] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 346.302910][ T30] audit: type=1400 audit(346.292:1024): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 346.373002][T10419] IPVS: Error connecting to the multicast addr [ 346.589762][ T5923] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 346.738943][ T94] block nbd0: Possible stuck request ffff888026720000: control (read@0,1024B). Runtime 30 seconds [ 346.750620][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 346.755815][ T94] block nbd0: Possible stuck request ffff8880267201c0: control (read@1024,1024B). Runtime 30 seconds [ 346.767194][ T94] block nbd0: Possible stuck request ffff888026720380: control (read@2048,1024B). Runtime 30 seconds [ 346.778607][ T94] block nbd0: Possible stuck request ffff888026720540: control (read@3072,1024B). Runtime 30 seconds [ 346.791112][ T5916] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 346.799757][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 346.815958][ T5923] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 346.825192][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 346.834570][ T5923] usb 4-1: Product: syz [ 346.839027][ T5923] usb 4-1: Manufacturer: syz [ 346.843740][ T5923] usb 4-1: SerialNumber: syz [ 346.876610][ T5923] usb 4-1: config 0 descriptor?? [ 346.882780][T10395] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 346.969929][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 346.975681][ T5916] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 346.987186][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 346.995401][ T5916] usb 3-1: can't read configurations, error -61 [ 347.140204][ T5916] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 347.310228][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 347.315966][ T5916] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 347.325214][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 347.333412][ T5916] usb 3-1: can't read configurations, error -61 [ 347.340814][ T5916] usb usb3-port1: attempt power cycle [ 347.604510][ T2149] usb write operation failed. (-71) [ 347.612440][ T2149] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 347.626125][ T2149] dvbdev: DVB: registering new adapter (Terratec H7) [ 347.633471][ T2149] usb 2-1: media controller created [ 347.638897][ T2149] usb read operation failed. (-71) [ 347.644719][ T2149] usb write operation failed. (-71) [ 347.652518][ T2149] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 347.663617][ T2149] usb 2-1: USB disconnect, device number 50 [ 347.690257][ T5916] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 347.730670][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 347.736295][ T5916] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 347.745215][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 347.752983][ T5916] usb 3-1: can't read configurations, error -61 [ 347.890459][ T5916] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 347.910657][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 347.916245][ T5916] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 347.925105][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 347.932868][ T5916] usb 3-1: can't read configurations, error -61 [ 347.939329][ T5916] usb usb3-port1: unable to enumerate USB device [ 348.473817][ T5916] usb 4-1: USB disconnect, device number 39 [ 351.026124][ T30] audit: type=1400 audit(351.012:1025): avc: denied { bind } for pid=10471 comm="syz.3.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 351.087198][ T30] audit: type=1400 audit(351.042:1026): avc: denied { accept } for pid=10471 comm="syz.3.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 351.357216][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.368334][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.380586][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.388975][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.396862][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.413227][T10493] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1042'. [ 351.821798][ T30] audit: type=1400 audit(351.802:1027): avc: denied { mounton } for pid=10484 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 352.171450][T10496] gretap1: entered promiscuous mode [ 352.636479][T10484] chnl_net:caif_netlink_parms(): no params data found [ 352.907097][ T30] audit: type=1400 audit(352.892:1028): avc: denied { connect } for pid=10500 comm="syz.4.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.933788][T10484] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.946270][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.957031][ T30] audit: type=1400 audit(352.942:1029): avc: denied { getopt } for pid=10500 comm="syz.4.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 353.000363][T10484] bridge_slave_0: entered allmulticast mode [ 353.029001][T10484] bridge_slave_0: entered promiscuous mode [ 353.054837][T10484] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.064270][T10484] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.071501][T10484] bridge_slave_1: entered allmulticast mode [ 353.162302][T10484] bridge_slave_1: entered promiscuous mode [ 353.217316][T10484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.240778][T10484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.289571][T10484] team0: Port device team_slave_0 added [ 353.308089][T10484] team0: Port device team_slave_1 added [ 353.320484][T10530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.335184][T10530] sctp: [Deprecated]: syz.4.1047 (pid 10530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.335184][T10530] Use struct sctp_sack_info instead [ 353.371601][T10484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.378627][T10484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.407515][T10484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.421257][T10484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.428252][T10484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.454434][T10484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.502855][T10484] hsr_slave_0: entered promiscuous mode [ 353.514998][T10484] hsr_slave_1: entered promiscuous mode [ 353.523148][T10484] debugfs: 'hsr0' already exists in 'hsr' [ 353.528991][T10484] Cannot create hsr debugfs directory [ 353.689827][ T5862] Bluetooth: hci5: command tx timeout [ 353.710554][T10484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.721825][T10484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.731953][T10484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 353.742554][T10484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.808940][T10484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.826735][T10484] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.838547][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.845719][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.861768][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.868842][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.964724][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 353.970126][T10484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.984408][T10484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.985678][T10545] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 354.024370][T10545] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 354.034308][T10546] gretap1: entered promiscuous mode [ 354.325851][T10484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.411374][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 354.504762][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1051'. [ 354.528434][T10568] netlink: 'syz.3.1051': attribute type 16 has an invalid length. [ 354.537936][T10568] netlink: 'syz.3.1051': attribute type 17 has an invalid length. [ 354.583369][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.594584][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 354.673515][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.683857][T10484] veth0_vlan: entered promiscuous mode [ 354.709322][ T24] usb 3-1: config 0 descriptor?? [ 354.745446][T10484] veth1_vlan: entered promiscuous mode [ 354.786440][T10484] veth0_macvtap: entered promiscuous mode [ 354.815189][T10484] veth1_macvtap: entered promiscuous mode [ 354.852616][T10484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.866935][T10484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.897379][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.908266][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.934640][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.958178][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.070852][T10572] kAFS: No cell specified [ 355.074319][ T30] audit: type=1400 audit(355.052:1030): avc: denied { getattr } for pid=10553 comm="syz.2.1049" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 355.280962][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.297694][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.353997][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.380735][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.398883][ T30] audit: type=1400 audit(355.382:1031): avc: denied { mounton } for pid=10484 comm="syz-executor" path="/root/syzkaller.DNBXZO/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 355.459529][ T30] audit: type=1400 audit(355.412:1032): avc: denied { mounton } for pid=10484 comm="syz-executor" path="/root/syzkaller.DNBXZO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 355.490830][ T30] audit: type=1400 audit(355.412:1033): avc: denied { mounton } for pid=10484 comm="syz-executor" path="/root/syzkaller.DNBXZO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 355.522651][ T30] audit: type=1400 audit(355.422:1034): avc: denied { mounton } for pid=10484 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 355.770335][ T5862] Bluetooth: hci5: command tx timeout [ 355.929934][ T44] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 355.939403][T10582] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1053'. [ 356.704684][ T44] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 356.713528][ T44] usb 6-1: config 0 has no interface number 0 [ 356.723072][ T44] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 356.729189][T10586] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1054'. [ 356.743427][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.752840][ T44] usb 6-1: Product: syz [ 356.757500][ T44] usb 6-1: Manufacturer: syz [ 356.762747][ T44] usb 6-1: SerialNumber: syz [ 356.945190][ T44] usb 6-1: config 0 descriptor?? [ 357.441676][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 357.451769][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 357.474127][ T24] usb 3-1: USB disconnect, device number 43 [ 357.591804][ T30] audit: type=1400 audit(357.522:1035): avc: denied { append } for pid=10592 comm="syz.1.1056" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 357.767464][ T44] usb 6-1: Firmware version (0.0) predates our first public release. [ 357.786525][ T44] usb 6-1: Please update to version 0.2 or newer [ 357.797096][ T44] usb 6-1: Firmware: build [ 357.850218][ T5862] Bluetooth: hci5: command tx timeout [ 358.029366][T10606] kvm: pic: non byte read [ 358.069925][ T44] usb 6-1: USB disconnect, device number 2 [ 358.090018][T10606] kvm: pic: non byte read [ 358.148849][T10606] kvm: pic: non byte read [ 358.168150][T10606] kvm: pic: non byte read [ 358.188207][T10606] kvm: pic: non byte read [ 358.234303][T10606] kvm: pic: non byte read [ 358.564050][T10606] kvm: pic: non byte read [ 358.577673][ T30] audit: type=1400 audit(358.522:1036): avc: denied { remount } for pid=10608 comm="syz.4.1060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 358.685728][T10606] kvm: pic: non byte read [ 358.693213][T10606] kvm: pic: non byte read [ 358.707489][T10606] kvm: pic: non byte read [ 359.915015][ T30] audit: type=1400 audit(359.902:1037): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 359.939940][ T5862] Bluetooth: hci5: command tx timeout [ 360.628875][ T44] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 360.832632][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 360.840519][T10658] 9pnet_fd: Insufficient options for proto=fd [ 360.858201][ T44] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 360.872411][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.935679][ T44] usb 4-1: Product: syz [ 360.944932][ T44] usb 4-1: Manufacturer: syz [ 360.954013][ T44] usb 4-1: SerialNumber: syz [ 360.964588][ T44] usb 4-1: config 0 descriptor?? [ 361.179200][ T44] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 361.188490][T10664] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1070'. [ 361.205727][T10664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10664 comm=syz.4.1070 [ 361.220689][T10664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10664 comm=syz.4.1070 [ 361.234559][T10664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10664 comm=syz.4.1070 [ 361.317111][T10667] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1071'. [ 361.755213][ T30] audit: type=1400 audit(361.732:1038): avc: denied { read } for pid=10669 comm="syz.5.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 362.094977][T10678] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1074'. [ 362.166502][ T30] audit: type=1400 audit(362.152:1039): avc: denied { create } for pid=10680 comm="syz.5.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 362.248362][ T30] audit: type=1400 audit(362.232:1040): avc: denied { write } for pid=10680 comm="syz.5.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 362.272615][T10682] bond1 (unregistering): Released all slaves [ 362.306978][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1075'. [ 362.329158][T10685] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.352606][T10685] bridge_slave_0 (unregistering): left allmulticast mode [ 362.360001][T10685] bridge_slave_0 (unregistering): left promiscuous mode [ 362.367080][T10685] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.939506][ T30] audit: type=1400 audit(362.922:1041): avc: denied { read write } for pid=10690 comm="syz.1.1077" name="file1" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 362.962506][ T30] audit: type=1400 audit(362.922:1042): avc: denied { open } for pid=10690 comm="syz.1.1077" path="/202/bus/file1" dev="overlay" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 362.991350][ T30] audit: type=1400 audit(362.952:1043): avc: denied { setattr } for pid=10690 comm="syz.1.1077" name="#2a" dev="tmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 363.131653][T10696] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1079'. [ 363.281787][ T44] usb write operation failed. (-71) [ 363.311939][ T44] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.323033][ T44] dvbdev: DVB: registering new adapter (Terratec H7) [ 363.329889][ T44] usb 4-1: media controller created [ 363.335971][ T44] usb read operation failed. (-71) [ 363.342315][ T44] usb write operation failed. (-71) [ 363.356290][ T44] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 363.918813][ T44] usb 4-1: USB disconnect, device number 40 [ 365.545087][T10729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1080'. [ 365.660841][T10717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.835837][ T30] audit: type=1400 audit(365.822:1044): avc: denied { read write } for pid=10712 comm="syz.1.1084" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 365.835889][ T30] audit: type=1400 audit(365.822:1045): avc: denied { open } for pid=10712 comm="syz.1.1084" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 365.835947][ T30] audit: type=1400 audit(365.822:1046): avc: denied { ioctl } for pid=10712 comm="syz.1.1084" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 365.940344][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 366.099954][ T24] usb 3-1: device descriptor read/64, error -71 [ 366.132667][T10744] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 2, id = 0 [ 366.349810][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 366.929757][ T30] audit: type=1400 audit(366.802:1047): avc: denied { write } for pid=10750 comm="syz.4.1092" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 367.160660][T10762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.390234][ T24] usb 3-1: device descriptor read/64, error -71 [ 367.399414][ T30] audit: type=1400 audit(367.382:1048): avc: denied { bind } for pid=10765 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.522538][ T24] usb usb3-port1: attempt power cycle [ 367.869917][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 367.890508][ T24] usb 3-1: device descriptor read/8, error -71 [ 368.026465][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 368.092150][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 368.105910][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 368.117034][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 368.130113][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 368.149189][ T30] audit: type=1400 audit(368.122:1049): avc: denied { read } for pid=10768 comm="syz.4.1097" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 368.184493][ T30] audit: type=1400 audit(368.122:1050): avc: denied { open } for pid=10768 comm="syz.4.1097" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 368.210581][ T24] usb 3-1: device descriptor read/8, error -71 [ 368.321069][ T24] usb usb3-port1: unable to enumerate USB device [ 369.049860][ T5923] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 369.115745][T10796] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1105'. [ 369.147843][T10798] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1106'. [ 369.223286][ T5923] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.244962][ T5923] usb 6-1: config 0 has no interface number 0 [ 369.263884][ T5923] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 369.297696][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.307818][ T5923] usb 6-1: Product: syz [ 370.133682][ T5923] usb 6-1: Manufacturer: syz [ 370.138308][ T5923] usb 6-1: SerialNumber: syz [ 370.204659][ T5923] usb 6-1: config 0 descriptor?? [ 371.289704][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 371.373160][ T5923] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 371.384075][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.393925][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.493632][ T2149] usb 6-1: USB disconnect, device number 3 [ 371.559681][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 371.569083][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 371.584751][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.593595][ T24] usb 2-1: Product: syz [ 371.597868][ T24] usb 2-1: Manufacturer: syz [ 371.604416][ T24] usb 2-1: SerialNumber: syz [ 371.630175][ T24] usb 2-1: config 0 descriptor?? [ 371.649971][ T5916] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 371.810273][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 371.823029][ T5916] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 371.832875][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.841359][ T5916] usb 4-1: Product: syz [ 371.845669][ T5916] usb 4-1: Manufacturer: syz [ 371.853798][ T5916] usb 4-1: SerialNumber: syz [ 371.870020][ T24] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 371.871710][ T5916] usb 4-1: config 0 descriptor?? [ 372.104810][ T5916] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 372.439964][ T2149] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 372.601597][ T2149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.611563][ T2149] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 372.620657][ T2149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.631757][ T2149] usb 6-1: config 0 descriptor?? [ 372.714081][ T5916] usb write operation failed. (-71) [ 372.724960][ T5916] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 372.735768][ T5916] dvbdev: DVB: registering new adapter (Terratec H7) [ 372.744625][ T5916] usb 4-1: media controller created [ 372.750659][ T5916] usb read operation failed. (-71) [ 372.756031][ T5916] usb write operation failed. (-71) [ 372.764738][ T5916] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 372.776473][ T5916] usb 4-1: USB disconnect, device number 41 [ 373.043282][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.052467][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.266627][ T30] audit: type=1400 audit(373.252:1051): avc: denied { append } for pid=10829 comm="syz.5.1112" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 373.268647][T10831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10831 comm=syz.5.1112 [ 373.355615][ T2149] razer 0003:1532:010E.000C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 373.560933][ T2149] usb 6-1: USB disconnect, device number 4 [ 373.690060][ T24] usb write operation failed. (-71) [ 373.706594][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 373.731959][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 373.881373][ T24] usb 2-1: media controller created [ 373.887536][ T24] usb read operation failed. (-71) [ 373.894725][ T24] usb write operation failed. (-71) [ 373.905479][ T24] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 373.916628][ T24] usb 2-1: USB disconnect, device number 51 [ 374.609711][ T30] audit: type=1400 audit(374.592:1052): avc: denied { listen } for pid=10862 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.646254][ T30] audit: type=1400 audit(374.592:1053): avc: denied { accept } for pid=10862 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.829248][T10873] input: syz1 as /devices/virtual/input/input19 [ 375.324513][ T5862] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 375.361829][T10879] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 375.379374][T10879] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.392952][T10879] bond0: (slave team0): Enslaving as an active interface with an up link [ 376.016077][T10896] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1128'. [ 376.186496][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 376.215053][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 376.875931][ T94] block nbd0: Possible stuck request ffff888026720000: control (read@0,1024B). Runtime 60 seconds [ 376.886593][ T94] block nbd0: Possible stuck request ffff8880267201c0: control (read@1024,1024B). Runtime 60 seconds [ 376.897817][ T94] block nbd0: Possible stuck request ffff888026720380: control (read@2048,1024B). Runtime 60 seconds [ 376.908714][ T94] block nbd0: Possible stuck request ffff888026720540: control (read@3072,1024B). Runtime 60 seconds [ 377.017521][T10900] @: renamed from vlan0 (while UP) [ 377.270696][T10914] raw_sendmsg: syz.3.1132 forgot to set AF_INET. Fix it! [ 377.352519][T10915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1129'. [ 377.610749][T10915] netlink: 'syz.4.1129': attribute type 2 has an invalid length. [ 377.726214][ T5923] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 377.871680][ T5923] usb 3-1: device descriptor read/64, error -71 [ 378.127000][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.133523][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.321840][ T5923] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 378.492409][ T5923] usb 3-1: device descriptor read/64, error -71 [ 378.600373][ T5923] usb usb3-port1: attempt power cycle [ 378.688015][T10939] block nbd4: Attempted send on invalid socket [ 378.695131][T10939] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 379.020219][ T5923] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 379.041173][ T5923] usb 3-1: device descriptor read/8, error -71 [ 379.364879][T10933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.459925][ T5923] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 379.490736][ T5923] usb 3-1: device descriptor read/8, error -71 [ 379.601535][ T5923] usb usb3-port1: unable to enumerate USB device [ 380.004726][ T30] audit: type=1400 audit(379.992:1054): avc: denied { setopt } for pid=10953 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 380.181416][ T30] audit: type=1400 audit(379.992:1055): avc: denied { connect } for pid=10953 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 380.469853][ T5923] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 380.624818][ T5923] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 380.634590][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.659330][ T5923] usb 3-1: Product: syz [ 380.671274][ T5923] usb 3-1: Manufacturer: syz [ 380.683836][ T5923] usb 3-1: SerialNumber: syz [ 380.792226][ T5923] usb 3-1: config 0 descriptor?? [ 381.208384][ T5923] airspy 3-1:0.0: Board ID: 00 [ 381.234055][ T5923] airspy 3-1:0.0: Firmware version: [ 381.854189][T10980] tipc: Started in network mode [ 381.859350][T10980] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 381.877403][T10980] tipc: Enabled bearer , priority 10 [ 382.361672][ T5923] airspy 3-1:0.0: usb_control_msg() failed -71 request 10 [ 382.375887][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 382.392354][ T5923] airspy 3-1:0.0: Registered as swradio24 [ 382.479260][ T5923] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 382.496551][ T5923] usb 3-1: USB disconnect, device number 52 [ 382.686691][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1148'. [ 382.991520][ T5923] tipc: Node number set to 4269801488 [ 384.014085][T11001] netlink: 400 bytes leftover after parsing attributes in process `syz.1.1154'. [ 384.538837][ T44] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 384.605921][ T30] audit: type=1326 audit(384.592:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.1.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x50000 [ 384.646498][ T30] audit: type=1326 audit(384.622:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.1.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x50000 [ 384.673910][ T30] audit: type=1326 audit(384.622:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.1.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x50000 [ 384.699452][ T30] audit: type=1326 audit(384.622:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.1.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x50000 [ 384.726429][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 384.730283][ T30] audit: type=1326 audit(384.622:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.1.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x50000 [ 384.755503][ T30] audit: type=1326 audit(384.622:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.1.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x50000 [ 384.779933][ T44] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 384.800293][ T30] audit: type=1326 audit(384.622:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.1.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x50000 [ 384.802459][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.838195][ T44] usb 4-1: Product: syz [ 384.842696][ T44] usb 4-1: Manufacturer: syz [ 384.847319][ T44] usb 4-1: SerialNumber: syz [ 384.874754][ T30] audit: type=1326 audit(384.622:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.1.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x50000 [ 385.007416][ T44] usb 4-1: config 0 descriptor?? [ 385.024855][ T44] gspca_main: sq905-2.14.0 probing 2770:9120 [ 385.114795][ T5847] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 385.307571][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.464081][ T44] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 385.488111][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 385.498710][ T44] sq905 4-1:0.0: probe with driver sq905 failed with error -32 [ 385.527889][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.543112][ T5847] usb 2-1: config 0 descriptor?? [ 386.237233][T11032] netlink: 'syz.4.1150': attribute type 10 has an invalid length. [ 386.246427][T11032] team0: Device hsr_slave_0 failed to register rx_handler [ 386.592468][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 386.665634][ T5923] usb 4-1: USB disconnect, device number 42 [ 386.842079][ T5847] logitech-djreceiver 0003:046D:C71F.000D: item fetching failed at offset 5/7 [ 386.948454][ T5847] logitech-djreceiver 0003:046D:C71F.000D: logi_dj_probe: parse failed [ 386.957346][ T5847] logitech-djreceiver 0003:046D:C71F.000D: probe with driver logitech-djreceiver failed with error -22 [ 387.447356][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 387.610985][T11041] netlink: 'syz.3.1160': attribute type 21 has an invalid length. [ 387.641736][T11041] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1160'. [ 387.841522][ T5923] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 388.001291][ T5923] usb 3-1: config 1 interface 0 has no altsetting 0 [ 388.033317][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 388.051999][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.074416][ T5923] usb 3-1: Product: syz [ 388.085600][ T5923] usb 3-1: Manufacturer: syz [ 388.096437][ T5923] usb 3-1: SerialNumber: syz [ 388.326781][ T5923] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 388.353240][ T5923] usb 3-1: USB disconnect, device number 53 [ 388.494605][ T5923] usblp0: removed [ 388.735240][ T6007] usb 2-1: USB disconnect, device number 52 [ 388.784587][T11060] bond4: entered promiscuous mode [ 388.803264][T11060] bond4: entered allmulticast mode [ 388.834869][T11060] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.007983][ T5923] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 389.291898][ T5923] usb 3-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 389.342401][ T5923] usb 3-1: config 1 interface 0 has no altsetting 0 [ 389.408564][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 389.450299][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.490079][ T5923] usb 3-1: Product: syz [ 389.512945][ T5923] usb 3-1: Manufacturer: syz [ 389.538138][ T5923] usb 3-1: SerialNumber: syz [ 389.702667][T11042] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 390.183873][ T5923] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 390.359428][ T5923] usb 3-1: USB disconnect, device number 54 [ 390.672836][ T5923] usblp0: removed [ 390.919449][T11084] overlayfs: failed to resolve './file1': -2 [ 391.770660][T11100] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1176'. [ 392.019731][ T5847] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 392.579738][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 392.640975][ T5847] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 392.733185][ T5847] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 392.786623][ T6007] kernel read not supported for file /sequencer (pid: 6007 comm: kworker/0:7) [ 392.841574][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 395.714807][ T5847] usb 2-1: Product: syz [ 395.718990][ T5847] usb 2-1: Manufacturer: syz [ 395.772145][ T5847] usb 2-1: SerialNumber: syz [ 395.782646][ T5847] usb 2-1: config 0 descriptor?? [ 395.790320][ T5847] usb 2-1: can't set config #0, error -71 [ 395.790685][T11122] overlayfs: failed to resolve './file1': -2 [ 395.797578][ T5847] usb 2-1: USB disconnect, device number 53 [ 396.278429][T11126] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 397.439733][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 397.579692][ T5923] usb 6-1: device descriptor read/64, error -71 [ 398.819690][ T5923] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 398.850072][ T6007] kernel read not supported for file /sequencer (pid: 6007 comm: kworker/0:7) [ 398.861755][T11160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11160 comm=syz.2.1195 [ 398.950902][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 398.950912][ T30] audit: type=1400 audit(398.942:1125): avc: denied { getopt } for pid=11164 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.969931][ T5923] usb 6-1: device descriptor read/64, error -71 [ 399.089960][T11170] overlayfs: failed to resolve './file1': -2 [ 399.115331][ T5923] usb usb6-port1: attempt power cycle [ 399.325306][T11180] syzkaller1: entered promiscuous mode [ 399.339518][T11180] syzkaller1: entered allmulticast mode [ 399.479831][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 399.501096][ T5923] usb 6-1: device descriptor read/8, error -71 [ 399.581149][T11185] qnx6: unable to read the first superblock [ 399.809525][ T5923] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 399.840440][ T5923] usb 6-1: device descriptor read/8, error -71 [ 399.953117][ T5923] usb usb6-port1: unable to enumerate USB device [ 400.543964][T11194] batadv_slave_1: entered promiscuous mode [ 400.635958][T11196] ip6tnl0: entered promiscuous mode [ 400.718020][T11196] ip6tnl0: left promiscuous mode [ 400.733350][T11196] batadv_slave_1: left promiscuous mode [ 400.881575][T11199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.260846][T11209] netlink: 'syz.4.1209': attribute type 75 has an invalid length. [ 401.436470][ T30] audit: type=1400 audit(401.422:1126): avc: denied { execute } for pid=11210 comm="syz.3.1210" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 401.507998][T11212] netem: incorrect gi model size [ 401.523500][T11212] netem: change failed [ 401.703300][T11222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1215'. [ 402.244220][ T6007] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 402.761687][ T6007] usb 3-1: Using ep0 maxpacket: 16 [ 402.832386][ T6007] usb 3-1: no configurations [ 402.844230][ T6007] usb 3-1: can't read configurations, error -22 [ 402.848873][T11233] loop2: detected capacity change from 0 to 7 [ 402.904559][T10651] Dev loop2: unable to read RDB block 7 [ 402.910511][T10651] loop2: unable to read partition table [ 402.918530][T10651] loop2: partition table beyond EOD, truncated [ 403.212874][T11233] Dev loop2: unable to read RDB block 7 [ 403.219692][T11233] loop2: unable to read partition table [ 403.229565][T11233] loop2: partition table beyond EOD, truncated [ 403.236062][ T6007] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 403.258608][T11233] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 403.271603][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 403.333376][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 403.410091][ T6007] usb 3-1: Using ep0 maxpacket: 16 [ 403.413537][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 403.448358][ T6007] usb 3-1: no configurations [ 403.457921][ T6007] usb 3-1: can't read configurations, error -22 [ 403.485983][ T6007] usb usb3-port1: attempt power cycle [ 403.830137][ T6007] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 403.862121][ T6007] usb 3-1: Using ep0 maxpacket: 16 [ 403.869679][ T6007] usb 3-1: no configurations [ 403.874372][ T6007] usb 3-1: can't read configurations, error -22 [ 403.951207][T11248] debugfs: '!' already exists in 'ieee80211' [ 403.976612][ T30] audit: type=1326 audit(403.922:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.044707][ T6007] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 404.050113][ T30] audit: type=1326 audit(403.922:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.082648][ T6007] usb 3-1: Using ep0 maxpacket: 16 [ 404.089891][ T30] audit: type=1326 audit(403.922:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.092796][ T6007] usb 3-1: no configurations [ 404.118105][ T30] audit: type=1326 audit(403.922:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.198777][ T6007] usb 3-1: can't read configurations, error -22 [ 404.237844][ T6007] usb usb3-port1: unable to enumerate USB device [ 404.296652][ T30] audit: type=1326 audit(403.922:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.320660][ T30] audit: type=1326 audit(403.922:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.347666][ T30] audit: type=1326 audit(403.922:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.375410][ T30] audit: type=1326 audit(403.922:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.463866][ T30] audit: type=1326 audit(404.132:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.493351][ T30] audit: type=1326 audit(404.132:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 404.719751][ T6007] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 404.816856][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 404.917971][ T6007] usb 6-1: device descriptor read/64, error -71 [ 404.952734][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.955067][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 405.013468][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.053793][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 405.181399][ T6007] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 405.340353][ T6007] usb 6-1: device descriptor read/64, error -71 [ 405.453676][ T6007] usb usb6-port1: attempt power cycle [ 406.594940][T11287] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1233'. [ 406.614442][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 406.626439][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 406.750130][ T6007] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 406.780189][ T6007] usb 6-1: device descriptor read/8, error -71 [ 406.863959][T11289] bond0: (slave team0): Releasing backup interface [ 406.890576][ T94] block nbd0: Possible stuck request ffff888026720000: control (read@0,1024B). Runtime 90 seconds [ 406.901310][ T94] block nbd0: Possible stuck request ffff8880267201c0: control (read@1024,1024B). Runtime 90 seconds [ 406.990143][ T94] block nbd0: Possible stuck request ffff888026720380: control (read@2048,1024B). Runtime 90 seconds [ 407.001742][ T94] block nbd0: Possible stuck request ffff888026720540: control (read@3072,1024B). Runtime 90 seconds [ 407.039720][ T6007] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 407.138507][T11289] bridge_slave_0: left allmulticast mode [ 407.157610][T11289] bridge_slave_0: left promiscuous mode [ 407.183681][ T6007] usb 6-1: device descriptor read/8, error -71 [ 407.187206][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.223879][T11289] bridge_slave_1: left allmulticast mode [ 407.231023][T11289] bridge_slave_1: left promiscuous mode [ 407.240706][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.266555][T11289] bond0: (slave bond_slave_0): Releasing backup interface [ 407.278012][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.305739][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.317916][T11289] bond0: (slave bond_slave_1): Releasing backup interface [ 407.361663][T11289] team0: Port device team_slave_0 removed [ 407.378038][T11289] team0: Port device team_slave_1 removed [ 407.415849][ T6007] usb usb6-port1: unable to enumerate USB device [ 407.447923][T11289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.455751][T11289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.992491][T11289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.033939][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 408.107521][T11289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.771821][T11290] team0: Mode changed to "loadbalance" [ 411.077746][T11323] tipc: Started in network mode [ 411.087824][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 411.100947][T11323] tipc: Node identity 86a5657d5a, cluster identity 4711 [ 411.108040][T11323] tipc: Enabled bearer , priority 0 [ 411.174918][T11325] syzkaller0: entered promiscuous mode [ 411.181143][T11325] syzkaller0: entered allmulticast mode [ 411.275844][T11325] tipc: Resetting bearer [ 411.303524][T11325] tipc: Disabling bearer [ 411.689973][ T6007] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 411.739762][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 412.213124][ T6007] usb 2-1: Using ep0 maxpacket: 32 [ 412.238672][ T6007] usb 2-1: unable to get BOS descriptor or descriptor too short [ 412.247436][ T6007] usb 2-1: config 2 has an invalid interface number: 79 but max is 0 [ 412.260812][ T6007] usb 2-1: config 2 has no interface number 0 [ 412.284564][ T6007] usb 2-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=fd.38 [ 412.293920][ T6007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.301942][ T6007] usb 2-1: Product: syz [ 412.308217][ T6007] usb 2-1: Manufacturer: syz [ 412.313185][ T6007] usb 2-1: SerialNumber: syz [ 412.531132][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.544085][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.565153][ T6007] ftdi_sio 2-1:2.79: FTDI USB Serial Device converter detected [ 412.612261][ T6007] ftdi_sio ttyUSB0: unknown device type: 0xfd38 [ 412.636025][ T5856] udevd[5856]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 412.814875][ T6007] usb 2-1: USB disconnect, device number 54 [ 412.850157][ T6007] ftdi_sio 2-1:2.79: device disconnected [ 413.199650][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 413.199675][ T30] audit: type=1400 audit(413.182:1151): avc: denied { setopt } for pid=11359 comm="syz.1.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 413.696617][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.712652][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.729743][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.022137][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.062713][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.079391][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 414.091994][ T30] audit: type=1400 audit(414.082:1152): avc: denied { read write } for pid=11379 comm="syz.3.1259" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 414.100855][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.120706][ T30] audit: type=1400 audit(414.112:1153): avc: denied { open } for pid=11379 comm="syz.3.1259" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 414.334741][T11385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1261'. [ 414.477584][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.757887][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 414.764550][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.999696][ T5847] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 416.029675][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 416.038521][ T5847] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 416.051462][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.060921][ T5847] usb 3-1: Product: syz [ 416.065281][ T5847] usb 3-1: Manufacturer: syz [ 416.072156][ T5847] usb 3-1: SerialNumber: syz [ 416.080685][ T5847] usb 3-1: config 0 descriptor?? [ 416.199685][ T2149] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 416.291134][ T5847] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 416.312744][ T5847] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 416.350102][ T2149] usb 4-1: Using ep0 maxpacket: 8 [ 416.363589][ T2149] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 416.376118][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.384533][ T2149] usb 4-1: Product: syz [ 416.389741][ T2149] usb 4-1: Manufacturer: syz [ 416.394348][ T2149] usb 4-1: SerialNumber: syz [ 416.410493][ T2149] usb 4-1: config 0 descriptor?? [ 416.500387][ T5847] usb 3-1: USB disconnect, device number 59 [ 416.544884][T11417] netlink: 'syz.4.1271': attribute type 29 has an invalid length. [ 416.593557][T11417] netlink: 'syz.4.1271': attribute type 29 has an invalid length. [ 416.601838][ T5923] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 416.736233][ T30] audit: type=1400 audit(416.722:1154): avc: denied { nlmsg_read } for pid=11412 comm="syz.4.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 416.739387][ T2149] usb read operation failed. (-32) [ 416.756686][T11419] netlink: 828 bytes leftover after parsing attributes in process `syz.4.1271'. [ 416.809956][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 416.819946][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 416.829124][ T5923] usb 2-1: config 43 has an invalid interface number: 127 but max is 0 [ 416.845513][ T5923] usb 2-1: config 43 has no interface number 0 [ 416.856526][ T5923] usb 2-1: config 43 interface 127 has no altsetting 0 [ 416.871910][ T5923] usb 2-1: New USB device found, idVendor=caf0, idProduct=05df, bcdDevice=67.f4 [ 416.881352][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.896444][ T5923] usb 2-1: Product: syz [ 416.906174][ T5923] usb 2-1: Manufacturer: syz [ 416.916997][ T5923] usb 2-1: SerialNumber: syz [ 417.063889][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 417.143440][ T5923] usb 2-1: USB disconnect, device number 55 [ 417.169648][ T30] audit: type=1400 audit(417.152:1155): avc: denied { bind } for pid=11420 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 417.190653][ T2149] usb write operation failed. (-71) [ 417.197429][ T2149] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 417.441483][ T2149] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 417.573982][ T30] audit: type=1400 audit(417.562:1156): avc: denied { firmware_load } for pid=2149 comm="kworker/1:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 417.574013][ T2149] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 417.689013][T11428] rtc_cmos 00:00: Alarms can be up to one day in the future [ 417.706567][ T5856] udevd[5856]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system [ 417.752391][T11434] tmpfs: Unknown parameter 'fsuuid' [ 418.209044][ T6007] libceph: connect (1)[c::]:6789 error -101 [ 418.216740][T11450] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1279'. [ 418.217829][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 418.243979][T11454] loop2: detected capacity change from 0 to 7 [ 418.254920][T11441] ceph: No mds server is up or the cluster is laggy [ 418.376704][ T5856] Dev loop2: unable to read RDB block 7 [ 418.400826][ T5856] loop2: unable to read partition table [ 418.859275][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 418.974849][ T5856] loop2: partition table beyond EOD, truncated [ 418.990754][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 419.000078][ T5856] udevd[5856]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 419.072999][ T6007] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 419.090117][ T5220] Dev loop2: unable to read RDB block 7 [ 419.105900][ T5220] loop2: unable to read partition table [ 419.189208][ T5220] loop2: partition table beyond EOD, truncated [ 419.301097][ T6007] usb 6-1: Invalid ep0 maxpacket: 32 [ 419.465229][ T5856] udevd[5856]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 419.518820][T11468] netlink: 'syz.3.1284': attribute type 12 has an invalid length. [ 419.543143][ T5856] udevd[5856]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system [ 419.560217][ T6007] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 419.577242][ T5856] udevd[5856]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 419.598329][ T30] audit: type=1400 audit(419.582:1157): avc: denied { watch watch_reads } for pid=11467 comm="syz.3.1284" path="pipe:[5281]" dev="pipefs" ino=5281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 419.622220][T11471] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 419.664412][ T5856] udevd[5856]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 419.707520][ T5856] udevd[5856]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 419.743084][ T6007] usb 6-1: Invalid ep0 maxpacket: 32 [ 419.748722][ T6007] usb usb6-port1: attempt power cycle [ 419.990031][ T44] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 420.100107][ T6007] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 420.130040][ T6007] usb 6-1: Invalid ep0 maxpacket: 32 [ 420.139732][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 420.148417][ T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 420.157579][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.165696][ T44] usb 3-1: Product: syz [ 420.170004][ T44] usb 3-1: Manufacturer: syz [ 420.174608][ T44] usb 3-1: SerialNumber: syz [ 420.180934][ T44] usb 3-1: config 0 descriptor?? [ 420.259942][ T6007] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 420.280287][ T6007] usb 6-1: Invalid ep0 maxpacket: 32 [ 420.285847][ T6007] usb usb6-port1: unable to enumerate USB device [ 420.390375][ T44] usb read operation failed. (-32) [ 420.797370][ T44] usb write operation failed. (-71) [ 420.803772][ T44] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 421.366030][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 421.428190][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 421.479124][T11487] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1292'. [ 423.997084][T11535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1304'. [ 424.209679][ T30] audit: type=1400 audit(424.192:1158): avc: denied { write } for pid=11541 comm="syz.5.1307" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 424.539005][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 424.564043][T11553] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1310'. [ 425.052181][ T30] audit: type=1400 audit(425.042:1159): avc: denied { ioctl } for pid=11560 comm="syz.5.1313" path="socket:[31373]" dev="sockfs" ino=31373 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 425.257804][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 425.270229][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 425.286831][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 425.298383][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 425.377408][T11573] SELinux: failed to load policy [ 425.913837][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 425.936435][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 425.948633][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 425.965872][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 426.252597][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 426.324574][T11586] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 426.365664][T11586] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 426.380000][ T30] audit: type=1400 audit(426.352:1160): avc: denied { write } for pid=11588 comm="syz.2.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 426.455792][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 426.595572][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 426.802585][ T30] audit: type=1400 audit(426.782:1161): avc: denied { mount } for pid=11602 comm="syz.2.1326" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 426.806606][T11611] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 426.973267][T11616] __nla_validate_parse: 61 callbacks suppressed [ 426.973296][T11616] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1327'. [ 427.438135][ T30] audit: type=1400 audit(427.422:1162): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 427.526756][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 428.998785][T11644] cgroup: fork rejected by pids controller in /syz5 [ 429.030840][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 429.091077][T11674] overlayfs: missing 'lowerdir' [ 429.257583][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 429.466833][ T30] audit: type=1400 audit(429.442:1163): avc: denied { ioctl } for pid=11690 comm="syz.5.1340" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 429.551164][T11693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.595958][T11695] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1340'. [ 429.622525][T11693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.608888][T11703] debugfs: '!' already exists in 'ieee80211' [ 430.626649][ T30] audit: type=1326 audit(430.582:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.5.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e898eba9 code=0x7ffc0000 [ 430.731191][ T30] audit: type=1326 audit(430.582:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.5.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f78e898eba9 code=0x7ffc0000 [ 430.805499][ T30] audit: type=1326 audit(430.582:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.5.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e898eba9 code=0x7ffc0000 [ 430.893992][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 430.916288][ T30] audit: type=1326 audit(430.582:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.5.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78e898eba9 code=0x7ffc0000 [ 430.988832][ T30] audit: type=1326 audit(430.582:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.5.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e898eba9 code=0x7ffc0000 [ 431.053047][ T30] audit: type=1326 audit(430.582:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.5.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f78e898eba9 code=0x7ffc0000 [ 431.122502][ T30] audit: type=1326 audit(430.672:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.5.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e898eba9 code=0x7ffc0000 [ 431.161471][ T30] audit: type=1326 audit(430.672:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.5.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e898eba9 code=0x7ffc0000 [ 431.479970][T11717] block nbd3: Attempted send on invalid socket [ 431.486271][T11717] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 431.633460][T11727] overlayfs: missing 'lowerdir' [ 431.836165][T11737] block nbd1: Attempted send on invalid socket [ 431.869136][T11737] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.893382][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 435.148258][T11748] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1356'. [ 435.159997][T11748] netlink: 'syz.5.1356': attribute type 11 has an invalid length. [ 436.245566][ T30] audit: type=1400 audit(436.232:1172): avc: denied { unmount } for pid=10484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 436.374333][T11760] overlayfs: missing 'lowerdir' [ 436.438526][T11763] block nbd2: Attempted send on invalid socket [ 436.444782][T11763] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 436.499096][T11765] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1362'. [ 436.665058][T11713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.996392][ T94] block nbd0: Possible stuck request ffff888026720000: control (read@0,1024B). Runtime 120 seconds [ 436.997208][ T5847] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 437.007188][ T94] block nbd0: Possible stuck request ffff8880267201c0: control (read@1024,1024B). Runtime 120 seconds [ 437.019944][ T94] block nbd0: Possible stuck request ffff888026720380: control (read@2048,1024B). Runtime 120 seconds [ 437.037063][ T94] block nbd0: Possible stuck request ffff888026720540: control (read@3072,1024B). Runtime 120 seconds [ 437.305275][ T30] audit: type=1326 audit(437.262:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 437.333459][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.517820][ T30] audit: type=1326 audit(437.262:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 437.543227][ T30] audit: type=1326 audit(437.262:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 437.572495][ T30] audit: type=1326 audit(437.262:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 437.595839][ T30] audit: type=1326 audit(437.262:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 437.668463][ T30] audit: type=1326 audit(437.262:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 437.749639][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 437.816720][ T5847] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 437.822331][ T30] audit: type=1326 audit(437.272:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 437.869234][ T5847] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 437.887623][ T5847] usb 6-1: Product: syz [ 437.891959][ T5847] usb 6-1: Manufacturer: syz [ 437.896578][ T5847] usb 6-1: SerialNumber: syz [ 437.971387][ T30] audit: type=1326 audit(437.272:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 437.996238][ T30] audit: type=1326 audit(437.272:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ee38eba9 code=0x7ffc0000 [ 438.119496][ T5847] usb 6-1: config 0 descriptor?? [ 438.143671][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 438.147751][ T5847] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 439.319251][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 439.527197][T11804] overlayfs: missing 'lowerdir' [ 439.542695][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.549085][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.789821][ T5847] gspca_zc3xx: reg_w_i err -110 [ 439.794883][ T5847] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 439.924462][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 440.999340][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 441.776893][T11837] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1377'. [ 442.520350][T11841] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1378'. [ 442.643305][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 442.643321][ T30] audit: type=1400 audit(442.632:1204): avc: denied { read } for pid=11842 comm="syz.3.1379" dev="sockfs" ino=33191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.673013][T11843] 9pnet_fd: Insufficient options for proto=fd [ 443.495562][ T8513] udevd[8513]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 443.736305][T11865] FAULT_INJECTION: forcing a failure. [ 443.736305][T11865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.750047][T11865] CPU: 0 UID: 0 PID: 11865 Comm: syz.2.1382 Not tainted syzkaller #0 PREEMPT(full) [ 443.750069][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 443.750079][T11865] Call Trace: [ 443.750083][T11865] [ 443.750088][T11865] dump_stack_lvl+0x16c/0x1f0 [ 443.750106][T11865] should_fail_ex+0x512/0x640 [ 443.750134][T11865] _copy_from_user+0x2e/0xd0 [ 443.750151][T11865] restore_altstack+0x93/0x170 [ 443.750168][T11865] ? __pfx_restore_altstack+0x10/0x10 [ 443.750186][T11865] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.750199][T11865] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.750213][T11865] ? _raw_spin_unlock_irq+0x2e/0x50 [ 443.750224][T11865] ? set_current_blocked+0xdd/0x120 [ 443.750237][T11865] __do_sys_rt_sigreturn+0x13c/0x230 [ 443.750253][T11865] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 443.750272][T11865] do_syscall_64+0xcd/0x4e0 [ 443.750288][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.750299][T11865] RIP: 0033:0x7f7fb672ada9 [ 443.750308][T11865] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 443.750318][T11865] RSP: 002b:00007f7fb764b340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 443.750329][T11865] RAX: ffffffffffffffda RBX: 00007f7fb69d6180 RCX: 00007f7fb672ada9 [ 443.750336][T11865] RDX: 00007f7fb764b340 RSI: 00007f7fb764b470 RDI: 0000000000000021 [ 443.750342][T11865] RBP: 00007f7fb764c090 R08: 0000000000000000 R09: 0000000000000000 [ 443.750348][T11865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 443.750355][T11865] R13: 00007f7fb69d6218 R14: 00007f7fb69d6180 R15: 00007ffd6e070a28 [ 443.750370][T11865] [ 443.998289][ T5847] usb 6-1: USB disconnect, device number 17 [ 444.180397][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 444.340502][ T30] audit: type=1400 audit(444.322:1205): avc: denied { connect } for pid=11873 comm="syz.4.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 444.390193][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 444.402667][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 444.413345][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.440777][ T24] usb 2-1: Product: syz [ 444.445159][ T24] usb 2-1: Manufacturer: syz [ 444.452878][ T24] usb 2-1: SerialNumber: syz [ 444.459095][ T24] usb 2-1: config 0 descriptor?? [ 444.670949][ T24] usb read operation failed. (-32) [ 445.082097][ T24] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 445.183152][T11889] fuse: Bad value for 'user_id' [ 445.188075][T11889] fuse: Bad value for 'user_id' [ 445.218028][ T3491] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.241601][ T3491] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.256059][ T3491] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.278158][ T3491] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.295748][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 445.424775][ T30] audit: type=1400 audit(445.412:1206): avc: denied { module_load } for pid=11890 comm="syz.4.1390" path="/sys/kernel/notes" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 445.440240][T11897] Invalid ELF header magic: != ELF [ 445.467175][ T30] audit: type=1400 audit(445.452:1207): avc: denied { execute } for pid=11892 comm="syz.5.1391" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 445.789716][ T5847] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 445.951696][ T5847] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 445.960972][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.971665][ T5847] usb 6-1: config 0 descriptor?? [ 445.979275][ T5847] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 446.282051][ T5847] gp8psk: usb in 128 operation failed. [ 446.294702][ T5847] gp8psk: usb in 137 operation failed. [ 446.301900][ T5847] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 446.315311][ T5847] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 446.739283][ T5847] usb 6-1: USB disconnect, device number 18 [ 446.825513][ T30] audit: type=1400 audit(446.812:1208): avc: denied { create } for pid=11907 comm="syz.3.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 447.903602][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 447.918689][T11924] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 448.159288][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 449.422438][ T30] audit: type=1400 audit(449.292:1209): avc: denied { map } for pid=11917 comm="syz.2.1396" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 449.647123][ T30] audit: type=1400 audit(449.632:1210): avc: denied { create } for pid=11944 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 449.712140][ T30] audit: type=1400 audit(449.632:1211): avc: denied { connect } for pid=11944 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 449.891341][T11947] block device autoloading is deprecated and will be removed. [ 450.027272][ T3491] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.056814][T11951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.066141][T11951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.148520][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 450.204983][ T3491] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.328454][T11956] FAULT_INJECTION: forcing a failure. [ 450.328454][T11956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.353519][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.2.1406 Not tainted syzkaller #0 PREEMPT(full) [ 450.353538][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.353545][T11956] Call Trace: [ 450.353548][T11956] [ 450.353553][T11956] dump_stack_lvl+0x16c/0x1f0 [ 450.353572][T11956] should_fail_ex+0x512/0x640 [ 450.353589][T11956] _copy_from_user+0x2e/0xd0 [ 450.353606][T11956] restore_sigcontext+0xcb/0x6a0 [ 450.353621][T11956] ? __pfx_restore_sigcontext+0x10/0x10 [ 450.353645][T11956] ? __pfx_restore_altstack+0x10/0x10 [ 450.353664][T11956] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.353677][T11956] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.353692][T11956] __do_sys_rt_sigreturn+0x1bb/0x230 [ 450.353707][T11956] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 450.353726][T11956] do_syscall_64+0xcd/0x4e0 [ 450.353741][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.353752][T11956] RIP: 0033:0x7f7fb672ada9 [ 450.353761][T11956] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 450.353772][T11956] RSP: 002b:00007f7fb764b340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 450.353782][T11956] RAX: ffffffffffffffda RBX: 00007f7fb69d6180 RCX: 00007f7fb672ada9 [ 450.353789][T11956] RDX: 00007f7fb764b340 RSI: 00007f7fb764b470 RDI: 0000000000000021 [ 450.353796][T11956] RBP: 00007f7fb764c090 R08: 0000000000000000 R09: 0000000000000000 [ 450.353802][T11956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 450.353808][T11956] R13: 00007f7fb69d6218 R14: 00007f7fb69d6180 R15: 00007ffd6e070a28 [ 450.353822][T11956] [ 450.666295][ T3491] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.920169][ T3491] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.198821][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.228348][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.238087][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.251431][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.258855][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.355650][ T3491] bridge_slave_1: left allmulticast mode [ 451.362827][ T30] audit: type=1400 audit(451.352:1212): avc: denied { search } for pid=5515 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.363270][ T3491] bridge_slave_1: left promiscuous mode [ 451.394689][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.406170][ T30] audit: type=1400 audit(451.382:1213): avc: denied { search } for pid=5515 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.429178][ T30] audit: type=1400 audit(451.382:1214): avc: denied { search } for pid=5515 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.455299][ T30] audit: type=1400 audit(451.382:1215): avc: denied { read } for pid=5515 comm="dhcpcd" name="n108" dev="tmpfs" ino=6410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 451.477713][ T30] audit: type=1400 audit(451.382:1216): avc: denied { open } for pid=5515 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=6410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 451.505557][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.513923][ T30] audit: type=1400 audit(451.382:1217): avc: denied { getattr } for pid=5515 comm="dhcpcd" path="/run/udev/data/n108" dev="tmpfs" ino=6410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 451.536602][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.779436][ T30] audit: type=1326 audit(451.762:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cf98eba9 code=0x7ffc0000 [ 451.802385][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.985213][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.999382][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.012127][ T3491] bond0 (unregistering): Released all slaves [ 452.081899][ T3491] tipc: Disabling bearer [ 452.378158][ T3491] tipc: Left network mode [ 453.298248][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 453.313302][ T5862] Bluetooth: hci5: command tx timeout [ 453.442037][T12022] block nbd1: Attempted send on invalid socket [ 453.450869][T12022] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 453.765844][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.777529][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.825197][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 453.847348][T11964] chnl_net:caif_netlink_parms(): no params data found [ 454.049920][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.084266][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.165982][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 454.186235][T12026] FAULT_INJECTION: forcing a failure. [ 454.186235][T12026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.228581][ T3491] hsr_slave_0: left promiscuous mode [ 454.274733][T12026] CPU: 1 UID: 0 PID: 12026 Comm: syz.4.1417 Not tainted syzkaller #0 PREEMPT(full) [ 454.274759][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.274769][T12026] Call Trace: [ 454.274775][T12026] [ 454.274782][T12026] dump_stack_lvl+0x16c/0x1f0 [ 454.274811][T12026] should_fail_ex+0x512/0x640 [ 454.274837][T12026] _copy_to_user+0x32/0xd0 [ 454.274863][T12026] simple_read_from_buffer+0xcb/0x170 [ 454.274883][T12026] proc_fail_nth_read+0x197/0x240 [ 454.274904][T12026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.274925][T12026] ? rw_verify_area+0xcf/0x6c0 [ 454.274950][T12026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.274969][T12026] vfs_read+0x1e4/0xcf0 [ 454.274989][T12026] ? __pfx___mutex_lock+0x10/0x10 [ 454.275012][T12026] ? __pfx_vfs_read+0x10/0x10 [ 454.275035][T12026] ? __fget_files+0x20e/0x3c0 [ 454.275061][T12026] ksys_read+0x12a/0x250 [ 454.275077][T12026] ? __pfx_ksys_read+0x10/0x10 [ 454.275094][T12026] ? fdget+0x187/0x210 [ 454.275116][T12026] do_syscall_64+0xcd/0x4e0 [ 454.275140][T12026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.275156][T12026] RIP: 0033:0x7f8ce858d5bc [ 454.275170][T12026] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 454.275185][T12026] RSP: 002b:00007f8ce941e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.275201][T12026] RAX: ffffffffffffffda RBX: 00007f8ce87d5fa0 RCX: 00007f8ce858d5bc [ 454.275212][T12026] RDX: 000000000000000f RSI: 00007f8ce941e0a0 RDI: 0000000000000005 [ 454.275222][T12026] RBP: 00007f8ce941e090 R08: 0000000000000000 R09: 0000000000000000 [ 454.275232][T12026] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 454.275242][T12026] R13: 00007f8ce87d6038 R14: 00007f8ce87d5fa0 R15: 00007ffd7f828708 [ 454.275272][T12026] [ 454.282679][T12010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.379936][ T3491] hsr_slave_1: left promiscuous mode [ 454.538634][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system [ 454.552315][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.561782][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.576390][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.586953][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.616301][ T3491] veth1_macvtap: left promiscuous mode [ 454.635999][ T3491] veth0_macvtap: left promiscuous mode [ 454.651664][T12039] loop2: detected capacity change from 0 to 7 [ 454.665558][T12039] Dev loop2: unable to read RDB block 7 [ 454.665617][ T3491] veth1_vlan: left promiscuous mode [ 454.694666][ T3491] veth0_vlan: left promiscuous mode [ 454.695574][T12039] loop2: unable to read partition table [ 454.743893][T12039] loop2: partition table beyond EOD, truncated [ 454.757340][T12039] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.808606][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system [ 454.922435][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system [ 455.369799][ T5862] Bluetooth: hci5: command tx timeout [ 456.092175][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system [ 456.297381][T12048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input21 [ 456.533052][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 456.533068][ T30] audit: type=1400 audit(456.522:1236): avc: denied { map } for pid=12036 comm="syz.2.1420" path="socket:[33642]" dev="sockfs" ino=33642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 456.884557][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 456.988099][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 457.608440][ T5862] Bluetooth: hci5: command tx timeout [ 457.661032][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 457.705874][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 458.276170][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 458.373617][T11964] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.383377][T11964] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.392950][T11964] bridge_slave_0: entered allmulticast mode [ 458.401828][T11964] bridge_slave_0: entered promiscuous mode [ 458.411320][T11964] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.418565][T11964] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.426284][T11964] bridge_slave_1: entered allmulticast mode [ 458.434078][T11964] bridge_slave_1: entered promiscuous mode [ 458.507200][T11964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.532531][T11964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.647951][T11964] team0: Port device team_slave_0 added [ 458.687385][T11964] team0: Port device team_slave_1 added [ 458.751606][T12100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1432'. [ 458.775781][T11964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.786908][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.846284][T11964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.864821][T11964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.891513][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.933080][T11964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.968740][T12100] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.976821][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.113657][T11964] hsr_slave_0: entered promiscuous mode [ 459.131579][T11964] hsr_slave_1: entered promiscuous mode [ 459.146472][T11964] debugfs: 'hsr0' already exists in 'hsr' [ 459.152928][T11964] Cannot create hsr debugfs directory [ 459.690100][ T5862] Bluetooth: hci5: command tx timeout [ 460.695753][T11964] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 460.752863][T11964] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 460.776606][T11964] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 460.807849][T11964] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 460.942189][T12147] geneve2: entered allmulticast mode [ 461.496100][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.540905][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.586347][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.593466][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.601370][ T30] audit: type=1400 audit(461.562:1237): avc: denied { getopt } for pid=12130 comm="syz.4.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 461.668900][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.675997][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.871427][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 463.070372][T12183] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 463.149214][T12176] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 463.155732][T12176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.163548][T12176] vhci_hcd vhci_hcd.0: Device attached [ 463.187355][T12182] vhci_hcd: connection closed [ 463.208449][ T70] vhci_hcd: stop threads [ 463.226209][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.260730][ T70] vhci_hcd: release socket [ 463.265212][ T70] vhci_hcd: disconnect device [ 463.279443][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 463.317035][T12192] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 465.536563][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 465.617424][T12219] syzkaller1: entered promiscuous mode [ 465.691439][T12219] syzkaller1: entered allmulticast mode [ 465.889446][T12228] overlayfs: missing 'workdir' [ 465.936545][T11964] veth0_vlan: entered promiscuous mode [ 466.023385][T11964] veth1_vlan: entered promiscuous mode [ 466.184002][T11964] veth0_macvtap: entered promiscuous mode [ 466.198821][T11964] veth1_macvtap: entered promiscuous mode [ 466.273205][T11964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.325461][T11964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.353175][T12235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1451'. [ 466.624523][ T6043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.756388][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 466.941487][ T6043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.949279][ T30] audit: type=1400 audit(466.932:1238): avc: denied { setopt } for pid=12239 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 467.023246][ T6043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.053176][ T94] block nbd0: Possible stuck request ffff888026720000: control (read@0,1024B). Runtime 150 seconds [ 467.064054][ T94] block nbd0: Possible stuck request ffff8880267201c0: control (read@1024,1024B). Runtime 150 seconds [ 467.075745][ T94] block nbd0: Possible stuck request ffff888026720380: control (read@2048,1024B). Runtime 150 seconds [ 467.086912][ T94] block nbd0: Possible stuck request ffff888026720540: control (read@3072,1024B). Runtime 150 seconds [ 467.163665][T12249] overlayfs: missing 'workdir' [ 467.173202][ T3491] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.382693][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.448697][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.487152][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.567826][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.839137][T12253] udevd[12253]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 469.178319][T10573] udevd[10573]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 469.193803][ T6480] udevd[6480]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 469.402594][T12275] Bluetooth: MGMT ver 1.23 [ 469.861690][T12282] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1462'. [ 470.138267][T12253] udevd[12253]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 470.498519][T12292] overlayfs: missing 'workdir' [ 470.897513][T12253] udevd[12253]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 471.420280][T12305] FAULT_INJECTION: forcing a failure. [ 471.420280][T12305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.451595][T12253] udevd[12253]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 471.473705][ T5862] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 471.499348][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 471.547340][T12305] CPU: 1 UID: 0 PID: 12305 Comm: syz.6.1469 Not tainted syzkaller #0 PREEMPT(full) [ 471.547355][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.547361][T12305] Call Trace: [ 471.547365][T12305] [ 471.547369][T12305] dump_stack_lvl+0x16c/0x1f0 [ 471.547388][T12305] should_fail_ex+0x512/0x640 [ 471.547404][T12305] _copy_from_user+0x2e/0xd0 [ 471.547421][T12305] memdup_user+0x6b/0xe0 [ 471.547434][T12305] strndup_user+0x78/0xe0 [ 471.547446][T12305] __x64_sys_mount+0x137/0x310 [ 471.547462][T12305] ? __pfx___x64_sys_mount+0x10/0x10 [ 471.547480][T12305] do_syscall_64+0xcd/0x4e0 [ 471.547495][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.547506][T12305] RIP: 0033:0x7fbad958eba9 [ 471.547515][T12305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.547526][T12305] RSP: 002b:00007fbada415038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 471.547536][T12305] RAX: ffffffffffffffda RBX: 00007fbad97d5fa0 RCX: 00007fbad958eba9 [ 471.547543][T12305] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000080 [ 471.547550][T12305] RBP: 00007fbada415090 R08: 0000200000000180 R09: 0000000000000000 [ 471.547557][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.547567][T12305] R13: 00007fbad97d6038 R14: 00007fbad97d5fa0 R15: 00007ffec7e68788 [ 471.547588][T12305] [ 471.692780][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.883511][T10573] udevd[10573]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 471.911976][T12253] udevd[12253]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 473.411379][T12253] udevd[12253]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 473.725606][T12253] udevd[12253]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 474.016779][T12328] SELinux: failed to load policy [ 474.674365][T12335] overlayfs: missing 'workdir' [ 474.792013][ T5923] kernel read not supported for file /sequencer (pid: 5923 comm: kworker/0:5) [ 474.922909][T12343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.020033][T12343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.379111][ T6903] udevd[6903]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 475.974286][T12253] udevd[12253]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 476.095656][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1485'. [ 476.359688][ T30] audit: type=1400 audit(476.262:1239): avc: denied { connect } for pid=12360 comm="syz.6.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 476.992652][ T30] audit: type=1400 audit(476.272:1240): avc: denied { write } for pid=12360 comm="syz.6.1486" laddr=172.20.20.10 lport=2 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 477.089330][T12253] udevd[12253]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 477.463094][ T30] audit: type=1400 audit(477.452:1241): avc: denied { listen } for pid=12374 comm="syz.6.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 477.606498][T12379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.618784][T12379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.944727][ T30] audit: type=1400 audit(477.452:1242): avc: denied { accept } for pid=12374 comm="syz.6.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 478.187637][T12253] udevd[12253]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 478.390556][T12253] udevd[12253]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 478.483681][T12253] udevd[12253]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 478.725967][T12253] udevd[12253]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 478.801703][ T30] audit: type=1400 audit(478.752:1243): avc: denied { append } for pid=12397 comm="syz.2.1493" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 479.017439][T12405] 9p: Unknown access argument 18446744073709551615: -34 [ 479.024648][ T5851] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 479.459789][T12411] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.1495'. [ 479.796515][ T30] audit: type=1400 audit(479.782:1244): avc: denied { getopt } for pid=12414 comm="syz.1.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.918502][ T30] audit: type=1400 audit(479.902:1245): avc: denied { setopt } for pid=12412 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.984648][T12253] udevd[12253]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 480.130008][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'. [ 481.052659][ T2149] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 481.079621][ T44] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 481.104157][ T24] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 481.260501][ T2149] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 481.271223][ T44] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 481.280928][ T24] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 481.664938][ T30] audit: type=1400 audit(481.422:1246): avc: denied { accept } for pid=12433 comm="syz.4.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 481.748600][ T44] usb 3-1: USB disconnect, device number 60 [ 481.760694][ T24] usb 2-1: USB disconnect, device number 56 [ 481.767031][ T2149] usb 4-1: USB disconnect, device number 43 [ 481.990211][T10573] udevd[10573]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 481.992148][T10651] udevd[10651]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 482.388155][T12435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.422462][T12435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.558613][ T2149] syz1: Port: 1 Link DOWN [ 482.566310][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.620282][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.628762][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.651957][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.678866][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.696287][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.721791][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.745260][T12253] udevd[12253]: symlink '../../loop2' '/dev/disk/by-diskseq/111.tmp-b7:2' failed: Read-only file system [ 482.791441][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.860588][T12463] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 482.871725][ T30] audit: type=1400 audit(482.832:1247): avc: denied { ioctl } for pid=12462 comm="syz.2.1506" path="/dev/ttyq9" dev="devtmpfs" ino=384 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 485.148587][T12253] udevd[12253]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 485.699767][ T31] INFO: task syz.0.987:10278 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 492.339791][ T30] audit: type=1400 audit(485.752:1248): avc: denied { write } for pid=5833 comm="syz-executor" path="pipe:[5238]" dev="pipefs" ino=5238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 492.349735][ T31] Not tainted syzkaller #0 [ 492.383230][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.392306][ T31] task:syz.0.987 state:D stack:28872 pid:10278 tgid:10273 ppid:5844 task_flags:0x400040 flags:0x00004004 [ 492.404398][ T31] Call Trace: [ 492.407753][ T31] [ 492.411188][ T31] __schedule+0x1190/0x5de0 [ 492.415781][ T31] ? __pfx___schedule+0x10/0x10 [ 492.420722][ T31] ? find_held_lock+0x2b/0x80 [ 492.425423][ T31] ? schedule+0x2d7/0x3a0 [ 492.429953][ T31] ? bdev_open+0x41a/0xe40 [ 492.434388][ T31] schedule+0xe7/0x3a0 [ 492.438475][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.444206][ T31] __mutex_lock+0x81b/0x1060 [ 492.448825][ T31] ? bdev_open+0x41a/0xe40 [ 492.453489][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.458537][ T31] ? __pfx_ilookup+0x10/0x10 [ 492.476938][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 492.489383][ T31] ? bdev_open+0x41a/0xe40 [ 492.501454][ T31] bdev_open+0x41a/0xe40 [ 492.512892][ T31] blkdev_open+0x34e/0x4f0 [ 492.524262][ T31] do_dentry_open+0x97f/0x1530 [ 492.627462][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 492.679614][ T31] vfs_open+0x82/0x3f0 [ 492.683780][ T31] path_openat+0x1de4/0x2cb0 [ 492.688428][ T31] ? __pfx_path_openat+0x10/0x10 [ 492.719589][ T31] do_filp_open+0x20b/0x470 [ 492.724170][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 492.729255][ T31] ? alloc_fd+0x471/0x7d0 [ 492.759645][ T7286] raw-gadget.0 gadget.4: failed to queue disconnect event [ 492.789613][ T31] do_sys_openat2+0x11b/0x1d0 [ 492.794347][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 492.819581][ T31] ? find_held_lock+0x2b/0x80 [ 492.824317][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 492.829301][ T31] __x64_sys_openat+0x174/0x210 [ 492.844328][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 492.849961][ T31] ? do_user_addr_fault+0x843/0x1370 [ 492.855289][ T31] do_syscall_64+0xcd/0x4e0 [ 492.869617][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.875567][ T31] RIP: 0033:0x7f224f78d510 [ 492.895747][ T31] RSP: 002b:00007f22505ceb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 492.927579][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f224f78d510 [ 492.949609][ T31] RDX: 0000000000000000 RSI: 00007f22505cec10 RDI: 00000000ffffff9c [ 492.957802][ T31] RBP: 00007f22505cec10 R08: 0000000000000000 R09: 002364626e2f7665 [ 492.979612][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 492.987648][ T31] R13: 00007f224f9d6128 R14: 00007f224f9d6090 R15: 00007fff757660f8 [ 492.995993][ T31] [ 492.999090][ T31] [ 492.999090][ T31] Showing all locks held in the system: [ 493.149599][ T31] 3 locks held by kworker/u8:0/12: [ 493.154774][ T31] 3 locks held by kworker/1:0/24: [ 493.169842][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 493.191574][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 493.211506][ T31] #2: ffffffff8ef92358 (key_serial_lock){+.+.}-{3:3}, at: key_garbage_collector+0xb6/0x960 [ 493.272923][ T31] 1 lock held by khungtaskd/31: [ 493.277832][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 493.308977][ T31] 3 locks held by kworker/1:2/2149: [ 493.327438][ T31] 2 locks held by getty/5611: [ 493.335597][ T31] #0: ffff88814e11e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 493.345740][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 493.359606][ T31] 1 lock held by syz-executor/5843: [ 493.364843][ T31] 1 lock held by syz-executor/5846: [ 493.380611][ T31] 1 lock held by udevd/5853: [ 493.385236][ T31] #0: ffff888026644358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 493.397794][ T31] 3 locks held by kworker/0:4/5916: [ 493.412567][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 493.439609][ T31] #1: ffffc900040cfd10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 493.449351][ T31] #2: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 493.502608][ T31] 3 locks held by syz.4.433/8111: [ 493.507677][ T31] #0: ffff88807b3a4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 493.517436][ T31] #1: ffff88807b3a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 493.533053][ T31] #2: ffffffff905ed8e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 493.547793][ T31] 1 lock held by syz.0.987/10278: [ 493.553122][ T31] #0: ffff888026644358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 493.562847][ T31] 4 locks held by syz-executor/11964: [ 493.568526][ T31] #0: ffff888047b18dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 493.578178][ T31] #1: ffff888047b180b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 493.588095][ T31] #2: ffffffff905ed8e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 493.598106][ T31] #3: ffff88807a1dbb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 493.607613][ T31] [ 493.610843][ T31] ============================================= [ 493.610843][ T31] [ 493.619266][ T31] NMI backtrace for cpu 0 [ 493.619280][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 493.619300][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.619309][ T31] Call Trace: [ 493.619315][ T31] [ 493.619322][ T31] dump_stack_lvl+0x116/0x1f0 [ 493.619346][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 493.619361][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 493.619381][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 493.619409][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 493.619429][ T31] watchdog+0xf0e/0x1260 [ 493.619454][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.619471][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 493.619495][ T31] ? __kthread_parkme+0x19e/0x250 [ 493.619522][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.619544][ T31] kthread+0x3c2/0x780 [ 493.619563][ T31] ? __pfx_kthread+0x10/0x10 [ 493.619581][ T31] ? rcu_is_watching+0x12/0xc0 [ 493.619604][ T31] ? __pfx_kthread+0x10/0x10 [ 493.619622][ T31] ret_from_fork+0x56a/0x730 [ 493.619638][ T31] ? __pfx_kthread+0x10/0x10 [ 493.619655][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.619688][ T31] [ 493.735660][ T31] Sending NMI from CPU 0 to CPUs 1: [ 493.741229][ C1] NMI backtrace for cpu 1 [ 493.741241][ C1] CPU: 1 UID: 0 PID: 12471 Comm: syz.2.1506 Not tainted syzkaller #0 PREEMPT(full) [ 493.741257][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.741264][ C1] RIP: 0010:hlock_class+0x4/0x70 [ 493.741284][ C1] Code: 0f 0b 90 e9 01 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 <66> 25 ff 1f 0f b7 c0 48 0f a3 05 0d 3f 46 14 73 15 48 8d 04 80 48 [ 493.741296][ C1] RSP: 0018:ffffc9001b347828 EFLAGS: 00000006 [ 493.741308][ C1] RAX: 0000000000008028 RBX: ffff88806ae38af0 RCX: 0000000000000000 [ 493.741316][ C1] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffff88806ae38af0 [ 493.741324][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.741331][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88806ae38af0 [ 493.741339][ C1] R13: ffff88806ae38000 R14: 0000000000008000 R15: ffff8880b8540098 [ 493.741347][ C1] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 493.741360][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.741369][ C1] CR2: 000055c1a7bca4b0 CR3: 0000000035b5f000 CR4: 00000000003526f0 [ 493.741377][ C1] Call Trace: [ 493.741381][ C1] [ 493.741385][ C1] __lock_acquire+0x218/0x1ce0 [ 493.741403][ C1] ? debug_check_no_obj_freed+0x31f/0x600 [ 493.741417][ C1] ? find_held_lock+0x2b/0x80 [ 493.741431][ C1] ? __page_table_check_zero+0x33c/0x5d0 [ 493.741447][ C1] lock_acquire+0x179/0x350 [ 493.741457][ C1] ? __free_frozen_pages+0x507/0x10f0 [ 493.741475][ C1] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 493.741490][ C1] _raw_spin_trylock+0x63/0x80 [ 493.741505][ C1] ? __free_frozen_pages+0x507/0x10f0 [ 493.741521][ C1] __free_frozen_pages+0x507/0x10f0 [ 493.741541][ C1] vfree+0x1fd/0xb50 [ 493.741556][ C1] ? find_held_lock+0x2b/0x80 [ 493.741571][ C1] ? rcu_is_watching+0x12/0xc0 [ 493.741585][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 493.741600][ C1] ? __pfx_kcov_close+0x10/0x10 [ 493.741613][ C1] kcov_close+0x34/0x60 [ 493.741625][ C1] __fput+0x402/0xb70 [ 493.741641][ C1] ? cleanup_mnt+0x26b/0x450 [ 493.741653][ C1] task_work_run+0x150/0x240 [ 493.741667][ C1] ? __pfx_task_work_run+0x10/0x10 [ 493.741682][ C1] do_exit+0x86f/0x2bf0 [ 493.741701][ C1] ? __pfx_do_exit+0x10/0x10 [ 493.741717][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 493.741730][ C1] ? find_held_lock+0x2b/0x80 [ 493.741745][ C1] do_group_exit+0xd3/0x2a0 [ 493.741763][ C1] get_signal+0x2673/0x26d0 [ 493.741779][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 493.741799][ C1] ? __pfx_get_signal+0x10/0x10 [ 493.741816][ C1] ? do_futex+0x122/0x350 [ 493.741835][ C1] ? __pfx_do_futex+0x10/0x10 [ 493.741853][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 493.741874][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 493.741892][ C1] ? xfd_validate_state+0x61/0x180 [ 493.741912][ C1] exit_to_user_mode_loop+0x84/0x110 [ 493.741925][ C1] do_syscall_64+0x41c/0x4e0 [ 493.741942][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.741955][ C1] RIP: 0033:0x7f7fb678eba9 [ 493.741964][ C1] Code: Unable to access opcode bytes at 0x7f7fb678eb7f. [ 493.741970][ C1] RSP: 002b:00007f7fb756c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 493.741981][ C1] RAX: fffffffffffffe00 RBX: 00007f7fb69d6098 RCX: 00007f7fb678eba9 [ 493.741989][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7fb69d6098 [ 493.741996][ C1] RBP: 00007f7fb69d6090 R08: 0000000000000000 R09: 0000000000000000 [ 493.742003][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.742011][ C1] R13: 00007f7fb69d6128 R14: 00007ffd6e070940 R15: 00007ffd6e070a28 [ 493.742024][ C1] [ 494.109644][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 494.116497][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 494.125600][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.135644][ T31] Call Trace: [ 494.138915][ T31] [ 494.141837][ T31] dump_stack_lvl+0x3d/0x1f0 [ 494.146431][ T31] vpanic+0x6e8/0x7a0 [ 494.150415][ T31] ? __pfx_vpanic+0x10/0x10 [ 494.154920][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 494.160812][ T31] panic+0xca/0xd0 [ 494.164522][ T31] ? __pfx_panic+0x10/0x10 [ 494.168911][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 494.174262][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 494.180390][ T31] ? watchdog+0xd78/0x1260 [ 494.184780][ T31] ? watchdog+0xd6b/0x1260 [ 494.189168][ T31] watchdog+0xd89/0x1260 [ 494.193384][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.198033][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.203208][ T31] ? __kthread_parkme+0x19e/0x250 [ 494.208210][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.212862][ T31] kthread+0x3c2/0x780 [ 494.216901][ T31] ? __pfx_kthread+0x10/0x10 [ 494.221465][ T31] ? rcu_is_watching+0x12/0xc0 [ 494.226214][ T31] ? __pfx_kthread+0x10/0x10 [ 494.230783][ T31] ret_from_fork+0x56a/0x730 [ 494.235350][ T31] ? __pfx_kthread+0x10/0x10 [ 494.239918][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.244672][ T31] [ 494.247848][ T31] Kernel Offset: disabled [ 494.252146][ T31] Rebooting in 86400 seconds..