last executing test programs: 10m23.608776581s ago: executing program 3 (id=1040): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r8) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="4ede00"}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="347da9f70f6d49fd26cf68a16d433da620901282864f1e927c063c92cfbc1441bed989214ac6fe0e2178de69e30b5577d0cd0b9a0c5596b2d1408b5b7cd38f233daa2aebea0a2237ffbcfaf76780ce7364878167", @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500030046000000"], 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x40) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffc, 0x4102) 10m21.874496785s ago: executing program 3 (id=1045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r0, 0x9}, 0x50) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f3ff0000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10m20.895865401s ago: executing program 3 (id=1051): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="01040000004217bcd4206fcfa774a50000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9, 0x0, 0xff0f0000}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10m20.691501869s ago: executing program 3 (id=1054): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbbad4f943162486dd6000000000283afffe040000000000000000000000000001ff020000000000000000000000000001890490780000000008fe8000"/79], 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000}) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) timer_create(0x2, &(0x7f0000000100)={0x0, 0x2, 0x3, @tid=r3}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4090000000000006910ae00fa000000c409000000000000950074000000000054b775ffcb32effc035b35c12cfc922b7cfb7b2c3ee97ba753ee6c00a6c2dc1a854a394d9c59a2e4780a60ad8bb961bbe2ffe525b326f6b94033b67d092109d9ec"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r9], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$xdp(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x2c, 0x0, r9, 0x1f}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="39eb5b4dc4e2e434637ec659e4a9bd8e37b60df13e400eeda15adfca04fc34de01b02b4041b17c426934a4c7364d8ce78c489836f60f47b8377184df43ccf659a7bf139151eb0046e3de891f1379d63751cde0e3abd82c2133c304142f3658d457c5c9efabe8d6fd", 0x68}, {&(0x7f0000000300)="6659f2816786e5bae54ca929c895849b685f17553f4127c72cf51fc1139438ad938d135f5dcde14df96a46e0fe7fe1ea06", 0x31}, {&(0x7f00000003c0)="3518f46199625cdea81fc4f703e514f8d689edba24b446493d420cb8dc15d524f2811ec2f49818a2298b4becea3979550946d73b83d0c5f44682809b321f07bdd4646f82809930eaf855be29ac9c9bc54a3e79c52d649aa114fdb035fa2709186a94604a98c89ec11f5670c9e7ac0ebd9c63dd989701390f294957362f571c02c91c7accf4b48818d82185bcf804bc8897fd56b55b0e3ae071f437395b1e852c53ee04adbae8eca9f9a2f29dbe6740f946ffefd8987f82450031a974e8b97d782c474dd70d111da9a8370c8d9bd3a752a269d53ada9fe7207236c29e95e5096e0551", 0xe2}], 0x3, 0x0, 0x0, 0x40001}, 0x10) 10m16.625257624s ago: executing program 3 (id=1063): shutdown(0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=@deltaction={0x88, 0x31, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe58}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(r6) fcntl$setown(r1, 0x8, r3) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001300)={0x80000003}, 0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x4880) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) 10m16.048051103s ago: executing program 3 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x85100000}, 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x3) 10m15.385048456s ago: executing program 32 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x85100000}, 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x3) 2m30.339670966s ago: executing program 0 (id=2508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) r2 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x2) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r2, 0x8044610a, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) read$rfkill(r4, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0xfe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x140e, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048044}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) (async) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000340)}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) (async) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x2) (async) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r2, 0x8044610a, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) (async) read$rfkill(r4, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0xfe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7]}}, 0x5c) (async) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x140e, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048044}, 0x40) (async) 2m30.219520119s ago: executing program 0 (id=2510): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800c0ffffff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m29.787155442s ago: executing program 0 (id=2511): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x1800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0xf1ffffff}, 0x0) 2m29.211670823s ago: executing program 0 (id=2514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x8, 0x389003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x30925) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000019200)="916159469e1c5cb0977bd3cb88f01b4caece0fcbe473ba3a1ad6b6895081f68e2cd302defa944fbbe783c1e5a7", 0x2d, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140300003e00070dfeffffff00000000017c000004008e000c00018006000600801a0000f0020280ec021480e802da8014000e00fc00000000000000000000000007000170002b800c002b00"], 0x314}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 2m28.007663485s ago: executing program 0 (id=2520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460002f9bbff7f00000000000002000300fffeffffdf02000000000000400000feff000000030300000000000000000000080038000100040004000d00070000000280000000000000000000000700000000000000080000000000000005000000000000000010000000000000a50c0000000000006f9abc5e6feeb451af982b145729373277c82e844309002bca4afb5ccdfd9ccb157cf9532844fd98b003ceea7a3156f6a2975b4aab3b7f66f4defe5f8711f47b1f16b5378c055162d5b9edf06ca46ece13a9e470c8829aa3901983a9e742281aef705a9cb244fbd11aeb990af7dc2aeed92075d89b17ca221028d20f0feb706d501b0e4008b4c7c8915cbcd8d91f9742b1e9936d036f520be8d374d2679a56deb4fde2a55518fd0a5572222da37490a7ffac76660d6da4339fe50930a17387697fa1b6a67b9ded101e912694da0f8bea9a556b90c47e733fb610d6ab428da7a9f4dfdd5e9debb7b9736f5487c832ea94eb809b860c8765773b66303f513eca6e8561889a296cf475dff0c1b9a06bdcfd13"], 0x189) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) 2m26.719527781s ago: executing program 0 (id=2523): sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f0000000040)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) ioctl$NBD_DO_IT(r9, 0xab03) ioctl$NBD_CLEAR_SOCK(r9, 0xab04) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0xbd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x0, 0x3, 0x0, 0xfffffff9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x2, 0x80000001, 0xfffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84c7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e32, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4], 0x1, 0x400, 0x200000}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @remote}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x30, 0x26, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xf, 0xfff2}, {0x4, 0xa}, {0x3, 0x8}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) 2m11.507099576s ago: executing program 33 (id=2523): sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f0000000040)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) ioctl$NBD_DO_IT(r9, 0xab03) ioctl$NBD_CLEAR_SOCK(r9, 0xab04) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0xbd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x0, 0x3, 0x0, 0xfffffff9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x2, 0x80000001, 0xfffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84c7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e32, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4], 0x1, 0x400, 0x200000}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @remote}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x30, 0x26, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xf, 0xfff2}, {0x4, 0xa}, {0x3, 0x8}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) 23.462362294s ago: executing program 2 (id=2983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0xff0f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r8, &(0x7f0000000280)=[{&(0x7f0000000340)=""/198, 0xc6}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r6, 0x0, 0x0) 22.366291039s ago: executing program 2 (id=2986): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000100)={0x4, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}, {{0x2, 0x0, @local}}}, 0x108) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000013000100000000000000000207000000", @ANYRES32=r4, @ANYBLOB="000000000880000014001a80100005800c000280080001"], 0x34}}, 0x0) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0xd0, 0x0, 0x178, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@broadcast, @multicast2, 0x0, 0xffffffff, 'caif0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x5c, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xc, 0xe, [0x29, 0xd, 0x3, 0x7, 0x24, 0x8, 0xa, 0xf, 0x32, 0x7, 0xb, 0x36, 0x3f, 0x2b, 0x2f, 0x4], 0x2, 0x9, 0x17f}}}, {{@ip={@broadcast, @loopback, 0xff, 0x0, 'syzkaller1\x00', 'wg0\x00', {0xff}, {}, 0x1, 0x2, 0x9}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x3}, {0x1, 0x6, 0x4}, {0x2, 0x6}, 0x9, 0x4}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x33}, 0xffffff00, 0xffffff00, 'geneve1\x00', 'caif0\x00', {0xff}, {}, 0x6, 0x3, 0x4}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x1, 0x0, 0x1}, {{0xf5}}, {{0x80000001}, 0xd8}, 0x5}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x2, 0x0, 0x0, 0x1, 0x5], 0x3, 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 0x7, 0x4, [0x5, 0x32, 0x36, 0x2c, 0x4, 0x1e, 0x17, 0x26, 0x2c, 0x1f, 0x2f, 0x17, 0x25, 0x3e, 0x11, 0x29], 0x0, 0x4, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) close(0x3) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 21.447850997s ago: executing program 2 (id=2990): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 20.623558987s ago: executing program 2 (id=2993): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x18) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) (async) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) accept4(r10, 0x0, &(0x7f0000000380), 0x80000) (async) io_setup(0x202, &(0x7f0000000200)=0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000006", @ANYRES32=0x0, @ANYBLOB="3d670400000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB="ac712c309dd17654c07c88b5320c9e1ebe17ac4c48091d8139594be4abe081a76882aec142ce6079d82bf1ef52b3bb97ba283fbd6d87d6cb4a07"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0xc000802) (async) syz_fuse_handle_req(r7, &(0x7f0000002100)="6be00ff09321e32a7e0f1d45fb750f1ec1e15be572a7d646754b1e1cea02c1a06d0d9b86514e6d2afce29df5f1c8c9d7fe087f7116a341c9cbd7e536063d42367f79ccea05e0fcf72d19ca8c65612a23cc447ab5982f306298cdfc40a20a86edfb26c58e1491cae8751acfc1a22867f2c866f123215209101ec37c2734d97fb4612d3fcefd3a3c824ace75498471f1e35363631e29cc05b89e0f7c26948edbe418596cbc3c686d37d24c4e049f35e99d6b6de3470b342a4fd59bf1012aa8d0238f32d7f7702e0c293dcf71b3d4b2dc6c6527b070c12a5ae65027998d74526c4ad93283708c59afc157dd299b378f85e159970e6d3a248022714873dd40b54f4418012650d564b568730769a5f27fd458d5f535672fddbd105e2423a85bfdfda463d3cd154ea1185276b3c400ccc39953ef1af942faeff3095d9cdd9bc03374408464d4f85ab3c1fd2965b5e0fbd95a396baf089d5792b3ecc98c536c19b4d3cdf8cb499072f3491f0cf76b5f42ea959c5366ab26f2b7e2539e999d41d6bc583ba13a3f59fc4d3b37eb96374ffc22d53e79198778092656323188c7a052e0d9587a6b80cafa69a0ad770d514e5c9edc0b8556732c04549cc9f4d14299e75514d80b6e026a0f8daea3ff396aff507f89bf2ca4c48d0413f6a37c8ef193dbe07ab52e7487f4e115caa83153f729d4659f51e27939429c41a5e5152eb48e109e81baa49ebf076bb13ebdd031a0c077b18c0db18a085d5b3262cb50649b4e8fecf6b306a0430a8f89e2ff7fda3ca48fb8e2b1aad0999072f20c98466cc868970e53d6860b8fc76fa3b40eb40ab92863469346d5a6860c0297dfa94d908f1168ba2ac5197a9f9cbf3abc32fce7d14ee228d395ae53b1bc374939be6b2a135661048a02aaeeedfc755fe1df353b8e8e0aa093574321ab55fc3d16060ed0cd3e8c3f5954b745048d58061e834cfb142d027c03a69df52118f92acc387a734df458e28cd8324ae588bdcf3c12e4c492e4c14e47dc3efc9123bc189dcc677b619fd8cf34ebed6b73c2c740964072f1d87505ccc4ce189293b0c1e6cd68b8ad7a8cb8b049b8aa4f3675ab09787732643353c4f93cec2787e5ca3b96011459c133cb6947d51c408981798b675b9f9bc2186f016b585bdbb6100434e97033261967b1f6fc02bbe32e4125e922b364757008fff71df0ac6e9479caebefc5255727e8f9deb38bac48fcf65b70b7ff53b1b73682903d1300ba4fe2cf7a7c4b1a561f902d4bdfcc37697c68ff5e4f9bb0722f2be019fa57791da330e8ec69683e7b12d64ec27fe017bb18190609be3a406cc4b1c818e778c404c0e35b1f0cf2e8109f672ee2d649fb71e686930c434ad92fe5d290deed7fdf3fdd71d7409f23daab810569a01a8ae9167e558e71f84f88639ecb5ec1ae0eae0474e37ce81d73c7c93a912a56de243e39995c8d1a6194457509fbd62b94bcce0f1e7b3aca47d36c4874fd1aa8d8d1475a2af2f457ea39004dc3c1834bf20701c00416858c810bd72e8c55f4507c2187d062abf119fe91a1871e423c16964de5351c70dd668f08c99329fe189d78d7944a2e9ce47b2aad9657f8e860ab6bc03c365059528dd28350b84c06c56e87f019a0fe5a71595c7ccbf493c41fe52e907708020cdaf26be8e21d3a97c2ef6dd1de85ac6a9f8ba0771d48353b399555c5b6be41241c9de86888d0fcd5198343ad913fa35da296dc3eeecfe2ee4a56b56bf84e23a3bddc4601b504433b339468f029cd2dd9e637217e5816391010093471cd0ac2d352cb88ff5e5930dd589d1b03c5f408023c8207a1bfc2de6794a65985c1345ab256b8e7990fb8c3fe54b9b76dee19f4a7380a0659b730db58bf69efb51044eb4eaf0df5b7a07baf629a537fdef46c33c6dec622c27dc806025bc0144a3a1a64136cd8e7674a4e01aafaec604ef8356b921be7df063a2ec67dc312d964ff1c30f8d77b7c3e06588ac351a8818701c5b7c9e4b9e9721e12d0bc0731c7e2ccd0b1028e5ac990a3e45c44ba1ce8ea73a54927f6fda6cf5e52253a8ee0df194073fe76568f51c6cf45312f1aec20010db2b59d95d39c3b1a40067e6657964368e12173d71fe2f7950e5f0f3a2923ecd474b623010d77f674e52f23552eece20dccfe15c64fa05ffa6bec88d28fea4b2de624c8dd1106c86b220af9f53f15e00785d764224975efb15f290c4a6af055f7a8baeebe9903c0c9f48b53dc423997adcb8acbe7d82de105383644f9d9f3d8cc8f9a79bfa75c7e1a3f470d2448612ee26950b0affc39e98bb75a30583ae55383d376f22dce6c2cdc544ad8d68fa82e5d16b0a65c63ba4c4fae2ce1269ce321be2a0f2550c2b47c8cca190d0e44af824705dc3d5565c4c0a1ab68c50d83534fb32e7ba31c8dec6a17c127985a516ace1f9016278e85056f6288513ed706b873646e0fe3f1803ce71dc72d91da85ad5d385e0b072b6857ecf36746cceced48b0e4663b92cc349baeec28d27ff568ba9bf4d68191166cf65a13af7cf213c2ffca68b9379ea167c7bda82fa7261e2754a00a6f0b4065c57a8f9868f8247d39eca71faae27afbff8864bf934e746300d5e9a31a4b78ca059bb9c40d30bfe745336264daa57002085686f73f48474e2d4bc1e38e62ed4547a6bbd74b1d9fab3f4b2622eb6c8d32b79ef9ab691fefd7b1bfa787de85ccaa14687be5a0529f928dfd974752bde8b063bc717d2a07eb4a1651f465aa78be32457955f83b2cb4608e22a4ef7bccba0378274289a7adc38521cd8d691741e87b03f536b9196c2284baa062038a22320e6d8c3f9e29051450b16bb7909566e75e6ebe423fa88b7f395c0dae22f027efc014db76ffc4244dfeb4d014809569caed95c43f92486c8d9cde522d403efe788fbc3b54ac39e90bd2f2dc3f3d66308d2df22d9602da5ec2133f296252bf0da014020194cf9ee65e7b137c5488401eba99def61e721fa3889d86ecaa5d5a3e4c8642fc0f9ef43186edd427402f63f06bbfa26850f2e4c71bd6387978a8085740fe4b1012dde14413dfc12052acf9508fd6a8a64f59d5756a59c806b64f42cc4466aed5327071f32fe2cb24aa62d21da4c1de44c2aab46f01c53eef1d83002437668fc494953f4951fcc1bc050e402b7cb73d61b3fae4d806fe6b745160df0a6fb6e830d18b04f142b22de9fe78b4307f95c9badbeeca0a2cb134d229e19fbab6a913ea4a0c59b59ac4e9de55b4fe2d7d5585d57c21678931d151038442fc388557da00dc01bae0c7df06ac72be56668cfd942c9edcfe77c1128a6640ad4d4a210d69d94b5e306b3848c09c61c05ec638096ceff5fc156bd34cc3c461bbc4d3eaee358ce246459f98f15821e181dfec54b87c9c10bf1ae64449ed9e90fa660191d38760117f9a0ae6422ad983e8b348bc0579dba87ad505c24ccb683ffd8f734b8e5f0c65e3a749d86a2fb1aad19abb96490167993fa130db74152d8984084220ad17653c01f3fbbd2e1000d3ace6ed697f0d4a9bdfb2dff49148e8def07acd5e3355370d1c19d3afb7bd12fc30e6acb4841f641672dda483d0afc53150369ce1e2523b3706f5b65542032838d45a5dedfc2369e385390d1628e78dced081b931f67dc75e23cf2b0f529fde6c9c84e4b3894c11b9f56ddc65827f68b0fde08875fa8ad3cac7e212c7727d41f6d51434a890ccac19f3e9b0a594556fbf51e84e874de4e2eeba206369871dd844f6248ec180b3741f2ab3d23b76448562207f577b10f4d14949a926b837252cdcf62af32e83001d63ebde5c1d266c8d2b43f5545dbf070eaa47613481d6c920f1801b490d2a847d7e85872fe75f56d90f050fe741d94511058d71271daf9c565ced757402c315685820c80ed1f6a889a8db0326ecb58f1f287d24c5beb5b19b94d8400aa406daa591e292832c78be74613ffc2a12635951d487650c864ef55927036edb5ec02614e5eb75f67b933220ac39f891c37cc0b7fe23ce8b0ad8e5ec9c0efbfd706f5730c142fbd5297ac7f03f4ca6f49b9cba1e9cbee6b08e936c7ee1642e5f1e3eb566c294d10fc4fb45a7239590cbdebb7a16b972a983748e73aa23be7f66a30c22610456445234bb8ba11b412eaae69b808f76d90b7bb14223b644b8860c550f3c92ae47c06a38429d66da2a414c01985d4b7c935717a4dec2cd4e89092d5dc9aefd0ac0b23481459a2adcb654063743b667c3c3241f203f81385aeef164a0be7655d02074b6710b4e2c50c3ee0747892327e8f22aaf51fccf2b715b24c02c6690389afe83e6128a1ef199234c8c9803124089382c6bed5b296945fcfa937313caf39176b741809c7c7fde30468e8875266315d9e733258b9305cd92276211d0c75c97b103c31c52c0c4dd17dc5931c5a7644ddb15ab8de78cc32125f85b78ba00d09079626a813e589dce18010f427079ec6cb74a2752c7247e7b7df37dc701245e9cf37fbfac5b1c427ba477b15c21d48084d38253a4d49af73d9f25e23333ac3a84e4b671fd31abd4b32441fb07dfe30659915a88ddb684933bee5ee9dccd45763f6544fdacfa4d821f36d7907a42ab9db72b231cbc9e1ddf2000441586eab8d59277955f9665c5e358da456d759490bf9f79462ced96372b237ab61d8b48a78612c64f48d5bd89fb6e67b0818033743b7ffb3305bcdbab0f71b46d5ab61d8190c5106813ca4435386e55e43c6cb925cf81039ed5f11df2d96c53a448519ede7e83dee8b82acd143ce0d1b91318a0f0efdabb77c178cdee559c1d2181600b6b3847e05f41234c5bee021d4f0bbed10cd557f686e8b9769780a13df35fd069855fd8e2aec5bb84e8d0b7740fb7fa88b823826b7e8a979148b95177a2e720b45296c280a9abce6bc5d943e394c07eed5148f86a94450569af8c38e184603abc46a59b2ba01e84225da828ccb93ca557e4ffe9e8e8b98c1fa471409f9d7b9d9da4b0f4fb7d58d7474039204faa2ab1067a2eaf9df247a2ba1b099cdfe79a7db1273e0660e37f6e8afc125564c6b8b5e893231a6addf326988bd78578950e4b2f317ffb322fb44a570587c6c6baa59d6d844454e92f89534c7d902760b984fae30ff5eff5b90fe03f49429c5a5becd275c5c670ae8d39b5faf986970492e579a8d98aed5da2894c96bf8779e9aaba84724bf471734b4d9d4db6a0ebfcb1c31f88c59d4b0f38078435f575b0e7cc7cd5f6cc9a39bf16d3514e89b562ded72187c1e550d4852e9bdc585525d02ed1d3adc819a072d82c37935b2fe6ff3c3f0c7b7fbee2c25ad515835d067ea53af1c6d0b4a9b35de653f2e5a8a1d9261c49813ecab580f368a79515a8621f16b750fa9d711d2884764e222c723e7dd94532de5d5d40fe12660fef784d8ecf2ededbef7a61b881cf61e8c035f31d3801b34ea385fb5fd3895e6789ed741aab0e5d091050f7cde8aa1f4feb53683626870adc4190554316bcea49c6ee182fd66a6ccd2e198ba2ae6f3621a6a6186a6cbd5378e6347afbd88cbff663f73ff568ed47861219eee3598520625f64f7a6303be64361d705021104d9871592d28524f5cf391e7d445746a0e9e42924760e62c955301e1ab3744f79217841a1668a6a871bf2efc278b0bf0b4b46a769caadf243f1af31df19006080d11a4f84ee4932034f48fdde875415d949438e8c1bdea8bb9899c230561482960cac0e77ce78584e35d3430af7ed37ec71f33f265d62b397b99f71aeef08e0a92e221d8ef14c82616d06b1ccafa63969a7ab145928d9c7b1b23e16acc00754ac707f6ce3939b4604baf0f3fa69fa48bb7218f3a992e65a4aabd8a6adf4a7c1e32877273393a1567632348d480a84f3b4ae31eb810a22ccb652064be040c9a90e52b59031a22abfd1840b2ecec89d16426ab31dfb83177ae08255d1424a6ddf8bb5d5adb66a7e6cf7f68be0ce5b4a56fa3463da621062ac85af5334018c3a473c5af9c5686eb9abbd24420293df7ae5fd075b2d3b9aec226e1a016c989b029d1daed5933d285227dbedab33a32b0d71d4cb1fb79c3a8e342fb4126785a3259f241150c7c381918f8f88146fb8fcf14d42ace0fd5c0084db3726575b04ef47c2bd1a0ccf977c8232e1688d4d39c88f7ab8d565b578bed84bbfa17982308a9269933ebd2f7260a67e01a3790fca5673643aff626514846dc1634e3c2fbdb0eaedb163072d9c0bb2fc129aa57618ca1d2b37324aa49972117b9ca81092eb89089659c39eaa380fd950aa914181ac98c1990af713eb834fdb2b731f2791292e9b2774aaf3a091152e25d7ea92a6c80f3217fedba12816ec910677d3381b361272074143fb51f391e6cd1953dd6cbfa33ba97e5d019fddd3da76fe350b767c8eb706a5f46a536c3103da6af42c1a5a7cf488be7f0d3a8ae4598d0d1f4f8339a63c124a5ce1b18a225f840368d390acddeac589093a753ed2e45ae4bfa62f222d4c6a6fbaee8163e76a0bf6291619d3b4af530d03c1769a456ec52491996c6739290f4cd325e9a3c1f0db9b079e5809859f6bb2d6cc494a500862179b65aa65ded80971e60dd9338dddbbf736924626aae8d65fa4a32e8affbf49b5b20c546520aac759594fd996e5f573e8a359dc4192c2723e05d7f8d212d78a03e9a7ee41b3ed6d098964f77e1e96e0e6641222fa247757998d9e9d33787079d1b0913f9b6fd0163f7603d4bbb7430738ab618026ba0526b5722f7c5b155e9c20209ebdac884d4afc34ee32420892acfa0a63d93e1aa4fa71581166d783abe45cbfc66f65c75b803d932dc3a40851508499001dde84fd3646ae3743c1edcfe433579cd41ce625262082cea3e4f87ea17f26c2390e9c134972cbe8291c500ad925f896aeb4d652cc01e397ff9eec6c4ab3d0c43c9774abfddb6b8ac12432f61f90ad6f24fc2f24c47d039e90cbdbdf97ea2c0b1ea6562c1ab651e46adab86814e14e9196366e6da5f16c743baa0d31a1b14200451df59b639dbf0ec8976e31b41462268a66d3fb55b0fb344a587890d92d7df87244b517276d6cef787cecdff92e2293d0d2e51228bba0ba3ba9e57483147727a90ab99b07498a1a9c46cd32e0af493e4c092e515ee9541c678c3566092e62a14a566e225741102071811d3306cb229b8c08da4119a565f9a37c06a983ceef668e7e97df595bdfbb43b0350fc823bcb53630508b3e7a42ff2ad5a8bbe83811c35b78578fa4842122ac76be6e7cd68a9d3ec8c6a3b83edc1f545a1f2a74ce5212f02ba85e104c0e1d21e4f77a7a6a0253fee2d486f65abc1d15e483b7fa87633e1c02e6f5aecdb779dd63af36c457905b2d4bf2c19cd4a4d2475245c45f3ef767654be5c17aa9b3e20f8019d356324baf677e4604e736c2a8b289874accbcb2ba300f063fae2c7d447f9a60daa87592275e501cbe880e7b46230659a7d62fc069ba7bbbbb71cd5ece453a692e2a3620cc8ccab581f4619963b1823c401b84092580dfcba08f63c14cef7963bf6af2d550e2fd43dc2ce1a5079e9018fe1a6ade4496b17f31dba644022c1bec7f7a345f2f02fe4eae1fcf5fb377fbf33c4774843cdbf1357741b0a9be5b403345db08d6ce70e4c5a18cd8725364b4096b69863964dc596cc115105043f6d80603873494c177b886299ca479d1c12a3547ff136a203282df0bcda49100de02b368ea5124385a03280d15319c5a5dd5e150b6eb19c969ca5f3c3368bdceef985c1ee957d5a61b3b9eb1c25e40b280fcec638726f78747dc2944e052c184cde480a6db7a2cd7b75f34cabcb2ca0e105b7af8c5d480b1cdb47d3675daf2e621db6e6e8924c157a028e860adde429979536c0ae06d3665e98166181eb47061fb20b4f0547daa938c54db21518a980ca5670a3dede7eb479497156b4998d11e838b6f112d3dfeae167bc3a8ed7c617fac11907094f25b0939bb9956f7aaeafbfa452ed4ec91b2d1450a43946096cd104a90a73d733da92125de061de39cf8e3d582e80f368b22c66cb69b86677a0af3bffc828ad1769a223f0f98e0857b60bc82f739fd6bbbc9a150830e1e850fa3bbd587bd9ca0fc157fb0b292cc91365348d01c435e2641885891306e177a108712290ec2d1ed3c6ac6d1c49aaffed07b6196787667cd8a7af66a1b631f9e9c6fd668509b7a2e3fb848d99e54e298742ca771bf913e50552faefdc0761a0b1aac3a38669fcead818c26a385ea630960c151199226c23d2b1c9ee42f864d4fe05d22eb826a80ad0738daa292938a4dcfcf18a60642b2b27f0e4998b0569e79c5dff424dd324641eea7b929d13735754b4ba6ba1540bba6b4bee8d3ee3c8eb8900e9c7e36854958f5b632b111abd2f722e2bc8aae4f112f488d8c1e68ba32fe88a39773ed81027a14cfb877ece8772dab7d360fab7cfdbe31a69d218ebdb7b0e42fd8b775348171f0f8a59386fa4fce2fcefefc09cc99a477cb856376541ea5048ab8fdda87ace560a565b2fef28327ca537eea30114a0581fee17e58ed375377a23d8ccbbf757a38aaac794a2630c42f9d4ed91cb886cb5277134b02ab691434ce897c5310472a691f99785cfda982c8e99bd2958589258228a7624137acc14a13414d06f6aee835b3637a0e7367a010652a076b2945fbdadeef39d65d503c18dddf7320fe07873331dcfd16e7cc786cac00d0934cbc6b024547e11132e413b7e5c4f926202128dd1aa76a39065a4228f109bc3327dac7028843868c32fc5d902e882494eb3cf81a90212434d404cbcfa72722e3ffae4079c2e6333a94d5f38e2a2948a01c10ef1a3adf58bae5b5629be02a1de64a201223c23eafd61a5be59c40188fa3463fd64e98f0646a9338bb9ee85f3ae5eabe370727121b4d8559fd32be127a6dbae3c1a0a43ef1173973b3b3332434c6c92b3144d9fb308768ac4067eb72d597b85882e0d228c6dece3da0677d9fa6c0b13788b3c2b0c9e67377ba0ada12aa956672c58f48fa6cfdf0357d3cacaabac46dc438632b1e7edd2e120310e7cd7aa2e55884b422b88e8eb9f5c468c04f9f045f4e5db6e12e9d7330f3e625a7e4676f61f93ef729e8cdcc743c44d409ff5720e85d4d447cfed7f187563ba04add8b27b4d5e1ffdd2bd61a167fcb2da8d58e67479ebc076329d27bd24ecaabc4cb05552a409ce732ecb86a6f0a213e35e53f895bc3c4ae020ece95499d4670375f61a32fa215c956734f5aa8127ec859cac7dfb5768864dbb7591f9d91c05e365c4dbbe864d207bf9eff04c4b3047b68cebef76a7915673dc5ccafceea57e38beb9a69473a1b2ae96c812ad737db0f66e87ca2305dcf4d66369e1afd74412a207a7a2d6d97982e1874afbb6a9b420d88c542bcdf6cf3c471c7535a3444ad20793876793ae8fce30fa468a50ef241a15ec0ea3229b1aafcc76eba39f8cd2a93f23ca2b04c8ab87c4f5a8a9a1db2bbcfc17a7aedf9877b669f8c2a05783586581656064dcfd19200a8f60c4a582766a0ca5148b56cafafc0ef1601336b5398a90d1bf68c6ecfd1ede4613fb9474bba76ac945f51129543e22f14fdea4e83c206032f0b5faa83a1de556d48d5f08bc53879f492897df7a59e0ddd00825706a2ac507e5fb31bad911885ffeb2d2368616786593f4c6a28de95edf2d993dab8412fa5b16eda075a934f46967fb1643085370da9d1e5895a5ddd6898429c85bdd41b28f58cc3e106ab683ecba03253b8122a8a5b6064eca49ebf4133c2351468cd01200332fca0a00c980262de8dcde7f7e145aefe3fa56b2dd6de3f2bd1514f5a2d143457a28bac927c248d4d89779835a83398fd54e7d53d7b2d1940fd12d7bc96e16b0fe15fbf16c3600b891b3bf6723303d01a73120734be1f27d43b5d5c374d6e44f42e0df163d2797da5bb292fbc58f8ac2056dbcb85b31c81d56fad2d70625b1304c04a508d6ccbfce072279358cb065a50f4bdf8c81ddd2d5ecf2b2c2b1015051b465e5ff682c9e3f8160123334b82dfe5a751d8b5f441587bbe7bed1325338cae6a8c06101081a55d499efbf77714e43ac99ecc08965e152bc84faba1bd966f4c01879f24b451b8f3ebae04852de5efd441396a6a871f97ea3dc413174886d71748c8beac5e5d403887e818e335cfdffa9d76b5074a5dcf12ad7725cb83cde0174679c0961643606a03082c5ec01590d687ff5bf9f8b2c3a84bfdb9c25622adc66aeb7f0355efddd4ab9954e5455c2428ee4e5383888ab466bd5fe817eb6b794a555c0eea446287cce32d9efd960e58771ddfb8ee2b4133b79d8953c2ae959a5d6ce09448d50da61bf22268fd32dcd501fd47c6b72cf8f50159a7aeec6e220ca81fc64ff97014ea77b6f791ccf6625eba88f60d1fe699cb16636a9acc4067786c537623c699568112c2093663bfba92ddc1ffcfe93f247f90accc6002faa61f43e54c3fab5e04a6ea1c5415e31ab129f8c9f82c3e3191513a4af151b1d6ab45a2f0eeca83f0870bc40da6257b9ea1c6238171a754995137d4123f2a4888e73db901f70a044ee0dd8176defd5dd82d9fc5a1a0d79effaf86fdf0c0dc4886b6a153b88eabc338c353f5fb040fe34db18211b20f8a3e4589b212e913665506488f21c88f5aec85eb694134a557c95d9a6ab9efc089e5c9848e591e3387cc11ca66fb03ca713513b98ebc2f35befcf64792ef44411e0f75ee4da42dcadfffdf9eecb761bd5e89183881103c5019e1ef3f3d80ba27fb0e1897e925d4122fdf3b3b568cc8795adf98643e86409226f2c5ed87cf481ffcd6e21a2bf0bff07a98bed3be5328118c3cb43c05f1b740242b0855f71400dd155c888b627615488025f81fcc6f5628efaf081489683c6d259c33b591edf4c9a4bfc54802c93ffbba4baf2a5030af8882b7d53eae80720e36a15c6c210658cdffa162630ba5d0217fbbf44879a04d41c58befb8a271abf4460a2d768be38d22f832e3cfad91b90f1b576924c8cbda71bbe89c85c239fa02f69c25e5422c977d97a54954fd16b85970db963db2b132b057a0282aef92614a9148e2a1a1edfa5ec46ae8d662dabae8f8141ea30dfddac44573ff52c3f93d82b0245b03c6db05b540e614cc9e3f702467054d688a92dcc9123f71a064cc52730fc5ee94b2746c80688521cc1cdb0f9455d4875f4af4afdc67d2e389361e1328edad7594d4bc9beec8b935aa3e5e98652c934d14fd16da50d685717303186da715778856da54666448d648d32becd2d63a6503ac21e56317903d15465ac4d3765f7a05420811307f71c1dc55ce5a4cd21130487cb0065397785da5094d27fae505996c1d404399797ff61d40f2ed63fca51db673197cd158a6e9b9ee93bb37df8bbaf92f47493c81c65439d359d578244a7f83629f4323a182e68526d674f4b6b64908350253520a4e564fae27df523e9218ff84f55a7ca622fc2e3bcc5edec9cc45c5a1b4c00c64038afdb165ad0ca3d8b66cea248e6a60a1c6d27e0dd2e5c7eec49fb8227a5266aedbc4fff982ffda402190548fb63fdeb67b3fb0894b11ce904b1c194f8f36cdecddc1312d64e9f227cc4b614b3679f978e0f1b6bb7aaeb2461cd28a94b73dd55eef1d5a98d72b9d8750b2dfe3a3cec044e13a87", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r11, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r10, &(0x7f0000000340)="8944d12e", 0x4, 0x6, 0x0, 0x0, r10}]) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) (async) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 19.06346642s ago: executing program 2 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0xc0fe, 0x8801}, 0x20000000) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.431280654s ago: executing program 2 (id=3008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x226}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4/file7\x00', 0x0, 0x50) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000002c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) 9.178600918s ago: executing program 1 (id=3043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765fffe400002800800050001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 8.564120169s ago: executing program 1 (id=3050): r0 = socket(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)) 7.575949413s ago: executing program 1 (id=3051): r0 = getpgid(0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x18, 0x0, @tid=r0}, &(0x7f00000000c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1100000004000000040000000300010014000000", @ANYRES32, @ANYBLOB="00007ae3f34da1a45dd76d195e9d468963001fb54f28d4f55fde247c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52", 0xc) (async) socket$inet6(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x80108907, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) 6.567785134s ago: executing program 6 (id=3053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0xffffff90}, 0x90) 6.493393606s ago: executing program 6 (id=3054): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) modify_ldt$read(0x1100, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100f7ffffff3f0107b500000000000904000001030000000921000000"], 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/235, 0xeb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) close(0x3) r2 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}}, 0x0, 0xf1, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0020fefa"], 0x0}, 0x0) 5.035895754s ago: executing program 1 (id=3057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}, 0x1, 0xc00000000000000}, 0x0) 4.979121424s ago: executing program 5 (id=3058): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000ffffff1f0000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000fefffeb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.741975484s ago: executing program 5 (id=3059): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800ffffffffffffff9700000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.509954953s ago: executing program 4 (id=3060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fsi_master_aspeed_cfam_reset\x00', r2, 0x0, 0x2}, 0x18) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r3, 0x0, 0x94, &(0x7f00000007c0)='\x17Y\x03\x00\x00\x00\xd1?<.)[u\x84\xe0.+\xb4\xd4\x92\xbc\xe6\xce\xb2\x02\x00 \x00\xdd\xc08\xf1\xb7*\x84#-A\x96*\xfb\x11\x1a\xd3\xfd\x14\x00\x00\x00\x00\x00\x00\x00\x91\xb1\xaf\x85\x1c\x85\x1b\x96\xe8\xc0\x89_\x83g\x9f\xaf\x16\x00\x00\x00\xcf\xb7\xcb\xca\xb8\xc3WZ\x8bA\xd9Jmf\xa8\x9b\xbf+\xaff\x965\xacs\xc3\xb9\x0eZG\xcd\xfeo\x91\xc5\xcc\xba\xfc\xba\xe7\"\xd9\xb5\xf7\xc9\xb2\xf7E\xaeD:\x18S\xe8\xc0as\xe4t\xfd\xd1\xf1\xc8\xa8\x10\xd9M\x16Ro\xe9\xa9|\x9a\xdd['}, 0x30) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ecc70000", @ANYRES16=r1, @ANYBLOB="cd3e000000000200000001000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040000006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e8528300000800020003000000"], 0xec}}, 0x8800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000040), 0x0, 0x4000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x9, 0x1, 0xfffffffd, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_setattr(0x0, 0x0, 0x0) 4.190476648s ago: executing program 1 (id=3061): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc769}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* '], 0x8) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000004b40)={0x2, @vbi={0xfffffffd, 0x4000, 0x56595559, 0x0, [0x0, 0x6]}}) syz_usbip_server_init(0x1) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0xb) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x18012, r4, 0x0) 4.18435213s ago: executing program 5 (id=3062): syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe909393fe089393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170003dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 3.963857509s ago: executing program 5 (id=3063): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) listen(0xffffffffffffffff, 0xffffff13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000a2b000/0x1000)=nil, 0x1000, 0x3, 0x80010, r2, 0xc0de000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7fffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x3fb8, 0x84fc, 0x6, &(0x7f0000000040)={[0x10000000]}, 0x8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.308467827s ago: executing program 6 (id=3064): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) io_setup(0x1, &(0x7f0000000b80)) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) recvfrom$inet_nvme(r2, &(0x7f0000000480)=""/204, 0xcc, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r5, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 3.01334593s ago: executing program 5 (id=3065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000140)={'batadv0\x00', 0x10}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 2.819468492s ago: executing program 4 (id=3066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) write$P9_RLINK(r2, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, 0x0) fchown(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000046791000000000000000000950000000000000060115cc5b667ddb61ed42375bd789bf1152573b916ab"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x25, 0x2, @void}, 0x10) request_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="cf0400000000fe0000001300000008000300", @ANYRES32=r11, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.487794264s ago: executing program 1 (id=3067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0xfec0, 0x8801}, 0x20000000) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.476841942s ago: executing program 4 (id=3068): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(0x0, 0x7fffffff8000, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x4, 0x4, 0x4, 0x4, 'syz0\x00', 0x1000}, 0x3, 0x30, 0x4, 0x0, 0x3, 0x1ff, 'syz0\x00', &(0x7f0000000080)=['iso9660\x00', '\\\x00', 'unhide'], 0x10}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a01000000000000000003000000000000004000", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 2.211855104s ago: executing program 5 (id=3069): socket$nl_generic(0x10, 0x3, 0x10) socket$isdn(0x22, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2e2b487516a791b521c82fa2d9579914181fd7bf99f039e78c2ffc81a79f19da7b3eadedebfc91ff9d302cb866ba846fedf2ec92667911996a3cbdad149edd5f75349498d35e7accaf4edfb6db7774c04a", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000300), 0x4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021040000", @ANYRES32=0x0], 0x50) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000200)={@remote, @local, @rand_addr=0x64010101}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x8, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6}, 0x18) r7 = openat$rtc(0xffffff9c, &(0x7f0000000100), 0xa000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b00000000007dba4f03b768794fbd64b5dd028dc5994a316bbd4504563e7b483455d780ac1f8af834a792280c535cc0a25009770b060281f2a54d458c9b4400fa58569cd4d9fb6509d5c6be2c1acc7d9daa87c5f08acd0300000000000000dd42aa15a503ad3e862b8abfd3f039bbf2e6f84fab21b5a016ca3fee70d7558279e994d941a122a3c5a1b85c5b8a73c7540ca9109aadc592472c584855750a90fff4255201c72322e6bdcf1f1f23c1009c4ac7c639e61ebf5bfe64422869381d150e7b360692a7872662c451264b59bec1c26ff11d86d2f1402f55ba49d7f85a066a5aa31d4a18a473f55f472a3bcbccfce3"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 1.858316696s ago: executing program 4 (id=3070): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000200000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000fefffeb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.657398388s ago: executing program 4 (id=3071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x300, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r8, &(0x7f0000000280)=[{&(0x7f0000000340)=""/198, 0xc6}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r6, 0x0, 0x0) 655.855574ms ago: executing program 4 (id=3072): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 584.992159ms ago: executing program 6 (id=3073): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffb0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9, 0x0, 0xff0f0000}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 445.444212ms ago: executing program 6 (id=3074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x180000000000000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x40000) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getcwd(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x65) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bind$xdp(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 6 (id=3075): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x6c, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e22, 0x2, 0x0, 0x4, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fff488c4d60e6debc82322c06af37a72d77a583a8e5be1ec3ffa7dfa93c7000000000000000000002a3b647c5478e7e0fd1e25cd1f4a451c5c995ec7666eedda6025d9021ba602f2394ff1e6020cf0d198a27ff27596254892bf575d81c1adba653ab420bd5a6228bd65fe987715a0"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000807) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000200000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x40045}, 0x24048004) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRES16=r7, @ANYRES16=r2, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=r4], 0x78}, 0x1, 0x0, 0x0, 0x400c054}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRESHEX=r7, @ANYBLOB="ebdf24d95b5d0b041a7ba47c54c627127547f4051fa81108b50e42bb36e77ecd24a97237af33ea250306792f9e3f8634a3458707e2c3c4dded5d2fc67893264443b3a3bf3a789dc33e651c03bb3c714573084855226b87f62d74f248e7db1c669d323cf08c3ea5df00bc521ad3bef166f10484ac93fbb08c7d10d11e17c979b797cbe14e6d8eb8d060a5f30069046e12618f4616f7d4dd5a533a12b732e6920decac5922f3e874a315e8a7d347ab1bee4fedc760408743969e896a58cf0cf3d0cb7322db8c18f762a15ec28aa26973b0db0c387cdbd4a8cde34a44a646d0ee8445307a1a2c53b5bf7d2b2a4d06cab03a276c8c14b01272"], 0x0) kernel console output (not intermixed with test programs): T16183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.438512][ T975] usb 3-1: USB disconnect, device number 57 [ 876.626010][ T30] audit: type=1400 audit(3514613425.259:1568): avc: denied { write } for pid=16177 comm="syz.5.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 878.830650][T16208] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 879.079129][ T30] audit: type=1400 audit(3514613427.499:1569): avc: denied { relabelto } for pid=16202 comm="syz.0.2523" name="530" dev="tmpfs" ino=2891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 879.106316][ T30] audit: type=1400 audit(3514613427.499:1570): avc: denied { associate } for pid=16202 comm="syz.0.2523" name="530" dev="tmpfs" ino=2891 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 879.616417][T16216] FAULT_INJECTION: forcing a failure. [ 879.616417][T16216] name failslab, interval 1, probability 0, space 0, times 0 [ 879.641442][T16216] CPU: 0 UID: 0 PID: 16216 Comm: syz.5.2527 Not tainted syzkaller #0 PREEMPT(full) [ 879.641468][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 879.641478][T16216] Call Trace: [ 879.641483][T16216] [ 879.641490][T16216] dump_stack_lvl+0x16c/0x1f0 [ 879.641517][T16216] should_fail_ex+0x512/0x640 [ 879.641538][T16216] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 879.641558][T16216] should_failslab+0xc2/0x120 [ 879.641577][T16216] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 879.641594][T16216] ? __alloc_skb+0x2b2/0x380 [ 879.641617][T16216] __alloc_skb+0x2b2/0x380 [ 879.641633][T16216] ? __pfx___alloc_skb+0x10/0x10 [ 879.641648][T16216] ? __lock_acquire+0xb97/0x1ce0 [ 879.641683][T16216] alloc_skb_with_frags+0xe0/0x860 [ 879.641706][T16216] ? find_held_lock+0x2b/0x80 [ 879.641727][T16216] sock_alloc_send_pskb+0x7fb/0x990 [ 879.641753][T16216] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 879.641770][T16216] ? avc_has_perm+0x144/0x1f0 [ 879.641791][T16216] ? __pfx__copy_from_iter+0x10/0x10 [ 879.641815][T16216] ? __lock_acquire+0xb97/0x1ce0 [ 879.641843][T16216] nfc_alloc_send_skb+0xa6/0x190 [ 879.641869][T16216] nfc_llcp_send_ui_frame+0x287/0x530 [ 879.641897][T16216] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 879.641919][T16216] ? llcp_sock_sendmsg+0x2e5/0x460 [ 879.641940][T16216] ? rcu_is_watching+0x12/0xc0 [ 879.641959][T16216] ? __local_bh_enable_ip+0xa4/0x120 [ 879.641983][T16216] llcp_sock_sendmsg+0x34b/0x460 [ 879.642003][T16216] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 879.642023][T16216] ____sys_sendmsg+0xa98/0xc70 [ 879.642048][T16216] ? copy_msghdr_from_user+0x10a/0x160 [ 879.642066][T16216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.642094][T16216] ? __pfx__kstrtoull+0x10/0x10 [ 879.642117][T16216] ___sys_sendmsg+0x134/0x1d0 [ 879.642137][T16216] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.642169][T16216] ? find_held_lock+0x2b/0x80 [ 879.642202][T16216] __sys_sendmmsg+0x200/0x420 [ 879.642225][T16216] ? __pfx___sys_sendmmsg+0x10/0x10 [ 879.642252][T16216] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 879.642284][T16216] ? fput+0x9b/0xd0 [ 879.642305][T16216] ? ksys_write+0x1ac/0x250 [ 879.642320][T16216] ? __pfx_ksys_write+0x10/0x10 [ 879.642341][T16216] __x64_sys_sendmmsg+0x9c/0x100 [ 879.642365][T16216] ? lockdep_hardirqs_on+0x7c/0x110 [ 879.642385][T16216] do_syscall_64+0xcd/0x4c0 [ 879.642407][T16216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.642424][T16216] RIP: 0033:0x7ff50158ebe9 [ 879.642440][T16216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.642456][T16216] RSP: 002b:00007ff50232e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 879.642472][T16216] RAX: ffffffffffffffda RBX: 00007ff5017c5fa0 RCX: 00007ff50158ebe9 [ 879.642481][T16216] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000006 [ 879.642490][T16216] RBP: 00007ff50232e090 R08: 0000000000000000 R09: 0000000000000000 [ 879.642499][T16216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.642507][T16216] R13: 00007ff5017c6038 R14: 00007ff5017c5fa0 R15: 00007ffe91e6b378 [ 879.642529][T16216] [ 879.961562][T16216] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 880.731735][T16235] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2532'. [ 880.745485][T16235] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2532'. [ 880.976259][T16242] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2535'. [ 881.005149][T16240] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.2534'. [ 881.023493][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 881.427303][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 881.608721][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 881.707882][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.756198][ T24] usb 5-1: config 0 descriptor?? [ 881.788961][ T24] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 882.005768][T16253] Invalid logical block size (8388608) [ 882.084078][ T5935] usb 5-1: USB disconnect, device number 44 [ 882.412938][T16264] batman_adv: batadv0: Adding interface: dummy0 [ 882.419375][T16264] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.456737][T16264] batman_adv: batadv0: Interface activated: dummy0 [ 882.491076][T16268] batadv0: mtu less than device minimum [ 882.497433][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 882.508402][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 882.519244][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 882.530085][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 882.540948][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 882.551838][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 882.562685][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 882.573850][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 882.584657][T16268] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 883.351352][ T5935] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 883.541904][ T5935] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 883.551104][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.565721][ T5935] usb 3-1: config 0 has no interface number 0 [ 883.572717][ T5935] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 883.585333][ T5935] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.608649][ T5935] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 883.623608][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.675708][ T5935] usb 3-1: Product: syz [ 883.686936][ T5935] usb 3-1: Manufacturer: syz [ 883.839440][ T5935] usb 3-1: SerialNumber: syz [ 883.848720][ T5935] usb 3-1: config 0 descriptor?? [ 884.060815][T16280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.117831][T16280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.278210][ T5935] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 884.314512][ T5935] usb 3-1: USB disconnect, device number 58 [ 884.525429][T16310] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 885.032881][ T30] audit: type=1400 audit(3514613433.678:1571): avc: denied { ioctl } for pid=16300 comm="syz.1.2554" path="socket:[50196]" dev="sockfs" ino=50196 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 886.252299][T16329] netlink: 'syz.1.2563': attribute type 10 has an invalid length. [ 886.261261][T16329] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2563'. [ 887.651325][T16339] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2565'. [ 887.975639][ T30] audit: type=1400 audit(3514613436.598:1572): avc: denied { map } for pid=16323 comm="syz.5.2561" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 888.031104][ T30] audit: type=1400 audit(3514613436.598:1573): avc: denied { execute } for pid=16323 comm="syz.5.2561" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 888.143047][T16348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2568'. [ 888.527280][T16355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2569'. [ 888.983986][ T30] audit: type=1400 audit(3514613437.638:1574): avc: denied { bind } for pid=16359 comm="syz.2.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 889.539311][T16368] infiniband syz0: set down [ 889.545883][T16368] infiniband syz0: added bond0 [ 889.633235][T16368] RDS/IB: syz0: added [ 889.653314][T16368] smc: adding ib device syz0 with port count 1 [ 889.659881][T16368] smc: ib device syz0 port 1 has pnetid [ 890.407648][T16378] block nbd5: shutting down sockets [ 891.807730][ T5990] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 891.951072][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'. [ 891.973415][ T5990] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 891.984888][ T5990] usb 5-1: config 0 has no interface number 0 [ 891.991553][ T975] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 892.002287][ T5990] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 892.012512][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.034960][ T5990] usb 5-1: config 0 descriptor?? [ 892.061725][ T5990] usb 5-1: selecting invalid altsetting 3 [ 892.079054][ T5990] comedi comedi5: could not set alternate setting 3 in high speed [ 892.086912][ T5990] usbdux 5-1:0.207: driver 'usbdux' failed to auto-configure device. [ 892.103557][ T5990] usbdux 5-1:0.207: probe with driver usbdux failed with error -22 [ 892.134460][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.151726][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.165850][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.174902][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.178559][ T975] usb 6-1: config 0 has an invalid interface number: 207 but max is 0 [ 892.188469][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.201361][ T975] usb 6-1: config 0 has no interface number 0 [ 892.203907][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.217292][ T975] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 892.220420][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.235523][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.236795][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.248292][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.303240][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.307972][ T975] usb 6-1: config 0 descriptor?? [ 892.324030][ T24] usb 5-1: USB disconnect, device number 45 [ 892.336273][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.349569][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.369466][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.382127][ T975] usb 6-1: selecting invalid altsetting 3 [ 892.407433][ T975] comedi comedi5: could not set alternate setting 3 in high speed [ 892.420716][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.432855][ T975] usbdux 6-1:0.207: driver 'usbdux' failed to auto-configure device. [ 892.443851][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.454656][ T975] usbdux 6-1:0.207: probe with driver usbdux failed with error -22 [ 892.476647][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.489508][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.500282][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.511937][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.522917][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.553211][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.566893][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.588438][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.615852][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.640478][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.674795][ T975] usb 6-1: USB disconnect, device number 37 [ 892.678839][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.709853][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.732966][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.745165][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.754717][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.778054][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.787159][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.797508][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.806481][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.816790][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.851061][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.864378][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 892.881500][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 892.895830][T16396] (unnamed net_device) (uninitialized): ARP target 5.0.0.0 is already present [ 893.257352][T16396] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (5) [ 893.462607][T16418] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2589'. [ 893.502701][T16408] sp0: Synchronizing with TNC [ 893.673533][T16405] [U] [ 893.826862][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 893.836891][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 893.845716][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 893.854683][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 893.862203][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 893.885668][ T30] audit: type=1400 audit(3514613442.538:1575): avc: denied { mounton } for pid=16425 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 893.907250][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.174113][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2593'. [ 894.641758][T15527] block nbd0: Possible stuck request ffff8880268ae380: control (read@0,1024B). Runtime 30 seconds [ 894.677607][T15527] block nbd0: Possible stuck request ffff8880268ae540: control (read@1024,1024B). Runtime 30 seconds [ 894.688568][T15527] block nbd0: Possible stuck request ffff8880268ae700: control (read@2048,1024B). Runtime 30 seconds [ 894.699636][T15527] block nbd0: Possible stuck request ffff8880268ae8c0: control (read@3072,1024B). Runtime 30 seconds [ 894.778558][T16425] chnl_net:caif_netlink_parms(): no params data found [ 895.500743][T16460] netlink: 'syz.2.2601': attribute type 1 has an invalid length. [ 895.587819][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 895.612039][T16462] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2600'. [ 895.887894][ T51] Bluetooth: hci5: command tx timeout [ 895.905726][T16460] bond3: entered promiscuous mode [ 895.911276][T16460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 896.090461][T16425] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.113769][T16425] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.126192][T16425] bridge_slave_0: entered allmulticast mode [ 896.133999][T16425] bridge_slave_0: entered promiscuous mode [ 896.149738][T16425] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.164532][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.172281][T16425] bridge_slave_1: entered allmulticast mode [ 896.183850][T16425] bridge_slave_1: entered promiscuous mode [ 896.825351][T16425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.891724][T16425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.967198][ T51] Bluetooth: hci5: command tx timeout [ 898.637153][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 898.879699][T16425] team0: Port device team_slave_0 added [ 898.887574][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 898.899806][T16425] team0: Port device team_slave_1 added [ 898.911555][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.948469][ T24] usb 2-1: Product: syz [ 898.964585][ T24] usb 2-1: Manufacturer: syz [ 898.973794][ T24] usb 2-1: SerialNumber: syz [ 899.053875][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2612'. [ 899.148827][T16510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2614'. [ 899.445961][T16425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.463302][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.489369][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.575497][T16425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.578662][ T24] rtl8150 2-1:1.0: couldn't reset the device [ 899.626957][T16425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.685345][ T24] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 899.685520][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.719629][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.728912][T16425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.781110][T16425] hsr_slave_0: entered promiscuous mode [ 899.792352][T16425] hsr_slave_1: entered promiscuous mode [ 899.799760][T16425] debugfs: 'hsr0' already exists in 'hsr' [ 899.805486][T16425] Cannot create hsr debugfs directory [ 900.049373][ T51] Bluetooth: hci5: command tx timeout [ 900.129741][ T24] usb 2-1: USB disconnect, device number 48 [ 901.230869][T16425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 901.320428][T16425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 901.342603][T16425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 901.370065][T16425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 901.511793][T16425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.599339][T16425] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.640619][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.647864][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.694891][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.702049][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.935953][T16550] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2622'. [ 901.957407][ T5935] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 902.725354][ T30] audit: type=1400 audit(3514613450.518:1576): avc: denied { bind } for pid=16544 comm="syz.1.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 902.747269][ T51] Bluetooth: hci5: command tx timeout [ 902.907309][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 902.918330][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 902.927004][ T5935] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 903.073468][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.084122][ T5935] usb 3-1: Product: syz [ 903.092427][ T5935] usb 3-1: Manufacturer: syz [ 903.102577][ T5935] usb 3-1: SerialNumber: syz [ 903.118409][ T5935] usb 3-1: config 0 descriptor?? [ 903.140525][ T5935] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 903.202187][T16425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.209066][T14529] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 903.337137][ T975] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 903.348994][ T5935] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 903.362309][ T5935] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 903.387492][T14529] usb 6-1: Using ep0 maxpacket: 16 [ 903.406896][T14529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.428673][T14529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.445402][T14529] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 903.455913][T14529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.563247][T14529] usb 6-1: config 0 descriptor?? [ 903.566874][ T975] usb 5-1: config 0 has no interfaces? [ 903.574049][ T5962] usb 3-1: USB disconnect, device number 59 [ 903.588724][ T975] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 903.602370][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.629353][ T975] usb 5-1: Product: syz [ 903.633780][ T975] usb 5-1: Manufacturer: syz [ 903.638803][ T975] usb 5-1: SerialNumber: syz [ 903.649389][ T975] usb 5-1: config 0 descriptor?? [ 903.973846][T16425] veth0_vlan: entered promiscuous mode [ 904.025591][T16425] veth1_vlan: entered promiscuous mode [ 904.057923][T16425] veth0_macvtap: entered promiscuous mode [ 904.068382][T16425] veth1_macvtap: entered promiscuous mode [ 904.076968][T14529] hid_parser_main: 18 callbacks suppressed [ 904.076981][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.151562][T16425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.189329][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.201935][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.239173][T16425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.246689][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.254888][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.273832][ T30] audit: type=1400 audit(3514613452.918:1577): avc: denied { connect } for pid=16551 comm="syz.5.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 904.295924][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.303422][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.310474][ T6233] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.311376][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.327627][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.336614][T14529] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 904.359969][T14529] logitech 0003:046D:C29C.0012: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 904.380287][T14529] logitech 0003:046D:C29C.0012: no inputs found [ 904.385447][ T6233] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.421764][T14529] usb 6-1: USB disconnect, device number 38 [ 904.464126][T16576] fido_id[16576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 904.556809][ T6233] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.592193][ T6241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.750505][ T6233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.762717][ T6233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.262719][ T6241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.277306][ T6241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.293823][ T30] audit: type=1400 audit(3514613453.948:1578): avc: denied { mounton } for pid=16425 comm="syz-executor" path="/root/syzkaller.bxDc2s/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 906.022469][ T30] audit: type=1400 audit(3514613454.658:1579): avc: denied { mounton } for pid=16425 comm="syz-executor" path="/root/syzkaller.bxDc2s/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 906.153218][ T30] audit: type=1400 audit(3514613454.718:1580): avc: denied { mounton } for pid=16425 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 906.330430][ T30] audit: type=1400 audit(3514613454.718:1581): avc: denied { mounton } for pid=16425 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 906.450094][ T5964] usb 5-1: USB disconnect, device number 46 [ 906.885269][T16613] binder: 16612:16613 unknown command 0 [ 907.005395][T16613] binder: 16612:16613 ioctl c0306201 200000000080 returned -22 [ 907.343111][T16625] binder: 16624:16625 unknown command 0 [ 907.355478][T16625] binder: 16624:16625 ioctl c0306201 200000000080 returned -22 [ 907.538275][ T5935] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 907.763069][T16634] tmpfs: Cannot enable quota on remount [ 907.837184][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 907.848474][ T5935] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 907.892455][ T5935] usb 3-1: config 0 has no interface number 0 [ 907.905618][ T5935] usb 3-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=31.4e [ 907.915374][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.927863][ T5935] usb 3-1: Product: syz [ 907.956134][ T5935] usb 3-1: Manufacturer: syz [ 907.971204][ T5935] usb 3-1: SerialNumber: syz [ 908.025394][ T5935] usb 3-1: config 0 descriptor?? [ 908.717136][ T975] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 908.944480][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 908.996315][ T975] usb 6-1: config 0 has an invalid interface number: 163 but max is 0 [ 909.008765][ T975] usb 6-1: config 0 has no interface number 0 [ 909.014889][ T975] usb 6-1: config 0 interface 163 has no altsetting 0 [ 909.242749][ T5935] mxuport 3-1:0.35: mxuport_recv_ctrl_urb - short read (0 / 4) [ 909.250777][ T5935] mxuport 3-1:0.35: probe with driver mxuport failed with error -5 [ 909.303070][ T975] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 909.330910][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.347363][ T975] usb 6-1: Product: syz [ 909.357197][ T975] usb 6-1: Manufacturer: syz [ 909.367102][ T975] usb 6-1: SerialNumber: syz [ 909.484023][ T975] usb 6-1: config 0 descriptor?? [ 909.511362][ T30] audit: type=1400 audit(3514613458.168:1582): avc: denied { getopt } for pid=16660 comm="syz.1.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 910.105647][T16665] netlink: 'syz.1.2651': attribute type 12 has an invalid length. [ 910.505074][ T975] f81534a_ctrl 6-1:0.163: failed to set register 0x116: -5 [ 910.517141][ T975] f81534a_ctrl 6-1:0.163: failed to enable ports: -5 [ 910.523893][ T975] f81534a_ctrl 6-1:0.163: probe with driver f81534a_ctrl failed with error -5 [ 910.742540][ T975] usb 6-1: USB disconnect, device number 39 [ 911.006753][T16677] netem: incorrect ge model size [ 911.036659][T16677] netem: change failed [ 911.090592][ T5935] usb 3-1: USB disconnect, device number 60 [ 911.502827][T14529] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 911.619117][T16690] block device autoloading is deprecated and will be removed. [ 911.960327][T16689] net_ratelimit: 11 callbacks suppressed [ 911.960344][T16689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.175871][T14529] usb 7-1: config 0 has an invalid interface number: 207 but max is 0 [ 912.188329][T14529] usb 7-1: config 0 has no interface number 0 [ 912.197368][T14529] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 912.206413][T14529] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.249193][T14529] usb 7-1: config 0 descriptor?? [ 912.305075][T14529] usb 7-1: selecting invalid altsetting 3 [ 912.327287][T14529] comedi comedi5: could not set alternate setting 3 in high speed [ 912.335126][T14529] usbdux 7-1:0.207: driver 'usbdux' failed to auto-configure device. [ 912.372023][T14529] usbdux 7-1:0.207: probe with driver usbdux failed with error -22 [ 912.444999][T16705] /dev/nullb0: Can't open blockdev [ 912.449290][ T30] audit: type=1400 audit(3514613461.098:1583): avc: denied { append } for pid=16703 comm="syz.4.2664" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 912.474228][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.477571][T16705] program syz.4.2664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.521976][ T5964] usb 7-1: USB disconnect, device number 2 [ 912.535900][T16709] /dev/nullb0: Can't open blockdev [ 913.384932][ T5964] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 913.630014][ T5964] usb 3-1: device descriptor read/64, error -71 [ 914.307258][ T5964] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 914.507156][ T5964] usb 3-1: device descriptor read/64, error -71 [ 914.636505][ T5964] usb usb3-port1: attempt power cycle [ 914.651833][ T30] audit: type=1400 audit(3514613463.278:1584): avc: denied { append } for pid=16737 comm="syz.5.2673" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 914.674766][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.080371][ T5964] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 915.206372][ T5964] usb 3-1: device descriptor read/8, error -71 [ 916.710347][T16761] binder: 16760:16761 unknown command 0 [ 916.735629][T16761] binder: 16760:16761 ioctl c0306201 200000000080 returned -22 [ 917.033085][ T5964] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 917.073281][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 917.101635][ T5964] usb 3-1: unable to get BOS descriptor or descriptor too short [ 917.132586][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 917.154254][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 917.166705][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 917.183514][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 917.199019][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 917.213499][ T5964] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 917.226257][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 917.245396][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 917.265673][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 917.282758][ T5964] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 917.292350][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.310163][ T5964] usb 3-1: Product: syz [ 917.313819][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.314507][ T5964] usb 3-1: Manufacturer: syz [ 917.321874][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.326379][ T5964] usb 3-1: SerialNumber: syz [ 917.340478][ T5964] usb 3-1: config 0 descriptor?? [ 917.356005][ T5964] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 917.507133][ T975] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 917.515900][T16775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.564888][T16775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.565743][T16005] udevd[16005]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.606828][ T5935] usb 3-1: USB disconnect, device number 64 [ 917.668698][ T975] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 917.676950][ T975] usb 2-1: config 1 has no interface number 0 [ 917.683178][ T975] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 917.712950][ T975] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 917.734426][ T975] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.776712][ T975] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 917.786116][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.794231][ T975] usb 2-1: Product: syz [ 917.798549][ T975] usb 2-1: Manufacturer: syz [ 917.803163][ T975] usb 2-1: SerialNumber: syz [ 917.815786][T16782] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 917.895199][ T6237] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.907886][ T6237] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.945430][ T1151] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.967120][ T1151] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.036607][T16782] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 918.372395][ T30] audit: type=1400 audit(3514613466.998:1585): avc: denied { bind } for pid=16790 comm="syz.5.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 918.586538][ T975] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 918.635228][ T30] audit: type=1400 audit(3514613466.998:1586): avc: denied { connect } for pid=16790 comm="syz.5.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 918.727144][ T5964] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 918.810192][ T975] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 918.816822][ T975] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 918.925579][ T975] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 918.943985][ T5964] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 918.952304][ T5964] usb 7-1: config 0 has no interface number 0 [ 918.963700][ T975] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 918.967157][T16797] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2687'. [ 918.971316][ T5964] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.008503][ T975] usb 2-1: USB disconnect, device number 49 [ 919.059153][ T975] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 919.071246][ T5964] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.108167][ T5964] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 919.131235][ T5964] usb 7-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 919.157125][ T5964] usb 7-1: Product: syz [ 919.245389][ T5964] usb 7-1: config 0 descriptor?? [ 919.291507][ T975] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 919.836089][T16816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.394787][T16818] ptrace attach of "./syz-executor exec"[16425] was attempted by "./syz-executor exec"[16818] [ 920.622645][T16823] binder: 16820:16823 unknown command 0 [ 920.638495][T16823] binder: 16820:16823 ioctl c0306201 200000000080 returned -22 [ 920.972048][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2696'. [ 921.398705][T14529] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 921.577208][T14529] usb 3-1: Using ep0 maxpacket: 32 [ 921.584245][T14529] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 921.633114][T14529] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 921.700255][T14529] usb 3-1: config 0 interface 0 has no altsetting 0 [ 921.734647][T14529] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 921.745256][T14529] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 921.774736][T14529] usb 3-1: Product: syz [ 921.794092][T14529] usb 3-1: Manufacturer: syz [ 921.809377][T14529] usb 3-1: SerialNumber: syz [ 921.832246][T14529] usb 3-1: config 0 descriptor?? [ 922.784294][T14529] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 923.032572][ T30] audit: type=1400 audit(3514613471.678:1587): avc: denied { read } for pid=16864 comm="syz.4.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 923.086735][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2700'. [ 923.165120][ T5964] usbhid 7-1:0.16: can't add hid device: -71 [ 923.186358][T14529] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO) [ 923.213171][ T5964] usbhid 7-1:0.16: probe with driver usbhid failed with error -71 [ 923.233727][T14529] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 923.254348][ T5964] usb 7-1: USB disconnect, device number 3 [ 923.597973][T14529] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 923.658481][T16883] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2702'. [ 923.810528][T14529] usb 2-1: Using ep0 maxpacket: 16 [ 923.821878][T14529] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.884048][T14529] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 923.906392][T14529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.922696][T14529] usb 2-1: config 0 descriptor?? [ 924.410707][T16892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.655458][T14529] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 924.693465][T15527] block nbd0: Possible stuck request ffff8880268ae380: control (read@0,1024B). Runtime 60 seconds [ 924.705162][T15527] block nbd0: Possible stuck request ffff8880268ae540: control (read@1024,1024B). Runtime 60 seconds [ 924.737427][T15527] block nbd0: Possible stuck request ffff8880268ae700: control (read@2048,1024B). Runtime 60 seconds [ 924.757361][T15527] block nbd0: Possible stuck request ffff8880268ae8c0: control (read@3072,1024B). Runtime 60 seconds [ 924.779271][ T8859] usb 3-1: USB disconnect, device number 65 [ 925.205723][ T5964] usb 2-1: USB disconnect, device number 50 [ 925.386580][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2708'. [ 925.395693][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2708'. [ 925.441262][T16901] gretap0: entered promiscuous mode [ 925.460105][T16901] gretap0: left promiscuous mode [ 926.143410][T16923] loop9: detected capacity change from 0 to 7 [ 926.161418][T16923] buffer_io_error: 9 callbacks suppressed [ 926.161450][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.176496][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.186660][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.196423][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.206125][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.215659][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.225825][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.234934][T16923] ldm_validate_partition_table(): Disk read failed. [ 926.242583][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.253584][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.263426][T16923] Buffer I/O error on dev loop9, logical block 0, async page read [ 926.274076][T16923] Dev loop9: unable to read RDB block 0 [ 926.284145][T16923] loop9: unable to read partition table [ 926.293264][T16923] loop9: partition table beyond EOD, truncated [ 926.299896][T16923] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 926.299896][T16923] ) failed (rc=-5) [ 927.423683][T16922] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2716'. [ 927.885702][T16949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.487099][ T975] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 928.717849][ T975] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 928.744338][T16929] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2717'. [ 928.759873][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.775628][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 928.794505][ T975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 928.876656][ T975] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 928.916850][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.954925][ T975] usb 7-1: config 0 descriptor?? [ 929.396862][ T975] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 929.420732][ T975] plantronics 0003:047F:FFFF.0014: global environment stack underflow [ 929.443740][ T975] plantronics 0003:047F:FFFF.0014: item 0 4 1 11 parsing failed [ 929.518203][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2728'. [ 929.614990][ T30] audit: type=1400 audit(3514613478.258:1588): avc: denied { create } for pid=16943 comm="syz.6.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 929.667801][ T975] plantronics 0003:047F:FFFF.0014: parse failed [ 929.703757][T16961] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 929.740163][ T975] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 929.750186][ T30] audit: type=1400 audit(3514613478.258:1589): avc: denied { bind } for pid=16943 comm="syz.6.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 929.784670][ T975] usb 7-1: USB disconnect, device number 4 [ 929.816595][ T30] audit: type=1400 audit(3514613478.398:1590): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 929.898152][ T30] audit: type=1400 audit(3514613478.398:1591): avc: denied { open } for pid=5844 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 929.923323][ T30] audit: type=1400 audit(3514613478.398:1592): avc: denied { ioctl } for pid=5844 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 929.958188][ T30] audit: type=1400 audit(3514613478.558:1593): avc: denied { create } for pid=16970 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 929.994405][ T30] audit: type=1400 audit(3514613478.558:1594): avc: denied { write } for pid=16970 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 930.056716][ T30] audit: type=1400 audit(3514613478.558:1595): avc: denied { nlmsg_write } for pid=16970 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 930.113668][ T30] audit: type=1400 audit(3514613478.678:1596): avc: denied { map_create } for pid=16972 comm="syz.4.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 930.203640][ T30] audit: type=1400 audit(3514613478.678:1597): avc: denied { perfmon } for pid=16972 comm="syz.4.2731" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 930.351814][T16983] loop9: detected capacity change from 0 to 7 [ 930.370871][T16983] ldm_validate_partition_table(): Disk read failed. [ 930.382449][T16983] Dev loop9: unable to read RDB block 0 [ 930.390084][T16983] loop9: unable to read partition table [ 930.396779][T16983] loop9: partition table beyond EOD, truncated [ 930.403208][T16983] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 930.403208][T16983] ) failed (rc=-5) [ 931.104359][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.117279][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.656304][T16992] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2738'. [ 931.908131][T14909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.614185][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 932.627799][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 932.645257][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 932.656482][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 932.670774][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 932.863190][T14909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.194912][T17007] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 933.333644][T14909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.615955][T17022] binder: 17021:17022 unknown command 0 [ 933.721857][T17022] binder: 17021:17022 ioctl c0306201 200000000080 returned -22 [ 933.983928][T14909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.187967][ T5919] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 934.237143][ T8859] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 934.448429][T17032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.550111][T17002] chnl_net:caif_netlink_parms(): no params data found [ 934.586394][T14909] bridge_slave_1: left allmulticast mode [ 934.594029][T14909] bridge_slave_1: left promiscuous mode [ 934.603296][T14909] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.613513][T14909] bridge_slave_0: left allmulticast mode [ 934.626485][T14909] bridge_slave_0: left promiscuous mode [ 934.641006][T14909] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.661429][ T8859] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 934.672512][ T5919] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.683705][ T8859] usb 2-1: config 0 has no interface number 0 [ 934.696229][ T5919] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 934.712934][ T8859] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 934.727359][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.735370][ T5919] usb 7-1: Product: syz [ 934.746767][ T8859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.762059][ T5919] usb 7-1: Manufacturer: syz [ 934.766685][ T5919] usb 7-1: SerialNumber: syz [ 934.771872][ T5853] Bluetooth: hci3: command tx timeout [ 934.803674][ T8859] usb 2-1: config 0 descriptor?? [ 934.811611][ T5919] usb 7-1: config 0 descriptor?? [ 934.824209][ T5919] ums-alauda 7-1:0.0: USB Mass Storage device detected [ 934.840991][ T8859] usb 2-1: selecting invalid altsetting 3 [ 935.017078][T17026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.075380][ T8859] comedi comedi5: could not set alternate setting 3 in high speed [ 935.085974][ T8859] usbdux 2-1:0.207: driver 'usbdux' failed to auto-configure device. [ 935.135281][ T8859] usbdux 2-1:0.207: probe with driver usbdux failed with error -22 [ 935.166980][ T5919] usb 7-1: USB disconnect, device number 5 [ 935.182241][ T8859] usb 2-1: USB disconnect, device number 51 [ 935.476641][T14909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.486723][T14909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.499132][T14909] bond0 (unregistering): Released all slaves [ 935.601911][T14909] bond1 (unregistering): Released all slaves [ 935.643935][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 935.643952][ T30] audit: type=1400 audit(3514613484.298:1655): avc: denied { create } for pid=17037 comm="syz.6.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 935.645958][T17038] fuse: Unknown parameter '.+Hu!/W׿9/{>0' [ 935.697148][ T30] audit: type=1400 audit(3514613484.298:1656): avc: denied { search } for pid=5514 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.796682][ T30] audit: type=1400 audit(3514613484.298:1657): avc: denied { search } for pid=5514 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.845908][ T30] audit: type=1400 audit(3514613484.298:1658): avc: denied { search } for pid=5514 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.898687][T14909] tipc: Left network mode [ 935.914912][ T30] audit: type=1400 audit(3514613484.298:1659): avc: denied { read } for pid=5514 comm="dhcpcd" name="n125" dev="tmpfs" ino=12240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 936.027316][ T30] audit: type=1400 audit(3514613484.298:1660): avc: denied { open } for pid=5514 comm="dhcpcd" path="/run/udev/data/n125" dev="tmpfs" ino=12240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 936.051142][ T30] audit: type=1400 audit(3514613484.298:1661): avc: denied { getattr } for pid=5514 comm="dhcpcd" path="/run/udev/data/n125" dev="tmpfs" ino=12240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 936.076099][ T30] audit: type=1400 audit(3514613484.298:1662): avc: denied { read write } for pid=17037 comm="syz.6.2749" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 936.204685][ T30] audit: type=1400 audit(3514613484.298:1663): avc: denied { open } for pid=17037 comm="syz.6.2749" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 936.229122][ T30] audit: type=1400 audit(3514613484.298:1664): avc: denied { mounton } for pid=17037 comm="syz.6.2749" path="/18/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 936.857899][ T5853] Bluetooth: hci3: command tx timeout [ 937.325210][T17068] binder: 17067:17068 ioctl 1 2000000001c0 returned -22 [ 937.351806][T17068] binder: 17067:17068 ioctl c0306201 2000000000c0 returned -14 [ 937.453724][T17041] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 937.492588][T17002] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.514618][T17002] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.605018][T17002] bridge_slave_0: entered allmulticast mode [ 937.668353][T17002] bridge_slave_0: entered promiscuous mode [ 937.821027][T17002] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.912627][T17002] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.931926][T17002] bridge_slave_1: entered allmulticast mode [ 937.953542][T17002] bridge_slave_1: entered promiscuous mode [ 938.837378][T17097] overlay: ./file0 is not a directory [ 938.927106][ T5853] Bluetooth: hci3: command tx timeout [ 938.944337][T17002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.404853][T17002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.576559][T17109] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2762'. [ 940.014920][T17002] team0: Port device team_slave_0 added [ 940.064001][T17002] team0: Port device team_slave_1 added [ 940.126943][T17117] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 940.486845][T17002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.513902][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.670203][T17002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.045580][ T5853] Bluetooth: hci3: command tx timeout [ 941.067345][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 941.067362][ T30] audit: type=1400 audit(3514613489.718:1705): avc: denied { bind } for pid=17134 comm="syz.1.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 941.072092][T17002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.100891][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.130056][T17002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.401855][ T30] audit: type=1400 audit(3514613490.058:1706): avc: denied { create } for pid=17134 comm="syz.1.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 941.425228][T14909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.431820][ T30] audit: type=1400 audit(3514613490.058:1707): avc: denied { setopt } for pid=17134 comm="syz.1.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 941.454878][T14909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.628538][T17134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.639048][T14909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.649808][T14909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.116731][ T30] audit: type=1400 audit(3514613490.118:1708): avc: denied { shutdown } for pid=17139 comm="syz.5.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 942.361229][T14909] veth1_macvtap: left promiscuous mode [ 942.373956][T14909] veth0_macvtap: left allmulticast mode [ 942.522509][T14909] veth0_macvtap: left promiscuous mode [ 942.523754][ T30] audit: type=1400 audit(3514613491.178:1709): avc: denied { execute } for pid=17139 comm="syz.5.2772" name="file0" dev="tmpfs" ino=1688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 942.528729][T14909] veth1_vlan: left promiscuous mode [ 942.612543][T14909] veth0_vlan: left promiscuous mode [ 942.727122][ T30] audit: type=1400 audit(3514613491.228:1710): avc: denied { write } for pid=17149 comm="syz.6.2775" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 942.937157][ T30] audit: type=1400 audit(3514613491.228:1711): avc: denied { open } for pid=17149 comm="syz.6.2775" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 943.147779][ T30] audit: type=1400 audit(3514613491.248:1712): avc: denied { execute_no_trans } for pid=17139 comm="syz.5.2772" path="/311/file0" dev="tmpfs" ino=1688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 943.275725][ T30] audit: type=1400 audit(3514613491.248:1713): avc: denied { create } for pid=17139 comm="syz.5.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 943.322781][ T30] audit: type=1400 audit(3514613491.268:1714): avc: denied { mount } for pid=17149 comm="syz.6.2775" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 943.427840][T14909] pim6reg (unregistering): left allmulticast mode [ 943.553438][T14909] pimreg (unregistering): left allmulticast mode [ 945.378732][T14909] team0 (unregistering): Port device team_slave_1 removed [ 945.504667][T17190] netlink: 'syz.1.2785': attribute type 21 has an invalid length. [ 945.514881][T14909] team0 (unregistering): Port device team_slave_0 removed [ 946.205878][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 946.205897][ T30] audit: type=1400 audit(3514613494.858:1726): avc: denied { write } for pid=17198 comm="syz.6.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 946.477134][ T975] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 946.659172][ T975] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 946.681008][ T975] usb 7-1: config 0 has no interface number 0 [ 946.714068][ T975] usb 7-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.736939][ T975] usb 7-1: config 0 interface 235 has no altsetting 0 [ 946.762594][ T975] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 946.785578][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.800611][ T975] usb 7-1: Product: syz [ 946.811060][ T975] usb 7-1: Manufacturer: syz [ 946.815764][ T975] usb 7-1: SerialNumber: syz [ 946.836476][ T975] usb 7-1: config 0 descriptor?? [ 946.850276][ T975] keyspan 7-1:0.235: Keyspan 1 port adapter converter detected [ 946.859486][ T975] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 87 [ 946.867794][ T975] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 7 [ 946.878165][ T975] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 81 [ 946.896279][ T975] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 1 [ 946.904229][ T975] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 85 [ 946.918210][ T975] keyspan 7-1:0.235: unsupported endpoint type 0 [ 946.927752][ T975] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 946.947244][ T8859] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 947.021748][T17002] hsr_slave_0: entered promiscuous mode [ 947.034684][T17002] hsr_slave_1: entered promiscuous mode [ 947.049035][T14529] usb 7-1: USB disconnect, device number 6 [ 947.087850][T17002] debugfs: 'hsr0' already exists in 'hsr' [ 947.097368][T17002] Cannot create hsr debugfs directory [ 947.107115][ T8859] usb 3-1: Using ep0 maxpacket: 32 [ 947.128039][ T8859] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 947.145868][T14529] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 947.164900][ T8859] usb 3-1: config 0 has no interface number 0 [ 947.174695][T14529] keyspan 7-1:0.235: device disconnected [ 947.187105][ T8859] usb 3-1: config 0 interface 12 has no altsetting 0 [ 947.204983][ T8859] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 947.230415][ T8859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.267349][ T8859] usb 3-1: Product: syz [ 947.290199][ T8859] usb 3-1: Manufacturer: syz [ 947.303544][ T8859] usb 3-1: SerialNumber: syz [ 947.333498][ T8859] usb 3-1: config 0 descriptor?? [ 947.483841][T17212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2790'. [ 947.864628][T17202] 9p filesystem being mounted at /553/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 947.864722][ T30] audit: type=1400 audit(3514613496.518:1727): avc: denied { mount } for pid=17201 comm="syz.2.2788" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 947.892271][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 947.910653][ T30] audit: type=1400 audit(3514613496.548:1728): avc: denied { read write } for pid=17201 comm="syz.2.2788" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 947.932833][ T30] audit: type=1400 audit(3514613496.548:1729): avc: denied { open } for pid=17201 comm="syz.2.2788" path="/553/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 948.110909][ T30] audit: type=1400 audit(3514613496.768:1730): avc: denied { getopt } for pid=17201 comm="syz.2.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 948.253933][ T30] audit: type=1400 audit(3514613496.848:1731): avc: denied { setattr } for pid=17216 comm="syz.6.2791" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 948.400667][ T8859] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 948.455222][ T8859] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 948.568524][ T8859] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 949.357169][ T8859] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 949.456696][ T30] audit: type=1400 audit(3514613498.108:1732): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 949.494288][ T8859] usb 3-1: USB disconnect, device number 66 [ 949.672666][ T30] audit: type=1400 audit(3514613498.318:1733): avc: denied { read write } for pid=17231 comm="syz.1.2793" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 949.730804][ T30] audit: type=1400 audit(3514613498.328:1734): avc: denied { open } for pid=17231 comm="syz.1.2793" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 950.235439][T17002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 950.256488][T17002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 950.278946][T17002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 950.320049][T17002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 950.613510][T17263] netlink: 'syz.6.2795': attribute type 2 has an invalid length. [ 950.828316][ T30] audit: type=1400 audit(3514613499.278:1735): avc: denied { name_bind } for pid=17234 comm="syz.6.2795" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 951.383917][T17002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.392642][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 951.392657][ T30] audit: type=1400 audit(3514613500.048:1738): avc: denied { read write } for pid=17273 comm="syz.2.2800" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 951.576539][T17002] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.647125][ T30] audit: type=1400 audit(3514613500.048:1739): avc: denied { open } for pid=17273 comm="syz.2.2800" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 951.675390][ T30] audit: type=1400 audit(3514613500.098:1740): avc: denied { ioctl } for pid=17273 comm="syz.2.2800" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 951.701062][ T30] audit: type=1400 audit(3514613500.098:1741): avc: denied { create } for pid=17273 comm="syz.2.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 951.725558][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.732670][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.837796][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.844934][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.886141][ T30] audit: type=1400 audit(3514613500.518:1742): avc: denied { read } for pid=17279 comm="syz.1.2801" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 951.980475][T17288] PKCS7: Unknown OID: [5] (bad) [ 951.990326][T17288] PKCS7: Only support pkcs7_signedData type [ 952.008147][T17288] netlink: 'syz.6.2802': attribute type 2 has an invalid length. [ 952.025746][T17288] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2802'. [ 952.285006][ T30] audit: type=1400 audit(3514613500.518:1743): avc: denied { open } for pid=17279 comm="syz.1.2801" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 952.640909][ T30] audit: type=1400 audit(3514613500.528:1744): avc: denied { ioctl } for pid=17279 comm="syz.1.2801" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x551d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 952.826462][ T30] audit: type=1400 audit(3514613500.638:1745): avc: denied { write } for pid=17283 comm="syz.6.2802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 952.912363][T17002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.946967][ T30] audit: type=1400 audit(3514613501.128:1746): avc: denied { mounton } for pid=17296 comm="syz.2.2805" path="/proc/1951/cgroup" dev="proc" ino=54674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 953.163595][ T30] audit: type=1400 audit(3514613501.168:1747): avc: denied { ioctl } for pid=17296 comm="syz.2.2805" path="socket:[54678]" dev="sockfs" ino=54678 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 953.635257][T17316] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2806'. [ 953.726968][T17002] veth0_vlan: entered promiscuous mode [ 954.109535][T17002] veth1_vlan: entered promiscuous mode [ 954.158407][T17002] veth0_macvtap: entered promiscuous mode [ 954.185839][T17002] veth1_macvtap: entered promiscuous mode [ 954.251874][T17002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.280265][T17002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.328132][ T6239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.398075][ T6239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.445469][ T6239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.525552][ T6239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.568087][ T6239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.597114][ T6239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.694983][ T6235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.771557][T15527] block nbd0: Possible stuck request ffff8880268ae380: control (read@0,1024B). Runtime 90 seconds [ 954.784203][T15527] block nbd0: Possible stuck request ffff8880268ae540: control (read@1024,1024B). Runtime 90 seconds [ 954.797878][T15527] block nbd0: Possible stuck request ffff8880268ae700: control (read@2048,1024B). Runtime 90 seconds [ 954.809286][T15527] block nbd0: Possible stuck request ffff8880268ae8c0: control (read@3072,1024B). Runtime 90 seconds [ 954.858341][ T6235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.612755][T17371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.190760][T17374] bridge_slave_0: left allmulticast mode [ 956.196491][T17374] bridge_slave_0: left promiscuous mode [ 956.211985][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.420824][T17374] bridge_slave_1: left allmulticast mode [ 956.426596][T17374] bridge_slave_1: left promiscuous mode [ 956.436222][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.494896][T17374] team0: Port device team_slave_0 removed [ 956.531736][T17374] team0: Port device team_slave_1 removed [ 956.550539][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.558421][T17374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.576759][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.584872][T17374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.769112][T17374] team0: Port device wlan1 removed [ 956.799448][T17374] team0: Port device batadv1 removed [ 957.034570][T17388] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2815'. [ 957.047680][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 957.047710][ T30] audit: type=1400 audit(3514613505.678:1759): avc: denied { read } for pid=17382 comm="syz.4.2815" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 957.116128][T17389] fuse: Unknown parameter 'grlup_id' [ 957.377564][ T30] audit: type=1400 audit(3514613505.678:1760): avc: denied { open } for pid=17382 comm="syz.4.2815" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 957.403656][ T30] audit: type=1400 audit(3514613505.688:1761): avc: denied { ioctl } for pid=17382 comm="syz.4.2815" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 957.524210][ T30] audit: type=1400 audit(3514613506.178:1762): avc: denied { create } for pid=17390 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 957.647182][ T30] audit: type=1400 audit(3514613506.278:1763): avc: denied { bind } for pid=17390 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 958.313526][ T5219] udevd[5219]: worker [15997] /devices/virtual/block/nbd0 is taking a long time [ 959.247646][ T5964] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 960.351468][T17432] binder: 17431:17432 unknown command 0 [ 960.362314][T17432] binder: 17431:17432 ioctl c0306201 200000000080 returned -22 [ 960.439474][ T5964] usb 6-1: config 0 has an invalid interface number: 207 but max is 0 [ 960.461834][T17432] binder: 17431:17432 ioctl c0306201 200000000180 returned -14 [ 960.482712][ T5964] usb 6-1: config 0 has no interface number 0 [ 960.497602][ T30] audit: type=1400 audit(3514613509.138:1764): avc: denied { unmount } for pid=8386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 960.535696][ T5964] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 960.614242][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.965196][ T30] audit: type=1400 audit(3514613509.618:1765): avc: denied { append } for pid=17444 comm="syz.1.2829" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 961.146412][ T5964] usb 6-1: config 0 descriptor?? [ 961.168936][ T5964] usb 6-1: selecting invalid altsetting 3 [ 961.201558][ T5964] comedi comedi5: could not set alternate setting 3 in high speed [ 961.440580][ T5964] usbdux 6-1:0.207: driver 'usbdux' failed to auto-configure device. [ 961.799743][ T5964] usbdux 6-1:0.207: probe with driver usbdux failed with error -22 [ 961.829480][ T5964] usb 6-1: USB disconnect, device number 40 [ 962.600027][T17488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.321535][T17495] netlink: 'syz.6.2839': attribute type 3 has an invalid length. [ 963.436440][ T30] audit: type=1400 audit(3514613512.008:1766): avc: denied { setopt } for pid=17494 comm="syz.2.2838" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 963.480135][T17495] netlink: 'syz.6.2839': attribute type 4 has an invalid length. [ 964.254056][ T30] audit: type=1400 audit(3514613512.908:1767): avc: denied { ioctl } for pid=17503 comm="syz.6.2840" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55038 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 966.611796][ T30] audit: type=1400 audit(3514613515.268:1768): avc: denied { create } for pid=17555 comm="syz.4.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 966.709637][ T30] audit: type=1400 audit(3514613515.268:1769): avc: denied { write } for pid=17555 comm="syz.4.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 966.837221][ T5964] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 967.002741][T17569] binder: 17567:17569 unknown command 0 [ 967.026254][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 967.039629][T17569] binder: 17567:17569 ioctl c0306201 200000000080 returned -22 [ 967.068860][T17569] binder: BINDER_SET_CONTEXT_MGR already set [ 967.089725][ T5964] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 967.093400][T17569] binder: 17567:17569 ioctl 4018620d 200000000040 returned -16 [ 967.145794][ T5964] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 967.165367][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 967.316280][ T5964] usb 2-1: Product: syz [ 967.457176][ T5964] usb 2-1: Manufacturer: syz [ 967.461825][ T5964] usb 2-1: SerialNumber: syz [ 967.491440][ T5964] usb 2-1: config 0 descriptor?? [ 967.608189][T17556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 967.626866][ T5964] hub 2-1:0.0: bad descriptor, ignoring hub [ 967.654311][ T5964] hub 2-1:0.0: probe with driver hub failed with error -5 [ 967.997824][ T5964] usb 2-1: USB disconnect, device number 52 [ 968.736541][T17596] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 969.017309][ T30] audit: type=1400 audit(3514613517.538:1770): avc: denied { ioctl } for pid=17570 comm="syz.6.2854" path="socket:[56083]" dev="sockfs" ino=56083 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 969.357180][ T5964] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 969.517092][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 969.538273][ T5964] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 969.638231][ T5964] usb 2-1: string descriptor 0 read error: -71 [ 969.667172][ T5964] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 969.710838][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 969.781666][ T5964] usb 2-1: config 0 descriptor?? [ 969.808106][ T5964] usb 2-1: can't set config #0, error -71 [ 969.834548][ T5964] usb 2-1: USB disconnect, device number 53 [ 970.359684][T17618] random: crng reseeded on system resumption [ 970.369101][ T30] audit: type=1400 audit(3514613519.008:1771): avc: denied { write } for pid=17616 comm="syz.5.2860" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 970.467927][ T30] audit: type=1400 audit(3514613519.018:1772): avc: denied { open } for pid=17616 comm="syz.5.2860" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 970.665546][ T30] audit: type=1400 audit(3514613519.078:1773): avc: denied { name_bind } for pid=17617 comm="syz.2.2861" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 970.810217][ T30] audit: type=1400 audit(3514613519.228:1774): avc: denied { create } for pid=17616 comm="syz.5.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 970.830050][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.884324][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2860'. [ 971.527068][ T5964] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 971.538759][ T5990] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 972.160602][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 972.234464][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 972.249149][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 972.328353][ T5990] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 972.348756][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 972.358813][ T5990] usb 3-1: config 0 has no interface number 0 [ 972.364888][ T5990] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 972.376780][ T5990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.398055][ T5964] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 972.407353][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.415346][ T5964] usb 6-1: Product: syz [ 972.429837][ T5964] usb 6-1: Manufacturer: syz [ 972.436348][ T5990] usb 3-1: config 0 descriptor?? [ 972.461719][ T5964] usb 6-1: SerialNumber: syz [ 972.518427][ T5964] usb 6-1: config 0 descriptor?? [ 972.752570][ T5990] usb 3-1: selecting invalid altsetting 3 [ 972.806543][ T5990] comedi comedi5: could not set alternate setting 3 in high speed [ 972.845860][ T5990] usbdux 3-1:0.207: driver 'usbdux' failed to auto-configure device. [ 972.877552][ T5990] usbdux 3-1:0.207: probe with driver usbdux failed with error -22 [ 972.916332][ T5990] usb 3-1: USB disconnect, device number 67 [ 973.294463][T17662] loop9: detected capacity change from 0 to 7 [ 973.304866][T17662] buffer_io_error: 33 callbacks suppressed [ 973.304896][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.319686][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.328550][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.337024][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.345653][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.354526][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.367095][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.376285][T17662] ldm_validate_partition_table(): Disk read failed. [ 973.384610][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.393265][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.403714][T17662] Buffer I/O error on dev loop9, logical block 0, async page read [ 973.415702][T17662] Dev loop9: unable to read RDB block 0 [ 973.426896][T17662] loop9: unable to read partition table [ 973.437795][T17662] loop9: partition table beyond EOD, truncated [ 973.444472][T17662] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 973.444472][T17662] ) failed (rc=-5) [ 975.333922][ T5964] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 975.344727][ T5964] usb 6-1: USB disconnect, device number 41 [ 975.667769][T17695] 9p filesystem being mounted at /19/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 975.749547][T17696] dlm: plock device version mismatch: kernel (1.2.0), user (1.3171629.0) [ 975.957143][ T5964] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 976.127069][ T5935] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 976.334498][ T30] audit: type=1400 audit(3514613524.818:1775): avc: denied { mounton } for pid=17704 comm="syz.1.2882" path="/proc/2137/task" dev="proc" ino=56495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 976.372088][T17708] binder: 17707:17708 unknown command 0 [ 976.373552][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.428294][ T5964] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 976.451358][T17708] binder: 17707:17708 ioctl c0306201 200000000080 returned -22 [ 976.452782][T17711] binder: 17707:17711 ioctl c0306201 200000000180 returned -14 [ 976.459194][ T30] audit: type=1400 audit(3514613524.968:1776): avc: denied { setopt } for pid=17698 comm="syz.6.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 976.459256][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.468238][ T5964] usb 6-1: config 0 descriptor?? [ 976.590486][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 976.626539][ T5935] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 976.656172][ T5935] usb 5-1: config 0 has no interface number 0 [ 976.689061][ T5964] usbhid 6-1:0.0: can't add hid device: -22 [ 976.850658][ T5964] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 976.924658][ T5935] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 976.938348][ T5935] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 976.976403][ T5935] usb 5-1: config 0 interface 48 has no altsetting 0 [ 976.996698][ T5935] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 977.036301][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.084927][ T5935] usb 5-1: config 0 descriptor?? [ 977.424636][T17695] netfs: Couldn't get user pages (rc=-14) [ 977.431528][ T30] audit: type=1400 audit(3514613526.078:1777): avc: denied { append } for pid=17686 comm="syz.4.2877" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 977.538730][T17713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2884'. [ 978.785992][ T30] audit: type=1400 audit(3514613526.598:1778): avc: denied { kexec_image_load } for pid=17693 comm="syz.5.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 978.990105][ T30] audit: type=1400 audit(3514613526.748:1779): avc: denied { setopt } for pid=17693 comm="syz.5.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 979.020054][T17721] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 979.030862][ T30] audit: type=1400 audit(3514613527.628:1780): avc: denied { setopt } for pid=17714 comm="syz.6.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 979.242952][ T30] audit: type=1400 audit(3514613527.888:1781): avc: denied { append } for pid=17723 comm="syz.1.2886" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 979.300679][ T5935] usb 5-1: string descriptor 0 read error: -71 [ 979.438075][T17730] loop9: detected capacity change from 0 to 7 [ 979.443094][ T5935] asix 5-1:0.48 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 979.447520][T17730] buffer_io_error: 9 callbacks suppressed [ 979.447534][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.468773][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.477317][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.486094][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.495373][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.508482][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.518387][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.527345][T17730] ldm_validate_partition_table(): Disk read failed. [ 979.534445][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.543386][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.553193][T17730] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.563244][T17730] Dev loop9: unable to read RDB block 0 [ 979.573210][T17730] loop9: unable to read partition table [ 979.580231][T17730] loop9: partition table beyond EOD, truncated [ 979.586513][T17730] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 979.586513][T17730] ) failed (rc=-5) [ 979.783619][ T5935] asix 5-1:0.48: probe with driver asix failed with error -71 [ 979.840154][ T5935] usb 5-1: USB disconnect, device number 47 [ 980.780896][ T5964] usb 6-1: USB disconnect, device number 42 [ 981.872162][T17773] binder: 17772:17773 unknown command 0 [ 981.877251][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 981.886099][T17773] binder: 17772:17773 ioctl c0306201 200000000080 returned -22 [ 982.507279][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 982.518007][ T9] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 982.529925][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.540489][ T9] usb 7-1: config 0 descriptor?? [ 982.552093][ T9] as10x_usb: device has been detected [ 982.557610][ T5990] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 982.565722][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 982.580115][ T30] audit: type=1400 audit(3514613531.238:1782): avc: denied { read write } for pid=17776 comm="syz.2.2902" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 982.622407][ T9] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 982.664940][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 982.696516][ T30] audit: type=1400 audit(3514613531.238:1783): avc: denied { open } for pid=17776 comm="syz.2.2902" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 982.723510][ T9] as10x_usb: error during firmware upload part1 [ 982.750057][ T9] Registered device nBox DVB-T Dongle [ 982.756613][ T9] usb 7-1: USB disconnect, device number 7 [ 982.783409][ T5990] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 982.794110][ T5990] usb 2-1: config 0 has no interface number 0 [ 982.801011][ T30] audit: type=1400 audit(3514613531.268:1784): avc: denied { ioctl } for pid=17776 comm="syz.2.2902" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 982.825692][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.834279][ T5990] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 982.834701][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 982.852329][ T9] Unregistered device nBox DVB-T Dongle [ 982.858112][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.864556][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 982.872271][ T9] as10x_usb: device has been disconnected [ 982.895078][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 982.911889][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 982.926282][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 982.926954][ T5990] usb 2-1: config 0 descriptor?? [ 982.966944][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 982.987192][T17650] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 982.997795][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 983.012680][ T5990] usb 2-1: selecting invalid altsetting 3 [ 983.018671][ T5990] comedi comedi5: could not set alternate setting 3 in high speed [ 983.027616][T14529] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 983.028500][ T5990] usbdux 2-1:0.207: driver 'usbdux' failed to auto-configure device. [ 983.050085][ T5990] usbdux 2-1:0.207: probe with driver usbdux failed with error -22 [ 983.070712][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 983.087632][T17783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17783 comm=syz.5.2901 [ 983.178554][T17650] usb 3-1: config 0 has an invalid interface number: 82 but max is 0 [ 983.192055][T17650] usb 3-1: config 0 has no interface number 0 [ 983.200449][T17650] usb 3-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28 [ 983.213437][T14529] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.213879][T17650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.249313][ T5990] usb 2-1: USB disconnect, device number 54 [ 983.307199][T14529] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 983.330431][T14529] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 983.339543][T17650] usb 3-1: Product: syz [ 983.339564][T17650] usb 3-1: Manufacturer: syz [ 983.339579][T17650] usb 3-1: SerialNumber: syz [ 983.354295][T14529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.372690][T17650] usb 3-1: config 0 descriptor?? [ 983.394685][T14529] usb 5-1: Product: syz [ 983.407030][T14529] usb 5-1: Manufacturer: syz [ 983.415637][T14529] usb 5-1: SerialNumber: syz [ 983.715667][T14529] cdc_mbim 5-1:1.0: skipping garbage [ 983.730374][T17650] kaweth 3-1:0.82: Firmware present in device. [ 984.054076][T17787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 984.092796][T17650] kaweth 3-1:0.82: Statistics collection: 0 [ 984.157084][T17650] kaweth 3-1:0.82: Multicast filter limit: 0 [ 984.174638][T17650] kaweth 3-1:0.82: MTU: 0 [ 984.186065][T17650] kaweth 3-1:0.82: Read MAC address 00:00:00:00:00:00 [ 984.513483][ T30] audit: type=1400 audit(3514613533.168:1785): avc: denied { ioctl } for pid=17786 comm="syz.4.2905" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 984.762815][T17650] kaweth 3-1:0.82: kaweth interface created at eth5 [ 984.840518][T17787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 984.857354][T15527] block nbd0: Possible stuck request ffff8880268ae380: control (read@0,1024B). Runtime 120 seconds [ 984.868422][T15527] block nbd0: Possible stuck request ffff8880268ae540: control (read@1024,1024B). Runtime 120 seconds [ 984.880097][T15527] block nbd0: Possible stuck request ffff8880268ae700: control (read@2048,1024B). Runtime 120 seconds [ 984.889723][T14529] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 984.891462][T15527] block nbd0: Possible stuck request ffff8880268ae8c0: control (read@3072,1024B). Runtime 120 seconds [ 984.952626][T14529] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 984.978227][T17650] usb 3-1: USB disconnect, device number 68 [ 985.365162][T14529] wwan wwan0: port wwan0mbim0 attached [ 985.569662][T14529] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, ae:29:f6:fc:ff:df [ 985.711373][T14529] usb 5-1: USB disconnect, device number 48 [ 985.745156][T14529] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 986.250891][ T30] audit: type=1400 audit(3514613534.878:1786): avc: denied { create } for pid=17803 comm="syz.5.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 986.313367][T17835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.673585][T14529] wwan wwan0: port wwan0mbim0 disconnected [ 988.052170][ T9] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 988.487374][ T9] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 988.515191][ T9] usb 2-1: config 0 has no interface number 0 [ 988.774907][ T9] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 988.824880][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.870312][ T9] usb 2-1: config 0 descriptor?? [ 988.979117][ T9] usb 2-1: selecting invalid altsetting 3 [ 989.009123][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 989.121141][ T9] usbdux 2-1:0.207: driver 'usbdux' failed to auto-configure device. [ 989.236173][ T9] usbdux 2-1:0.207: probe with driver usbdux failed with error -22 [ 989.277384][ T9] usb 2-1: USB disconnect, device number 55 [ 989.913187][ T30] audit: type=1400 audit(3514613538.568:1787): avc: denied { setopt } for pid=17878 comm="syz.4.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 990.037358][ T30] audit: type=1400 audit(3514613538.628:1788): avc: denied { write } for pid=17878 comm="syz.4.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 990.209349][ T30] audit: type=1400 audit(3514613538.628:1789): avc: denied { name_connect } for pid=17878 comm="syz.4.2925" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 990.534203][T17894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2928'. [ 991.099699][ T30] audit: type=1400 audit(3514613539.738:1790): avc: denied { ioctl } for pid=17888 comm="syz.4.2929" path="socket:[56842]" dev="sockfs" ino=56842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 991.147028][ T30] audit: type=1400 audit(3514613539.738:1791): avc: denied { bind } for pid=17888 comm="syz.4.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 992.530318][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.536609][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.078513][T17916] binder: 17915:17916 unknown command 0 [ 993.084085][T17916] binder: 17915:17916 ioctl c0306201 200000000080 returned -22 [ 993.243847][T17916] binder: 17915:17916 ioctl c0306201 200000000180 returned -14 [ 993.272739][T17925] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2938'. [ 993.317738][ T30] audit: type=1400 audit(3514613541.978:1792): avc: denied { append } for pid=17924 comm="syz.4.2938" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 994.934555][T17958] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2948'. [ 995.271834][T17963] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2950'. [ 995.773554][T17970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2952'. [ 995.894123][T17963] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.903095][T17963] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.527334][T17979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.537812][T17979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.757066][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 997.085431][ T9] usb 2-1: device descriptor read/64, error -71 [ 997.332966][ T30] audit: type=1400 audit(3514613545.988:1793): avc: denied { bind } for pid=17986 comm="syz.2.2958" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 997.361233][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 997.375588][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2959'. [ 997.490046][ T30] audit: type=1400 audit(3514613545.988:1794): avc: denied { name_bind } for pid=17986 comm="syz.2.2958" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 997.500460][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 997.536652][ T30] audit: type=1400 audit(3514613545.988:1795): avc: denied { node_bind } for pid=17986 comm="syz.2.2958" saddr=172.20.20.10 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 997.559255][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.616270][ T30] audit: type=1400 audit(3514613546.138:1796): avc: denied { sqpoll } for pid=17989 comm="syz.5.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 997.663764][ T30] audit: type=1400 audit(3514613546.138:1797): avc: denied { read } for pid=17989 comm="syz.5.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 998.324931][T14529] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 998.489834][ T30] audit: type=1400 audit(3514613547.138:1798): avc: denied { read } for pid=18016 comm="syz.1.2969" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 998.534883][T14529] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.687243][ T30] audit: type=1400 audit(3514613547.198:1799): avc: denied { write } for pid=18016 comm="syz.1.2969" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 999.133966][T14529] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 999.181934][ T30] audit: type=1400 audit(3514613547.198:1800): avc: denied { open } for pid=18016 comm="syz.1.2969" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 999.191022][T14529] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x79, changing to 0x9 [ 999.206510][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.218176][ T30] audit: type=1400 audit(3514613547.208:1801): avc: denied { mounton } for pid=18016 comm="syz.1.2969" path="/syzcgroup/net/syz1/cgroup.procs" dev="cgroup" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 999.308380][T14529] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 129, changing to 11 [ 999.332854][T18023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2972'. [ 999.346887][T14529] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.396124][T14529] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.489299][T14529] usb 7-1: Product: syz [ 999.493534][T14529] usb 7-1: Manufacturer: syz [ 999.498736][T14529] usb 7-1: SerialNumber: syz [ 999.522216][T14529] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 999.614173][T14529] cdc_ncm 7-1:1.0: bind() failure [ 1000.627291][ T5919] usb 7-1: USB disconnect, device number 8 [ 1000.717591][T18041] random: crng reseeded on system resumption [ 1000.718832][ T30] audit: type=1400 audit(3514613549.378:1802): avc: denied { append } for pid=18040 comm="syz.1.2978" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1001.536689][T18059] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2984'. [ 1002.563554][ T30] audit: type=1400 audit(3514613551.208:1803): avc: denied { append } for pid=18068 comm="syz.2.2986" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1002.598678][T18069] erofs (device nbd2): cannot find valid erofs superblock [ 1002.759773][T18072] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1002.811737][T18069] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1002.820829][ T5990] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1002.825175][ T30] audit: type=1400 audit(3514613551.468:1804): avc: denied { setopt } for pid=18068 comm="syz.2.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1002.828728][T18072] gretap0: entered promiscuous mode [ 1003.090596][T18069] 0{X: renamed from gretap0 [ 1003.113130][ T5990] usb 7-1: config 0 has an invalid interface number: 207 but max is 0 [ 1003.137037][ T5990] usb 7-1: config 0 has no interface number 0 [ 1003.144686][T18069] 0{X: left promiscuous mode [ 1003.148325][ T5990] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 1003.150296][T18069] 0{X: entered allmulticast mode [ 1003.174523][T18076] netlink: 'syz.5.2989': attribute type 1 has an invalid length. [ 1003.184323][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.185059][T18069] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1003.194879][ T5990] usb 7-1: config 0 descriptor?? [ 1003.217191][T18076] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2989'. [ 1003.228382][T18076] netlink: 'syz.5.2989': attribute type 2 has an invalid length. [ 1003.236332][T18076] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2989'. [ 1003.252264][ T5990] usb 7-1: selecting invalid altsetting 3 [ 1003.269582][ T5990] comedi comedi5: could not set alternate setting 3 in high speed [ 1003.285694][ T5990] usbdux 7-1:0.207: driver 'usbdux' failed to auto-configure device. [ 1003.297698][ T5990] usbdux 7-1:0.207: probe with driver usbdux failed with error -22 [ 1003.431904][ T30] audit: type=1400 audit(3514613552.048:1805): avc: denied { write } for pid=18075 comm="syz.5.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1003.607992][ T5990] usb 7-1: USB disconnect, device number 9 [ 1004.550709][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'. [ 1004.757062][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1005.481033][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1005.535487][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.588495][ T9] usb 7-1: config 0 descriptor?? [ 1005.640027][ T9] cp210x 7-1:0.0: cp210x converter detected [ 1006.016498][ T9] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1006.084304][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1006.300714][ T30] audit: type=1400 audit(3514613554.958:1806): avc: denied { read } for pid=18116 comm="syz.4.3001" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1006.383017][ T5990] usb 7-1: USB disconnect, device number 10 [ 1006.402744][ T5990] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1006.477100][ T30] audit: type=1400 audit(3514613555.128:1807): avc: denied { open } for pid=18116 comm="syz.4.3001" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1006.551071][ T5990] cp210x 7-1:0.0: device disconnected [ 1006.877243][ T5919] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1007.098282][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1007.487642][ T5919] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1007.856390][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1008.548543][ T5919] usb usb2-port1: attempt power cycle [ 1008.555482][ T5990] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1008.768850][ T5990] usb 7-1: config 0 has an invalid interface number: 207 but max is 0 [ 1008.792103][ T5990] usb 7-1: config 0 has no interface number 0 [ 1008.837175][ T5990] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 1008.853454][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.887361][ T5919] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1008.929666][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1008.930327][ T5990] usb 7-1: config 0 descriptor?? [ 1008.996939][ T5990] usb 7-1: selecting invalid altsetting 3 [ 1009.004740][ T5990] comedi comedi5: could not set alternate setting 3 in high speed [ 1009.021709][ T5990] usbdux 7-1:0.207: driver 'usbdux' failed to auto-configure device. [ 1009.036163][ T5990] usbdux 7-1:0.207: probe with driver usbdux failed with error -22 [ 1009.171048][ T5919] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1009.333743][ T9] usb 7-1: USB disconnect, device number 11 [ 1009.385531][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1009.433276][ T30] audit: type=1400 audit(3514613558.050:1808): avc: denied { accept } for pid=18160 comm="syz.4.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1009.558960][ T5919] usb usb2-port1: unable to enumerate USB device [ 1009.861607][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.879698][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.889399][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.919637][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.934103][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1010.104717][T16585] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.124584][T16585] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.175237][T16585] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.234116][ T6239] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.357311][ T30] audit: type=1326 audit(3514613559.020:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18185 comm="syz.5.3020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff50158ebe9 code=0x0 [ 1010.485571][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.520255][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.627371][ T5919] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1010.800264][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.083127][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.097024][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 1011.142538][ T5919] usb 6-1: config 0 has an invalid interface number: 253 but max is 0 [ 1011.207078][ T5919] usb 6-1: config 0 has no interface number 0 [ 1011.233169][ T5919] usb 6-1: config 0 interface 253 has no altsetting 0 [ 1011.296251][ T5919] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db78, bcdDevice=cc.74 [ 1011.501886][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.540542][ T5919] usb 6-1: Product: syz [ 1011.541741][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.544724][ T5919] usb 6-1: Manufacturer: syz [ 1011.570220][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.617238][ T5919] usb 6-1: SerialNumber: syz [ 1011.633076][ T5919] usb 6-1: config 0 descriptor?? [ 1011.652203][ T5919] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4' in warm state. [ 1011.682986][ T5919] usb 6-1: setting power ON [ 1011.758432][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 1011.898625][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1012.015786][ T5919] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4) [ 1012.018314][ T51] Bluetooth: hci0: command tx timeout [ 1012.103437][ T5919] usb 6-1: media controller created [ 1012.141039][ T5990] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 1012.167071][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.172340][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.177868][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.204944][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 1012.254727][ T5919] cxusb: set interface failed [ 1012.270914][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 1012.279035][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 1012.310717][ T5919] usb 6-1: bluebird_gpio_write failed. [ 1012.313323][ T5990] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 1012.328317][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 1012.337431][ T5919] usb 6-1: bluebird_gpio_write failed. [ 1012.365877][ T5990] usb 5-1: config 0 has no interface number 0 [ 1012.367776][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 1012.393460][ T5919] usb 6-1: bluebird_gpio_write failed. [ 1012.399522][ T5990] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 1012.399921][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 1012.415553][ T5919] usb 6-1: bluebird_gpio_write failed. [ 1012.437241][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 1012.440384][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.446707][ T5919] usb 6-1: bluebird_gpio_write failed. [ 1012.453797][ T5990] usb 5-1: config 0 descriptor?? [ 1012.587988][ T5990] usb 5-1: selecting invalid altsetting 3 [ 1012.597586][ T5990] comedi comedi5: could not set alternate setting 3 in high speed [ 1012.605658][ T5990] usbdux 5-1:0.207: driver 'usbdux' failed to auto-configure device. [ 1012.651470][ T5919] dvb-usb: bulk message failed: -22 (5/0) [ 1012.652285][ T5990] usbdux 5-1:0.207: probe with driver usbdux failed with error -22 [ 1012.776122][ T5919] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1012.842755][ T5990] usb 5-1: USB disconnect, device number 49 [ 1012.859684][ T5919] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4' [ 1012.992605][T18171] chnl_net:caif_netlink_parms(): no params data found [ 1013.028051][ T5919] rc_core: IR keymap rc-dvico-mce not found [ 1013.033978][ T5919] Registered IR keymap rc-empty [ 1013.062055][ T5919] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1013.292784][ T5919] input: DViCO FusionHDTV DVB-T Dual Digital 4 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input23 [ 1013.369384][ T30] audit: type=1400 audit(3514613562.030:1810): avc: denied { read } for pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=3640 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1013.370180][ T5919] dvb-usb: schedule remote query interval to 100 msecs. [ 1013.399441][ T30] audit: type=1400 audit(3514613562.030:1811): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3640 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1013.423258][ T30] audit: type=1400 audit(3514613562.030:1812): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3640 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1013.567153][ T5919] usb 6-1: setting power OFF [ 1013.614564][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 1013.633307][ T5919] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 successfully initialized and connected. [ 1013.669295][ T30] audit: type=1400 audit(3514613562.330:1813): avc: denied { create } for pid=18247 comm="syz.5.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1013.692124][T16193] dvb-usb: bulk message failed: -22 (4/0) [ 1013.705954][T16193] cxusb: i2c read failed [ 1013.734337][ T5919] usb 6-1: USB disconnect, device number 43 [ 1014.015482][ T5919] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 successfully deinitialized and disconnected. [ 1014.047633][ T51] Bluetooth: hci0: command tx timeout [ 1014.701985][ T49] bond0 (unregistering): Released all slaves [ 1014.704579][ T6237] smc: removing ib device syz0 [ 1014.945985][T15527] block nbd0: Possible stuck request ffff8880268ae380: control (read@0,1024B). Runtime 150 seconds [ 1014.958455][T15527] block nbd0: Possible stuck request ffff8880268ae540: control (read@1024,1024B). Runtime 150 seconds [ 1014.969868][T15527] block nbd0: Possible stuck request ffff8880268ae700: control (read@2048,1024B). Runtime 150 seconds [ 1014.980946][T15527] block nbd0: Possible stuck request ffff8880268ae8c0: control (read@3072,1024B). Runtime 150 seconds [ 1015.182039][ T49] bond1 (unregistering): Released all slaves [ 1015.218428][ T49] bond2 (unregistering): Released all slaves [ 1015.379951][ T49] bond3 (unregistering): Released all slaves [ 1016.016493][ T30] audit: type=1400 audit(3514613564.670:1814): avc: denied { watch } for pid=18318 comm="syz.5.3048" path="/356" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1016.076603][T18171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.117217][T18171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.124424][T18171] bridge_slave_0: entered allmulticast mode [ 1016.137791][ T51] Bluetooth: hci0: command tx timeout [ 1016.178586][T18171] bridge_slave_0: entered promiscuous mode [ 1016.186569][T18171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.193742][T18171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.201036][T18171] bridge_slave_1: entered allmulticast mode [ 1016.209080][T18171] bridge_slave_1: entered promiscuous mode [ 1016.366504][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'. [ 1016.694367][T18171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.048461][T18338] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3047'. [ 1017.223855][T18171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.633909][ T30] audit: type=1400 audit(3514613566.290:1815): avc: denied { unmount } for pid=10090 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1017.655144][T18171] team0: Port device team_slave_0 added [ 1017.735067][T18171] team0: Port device team_slave_1 added [ 1018.211096][ T5853] Bluetooth: hci0: command tx timeout [ 1018.434439][T18171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.511020][T18171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.536925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.623049][T18171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.637321][T18292] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1018.736797][T18171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.747201][T18171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.797178][T18292] usb 7-1: device descriptor read/64, error -71 [ 1018.809195][T18171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.127054][T18292] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1019.759970][T18292] usb 7-1: device descriptor read/64, error -71 [ 1019.784077][T18369] netlink: 'syz.4.3055': attribute type 1 has an invalid length. [ 1019.891461][T18369] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3055'. [ 1019.913126][T18369] netlink: 'syz.4.3055': attribute type 1 has an invalid length. [ 1019.923461][T18292] usb usb7-port1: attempt power cycle [ 1019.964762][T18171] hsr_slave_0: entered promiscuous mode [ 1019.970460][T18369] netlink: 'syz.4.3055': attribute type 2 has an invalid length. [ 1019.994480][T18171] hsr_slave_1: entered promiscuous mode [ 1019.997854][T18369] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3055'. [ 1020.017624][T18171] debugfs: 'hsr0' already exists in 'hsr' [ 1020.023419][T18171] Cannot create hsr debugfs directory [ 1020.207174][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 1020.337606][T18292] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1020.500846][T18292] usb 7-1: device descriptor read/8, error -71 [ 1020.756220][ T30] audit: type=1400 audit(3514613569.410:1816): avc: denied { create } for pid=18385 comm="syz.4.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1020.822642][ T30] audit: type=1400 audit(3514613569.450:1817): avc: denied { mounton } for pid=18389 comm="syz.1.3061" path="/482/file0" dev="tmpfs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1020.879070][T18292] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1020.910353][T18394] 9p filesystem being mounted at /482/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1020.923150][T18292] usb 7-1: device descriptor read/8, error -71 [ 1021.037868][T18292] usb usb7-port1: unable to enumerate USB device [ 1021.052007][T18394] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1021.499931][ T30] audit: type=1400 audit(3514613569.790:1818): avc: denied { mount } for pid=18395 comm="syz.5.3063" name="/" dev="rpc_pipefs" ino=59744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1021.554811][T18398] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 1021.558242][ T30] audit: type=1400 audit(3514613570.200:1819): avc: denied { ioctl } for pid=18389 comm="syz.1.3061" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1021.561431][T18398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1021.605763][ T30] audit: type=1400 audit(3514613570.200:1820): avc: denied { map } for pid=18389 comm="syz.1.3061" path="pipe:[58763]" dev="pipefs" ino=58763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1021.714055][T18401] vhci_hcd: connection closed [ 1021.714197][T18398] vhci_hcd vhci_hcd.0: Device attached [ 1021.754963][ T49] tipc: Left network mode [ 1021.794193][ T6237] vhci_hcd: stop threads [ 1021.802657][ T6237] vhci_hcd: release socket [ 1021.810509][ T6237] vhci_hcd: disconnect device [ 1022.184710][T18417] tmpfs: Bad value for 'nr_blocks' [ 1022.324517][T18417] IPVS: Error connecting to the multicast addr [ 1022.514055][T18429] loop9: detected capacity change from 0 to 7 [ 1022.527193][T18429] buffer_io_error: 9 callbacks suppressed [ 1022.527233][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.543779][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.557085][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.567928][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.577112][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.587037][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.597367][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.606187][T18429] ldm_validate_partition_table(): Disk read failed. [ 1022.617053][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.628602][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.637658][T18429] Buffer I/O error on dev loop9, logical block 0, async page read [ 1022.647652][T18429] Dev loop9: unable to read RDB block 0 [ 1022.655457][T18429] loop9: unable to read partition table [ 1022.663985][T18429] loop9: partition table beyond EOD, truncated [ 1022.670400][T18429] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1022.670400][T18429] ) failed (rc=-5) [ 1022.978476][T18431] fuse: Unknown parameter '.+Hu!/W׿9/{>0' [ 1024.076560][ T49] hsr_slave_0: left promiscuous mode [ 1024.165699][ T49] hsr_slave_1: left promiscuous mode [ 1024.182684][ T49] batman_adv: batadv0: Interface deactivated: dummy0 [ 1024.191566][ T49] batman_adv: batadv0: Removing interface: dummy0 [ 1024.306693][ T49] veth1_macvtap: left promiscuous mode [ 1024.320508][ T49] veth0_macvtap: left promiscuous mode [ 1024.327834][ T49] veth1_vlan: left promiscuous mode [ 1024.339071][ T49] veth0_vlan: left promiscuous mode [ 1024.910349][ T49] pim6reg (unregistering): left allmulticast mode [ 1025.810655][ T31] INFO: task syz.0.2523:16209 blocked for more than 143 seconds. [ 1025.819004][ T31] Not tainted syzkaller #0 [ 1025.824090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.842546][ T31] task:syz.0.2523 state:D stack:27272 pid:16209 tgid:16202 ppid:5846 task_flags:0x400040 flags:0x00004004 [ 1025.865573][ T31] Call Trace: [ 1025.869297][ T31] [ 1025.872490][ T31] __schedule+0x1190/0x5de0 [ 1025.877727][ T31] ? __pfx___schedule+0x10/0x10 [ 1025.882770][ T31] ? find_held_lock+0x2b/0x80 [ 1025.889418][ T31] ? schedule+0x2d7/0x3a0 [ 1025.893862][ T31] ? bdev_open+0x41a/0xe40 [ 1025.898515][ T31] schedule+0xe7/0x3a0 [ 1025.902744][ T31] schedule_preempt_disabled+0x13/0x30 [ 1025.908842][ T31] __mutex_lock+0x81b/0x1060 [ 1025.913538][ T31] ? bdev_open+0x41a/0xe40 [ 1025.920318][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1025.925453][ T31] ? __pfx_ilookup+0x10/0x10 [ 1025.930349][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 1025.935805][ T31] ? bdev_open+0x41a/0xe40 [ 1025.940588][ T31] bdev_open+0x41a/0xe40 [ 1025.945036][ T31] blkdev_open+0x277/0x3f0 [ 1025.950628][ T31] ? do_dentry_open+0x10a5/0x1530 [ 1025.955668][ T31] do_dentry_open+0x982/0x1530 [ 1025.960586][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1025.965546][ T31] vfs_open+0x82/0x3f0 [ 1025.971946][ T31] path_openat+0x1de4/0x2cb0 [ 1025.976567][ T31] ? __pfx_path_openat+0x10/0x10 [ 1025.981600][ T31] do_filp_open+0x20b/0x470 [ 1025.986123][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1025.991894][ T31] ? alloc_fd+0x471/0x7d0 [ 1025.996294][ T31] do_sys_openat2+0x11b/0x1d0 [ 1026.001111][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1026.006312][ T31] ? find_held_lock+0x2b/0x80 [ 1026.011026][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 1026.015997][ T31] __x64_sys_openat+0x174/0x210 [ 1026.021008][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1026.026408][ T31] ? do_user_addr_fault+0x843/0x1370 [ 1026.031801][ T31] do_syscall_64+0xcd/0x4c0 [ 1026.036327][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.042376][ T31] RIP: 0033:0x7f729158d550 [ 1026.046794][ T31] RSP: 002b:00007f7292477b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1026.055685][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f729158d550 [ 1026.063843][ T31] RDX: 0000000000000002 RSI: 00007f7292477c10 RDI: 00000000ffffff9c [ 1026.071882][ T31] RBP: 00007f7292477c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 1026.080011][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1026.088666][ T31] R13: 00007f72917c6308 R14: 00007f72917c6270 R15: 00007fff12b5cc98 [ 1026.097334][ T31] [ 1026.100520][ T31] [ 1026.100520][ T31] Showing all locks held in the system: [ 1026.114067][ T31] 1 lock held by khungtaskd/31: [ 1026.119047][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1026.135195][ T31] 5 locks held by kworker/u8:3/49: [ 1026.140471][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1026.150978][ T31] #1: ffffc90000b97d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1026.161543][ T31] #2: ffffffff9036e790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1026.171085][ T31] #3: ffffffff90384a88 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 1026.181269][ T31] #4: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1026.191549][ T31] 2 locks held by dhcpcd/5514: [ 1026.196739][ T31] #0: ffff8880594166d8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xa25/0xd30 [ 1026.206712][ T31] #1: ffffffff90384a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 1026.215719][ T31] 2 locks held by getty/5608: [ 1026.220527][ T31] #0: ffff88803615d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1026.230625][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1026.240979][ T31] 3 locks held by kworker/u8:1/14909: [ 1026.246394][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1026.257655][ T31] #1: ffffc9001d507d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1026.268212][ T31] #2: ffffffff90384a88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1026.277439][ T31] 1 lock held by udevd/15997: [ 1026.282169][ T31] #0: ffff8880267a5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1026.291694][ T31] 1 lock held by syz.0.2523/16209: [ 1026.297581][ T31] #0: ffff8880267a5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1026.307054][ T31] 7 locks held by syz-executor/18171: [ 1026.312485][ T31] #0: ffff88807dc8e428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1026.321587][ T31] #1: ffff888056826888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1026.331470][ T31] #2: ffff8880283771e8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1026.341921][ T31] #3: ffffffff8f8f3848 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x185/0x730 [ 1026.352472][ T31] #4: ffff888059b530e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1026.362087][ T31] #5: ffff888059b56250 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_probe+0xd4/0x1520 [ 1026.372407][ T31] #6: ffffffff90384a88 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 1026.382800][ T31] 1 lock held by syz.5.3069/18439: [ 1026.388069][ T31] #0: ffffffff90384a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 1026.397287][ T31] 2 locks held by syz.1.3067/18437: [ 1026.402985][ T31] #0: ffffffff9036e790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1026.412760][ T31] #1: ffffffff90384a88 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230 [ 1026.422401][ T31] 2 locks held by syz.4.3072/18453: [ 1026.427734][ T31] #0: ffffffff90427f50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.436001][ T31] #1: ffffffff90384a88 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10 [ 1026.446477][ T31] 3 locks held by syz.6.3075/18461: [ 1026.452479][ T31] #0: ffffffff90427f50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.461156][ T31] #1: ffffffff90428008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1026.470267][ T31] #2: ffffffff90384a88 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_node_set_key+0x7d/0xb30 [ 1026.480280][ T31] [ 1026.482707][ T31] ============================================= [ 1026.482707][ T31] [ 1026.491925][ T31] NMI backtrace for cpu 0 [ 1026.491940][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1026.491961][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1026.491971][ T31] Call Trace: [ 1026.491977][ T31] [ 1026.491984][ T31] dump_stack_lvl+0x116/0x1f0 [ 1026.492010][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1026.492025][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1026.492046][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1026.492074][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1026.492094][ T31] watchdog+0xf0e/0x1260 [ 1026.492118][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.492135][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1026.492158][ T31] ? __kthread_parkme+0x19e/0x250 [ 1026.492184][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.492202][ T31] kthread+0x3c2/0x780 [ 1026.492219][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.492238][ T31] ? rcu_is_watching+0x12/0xc0 [ 1026.492260][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.492278][ T31] ret_from_fork+0x5d4/0x6f0 [ 1026.492293][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.492311][ T31] ret_from_fork_asm+0x1a/0x30 [ 1026.492344][ T31] [ 1026.492351][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1026.614250][ C1] NMI backtrace for cpu 1 [ 1026.614264][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1026.614280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1026.614287][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1026.614308][ C1] Code: dc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1026.614320][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1026.614332][ C1] RAX: 0000000003ad1a95 RBX: 0000000000000001 RCX: ffffffff8b944c29 [ 1026.614341][ C1] RDX: 0000000000000000 RSI: ffffffff8de522d8 RDI: ffffffff8c162d80 [ 1026.614349][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1026.614357][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1026.614364][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 1026.614373][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 1026.614386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.614395][ C1] CR2: 0000555594dce5c8 CR3: 00000000745cf000 CR4: 00000000003526f0 [ 1026.614404][ C1] Call Trace: [ 1026.614409][ C1] [ 1026.614413][ C1] default_idle+0x13/0x20 [ 1026.614431][ C1] default_idle_call+0x6d/0xb0 [ 1026.614448][ C1] do_idle+0x391/0x510 [ 1026.614467][ C1] ? __pfx_do_idle+0x10/0x10 [ 1026.614481][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1026.614497][ C1] cpu_startup_entry+0x4f/0x60 [ 1026.614512][ C1] start_secondary+0x21d/0x2b0 [ 1026.614530][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1026.614550][ C1] common_startup_64+0x13e/0x148 [ 1026.614569][ C1] [ 1026.787023][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1026.793889][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1026.803239][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1026.813278][ T31] Call Trace: [ 1026.816541][ T31] [ 1026.819480][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1026.824060][ T31] vpanic+0x6e8/0x7a0 [ 1026.828060][ T31] ? __pfx_vpanic+0x10/0x10 [ 1026.832550][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1026.838519][ T31] panic+0xca/0xd0 [ 1026.842225][ T31] ? __pfx_panic+0x10/0x10 [ 1026.846642][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1026.852015][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1026.858150][ T31] ? watchdog+0xd78/0x1260 [ 1026.862561][ T31] ? watchdog+0xd6b/0x1260 [ 1026.866960][ T31] watchdog+0xd89/0x1260 [ 1026.871186][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.875843][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1026.881025][ T31] ? __kthread_parkme+0x19e/0x250 [ 1026.886045][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.890706][ T31] kthread+0x3c2/0x780 [ 1026.894755][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.899327][ T31] ? rcu_is_watching+0x12/0xc0 [ 1026.904085][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.908660][ T31] ret_from_fork+0x5d4/0x6f0 [ 1026.913229][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.917820][ T31] ret_from_fork_asm+0x1a/0x30 [ 1026.922579][ T31] [ 1026.925763][ T31] Kernel Offset: disabled [ 1026.930061][ T31] Rebooting in 86400 seconds..