last executing test programs: 1m12.89215818s ago: executing program 0 (id=216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0x98}}, 0x4) 1m12.767517772s ago: executing program 0 (id=218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) recvmsg$can_j1939(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x20, 0x202, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc}, {0x3}, {0xfffe}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48054) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000085000000188000009500000000000000dc46576a3ca98d92232b47d84edbd90724f85b2a8840acaec787947f72835fecfe5e86565109f01a9a9e06a6bf7dceb568e078bfa91a159a8f0828000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = memfd_secret(0x0) fchmod(r6, 0x134) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000150a0309000000000000000000000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x8009}, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "cf4a06d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = gettid() syz_open_procfs(r9, &(0x7f0000000000)='net/rt_acct\x00') 1m11.556877444s ago: executing program 0 (id=221): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x801c) r2 = dup2(r1, r0) connect$rxrpc(r2, &(0x7f0000000240)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1m11.386244045s ago: executing program 0 (id=223): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f00000000c0)={0x6b4, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x8c, 0x2a, [@fast_bss_trans={0x37, 0x82, {0x2, 0x4, "f41173ceda5ebe25280f38720f28960e", "ee7b49aeb7c8bdf013012d6fc7afa3fcdfebe659a45a115ab9766ef5d8db0317", "b5cea5bf4756edc28e940320beba1db3e3f09495c48d57bbd2d80a4b1f605061", [{0x3, 0xc, "550edbce49da416617333f5f"}, {0x1, 0xc, "b1599cff229b62813652ca06"}, {0x3, 0x9, "ca242a3894ff92b8f5"}, {0x2, 0x7, "3146da91104420"}]}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_IE={0x1aa, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x45}}, @perr={0x84, 0xf0, {0xe5, 0x10, [{{0x0, 0x1}, @broadcast, 0x4, @value, 0x18}, {{}, @broadcast, 0x10, @void, 0x7}, {{0x0, 0x1}, @device_a, 0x80, @value, 0x1}, {{}, @device_b, 0xaac3, @void, 0x31}, {{}, @device_b, 0xfffffffb, @void, 0x1a}, {{}, @device_b, 0x10000, @void, 0x35}, {{}, @device_a, 0x7, @void, 0xb}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x3}, {{}, @broadcast, 0x3, @void, 0x25}, {{}, @device_a, 0xd, @void, 0x32}, {{}, @device_a, 0xa, @void, 0x6}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0xb}, {{}, @device_b, 0x0, @void, 0x37}, {{}, @broadcast, 0x100000, @void, 0x8}, {{}, @broadcast, 0x5, @void, 0x2d}]}}, @fast_bss_trans={0x37, 0xa5, {0x4, 0x4, "d72cbd1890e0e705a6b29d0330f90864", "faf36ac76e103161346faaa1f5a83910afc2b782479339829fb6701a6a8b8a89", "e8419f8d91ff3354b7e14d1300f78df69618009a18077d706ddbb3c519914572", [{0x2, 0x26, "8993fd74adee2a33b9736a70e19d0379d49e62bace8421e91670741c29cdfa6994e3a8caa923"}, {0x1, 0x3, "35cf87"}, {0x2, 0x1d, "a832be9494497f8f8a5b68d9f5113bd50b1f784d59a08a13b77ca9bc71"}, {0x2, 0x5, "228ed46225"}]}}, @ibss={0x6, 0x2, 0x7ff}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}]}, @NL80211_ATTR_IE={0x100, 0x2a, [@ibss={0x6, 0x2, 0x200}, @erp={0x2a, 0x1, {0x0, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @tim={0x5, 0x61, {0x9, 0x5d, 0x6, "05a1eb7a20e5b055cf3fb96b0909db6a9152d131d24223cf9424cf8c66b721893ff6a12e6394527eb0635cc38f139de7c767bb9fa82513b682bbbf8604f228167074c14eadfb6718ab7f6a33427775d9207108f0c1bb6acfb412e7482c92"}}, @fast_bss_trans={0x37, 0x76, {0x7, 0x1, "0e161d3ec8b0658852066a56c4e28500", "b1e578757d1bd692e1159517ea9fbed0882a589973a2066109aea5524fb6bb15", "6c7dbac3d51d21d7bd57b83a9addbbb2dc3c518baee28953e1073a37ad511ecc", [{0x2, 0x22, "bfebe27b0e699ce89c8d1871c169ff21fab4681f116af853237b57342dd146b2a0bc"}]}}, @rann={0x7e, 0x15, {{0x0, 0x3f}, 0x0, 0x4, @broadcast, 0x8, 0xfff, 0x5}}]}, @NL80211_ATTR_IE={0x9a, 0x2a, [@random={0x10, 0x94, "45e4d6e2dc73e1cd0ecb7a257db7893cf1a6f0261742c06ea9e0ff78c1f0e2eab41952e80303627f51d1ce139ba78baaa4c619a16dc9b388e517139fea31a153a8d60d901baae66af57b7f76ca6a8fbfccbadd3e8f4af3bbbe976b0ee8b1f10516e4069dab7cc4d2130c46f3a87c91751734dd0f528270cbb0b85016fab14c9cd11de0a7222c86dce2b430c3b39f0c26f12533b7"}]}, @NL80211_ATTR_IE={0x10b, 0x2a, [@fast_bss_trans={0x37, 0x8d, {0x0, 0x3, "a8d7b084bc76ebe3025674b8985a269b", "04c15eec359609dc9cfc4be04790ce4bad060be88fac561c411523a6ce5f43f4", "5b5a691d661e7d5b51266e26a1b86bfc8e7442b60cbe3c5d30fe82ea6a02469a", [{0x4, 0x13, "78b61b091d316c8290ef1fcd0fc1269e0a0b23"}, {0x1, 0x4, "45c96725"}, {0x3, 0x1e, "9885f78f76eb518b7aca3675c169c0f49a55d4aa67051c8daf64ddb556cc"}]}}, @random={0x0, 0x5c, "c1edec093989a04e033021b0490cb07e6df3de45396ffbc7d278c58feddd4cc23d53a1d88895c7057aac6fba8b88a89f5eff7ed8e45b38ba493d28c175f18ee898e4e8f1ac96c7180bdf32446479456340e9595ea81359be19c765ee"}, @mic={0x8c, 0x18, {0x91c, "cee935b430b8", @long="ee601dbcbdc161750f9e5242513f739e"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x19a, 0x2a, [@peer_mgmt={0x75, 0x4, {0x1, 0x0, @void, @void, @void}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0xcc}, @erp={0x2a, 0x1, {0x1, 0x1}}, @peer_mgmt={0x75, 0x14, {0x0, 0x8, @void, @void, @val="e07ec2ce0391d67bf0f33b320e1d96b9"}}, @fast_bss_trans={0x37, 0xdd, {0x4c, 0x8, "4bc111fcd1ebbb0f22e6f7d982cdc19f", "1c0552a3bbfbd5b4af1e058d6c13573a32c8c12d62882638e8bcb8b46379a83f", "a0d3f2a956a963ac06561380a52a1668128764eff7fb22ecea91d1988282a992", [{0x4}, {0x2, 0x21, "0bcc7cd300b4c8e97f0897d50b453d65605f4de90ec8cf42aa739f196dd3b873ad"}, {0x3, 0xc, "f7c108c13cb0b1f51a33a6a6"}, {0x2, 0x5, "938fd7b97c"}, {0x2, 0x14, "3306ee09924a9e365954ba3991ee56267f8f0de2"}, {0x31, 0x15, "28959bcc064f699312c527f0f699e53d718c98eabe"}, {0x4, 0xd, "0ca08024e2bb1652bc74cca67e"}, {0x1, 0x13, "87c9a29bd161a7ff9f27291a190f9e7c1bf35f"}]}}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}, @chsw_timing={0x68, 0x4, {0x4, 0x200}}, @random={0x7, 0x7f, "1527674f0bc16143977e8887670d7a11c2a44be80bafc025c88c79dd87f1dbf4ba349ab95a1fc2f21b8a57912d9c10bfe9d41aebd591ad27cec18257fa51271df59c6f87d24a1a825853eb2876390fcde7f480152a3a7d739000c9ec06babc776268592e1eb0fb92ef00ffbefc1e1f60244dcf64be6cc9cbf18d97761178fb"}]}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'veth1_to_bridge\x00'}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840), 0xe402, 0x0) r4 = openat(r3, &(0x7f0000000880)='./file0\x00', 0x10000, 0x80) r5 = dup3(r2, r2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f00000008c0)={0x4, {{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e23, @private=0xa010102}}}, 0x108) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) getgroups(0x5, &(0x7f0000000c80)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r5, &(0x7f0000000a00)='system.posix_acl_access\x00', &(0x7f0000000cc0)={{}, {0x1, 0x7}, [{0x2, 0x2, r6}], {}, [{0x8, 0x3, r7}, {0x8, 0x4, r8}, {0x8, 0x2, r9}], {0x10, 0x9}}, 0x44, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000d40)={0x0, 0x7f, 0x38e, 0x1, 0x3}) r10 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x45e, 0xdb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa4, 0x80, 0xfe, [{{0x9, 0x4, 0x0, 0x14, 0x2, 0x3, 0x1, 0x3, 0x41, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xf66}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x1, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0xb, 0x6}}]}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x7, 0x9, 0x0, 0x10, 0x9}, 0x24, &(0x7f0000000e00)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "99fafa53decaae0367c5edaf73ee6020"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x53, 0x4, 0x40cc, 0x6}]}, 0xa, [{0x9d, &(0x7f0000000e40)=@string={0x9d, 0x3, "25ef96e95881669e90d2333269052a9b629261aaeb6951f3180cd3483a99168bf463791a1a87988fcf5d98bd61b00df74366155fe69934c013e6997c73619a4487cdc902f932b7453a6a7a61c3cbb09d0320cf10c82e6c983fa8613ed44900670d153380a6c63fe438baa18f1e7fdca5e66ab0924e33beee55933ca59a5b03ccbf290f6071c7d60f60e260bb795883ed6a709d7198c78541770171"}}, {0xfd, &(0x7f0000000f00)=@string={0xfd, 0x3, "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"}}, {0xd8, &(0x7f0000001000)=@string={0xd8, 0x3, "547cd2d619ddc89ee9f1e8fb3eb83f62971933221f1b005b7984f2e1710649f7c701abcdf15fb31915d4b41cfdb3ab861cfea2e855d9e456b9b5481f8b410fbd7e1711686d45d928298ea5fe8c8823a41c24bb78db95ca6713924a314c89b7b1016e39878e7057a100bad2e0c1404f0fd62946604d700d6eed7463953850117824d253369aa6a8cf7d104eef5d6447725c6a780a435e3e1aeded9e067c809897ad443da808f71b08a97002f8017e9c78c88d2ebea978a43ea582537706b98bc2a8b9df34266d6a42b25b0ae46446676cb8d7fa912801"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x81a}}, {0x12, &(0x7f00000011c0)=@string={0x12, 0x3, "2fb3ccbe9fa18de3c3a5d321a95452d0"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x861}}, {0xb6, &(0x7f0000001280)=@string={0xb6, 0x3, "b19be6ba4125c864b7df589da1e6e10b3537299a493913013fcaa52f66a3c5e13f40b13e93719085269cae6c5b5f409371076b67f0c2980eae53dc27b249c6a0ba651a98a8da059a92aae887aed9060c5f6aa08f16f1c1708297862fd9eefb9f78e02c98b8ef17c78ac4699104ab72d3bc57ef9f7db38f3c3a120da2028c430dda76c00edf1186659fc31b6496cb69f4c703307d29093488af06d23a0cafa060d44c531be9934c733889dc82b322e7884913c58f"}}]}) syz_usb_control_io$hid(r10, &(0x7f00000015c0)={0x24, &(0x7f0000001400)={0x40, 0x22, 0xe5, {0xe5, 0x21, "415bf0813dc3edc0286fdee4354f2df9af580b8b94b05a489e0d48b2ee1011ae11892bee7be7f680430daab8096edd24ac2e1074c975abe44565d820d2dec4f6b077453fea4c1897a367e6d9200fd6b2001b5114bf62780a181d742635fb7828578f99429674b17c85f17c04645b6f2f177d50389529e0061a09940fc251755ff4431c4b092cde9d41e146ee0f7dbea18ca2a4f650529ccece3024079ccaa94ff5ef5619fcd20d0abe390e8f8c6f3783645f8be8900b0b9d305f165838b4f5f7db719ac790bedf9a212143e3b7d483d2dba5911e55a92f09b12cd8a4d3c14a16a17908"}}, &(0x7f0000001500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x52}}, &(0x7f0000001540)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x2, "36b47773"}, @local=@item_012={0x1, 0x2, 0x1, "8b"}, @global=@item_4={0x3, 0x1, 0xd, "e23a4eae"}]}}, &(0x7f0000001580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x8, 0x1, {0x22, 0x184}}}}, &(0x7f0000001840)={0x2c, &(0x7f0000001600)={0x40, 0xb9217cfeb7d78c6d, 0x59, "382d869d516cb6f61cecb19ed12781dab212eb641ab9f89bf5307dde0bd49fb11ba1ffb4c9a0b43455610fb4811861408ea5663ccf14fd7249416f1c267f60c80a2e90d96bd020f19fe5d219a7ecd497a31911916af4b831c4"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001700)={0x20, 0x1, 0xdd, "9bd6e1d06feeadcb314c14d72f97ca3b667f9a435fab3df9cb97c4f7d09354f7fbce353f0d693460663ebd7b2b00e12866ba9fbbb4eecb3f835cd8e805fcbfe5bf20cb21af702b039b391141f2e89fff4f74803ad5c2de39c80f82f736e077a3635adf6a1d48c11975e7a20317d86e313cdf1156a308fbccffa90e95b02e9e0fb5bd7fad1fe80c89ba0911b9c2bf4c941c4b233b6f2ed279e0db022d76a59aee6c721edc2eb16d56bd5b795dff65ee48bdde7e59673c27e5ad5346559bf6bc89b559edbcef0aefde145057bf5535658f9e001cfc330671513db7f067be"}, &(0x7f0000001800)={0x20, 0x3, 0x1, 0xff}}) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) pread64(r11, &(0x7f00000018c0)=""/42, 0x2a, 0x4055) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001900), 0x91800, 0x0) mmap(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x4, 0x8010, r12, 0x2edc8000) r13 = syz_io_uring_setup(0x3d16, &(0x7f0000001940)={0x0, 0x87fa, 0x2, 0x2, 0x76}, &(0x7f00000019c0), &(0x7f0000001a00)) io_uring_enter(r13, 0x7e32, 0x1de, 0x0, &(0x7f0000001a40)={[0xfffffffffffffffb]}, 0x8) syz_usb_control_io$hid(r10, &(0x7f0000001c80)={0x24, &(0x7f0000001a80)={0x0, 0xf, 0x50, {0x50, 0xa, "56d1fd8e9521b017f2358a04558bb67a8b413e9b555591a525c8b5b398db0b21c2bcd4aee2c339cfa5048a4e3d71c32d8270d4dac9cff73eb84a4f6d3ecab8ce681c656737c1f22a33296ce2e482"}}, &(0x7f0000001b00)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "c865023a25c1fb2ccb2d2ba0d6b6824e22fc5f72a271c546ffe341d045d436c73a1d3fed31d4d71c13e96188e0eca0a7a8350bb73733908c3057f0ab8c0e4decd412f17710ce353c014ee5352206a20717bdc39ee574d4ba52c57793f9f99bc32d4d350cf16f8a2e63a7d559ff3fea31945ec0ded6176b21676758ff252a212da4510d3b075afdae81253fa134bee75175d2c75ff7b663f6cecc843eacd0fd086b1ab443059960da77c4549c73eb97eee48899c87df64591b19d7503cc28a5457dc96be38f50bb450dfb8c6c2e"}}, &(0x7f0000001c00)={0x0, 0x22, 0xd, {[@local=@item_012={0x2, 0x2, 0x0, "58b7"}, @global=@item_4={0x3, 0x1, 0xb, "cc349ca5"}, @local=@item_4={0x3, 0x2, 0x3, "c7725361"}]}}, &(0x7f0000001c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffe, 0x1, 0x1, {0x22, 0x8a4}}}}, &(0x7f0000001f40)={0x2c, &(0x7f0000001cc0)={0x40, 0x10, 0xb1, "7f57a6282c908f1f7461cd7c649b99881e198d547e388dce898fb4f70c4adc10e82774d23f96ed708aa0c4a56812298970477c9816808ff5d8d3699bf27a45b6fd11fbeb2e7fcbbe8acd3f08868251410e9d43296f56984355ad2f7bcdee420eceaaef38536b9797349e25ea5565c8fc0cf4fd15811d0ba1e20d9eba99d242b383e0c39555a65e68bcfe293f21981aa177bf78a994ba6b6d96a6a552c477af8f7a6fd8f5a3a9ebce9e253fd3b2e5025249"}, &(0x7f0000001d80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001dc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001e00)={0x20, 0x1, 0xe7, "a60de8b41bdb5359b25e825514c9c89a09d0ec099682564ac71e5d9c3b3ee0a9b33b81fc3998f3782f559f17abdadc625c68cfd77c5429e0d76013feaa54bee3fa2d175afac7d5b3184a168cd53639d9703233ef81334e534bf3234490b633419e126d56ff17acbbfda2645984ee4b02266056653f8b0dff0ad5f1d88698934652f5532cffd4338e5456a1386bd5173c41e2c83e268b04364d0dadc99e7b28f417880d8184f9b42acf0b90ca6e68fec21a2be29450c03458383fddd431a28c9958893d4cedc00d2c598eb7208f31aaa078ef842fa9cb77ac0070d4bceddd070cef5bc984ef3c8d"}, &(0x7f0000001f00)={0x20, 0x3, 0x1, 0xb6}}) syz_emit_ethernet(0x1e, &(0x7f0000001f80)={@random="e9d500338400", @remote, @void, {@can={0xc, {{0x1, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "48d08a77507f447a"}}}}, &(0x7f0000001fc0)={0x1, 0x4, [0xec1, 0xd93, 0x89, 0xbef]}) mount(&(0x7f0000002000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000002040)='./file0\x00', &(0x7f0000002080)='fuse\x00', 0x2442, &(0x7f00000020c0)='\x03\x03\x03\x03\x03\x03') r14 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002100), 0x8000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r14, 0xc0045401, &(0x7f0000002140)=0x388) write$binfmt_elf64(r4, &(0x7f0000002180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x46, 0x4, 0x9, 0x5, 0x2, 0x6, 0x4, 0x23a, 0x40, 0x3c1, 0x9, 0x6, 0x38, 0x2, 0x9, 0x14, 0x400}, [{0x4, 0x4, 0x1, 0x8, 0x6, 0x3, 0x8, 0x7fff}, {0x70000000, 0x4, 0x5, 0x3, 0x9, 0x10000000, 0x5, 0x5}], "66a8e9fac2da7d355d0eda9576aa1d7da83465b13e9b843910e97036a38a1c87f456ef3ac0a850240a7ce6c70c93c86029216df57f75bfae831467aa069e0b6749e5ea3618a93e9342a2c61e9e4e7b44523dd190aa68d0977009e83e5b576571b25e2b5cdac5892017ab7d05f9eec6ee880a25b90a6617cdf3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa29) socket$kcm(0x29, 0x7, 0x0) 1m10.707522702s ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x17c7014, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x69962253951682fe, 0x0, 0x19, "d4b2313cf4bee3e44b2bbcd124ece060eb2494b925684214788cd7a5a317279b42495ce97d35878db4c207d87d364cfe0639cecf4bf25bbe8e58b920a39a688d", "e12d63539587ea80d964a35d5f9f7154e942f97bec91bc069605b582b1893720e42865937264867e32cfee0a619f32f319ce8361ebc954080cc232eb397bf5f6", "6435117e2194de8ef387a19a8f0257dfe7923bb2638b5bc85d2c857045524e35"}) read$msr(r1, &(0x7f0000019680)=""/102376, 0x18fe8) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000180)={r5, 0x7}, 0x8) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) 1m10.039062061s ago: executing program 0 (id=228): unshare(0x42000000) socket$nl_generic(0x10, 0x3, 0x10) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x80000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x101, @remote, 0xffff}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8) 1m8.12798104s ago: executing program 4 (id=235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x70, r2, 0x1, 0x0, 0x25dfdbfb, {0x3}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @private1, 0x80000001}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2}}}}]}]}, 0x70}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x130, 0x98, 0x98, 0x1e8, 0x1e8, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x40}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x20}}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0xffffff00, 'ip6erspan0\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7b1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c884) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000190001000000000000000010021800000000ff0000000000080012"], 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0x40045304, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) tkill(r3, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setuid(0xee00) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 1m7.056670182s ago: executing program 4 (id=237): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m3.604088028s ago: executing program 4 (id=249): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x749bc, 0x2}) fstat(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x62, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaacdaaaaaabbbbbbbbbbfb810005000800400c0050006700000511148e0a010101ac1414aa831729827fd1d663000001ac1414bb7f000001ffffffff94040100210ec011007bae56eeacb8326490780a06000080000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000012ffffffff00000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='cachefiles_mkdir\x00', r3, 0x0, 0x80000}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r5, 0x0, 0x65, &(0x7f0000000500)='cgboup\x00\x8f\x80Za\x9ej\xd0\x87$\x9c\v\n[\x1a\x8f\x9dS\x89j\x11/\xe6?\xd3\xb7\xe3\x9f\x1a\xcf\x18U\x83\xe7Lb+\xdc\xb26U\rxL0 \xcf#\x9cz\vm\x1f\xf5\xae\xcc\xaf7\xe6\x14\xbf*\x06\xdcbK\xceJ\xd9\x94j\xad9\xec\xf9\xc1w\x11tXy\xc8\x97\xfbG\xeb\xc9?\xd0\xd6\xb9\xbe\xfc\xe7\xb2'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 1m2.701541397s ago: executing program 4 (id=252): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m0.004719385s ago: executing program 4 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x17c7014, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x69962253951682fe, 0x0, 0x19, "d4b2313cf4bee3e44b2bbcd124ece060eb2494b925684214788cd7a5a317279b42495ce97d35878db4c207d87d364cfe0639cecf4bf25bbe8e58b920a39a688d", "e12d63539587ea80d964a35d5f9f7154e942f97bec91bc069605b582b1893720e42865937264867e32cfee0a619f32f319ce8361ebc954080cc232eb397bf5f6", "6435117e2194de8ef387a19a8f0257dfe7923bb2638b5bc85d2c857045524e35"}) read$msr(r1, &(0x7f0000019680)=""/102376, 0x18fe8) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x7}, 0x8) 59.418740246s ago: executing program 4 (id=264): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110d29bd7000ffdbdf251b0000000c000600010000000100000010002e800c0004"], 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) getpid() (async) syz_pidfd_open(r1, 0x0) (async) setns(r2, 0x24020000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110d29bd7000ffdbdf251b0000000c000600010000000100000010002e800c0004"], 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) umount2(&(0x7f0000000540)='.\x00', 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 54.81290606s ago: executing program 32 (id=228): unshare(0x42000000) socket$nl_generic(0x10, 0x3, 0x10) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x80000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x101, @remote, 0xffff}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8) 44.261631741s ago: executing program 33 (id=264): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110d29bd7000ffdbdf251b0000000c000600010000000100000010002e800c0004"], 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) getpid() (async) syz_pidfd_open(r1, 0x0) (async) setns(r2, 0x24020000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110d29bd7000ffdbdf251b0000000c000600010000000100000010002e800c0004"], 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) umount2(&(0x7f0000000540)='.\x00', 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17.948209891s ago: executing program 5 (id=419): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socket(0x40000000015, 0x5, 0x0) fsopen(&(0x7f0000000080)='configfs\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x200, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x181000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0xf0ff, 0x0) ioprio_set$pid(0x1, 0x0, 0x4000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.032134418s ago: executing program 5 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b71, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) 15.907910485s ago: executing program 5 (id=423): r0 = socket(0x10, 0x803, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000040)={0x1b, ""/27}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x7}, @ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000fc0)=""/4096, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x9, @void, @value}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) read$FUSE(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000400), &(0x7f00000002c0)='%pB \x00'}, 0x20) 14.268993937s ago: executing program 3 (id=429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [0xfffffff9, 0x4, 0x3]}, @noop]}}}}}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) getrlimit(0x2, &(0x7f00000000c0)) r7 = dup(r5) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x2, 0x4}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x9}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x2, 0x6, 0x1}}]}}}]}, 0x88}}, 0x4000844) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13.507841035s ago: executing program 5 (id=432): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="850000007e"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x8}, 0x14}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000009a73"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xac, &(0x7f0000000300)=""/172, 0x41000, 0x8, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x7}, 0x10, 0x1f32b, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x2, 0x4, 0x7, 0x5}, {0x2, 0x4, 0x10, 0x2}], 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) shutdown(r6, 0x2) 12.376467498s ago: executing program 3 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1bc47347c88e6861, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x3, 0x2ba, [0x0, 0x20000380, 0x200004ec, 0x2000060a], 0x0, &(0x7f00000001c0), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x0, 0x6003, 'ipvlan0\x00', 'veth1_virt_wifi\x00', 'dvmrp1\x00', 'xfrm0\x00', @multicast, [0xff, 0xff, 0x0, 0xff, 0x0, 0x7f], @empty, [0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}, {0x3, 0x40, 0x9200, 'veth1_to_bridge\x00', 'hsr0\x00', 'dvmrp0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff], @random="3794922aa475", [0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x400}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x0, 0x1, 0x1, 'wlan1\x00', 'veth0_to_hsr\x00', 'macvlan1\x00', 'geneve0\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @random="92b3c190b11c", [0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@log={'log\x00', 0x28, {{0x93, "dc0a05712a634281afabed1002ef9c152dbde6c9084c3d732f5f141dbafe", 0xa}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x332) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000070a01040000000000000000020000000900010073797a3000000000f5c8d285d39eb4c402dbee73d6408fb562503162d2c48e66154e7d58f8d45fd1b00a1c016125794a11da45d9823cf8bc04884081e4557abb7ae0b7e72c5d8b6819468edc976f93af432658b5a8cd2c9995ae692f2b2033c0aae1b39bae884af388eff8b196f9868fae27fec5fdfb43fc22808cc700"/164], 0x20}}, 0x0) 12.236289793s ago: executing program 3 (id=437): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x200, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x2000, @remote}, 0x10, 0x0}, 0xc884) r1 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x11, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYRES8], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x17) 12.130362325s ago: executing program 5 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x17c7014, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x69962253951682fe, 0x0, 0x19, "d4b2313cf4bee3e44b2bbcd124ece060eb2494b925684214788cd7a5a317279b42495ce97d35878db4c207d87d364cfe0639cecf4bf25bbe8e58b920a39a688d", "e12d63539587ea80d964a35d5f9f7154e942f97bec91bc069605b582b1893720e42865937264867e32cfee0a619f32f319ce8361ebc954080cc232eb397bf5f6", "6435117e2194de8ef387a19a8f0257dfe7923bb2638b5bc85d2c857045524e35"}) read$msr(r1, &(0x7f0000019680)=""/102376, 0x18fe8) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000180)={r5, 0x7}, 0x8) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 12.036137479s ago: executing program 3 (id=439): semget$private(0x0, 0x207, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r1 = epoll_create(0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x50000000}) dup3(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x2}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xf, r10, 0xfffffffffffffffd, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x20000000) 11.072876338s ago: executing program 5 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x670, 0xda5, 0x8, 0x200}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa5117000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b"]) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0xfffffffffffffffe, 0x0) 9.989288805s ago: executing program 3 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x17c7014, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x69962253951682fe, 0x0, 0x19, "d4b2313cf4bee3e44b2bbcd124ece060eb2494b925684214788cd7a5a317279b42495ce97d35878db4c207d87d364cfe0639cecf4bf25bbe8e58b920a39a688d", "e12d63539587ea80d964a35d5f9f7154e942f97bec91bc069605b582b1893720e42865937264867e32cfee0a619f32f319ce8361ebc954080cc232eb397bf5f6", "6435117e2194de8ef387a19a8f0257dfe7923bb2638b5bc85d2c857045524e35"}) read$msr(r1, &(0x7f0000019680)=""/102376, 0x18fe8) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000180)={r5, 0x7}, 0x8) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) 8.711786999s ago: executing program 3 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x141, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x27) 6.031485017s ago: executing program 2 (id=460): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109"], 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0) 5.916428557s ago: executing program 6 (id=461): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.514557826s ago: executing program 6 (id=466): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000005, &(0x7f0000000600)="01", 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$hidraw(&(0x7f0000000100), 0x401, 0x8902) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setpriority(0x1, 0x0, 0x7) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000000340)=0x7, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.078915053s ago: executing program 6 (id=468): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040)=0x2, 0x4) 4.852200532s ago: executing program 6 (id=470): socket$alg(0x26, 0x5, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x0, 0x0) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 32) gettid() socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) (rerun: 32) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) (async) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x40010) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0xef, 0xaa, 0x6e, 0x10, 0x1397, 0xbd, 0xc566, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0x2b, 0x3d}}]}}]}}, 0x0) 4.691375091s ago: executing program 6 (id=471): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0x5}) pread64(0xffffffffffffffff, &(0x7f0000001780)=""/4096, 0x1000, 0x7) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x200, 0xfffffffc}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) signalfd4(r7, &(0x7f0000000240)={[0x401]}, 0x8, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r0], 0x60}}, 0x0) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r9], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x3, 0xb, 'c'}], 0x18, 0x500}}], 0x2, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001f80)={'wlan0\x00'}) 2.949114887s ago: executing program 2 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0x0, 0x1, 0x1bf4) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x114, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x106, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xf2, 0x0, @opaque="4961427b41357406d171c83b7718195c0fc749c00345de03a9f95690a1896a1aed0492307d277f6d57601f20eda9d5a49e028142b8687b319d9e4e7fef134eecd12db79fb4f3483759d3d3929ae256b9f04cc35c656f4126614289b503a4d1d7c8d46af5c9e1f2c1dbf6d7fce3eded75f5964724e94c9f3e3cf621e030536fc6c83ade21dd2e9f2128d74b0a009c01aae546f592fa158093d135e935d3349dcae1dff06100e1e49076c9223c00d3c19aeee08513a60ff1ddbf1631c88529ab6c35f0407c396c1f1a91bcfd2e9e8768e3034ee2049a1f3926a7aaa8148d2eeda6a1b83ee53c67d6854319"}}}}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3e7}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 2.534180961s ago: executing program 2 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c}, 0x38) r2 = socket$inet(0x2, 0x3, 0x8d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f0000000a00)=' ', 0x0}, 0x20) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40010) socket$netlink(0x10, 0x3, 0x8000000005) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') open$dir(&(0x7f00000000c0)='./file1/file0\x00', 0x5c1, 0xa0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee01, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x8, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_cancel(0x0, 0xfffffffffffffffc, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYRES16=0x0]) 2.396794612s ago: executing program 6 (id=477): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="771fe673b311b6a7438493dbf6", 0xd}], 0x1}}], 0x1, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x10}, 0x0, 0x0, 0x0}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) 1.295568805s ago: executing program 2 (id=482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="499855397ea4733d0e0520c3b8c9ee45e9426668f0ced90efafcb68e1505efb4641634d731e4955455388c803e8854c5745fd039b1576cbe6501915432d148d672e67d2fdfda1d815067e0cf72fe77088344f62908c742d9e3d72043551f6816321383e4c666b0085425951f3e0a820905d7a519e7ac", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8040) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x2f, 0x3, 0x1, 0x1}, {0x8, 0x7, 0x1, 0x7fffffff}, {0x2, 0x9e, 0xc, 0x42a}]}) r2 = socket$netlink(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4430, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00roup_id=', @ANYRES64=r2]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) close(0xffffffffffffffff) socket$inet_dccp(0x2, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}, 0x0, 0x4, {}, 0x5c000000}) 1.186353342s ago: executing program 1 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYRES64=r0], 0x60}}, 0x0) 1.094283119s ago: executing program 1 (id=484): open(&(0x7f0000000280)='.\x00', 0x80103, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioperm(0x0, 0x7, 0x1c26) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a"], 0x17) 1.031270304s ago: executing program 1 (id=485): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109"], 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0) 303.709058ms ago: executing program 1 (id=486): socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc8, 0x57}}}, 0x7) 268.76523ms ago: executing program 2 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000000)={@local, @private=0xa010100}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x154, 0x6, 0xa, 0x5, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x12, 0x7, 0x1, 0x0, "764ca7a634ddd2f7297902f566a2"}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x97a}]}, @NFTA_RULE_EXPRESSIONS={0xe0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x83}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xf9a}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xda}]}}}]}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x178, 0x8, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x14c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2b5}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x7e4, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x7d0, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x80, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, @NFTA_INNER_NUM={0x8}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xff}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}]}, {0x114, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x57, 0x6, 0x1, 0x0, "1843d4c7763c88ba2aef02f274757c2d37c39912877fb483955c49ec93593e65d692dc48486e6505f6f723e1960314569180c1e0261be543f41478e7e056103136ccb27dfa2744c5f22fa4a6927c1912ad770f"}, @NFTA_SET_ELEM_USERDATA={0xab, 0x6, 0x1, 0x0, "1015859d99091cd1f580fd892eab048bf3ce7d54548f4b6a2e2c4ee669c13ca540f98354515433133477e143473f44693ee73030d0f905720b46ebab595a7026d45b51f419070966cb6f6851d83aca35c72fcf3e608d8f504671f9ff3310a01bca8927e49a1c3c675b181c74645bfd35e4093cf34baa70e91d9809a30167348edf0a544abf583437e46c00d7e77b2354ce21fbc562bebbdbce85c007e86d5de33b39593dbd002b"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_USERDATA={0x79, 0x6, 0x1, 0x0, "9bb6f2d8ecaf3466afe21b0eaffd5be556ed25eff682ae285596d7721aafbd141c5572941fb1a74ee33d6b881227f03a5b82661cbf9218002e4c0f28911e61fd071938c80207965d05db36ad95c4ae841555ae6956cbfc071b342129b59e09bc054b7ab3f04089f121b5f860d621bdb6d71bfa4988"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "ee1e4c5aa433ba0aa8d6d1d5986ec0b6724cbab6ac850e2b76a183e6b4ecd3ff82d056651ac5a380544e1ebff57fb9b5d3fae296e4b9b0522474ff055de41b78b708146049d00e31f364ca0b27"}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "3c7e3c55451c9efee0eead64a9eb747a5644702bc5b7da1d5add92614de70a7db8b5e8b334e47677253a28765fbeb8696549f1dbb163ecd197ab9556c2652af3c2681c0f2a8f74c63ae436cfa1bb583c121b0594dd2b3fdcd2db8a874ae19b38809a291deceaece78bb29f39620d112b440a4ba21d1296cb3b94165c6e3415c97148b678cee80de8adc783f64945e307cd8cc86191c6db0e1e95abe4a62132e2ff34d1f73d3dd6dc9d56ce5ec719c441661a370a00155a96a4cdd1cd1dae10a4c3c9d9b96b19d79488c5ff023cbffd1e12e213c6b5b2b5c42fbbebb0b73e8c9e8c64665562d71797bed4325dff84d86d86b5afc720c4ff1363"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x300, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "99b18fc2a1355b4db5dc096325f16c7222f158277e4c3f28de63d34d45ac9d842f941e18c8820ff0362dfca9e77e"}, @NFTA_DATA_VALUE={0xdf, 0x1, "dd0d60c78ff8e48446f4c760bf73852bebec3b653faca09edc9838f1d3504e2aa83fe0832596540c98ebedc569aaffa410262b08ea8157df77c3e2560d92ec40326853d67afb3beef60424f4104c8f0e86e556c2eed3a7717be4868f908614201c57ca7ef315e8e354f75ac7f54bc1b3892367c561c62dabebe708990f6d7fed69936ca01db5f725273c6135d64c3aa0964ab7efc9509973b79df5f4782238551d3fdea4580cda0853742a74e0f313018720d6dc6cdfc82817bbaa69c91b1050dc0ded27798087903fd599e81ed910305a3bc9ff33a5396da395a6"}, @NFTA_DATA_VALUE={0x1e6, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}]}, @NFT_MSG_DELCHAIN={0x138, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0x18, 0xc, "2324d22c81b736734e95fedbabee9955d16bd066"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7ffffffffffffffa}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc90}, 0x1, 0x0, 0x0, 0x14}, 0x24000440) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b9030100c00f32260f01df66b8e7008ed00f01c8670fc71a66ba200066b8000066efc4e1cd5506660f78c5c905660f388276820f0055bc", 0x37}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 104.507034ms ago: executing program 2 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 94.44649ms ago: executing program 1 (id=489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x480}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 1 (id=490): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000005, &(0x7f0000000600)="01", 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$hidraw(&(0x7f0000000100), 0x401, 0x8902) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setpriority(0x1, 0x0, 0x7) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000000340)=0x7, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): ongly recommended to keep mac addresses unique to avoid problems! [ 55.758591][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.778182][ T5812] veth1_macvtap: entered promiscuous mode [ 55.789299][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.800006][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.810934][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.822533][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.832869][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.843608][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.854988][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.868082][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.877077][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.886059][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.906386][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.934700][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.946219][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.957128][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.969172][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.012898][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.025615][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.037456][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.049255][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.060678][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.071277][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.081231][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.093404][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.107938][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.124789][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.162046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.266683][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.399394][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.471611][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.541895][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.570760][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.583409][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.596976][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.608848][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.628517][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.710391][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 56.771443][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.797236][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.809731][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.827799][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.838869][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.850665][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.964519][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.028683][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.188246][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.208511][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.338147][ T54] Bluetooth: hci1: command tx timeout [ 57.344792][ T54] Bluetooth: hci3: command tx timeout [ 57.351141][ T54] Bluetooth: hci4: command tx timeout [ 57.357038][ T54] Bluetooth: hci0: command tx timeout [ 57.363128][ T54] Bluetooth: hci2: command tx timeout [ 57.581697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.589762][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.635380][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.670272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.750030][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.793561][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.164098][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.691965][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.007307][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.075572][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 59.075583][ T29] audit: type=1400 audit(1734350534.172:163): avc: denied { read } for pid=5930 comm="syz.0.12" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.116993][ T29] audit: type=1400 audit(1734350534.212:164): avc: denied { open } for pid=5930 comm="syz.0.12" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.201625][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 59.315870][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.574668][ T5821] Bluetooth: hci2: command tx timeout [ 59.580161][ T5821] Bluetooth: hci0: command tx timeout [ 59.585708][ T5821] Bluetooth: hci4: command tx timeout [ 59.591132][ T5821] Bluetooth: hci3: command tx timeout [ 59.593359][ T29] audit: type=1400 audit(1734350534.312:165): avc: denied { ioctl } for pid=5930 comm="syz.0.12" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.596732][ T5821] Bluetooth: hci1: command tx timeout [ 59.632783][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.632829][ T29] audit: type=1400 audit(1734350534.322:166): avc: denied { set_context_mgr } for pid=5930 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.642749][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.678823][ T25] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 59.687983][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.719437][ T25] usb 4-1: config 0 descriptor?? [ 59.863463][ T29] audit: type=1400 audit(1734350534.962:167): avc: denied { create } for pid=5930 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.897202][ T29] audit: type=1400 audit(1734350534.982:168): avc: denied { write } for pid=5930 comm="syz.0.12" name="event2" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.943081][ T5911] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.961849][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 59.968213][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 60.003398][ T25] usb 4-1: USB disconnect, device number 2 [ 60.010525][ T5938] geneve2: entered promiscuous mode [ 60.019529][ T29] audit: type=1400 audit(1734350534.982:169): avc: denied { open } for pid=5930 comm="syz.0.12" path="/dev/input/event2" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.046445][ T29] audit: type=1400 audit(1734350535.022:170): avc: denied { create } for pid=5934 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.077833][ T29] audit: type=1400 audit(1734350535.042:171): avc: denied { write } for pid=5934 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.101812][ T5938] geneve2: entered allmulticast mode [ 60.107553][ T29] audit: type=1400 audit(1734350535.202:172): avc: denied { setopt } for pid=5937 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.941657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.951661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.012366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 61.128909][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.301609][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 61.323537][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.376229][ T5817] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 61.422912][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.456120][ T5817] usb 3-1: Product: syz [ 61.474670][ T5817] usb 3-1: Manufacturer: syz [ 61.535363][ T5817] usb 3-1: SerialNumber: syz [ 61.554043][ T5817] usb 3-1: config 0 descriptor?? [ 61.569578][ T5817] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 61.576612][ T5972] trusted_key: syz.4.22 sent an empty control message without MSG_MORE. [ 61.578699][ T5817] ftdi_sio ttyUSB0: unknown device type: 0xc5ff [ 62.042029][ T5981] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 62.531625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.558274][ T5981] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 63.181037][ T5991] autofs: Bad value for 'fd' [ 63.204924][ T5991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 63.261837][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.411522][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 63.419311][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 63.469236][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 63.492216][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.502830][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.546921][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.556583][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.694143][ T6004] Illegal XDP return value 3534546865 on prog (id 7) dev N/A, expect packet loss! [ 63.776205][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 63.792234][ T9] usbtmc 1-1:16.0: can't read capabilities [ 63.862425][ T5976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.876622][ T5817] usb 3-1: USB disconnect, device number 2 [ 63.929692][ T5817] ftdi_sio 3-1:0.0: device disconnected [ 64.038668][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 64.048717][ T5980] usbtmc 1-1:16.0: Unable to send data, error -71 [ 64.062449][ T25] usb 1-1: USB disconnect, device number 2 [ 64.088404][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 64.088423][ T29] audit: type=1400 audit(1734350539.182:202): avc: denied { ioctl } for pid=6007 comm="syz.1.34" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.121034][ T29] audit: type=1400 audit(1734350539.182:203): avc: denied { create } for pid=6007 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.194220][ T29] audit: type=1400 audit(1734350539.232:204): avc: denied { create } for pid=6007 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 64.271097][ T29] audit: type=1400 audit(1734350539.232:205): avc: denied { bind } for pid=6007 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 64.290222][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.297149][ T29] audit: type=1400 audit(1734350539.232:206): avc: denied { name_bind } for pid=6007 comm="syz.1.34" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 64.917758][ T29] audit: type=1400 audit(1734350539.232:207): avc: denied { node_bind } for pid=6007 comm="syz.1.34" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 64.938263][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.944541][ T29] audit: type=1400 audit(1734350539.292:208): avc: denied { create } for pid=6009 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.026948][ T29] audit: type=1400 audit(1734350540.122:209): avc: denied { listen } for pid=6007 comm="syz.1.34" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.050219][ T29] audit: type=1400 audit(1734350540.122:210): avc: denied { setopt } for pid=6007 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.074568][ T29] audit: type=1400 audit(1734350540.122:211): avc: denied { connect } for pid=6007 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.221528][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.377227][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 65.390274][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.401609][ T9] usb 5-1: Product: syz [ 65.411556][ T9] usb 5-1: Manufacturer: syz [ 65.424047][ T9] usb 5-1: SerialNumber: syz [ 65.479546][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 65.489428][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 66.179530][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 66.189331][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 66.229049][ T9] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 67.012291][ T6057] Zero length message leads to an empty skb [ 67.016593][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 67.029656][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'. [ 67.843382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.945791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.561104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.115147][ T5853] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.168323][ T6087] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 69.205774][ T6087] netlink: 'syz.4.55': attribute type 2 has an invalid length. [ 69.282530][ T6087] netlink: 'syz.4.55': attribute type 2 has an invalid length. [ 69.303677][ T6095] 9pnet_fd: Insufficient options for proto=fd [ 69.309917][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 69.309930][ T29] audit: type=1400 audit(1734350544.392:239): avc: denied { read write } for pid=6089 comm="syz.1.58" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.401451][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 69.462932][ T5853] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 69.474644][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.484936][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.495248][ T5853] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.508497][ T5853] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.518969][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.609687][ T29] audit: type=1400 audit(1734350544.392:240): avc: denied { open } for pid=6089 comm="syz.1.58" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.635586][ T29] audit: type=1400 audit(1734350544.402:241): avc: denied { connect } for pid=6089 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.656518][ T29] audit: type=1400 audit(1734350544.402:242): avc: denied { mounton } for pid=6089 comm="syz.1.58" path="/15/file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.671984][ T6106] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.679327][ T29] audit: type=1400 audit(1734350544.442:243): avc: denied { create } for pid=6089 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.688633][ T6106] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.716661][ T6106] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.725454][ T6106] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.788962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.812363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.853405][ T29] audit: type=1400 audit(1734350544.882:244): avc: denied { create } for pid=6094 comm="syz.3.56" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.891355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.906118][ T29] audit: type=1400 audit(1734350544.882:245): avc: denied { ioctl } for pid=6094 comm="syz.3.56" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9529 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.263462][ T5853] usb 3-1: GET_CAPABILITIES returned 0 [ 70.269077][ T5853] usbtmc 3-1:16.0: can't read capabilities [ 71.019500][ T29] audit: type=1400 audit(1734350546.112:246): avc: denied { read } for pid=6110 comm="syz.4.63" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.144554][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.355370][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 71.375003][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.375664][ T6067] usbtmc 3-1:16.0: Unable to send data, error -71 [ 71.435368][ T29] audit: type=1400 audit(1734350546.112:247): avc: denied { open } for pid=6110 comm="syz.4.63" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.473873][ T5853] usb 3-1: USB disconnect, device number 3 [ 71.545848][ T29] audit: type=1400 audit(1734350546.222:248): avc: denied { ioctl } for pid=6110 comm="syz.4.63" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.393391][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.426173][ T6130] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 72.437228][ T6130] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 72.561658][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 72.577014][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 72.606169][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.640136][ T9] usb 3-1: config 0 descriptor?? [ 73.906812][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 74.109414][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 74.131684][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 74.146583][ T9] usb 3-1: USB disconnect, device number 4 [ 74.860337][ T6177] syz.3.83: attempt to access beyond end of device [ 74.860337][ T6177] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 74.874014][ T6177] gfs2: error -5 reading superblock [ 75.268744][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 75.268761][ T29] audit: type=1400 audit(1734350550.362:268): avc: denied { nlmsg_write } for pid=6178 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.354518][ T6181] ======================================================= [ 75.354518][ T6181] WARNING: The mand mount option has been deprecated and [ 75.354518][ T6181] and is ignored by this kernel. Remove the mand [ 75.354518][ T6181] option from the mount to silence this warning. [ 75.354518][ T6181] ======================================================= [ 75.431131][ T29] audit: type=1326 audit(1734350550.452:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.86" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3d3f85d19 code=0x0 [ 75.465605][ T6189] overlayfs: overlapping lowerdir path [ 75.472991][ T29] audit: type=1400 audit(1734350550.552:270): avc: denied { ioctl } for pid=6179 comm="syz.2.85" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.549085][ T29] audit: type=1400 audit(1734350550.602:271): avc: denied { mount } for pid=6179 comm="syz.2.85" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.567299][ T6181] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.571105][ T29] audit: type=1400 audit(1734350550.642:272): avc: denied { unlink } for pid=6179 comm="syz.2.85" name="#1" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.630582][ T29] audit: type=1400 audit(1734350550.722:273): avc: denied { setopt } for pid=6194 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.700433][ T29] audit: type=1400 audit(1734350550.722:274): avc: denied { write } for pid=6194 comm="syz.1.89" path="socket:[9662]" dev="sockfs" ino=9662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.731736][ T29] audit: type=1400 audit(1734350550.722:275): avc: denied { open } for pid=6194 comm="syz.1.89" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 75.763850][ T29] audit: type=1400 audit(1734350550.722:276): avc: denied { ioctl } for pid=6194 comm="syz.1.89" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 75.793338][ T29] audit: type=1400 audit(1734350550.792:277): avc: denied { mount } for pid=6179 comm="syz.2.85" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.215379][ T971] cfg80211: failed to load regulatory.db [ 78.201546][ T5853] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.369497][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 78.389105][ T5853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 78.419383][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 78.448033][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.476602][ T5853] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.490163][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 78.525829][ T5853] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.555318][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.796816][ T5853] usb 5-1: GET_CAPABILITIES returned 0 [ 78.822519][ T5853] usbtmc 5-1:16.0: can't read capabilities [ 79.006437][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.016119][ T6245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.031739][ T6210] usbtmc 5-1:16.0: Unable to send data, error -71 [ 79.047033][ T867] usb 5-1: USB disconnect, device number 3 [ 79.308456][ T6252] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 79.316221][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 79.344536][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'. [ 79.461598][ T971] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.621678][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 79.636578][ T971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.652413][ T5853] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 79.703651][ T971] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=e1.8c [ 79.737674][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.751832][ T971] usb 3-1: Product: syz [ 79.756055][ T971] usb 3-1: Manufacturer: syz [ 79.760683][ T971] usb 3-1: SerialNumber: syz [ 79.790404][ T971] usb 3-1: config 0 descriptor?? [ 79.810408][ T971] cypress_m8 3-1:0.0: HID->COM RS232 Adapter converter detected [ 79.832777][ T971] cyphidcom ttyUSB0: required endpoint is missing [ 79.844536][ T5853] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 79.865118][ T5853] usb 4-1: config 0 has no interface number 0 [ 79.871335][ T5853] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.911874][ T5853] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 79.922692][ T5853] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 79.934568][ T5853] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 79.946431][ T5853] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 79.957365][ T5853] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.970625][ T5853] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 79.979826][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.997863][ T5853] usb 4-1: config 0 descriptor?? [ 80.004146][ T6254] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.011842][ T6254] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.038803][ T5853] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 80.045870][ T5865] usb 3-1: USB disconnect, device number 5 [ 80.050891][ T6263] SELinux: Context : is not valid (left unmapped). [ 80.089164][ T5865] cypress_m8 3-1:0.0: device disconnected [ 80.613229][ T6254] ldusb 4-1:0.55: Write buffer overflow, 1 bytes dropped [ 80.759630][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 80.759647][ T29] audit: type=1400 audit(1734350555.852:294): avc: denied { unlink } for pid=5812 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 80.869042][ T29] audit: type=1400 audit(1734350555.962:295): avc: denied { map } for pid=6274 comm="syz.4.116" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.981460][ T6276] evm: overlay not supported [ 81.480940][ T6285] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 81.522955][ T5865] IPVS: starting estimator thread 0... [ 81.633102][ T6287] IPVS: using max 26 ests per chain, 62400 per kthread [ 81.771619][ T29] audit: type=1400 audit(1734350556.842:296): avc: denied { read write } for pid=6290 comm="syz.4.120" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.920462][ T29] audit: type=1400 audit(1734350556.842:297): avc: denied { open } for pid=6290 comm="syz.4.120" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.031756][ T867] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.159174][ T29] audit: type=1400 audit(1734350556.842:298): avc: denied { ioctl } for pid=6290 comm="syz.4.120" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.184074][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.222784][ T6249] syz.3.107 (6249) used greatest stack depth: 19344 bytes left [ 82.281568][ T867] usb 5-1: Using ep0 maxpacket: 8 [ 82.294524][ T867] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 82.625819][ T867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 82.698603][ T5865] usb 4-1: USB disconnect, device number 3 [ 82.731461][ T5865] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 82.738253][ T867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.809587][ T867] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.861715][ T867] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.907482][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.724526][ T6310] syz.1.126 uses obsolete (PF_INET,SOCK_PACKET) [ 83.734860][ T867] usb 5-1: GET_CAPABILITIES returned 0 [ 83.740568][ T867] usbtmc 5-1:16.0: can't read capabilities [ 83.885496][ T29] audit: type=1400 audit(1734350558.972:299): avc: denied { ioctl } for pid=6316 comm="syz.3.127" path="socket:[8829]" dev="sockfs" ino=8829 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.048284][ T6323] 9pnet: p9_errstr2errno: server reported unknown error  [ 84.056483][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 84.065990][ T6291] usbtmc 5-1:16.0: Unable to send data, error -71 [ 84.076316][ T867] usb 5-1: USB disconnect, device number 4 [ 84.165376][ T29] audit: type=1400 audit(1734350559.252:300): avc: denied { create } for pid=6325 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.184702][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.191222][ T29] audit: type=1400 audit(1734350559.262:301): avc: denied { write } for pid=6325 comm="syz.1.131" path="socket:[9968]" dev="sockfs" ino=9968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.516901][ T29] audit: type=1400 audit(1734350559.612:302): avc: denied { create } for pid=6320 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.100223][ T29] audit: type=1400 audit(1734350560.152:303): avc: denied { create } for pid=6325 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.130036][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.153977][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.166206][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.243500][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.258362][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.275465][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.375498][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.388245][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.398398][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.675317][ T6355] Cannot find del_set index 0 as target [ 86.317524][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 86.317542][ T29] audit: type=1400 audit(1734350561.412:308): avc: denied { execute } for pid=6357 comm="syz.0.139" path="/29/cpu.stat" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.501082][ T29] audit: type=1400 audit(1734350561.592:309): avc: denied { sqpoll } for pid=6362 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.571780][ T29] audit: type=1400 audit(1734350561.622:310): avc: denied { execute } for pid=6362 comm="syz.2.141" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 86.703677][ T29] audit: type=1400 audit(1734350561.712:311): avc: denied { setcurrent } for pid=6362 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.805704][ T29] audit: type=1401 audit(1734350561.712:312): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 86.901942][ T29] audit: type=1400 audit(1734350561.992:313): avc: denied { name_bind } for pid=6375 comm="syz.3.145" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 87.008599][ T29] audit: type=1400 audit(1734350562.102:314): avc: denied { getopt } for pid=6384 comm="syz.1.148" lport=45773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.154689][ T29] audit: type=1400 audit(1734350562.252:315): avc: granted { setsecparam } for pid=6389 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 87.183143][ T29] audit: type=1400 audit(1734350562.272:316): avc: denied { connect } for pid=6391 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.204527][ T29] audit: type=1400 audit(1734350562.272:317): avc: denied { read } for pid=6391 comm="syz.0.150" path="socket:[10180]" dev="sockfs" ino=10180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.661620][ T971] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 87.904370][ T971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.913080][ T971] usb 1-1: not running at top speed; connect to a high speed hub [ 87.926897][ T971] usb 1-1: config 178 has an invalid descriptor of length 12, skipping remainder of the config [ 87.945239][ T971] usb 1-1: config 178 has 0 interfaces, different from the descriptor's value: 1 [ 87.979285][ T971] usb 1-1: New USB device found, idVendor=04a5, idProduct=310c, bcdDevice= b.4c [ 87.995394][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.006191][ T971] usb 1-1: Product: syz [ 88.010397][ T971] usb 1-1: Manufacturer: syz [ 88.015531][ T971] usb 1-1: SerialNumber: syz [ 88.142068][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 89.463715][ T6414] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.674179][ T6422] dummy0: entered promiscuous mode [ 89.695870][ T6422] macsec1: entered promiscuous mode [ 89.736777][ T6422] macsec1: entered allmulticast mode [ 89.748175][ T6422] dummy0: entered allmulticast mode [ 89.785123][ T6422] dummy0: left allmulticast mode [ 89.790991][ T6422] dummy0: left promiscuous mode [ 89.801064][ T6424] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 89.976869][ T971] usb 1-1: USB disconnect, device number 3 [ 90.055360][ T867] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.221671][ T5853] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.266865][ T867] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 90.279588][ T867] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.290815][ T867] usb 4-1: config 0 has no interface number 0 [ 90.302833][ T867] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.311054][ T867] usb 4-1: config 0 has no interface number 0 [ 90.549080][ T867] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.804914][ T867] usb 4-1: config 0 has no interface number 0 [ 90.814005][ T867] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.822738][ T867] usb 4-1: config 0 has no interface number 0 [ 90.831254][ T867] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.845854][ T867] usb 4-1: config 0 has no interface number 0 [ 90.859284][ T867] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.862652][ T5853] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 90.874985][ T867] usb 4-1: config 0 has no interface number 0 [ 90.879721][ T5853] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.897463][ T5853] usb 3-1: config 0 has no interface number 0 [ 90.917448][ T5853] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.926143][ T5853] usb 3-1: config 0 has no interface number 0 [ 90.949509][ T5853] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.962285][ T5853] usb 3-1: config 0 has no interface number 0 [ 90.985481][ T867] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.986927][ T5853] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 90.994023][ T867] usb 4-1: config 0 has no interface number 0 [ 91.012996][ T5853] usb 3-1: config 0 has no interface number 0 [ 91.048852][ T5853] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 91.067461][ T5853] usb 3-1: config 0 has no interface number 0 [ 91.107163][ T5853] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 91.113871][ T867] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 91.123152][ T5853] usb 3-1: config 0 has no interface number 0 [ 91.130618][ T5853] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 91.130957][ T867] usb 4-1: config 0 has no interface number 0 [ 91.141344][ T5853] usb 3-1: config 0 has no interface number 0 [ 91.162193][ T5853] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 91.170773][ T5853] usb 3-1: config 0 has no interface number 0 [ 91.173550][ T867] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=a1.15 [ 91.182505][ T5853] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=a1.15 [ 91.198143][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.219680][ T5853] usb 3-1: Product: syz [ 91.230179][ T5853] usb 3-1: Manufacturer: syz [ 91.241694][ T5853] usb 3-1: SerialNumber: syz [ 91.256211][ T867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.275681][ T867] usb 4-1: Product: syz [ 91.291276][ T867] usb 4-1: Manufacturer: syz [ 91.297197][ T867] usb 4-1: SerialNumber: syz [ 91.312150][ T5853] usb 3-1: config 0 descriptor?? [ 91.322829][ T867] usb 4-1: config 0 descriptor?? [ 91.332775][ T867] ttusb_dec_send_command: command bulk message failed: error -22 [ 91.341203][ T867] ttusb-dec 4-1:0.56: probe with driver ttusb-dec failed with error -22 [ 91.356535][ T5853] ttusb_dec_send_command: command bulk message failed: error -22 [ 91.369917][ T5853] ttusb-dec 3-1:0.56: probe with driver ttusb-dec failed with error -22 [ 91.611953][ T6426] cgroup: fork rejected by pids controller in /syz3 [ 92.054058][ T6453] program syz.0.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.178828][ T6430] cgroup: fork rejected by pids controller in /syz2 [ 92.244626][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 92.244644][ T29] audit: type=1400 audit(1734350567.342:325): avc: denied { create } for pid=6561 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.252842][ T6562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.169'. [ 92.270599][ T8] usb 3-1: USB disconnect, device number 6 [ 92.300618][ T5853] usb 4-1: USB disconnect, device number 4 [ 92.316413][ T29] audit: type=1400 audit(1734350567.342:326): avc: denied { accept } for pid=6561 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.968675][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.992877][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.088551][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.155611][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.314592][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.333865][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.349816][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.384448][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.395200][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.410642][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.425074][ T5821] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.436368][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.457708][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.479486][ T29] audit: type=1400 audit(1734350568.572:327): avc: denied { mounton } for pid=6572 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 93.542429][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.611593][ T29] audit: type=1400 audit(1734350568.652:328): avc: denied { read } for pid=6578 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.614283][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.654952][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.690487][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.694585][ T11] bridge_slave_1: left allmulticast mode [ 94.699867][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.709041][ T11] bridge_slave_1: left promiscuous mode [ 94.713959][ T5815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.718908][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.724792][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.747849][ T11] bridge_slave_0: left allmulticast mode [ 94.753760][ T11] bridge_slave_0: left promiscuous mode [ 94.759754][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.147143][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.159338][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.170739][ T11] bond0 (unregistering): Released all slaves [ 95.186932][ T6572] chnl_net:caif_netlink_parms(): no params data found [ 95.223134][ T29] audit: type=1400 audit(1734350570.322:329): avc: denied { search } for pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.251755][ T29] audit: type=1400 audit(1734350570.322:330): avc: denied { read } for pid=5484 comm="dhcpcd" name="n103" dev="tmpfs" ino=2499 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.274857][ T29] audit: type=1400 audit(1734350570.322:331): avc: denied { open } for pid=5484 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2499 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.298513][ T29] audit: type=1400 audit(1734350570.322:332): avc: denied { getattr } for pid=5484 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2499 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.461107][ T29] audit: type=1400 audit(1734350570.552:333): avc: denied { read } for pid=6612 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.489226][ T29] audit: type=1400 audit(1734350570.552:334): avc: denied { open } for pid=6612 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.492758][ T5815] Bluetooth: hci1: command tx timeout [ 95.570263][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.585838][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.595308][ T6572] bridge_slave_0: entered allmulticast mode [ 95.602443][ T6572] bridge_slave_0: entered promiscuous mode [ 95.748124][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.757998][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.770033][ T6572] bridge_slave_1: entered allmulticast mode [ 95.778230][ T6572] bridge_slave_1: entered promiscuous mode [ 95.880216][ T11] hsr_slave_0: left promiscuous mode [ 95.889489][ T11] hsr_slave_1: left promiscuous mode [ 95.905743][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.913970][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.925852][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.937269][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.956525][ T11] veth1_macvtap: left promiscuous mode [ 95.962761][ T11] veth0_macvtap: left promiscuous mode [ 95.968395][ T11] veth1_vlan: left promiscuous mode [ 95.974094][ T11] veth0_vlan: left promiscuous mode [ 96.305356][ T11] team0 (unregistering): Port device team_slave_1 removed [ 96.337285][ T11] team0 (unregistering): Port device team_slave_0 removed [ 96.615089][ T5821] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.771520][ T5821] Bluetooth: hci5: command tx timeout [ 96.861217][ T6572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.906550][ T6572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.017337][ T6591] chnl_net:caif_netlink_parms(): no params data found [ 97.113249][ T6572] team0: Port device team_slave_0 added [ 97.127994][ T6572] team0: Port device team_slave_1 added [ 97.390818][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.456208][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.560192][ T6572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.580026][ T5821] Bluetooth: hci1: command tx timeout [ 97.676011][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 97.676026][ T29] audit: type=1400 audit(1734350572.772:350): avc: denied { write } for pid=6660 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.825511][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.858291][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.860158][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 98.028615][ T6572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.266075][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.288753][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.300914][ T6591] bridge_slave_0: entered allmulticast mode [ 98.305510][ T29] audit: type=1400 audit(1734350573.392:351): avc: denied { write } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.312084][ T6591] bridge_slave_0: entered promiscuous mode [ 98.379919][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.385079][ T29] audit: type=1400 audit(1734350573.392:352): avc: denied { remove_name } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.407477][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.432403][ T6591] bridge_slave_1: entered allmulticast mode [ 98.439392][ T6591] bridge_slave_1: entered promiscuous mode [ 98.492414][ T29] audit: type=1400 audit(1734350573.392:353): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.555609][ T29] audit: type=1400 audit(1734350573.392:354): avc: denied { add_name } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.627104][ T6690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'. [ 98.642650][ T29] audit: type=1400 audit(1734350573.392:355): avc: denied { unlink } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.673666][ T29] audit: type=1400 audit(1734350573.392:356): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.738048][ T6572] hsr_slave_0: entered promiscuous mode [ 98.757847][ T6572] hsr_slave_1: entered promiscuous mode [ 98.839314][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.850217][ T29] audit: type=1400 audit(1734350573.942:357): avc: denied { connect } for pid=6699 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.878831][ T5821] Bluetooth: hci5: command tx timeout [ 98.918375][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.594811][ T29] audit: type=1400 audit(1734350574.162:358): avc: denied { ioctl } for pid=6699 comm="syz.0.206" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.671534][ T5821] Bluetooth: hci1: command tx timeout [ 99.788605][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 99.815654][ T29] audit: type=1400 audit(1734350574.912:359): avc: denied { mount } for pid=6711 comm="syz.0.210" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.987089][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.038716][ T6591] team0: Port device team_slave_0 added [ 100.051906][ T6591] team0: Port device team_slave_1 added [ 100.098795][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.214038][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.245429][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.257492][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.259234][ T6726] netlink: 'syz.0.214': attribute type 7 has an invalid length. [ 100.289792][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.293779][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 100.331563][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.338551][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.391521][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.499213][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.662077][ T6591] hsr_slave_0: entered promiscuous mode [ 100.684759][ T6591] hsr_slave_1: entered promiscuous mode [ 100.713026][ T6591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.721308][ T6591] Cannot create hsr debugfs directory [ 100.838746][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 100.941809][ T5821] Bluetooth: hci5: command tx timeout [ 100.972051][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 101.278247][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 101.745395][ T5821] Bluetooth: hci1: command tx timeout [ 102.133257][ T11] bridge_slave_1: left allmulticast mode [ 102.157836][ T11] bridge_slave_1: left promiscuous mode [ 102.201640][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.221259][ T11] bridge_slave_0: left allmulticast mode [ 102.236124][ T11] bridge_slave_0: left promiscuous mode [ 102.248770][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.685935][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.696783][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.707556][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 102.723228][ T11] bond0 (unregistering): Released all slaves [ 102.974733][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 102.974754][ T29] audit: type=1400 audit(1734350578.062:363): avc: denied { mounton } for pid=6776 comm="syz.0.225" path="/52/file1/file0" dev="autofs" ino=10906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 103.012458][ T5821] Bluetooth: hci5: command tx timeout [ 103.204912][ T25] IPVS: starting estimator thread 0... [ 103.321853][ T6786] IPVS: using max 26 ests per chain, 62400 per kthread [ 103.607127][ T6572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.666175][ T6572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.750461][ T11] hsr_slave_0: left promiscuous mode [ 103.767681][ T11] hsr_slave_1: left promiscuous mode [ 103.787121][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.838825][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.854885][ T6796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.229'. [ 103.875469][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.884917][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.919463][ T11] veth1_macvtap: left promiscuous mode [ 103.928970][ T11] veth0_macvtap: left promiscuous mode [ 103.937518][ T11] veth1_vlan: left promiscuous mode [ 103.943340][ T11] veth0_vlan: left promiscuous mode [ 104.876622][ T11] team0 (unregistering): Port device team_slave_1 removed [ 104.909926][ T11] team0 (unregistering): Port device team_slave_0 removed [ 105.276949][ T6572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.308595][ T6796] netlink: 92 bytes leftover after parsing attributes in process `syz.4.229'. [ 105.318214][ T6796] netlink: 92 bytes leftover after parsing attributes in process `syz.4.229'. [ 105.409012][ T6572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.433448][ T6817] tipc: Started in network mode [ 105.438615][ T6817] tipc: Node identity fc01, cluster identity 4711 [ 105.450161][ T6817] tipc: Enabling of bearer rejected, failed to enable media [ 105.598990][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 105.637201][ T6591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.663344][ T6591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.679415][ T6591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.716225][ T6591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.744256][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.789377][ T6572] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.866928][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.874115][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.942408][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.949567][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.085158][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.147835][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.166521][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.173735][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.187837][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.195034][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.428635][ T6572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.545046][ T6572] veth0_vlan: entered promiscuous mode [ 106.578926][ T6572] veth1_vlan: entered promiscuous mode [ 106.610518][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.629226][ T6572] veth0_macvtap: entered promiscuous mode [ 106.687523][ T6572] veth1_macvtap: entered promiscuous mode [ 106.711436][ T6591] veth0_vlan: entered promiscuous mode [ 106.729094][ T6591] veth1_vlan: entered promiscuous mode [ 106.743588][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.760813][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.771044][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.782880][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.793215][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.803924][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.822281][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.840887][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.851672][ T867] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.866322][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.878670][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.889328][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.899643][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.914715][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.925953][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.949119][ T6591] veth0_macvtap: entered promiscuous mode [ 106.965146][ T6572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.974269][ T6572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.984200][ T6572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.993196][ T867] usb 5-1: device descriptor read/64, error -71 [ 106.999567][ T6572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.016808][ T6591] veth1_macvtap: entered promiscuous mode [ 107.053761][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.070131][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.080379][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.097274][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.107954][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.121915][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.134878][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.146630][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.157590][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.196003][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.209917][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.220854][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.235928][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.246142][ T867] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.258188][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.269700][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.285724][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.296277][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.311023][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.334932][ T6591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.361502][ T6591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.374733][ T6591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.383766][ T6591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.412700][ T867] usb 5-1: device descriptor read/64, error -71 [ 107.468173][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.489582][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.522659][ T867] usb usb5-port1: attempt power cycle [ 107.567864][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.598889][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.612029][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.630145][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.695700][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.748674][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.756540][ T29] audit: type=1400 audit(1734350582.852:364): avc: denied { mounton } for pid=6572 comm="syz-executor" path="/root/syzkaller.Y5yJLT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 107.788049][ T29] audit: type=1400 audit(1734350582.882:365): avc: denied { mount } for pid=6572 comm="syz-executor" name="/" dev="gadgetfs" ino=6930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 108.065384][ T867] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.113803][ T867] usb 5-1: device descriptor read/8, error -71 [ 108.215882][ T29] audit: type=1400 audit(1734350583.312:366): avc: denied { getopt } for pid=6902 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.371642][ T867] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.392121][ T867] usb 5-1: device descriptor read/8, error -71 [ 108.600116][ T867] usb usb5-port1: unable to enumerate USB device [ 110.059373][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 110.521599][ T29] audit: type=1400 audit(1734350585.612:367): avc: denied { bind } for pid=6932 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.924659][ T29] audit: type=1400 audit(1734350585.992:368): avc: denied { name_bind } for pid=6936 comm="syz.1.251" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 112.661778][ T29] audit: type=1400 audit(1734350587.702:369): avc: denied { bind } for pid=6954 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.997778][ T29] audit: type=1400 audit(1734350588.072:370): avc: denied { block_suspend } for pid=6949 comm="syz.2.256" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.447043][ T29] audit: type=1400 audit(1734350588.542:371): avc: denied { write } for pid=6966 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 113.998923][ T6977] block nbd2: NBD_DISCONNECT [ 114.004255][ T6977] block nbd2: Disconnected due to user request. [ 114.010681][ T6977] block nbd2: shutting down sockets [ 114.617217][ T6990] ALSA: mixer_oss: invalid OSS volume '' [ 114.623993][ T6990] netlink: 64 bytes leftover after parsing attributes in process `syz.3.265'. [ 114.634879][ T6990] unsupported nlmsg_type 40 [ 116.028501][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 116.196980][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 116.631910][ T7011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.756578][ T7014] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 117.567435][ T29] audit: type=1400 audit(1734350592.602:372): avc: denied { accept } for pid=7015 comm="syz.2.274" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 120.261346][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.287993][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.297512][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.317687][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.333197][ T5815] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 120.340501][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.657178][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.717337][ T7046] chnl_net:caif_netlink_parms(): no params data found [ 121.218516][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.534077][ T29] audit: type=1400 audit(1734350596.622:373): avc: denied { bind } for pid=7053 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.563693][ T7062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=7062 comm=syz.3.286 [ 121.943256][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.950650][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.960840][ T7046] bridge_slave_0: entered allmulticast mode [ 122.790215][ T5815] Bluetooth: hci2: command tx timeout [ 122.825805][ T7046] bridge_slave_0: entered promiscuous mode [ 123.010634][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.403189][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.412263][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.425449][ T7046] bridge_slave_1: entered allmulticast mode [ 123.457559][ T7046] bridge_slave_1: entered promiscuous mode [ 123.534414][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.545799][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.690503][ T7046] team0: Port device team_slave_0 added [ 124.284624][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.427669][ T7046] team0: Port device team_slave_1 added [ 124.442189][ T7088] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 124.470012][ T7088] CIFS: Unable to determine destination address [ 124.493398][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.519457][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.635578][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.668316][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.686596][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.713308][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.786497][ T29] audit: type=1400 audit(1734350599.882:374): avc: denied { read write } for pid=7087 comm="syz.3.293" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 124.862009][ T5815] Bluetooth: hci2: command tx timeout [ 124.874133][ T29] audit: type=1400 audit(1734350599.882:375): avc: denied { open } for pid=7087 comm="syz.3.293" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 124.981211][ T7046] hsr_slave_0: entered promiscuous mode [ 125.008923][ T7046] hsr_slave_1: entered promiscuous mode [ 125.015688][ T7046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.024671][ T7046] Cannot create hsr debugfs directory [ 125.115423][ T12] bridge_slave_1: left allmulticast mode [ 125.122832][ T12] bridge_slave_1: left promiscuous mode [ 125.128994][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.139573][ T12] bridge_slave_0: left allmulticast mode [ 125.147424][ T12] bridge_slave_0: left promiscuous mode [ 125.153331][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.588682][ T29] audit: type=1400 audit(1734350600.682:376): avc: denied { connect } for pid=7102 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.252308][ T29] audit: type=1400 audit(1734350600.912:377): avc: denied { write } for pid=7102 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.440883][ T29] audit: type=1400 audit(1734350601.482:378): avc: denied { setopt } for pid=7102 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 126.485843][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.494650][ T7102] delete_channel: no stack [ 126.526117][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.556959][ T12] bond0 (unregistering): Released all slaves [ 126.629490][ T7113] bridge1: entered promiscuous mode [ 127.001624][ T5815] Bluetooth: hci2: command tx timeout [ 127.121517][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.422915][ T9] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 129.092921][ T5815] Bluetooth: hci2: command tx timeout [ 129.209306][ T12] hsr_slave_0: left promiscuous mode [ 129.222182][ T12] hsr_slave_1: left promiscuous mode [ 129.257659][ T9] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 129.266056][ T9] usb 4-1: config 0 has no interface number 0 [ 129.275023][ T9] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 129.283264][ T9] usb 4-1: config 0 has no interface number 0 [ 129.381706][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.412043][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.419334][ T9] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 129.428079][ T9] usb 4-1: config 0 has no interface number 0 [ 129.439245][ T9] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 129.447449][ T9] usb 4-1: config 0 has no interface number 0 [ 129.620281][ T9] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 129.630376][ T9] usb 4-1: config 0 has no interface number 0 [ 129.674605][ T9] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 129.685813][ T9] usb 4-1: config 0 has no interface number 0 [ 129.686381][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.728615][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.833520][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.846075][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.855577][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.866069][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.876491][ T5821] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.884139][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.981872][ T12] veth1_macvtap: left promiscuous mode [ 130.013541][ T12] veth0_macvtap: left promiscuous mode [ 130.019382][ T12] veth1_vlan: left promiscuous mode [ 130.024838][ T9] usb 4-1: unable to read config index 6 descriptor/start: -71 [ 130.032619][ T9] usb 4-1: can't read configurations, error -71 [ 130.042336][ T12] veth0_vlan: left promiscuous mode [ 130.488936][ T12] team0 (unregistering): Port device team_slave_1 removed [ 130.601156][ T12] team0 (unregistering): Port device team_slave_0 removed [ 131.419686][ T29] audit: type=1400 audit(1734350606.492:379): avc: denied { ioctl } for pid=7164 comm="syz.3.311" path="socket:[13889]" dev="sockfs" ino=13889 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 131.694662][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.706399][ T7046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.717354][ T7046] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.750048][ T7046] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.769107][ T7046] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.851746][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 131.865031][ T9] usb 4-1: no configurations [ 131.884905][ T9] usb 4-1: can't read configurations, error -22 [ 131.971663][ T5815] Bluetooth: hci4: command tx timeout [ 132.021607][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.041044][ T7046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.078588][ T7046] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.112896][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.120033][ T6044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.211723][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 132.224019][ T9] usb 4-1: no configurations [ 132.228677][ T9] usb 4-1: can't read configurations, error -22 [ 132.241893][ T867] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.266507][ T9] usb usb4-port1: attempt power cycle [ 132.277454][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.284618][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.389551][ T7046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.489444][ T7151] chnl_net:caif_netlink_parms(): no params data found [ 132.549540][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.556340][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.587994][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.588561][ T867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.621542][ T867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.641602][ T867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.674921][ T867] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 132.712273][ T867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.755602][ T867] usb 3-1: config 0 descriptor?? [ 132.955379][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.982046][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 132.987844][ T9] usb 4-1: no configurations [ 132.992959][ T9] usb 4-1: can't read configurations, error -22 [ 133.124010][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.134332][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.183489][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 133.201105][ T9] usb 4-1: no configurations [ 133.220664][ T9] usb 4-1: can't read configurations, error -22 [ 133.244561][ T9] usb usb4-port1: unable to enumerate USB device [ 133.335192][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.360641][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.376961][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.387080][ T7151] bridge_slave_0: entered allmulticast mode [ 133.399994][ T7151] bridge_slave_0: entered promiscuous mode [ 133.427908][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.483991][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.518874][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.546249][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.560968][ T7151] bridge_slave_1: entered allmulticast mode [ 133.577484][ T7151] bridge_slave_1: entered promiscuous mode [ 133.585305][ T867] acrux 0003:1A34:0802.0001: unknown main item tag 0x1 [ 133.621476][ T867] acrux 0003:1A34:0802.0001: unknown main item tag 0x1 [ 133.660417][ T867] acrux 0003:1A34:0802.0001: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 133.684406][ T867] acrux 0003:1A34:0802.0001: no inputs found [ 133.703018][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.706233][ T867] acrux 0003:1A34:0802.0001: Failed to enable force feedback support, error: -19 [ 133.786410][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.817365][ T7179] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 133.925429][ T867] usb 3-1: USB disconnect, device number 7 [ 133.964881][ T29] audit: type=1400 audit(1734350609.062:380): avc: denied { listen } for pid=7235 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.979125][ T7236] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.991092][ T12] bridge_slave_1: left allmulticast mode [ 133.997707][ T12] bridge_slave_1: left promiscuous mode [ 134.004354][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.014409][ T29] audit: type=1400 audit(1734350609.102:381): avc: denied { setopt } for pid=7235 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 134.034594][ T29] audit: type=1400 audit(1734350609.102:382): avc: denied { write } for pid=7235 comm="syz.1.321" path="socket:[14038]" dev="sockfs" ino=14038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 134.058878][ T5815] Bluetooth: hci4: command tx timeout [ 134.065064][ T12] bridge_slave_0: left allmulticast mode [ 134.070892][ T12] bridge_slave_0: left promiscuous mode [ 134.077142][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.369782][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.382684][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.397983][ T12] bond0 (unregistering): Released all slaves [ 134.421156][ T7151] team0: Port device team_slave_0 added [ 134.495527][ T29] audit: type=1400 audit(1734350609.592:383): avc: denied { read } for pid=7237 comm="syz.3.322" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.535609][ T12] tipc: Left network mode [ 134.560701][ T7151] team0: Port device team_slave_1 added [ 134.602825][ T29] audit: type=1400 audit(1734350609.702:384): avc: granted { setsecparam } for pid=7240 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 134.607022][ T7046] veth0_vlan: entered promiscuous mode [ 134.663063][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.670137][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.713993][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.764139][ T7243] sctp: [Deprecated]: syz.3.322 (pid 7243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.764139][ T7243] Use struct sctp_sack_info instead [ 134.790718][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.810844][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.840883][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.857150][ T7046] veth1_vlan: entered promiscuous mode [ 135.052909][ T7151] hsr_slave_0: entered promiscuous mode [ 135.067106][ T7151] hsr_slave_1: entered promiscuous mode [ 135.078504][ T7151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.101709][ T7151] Cannot create hsr debugfs directory [ 135.167284][ T12] hsr_slave_0: left promiscuous mode [ 135.186216][ T12] hsr_slave_1: left promiscuous mode [ 135.208662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.230428][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.249855][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.258855][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.288003][ T12] veth1_macvtap: left promiscuous mode [ 135.302213][ T12] veth0_macvtap: left promiscuous mode [ 135.310856][ T12] veth1_vlan: left promiscuous mode [ 135.322299][ T12] veth0_vlan: left promiscuous mode [ 136.133251][ T5815] Bluetooth: hci4: command tx timeout [ 136.638432][ T7276] process 'syz.1.329' launched './file1' with NULL argv: empty string added [ 136.650989][ T29] audit: type=1400 audit(1734350611.742:385): avc: denied { execute_no_trans } for pid=7275 comm="syz.1.329" path="/106/file1" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.784983][ T7282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.805553][ T7282] __vm_enough_memory: pid: 7282, comm: syz.3.331, bytes: 4503599627366400 not enough memory for the allocation [ 136.882251][ T5865] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.894962][ T29] audit: type=1400 audit(1734350611.992:386): avc: granted { setsecparam } for pid=7283 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 137.032020][ T12] team0 (unregistering): Port device team_slave_1 removed [ 137.054927][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 137.060590][ T5865] usb 3-1: no configurations [ 137.065563][ T5865] usb 3-1: can't read configurations, error -22 [ 137.085467][ T12] team0 (unregistering): Port device team_slave_0 removed [ 137.224210][ T5865] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.386672][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 137.400414][ T5865] usb 3-1: no configurations [ 137.415884][ T5865] usb 3-1: can't read configurations, error -22 [ 137.430910][ T5865] usb usb3-port1: attempt power cycle [ 137.513389][ T5815] Bluetooth: hci3: ISO packet for unknown connection handle 2560 [ 137.514710][ T7046] veth0_macvtap: entered promiscuous mode [ 137.584033][ T7046] veth1_macvtap: entered promiscuous mode [ 137.774113][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.793386][ T5865] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.795634][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.816898][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.830897][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.844637][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.856843][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.879473][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.890041][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 137.893083][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.906025][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.913004][ T5865] usb 3-1: no configurations [ 137.922080][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.933136][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.936649][ T867] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 137.943459][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.961018][ T5865] usb 3-1: can't read configurations, error -22 [ 137.978485][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.098035][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.302573][ T5815] Bluetooth: hci4: command tx timeout [ 138.330170][ T7046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.408770][ T7046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.488614][ T7046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.527819][ T7046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.554341][ T12] IPVS: stop unused estimator thread 0... [ 138.605807][ T867] usb 4-1: Using ep0 maxpacket: 8 [ 138.624440][ T867] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 138.625222][ T7151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.640477][ T867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.648667][ T5865] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.660198][ T7151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.673465][ T867] usb 4-1: Product: syz [ 138.679021][ T867] usb 4-1: Manufacturer: syz [ 138.684360][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 138.691807][ T5865] usb 3-1: no configurations [ 138.695055][ T7151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.701474][ T5865] usb 3-1: can't read configurations, error -22 [ 138.717121][ T867] usb 4-1: SerialNumber: syz [ 138.729247][ T867] usb 4-1: config 0 descriptor?? [ 138.752758][ T5865] usb usb3-port1: unable to enumerate USB device [ 138.766231][ T867] hub 4-1:0.0: bad descriptor, ignoring hub [ 138.795844][ T867] hub 4-1:0.0: probe with driver hub failed with error -5 [ 138.814865][ T867] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 138.826670][ T7151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.893612][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.921736][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.978887][ T25] usb 4-1: USB disconnect, device number 11 [ 139.040184][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.056220][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.061854][ T6085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.089360][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.118262][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.185413][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.235051][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.246154][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.255182][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.275255][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.634331][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.641605][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.678219][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.685385][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.731088][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.758993][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.790584][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 139.858795][ T7151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.870927][ T29] audit: type=1400 audit(1734350614.972:387): avc: granted { setsecparam } for pid=7338 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 139.910714][ T7151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.932157][ T29] audit: type=1400 audit(1734350615.002:388): avc: denied { write } for pid=7337 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.008341][ T29] audit: type=1400 audit(1734350615.102:389): avc: denied { ioctl } for pid=7337 comm="syz.3.340" path="socket:[15490]" dev="sockfs" ino=15490 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.109840][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 140.223495][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.512841][ T29] audit: type=1326 audit(1734350615.562:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1cf85d19 code=0x7ffc0000 [ 140.536454][ T29] audit: type=1326 audit(1734350615.582:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1cf85d19 code=0x7ffc0000 [ 140.560181][ T29] audit: type=1326 audit(1734350615.582:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fde1cf85d19 code=0x7ffc0000 [ 140.569992][ T7370] geneve2: entered promiscuous mode [ 140.583907][ T29] audit: type=1326 audit(1734350615.582:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1cf85d19 code=0x7ffc0000 [ 140.612971][ T29] audit: type=1326 audit(1734350615.582:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1cf85d19 code=0x7ffc0000 [ 140.637163][ T7370] geneve2: entered allmulticast mode [ 140.927470][ T7151] veth0_vlan: entered promiscuous mode [ 140.967884][ T7151] veth1_vlan: entered promiscuous mode [ 141.068524][ T7151] veth0_macvtap: entered promiscuous mode [ 141.094618][ T7151] veth1_macvtap: entered promiscuous mode [ 141.137560][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.182164][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.201572][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.216355][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.375304][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.585999][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.804603][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.858370][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.876761][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.893592][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.904137][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.914032][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.924500][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.934401][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.944876][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.954777][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.965238][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.976076][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.089605][ T7151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.110156][ T7151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.156656][ T7151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.191513][ T7151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.899653][ T7008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.943484][ T7008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.054471][ T867] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.110855][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.144916][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.247412][ T867] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 143.290305][ T867] usb 3-1: config 0 has no interface number 0 [ 143.352151][ T867] usb 3-1: config 0 interface 222 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.622364][ T7425] befs: (nbd5): No write support. Marking filesystem read-only [ 143.630653][ T7425] syz.5.358: attempt to access beyond end of device [ 143.630653][ T7425] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 143.810598][ T867] usb 3-1: config 0 interface 222 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.820730][ T867] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 143.830333][ T867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.847075][ T867] usb 3-1: config 0 descriptor?? [ 143.996774][ T7429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.381643][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 144.805905][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 144.805929][ T29] audit: type=1400 audit(1734350619.392:440): avc: denied { ioctl } for pid=7406 comm="syz.2.354" path="socket:[15193]" dev="sockfs" ino=15193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.928356][ T29] audit: type=1400 audit(1734350619.512:441): avc: denied { bind } for pid=7411 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.984563][ T29] audit: type=1400 audit(1734350619.602:442): avc: denied { accept } for pid=7411 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.017538][ T29] audit: type=1400 audit(1734350620.102:443): avc: denied { accept } for pid=7442 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 145.216473][ T29] audit: type=1400 audit(1734350620.152:444): avc: denied { write } for pid=7446 comm="syz.6.361" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 146.132535][ T7466] tipc: Enabling of bearer rejected, failed to enable media [ 146.204216][ T867] usbhid 3-1:0.222: can't add hid device: -71 [ 146.255668][ T867] usbhid 3-1:0.222: probe with driver usbhid failed with error -71 [ 146.530006][ T867] usb 3-1: USB disconnect, device number 12 [ 146.922518][ T29] audit: type=1400 audit(1734350621.982:445): avc: denied { setopt } for pid=7470 comm="syz.6.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.811542][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.881892][ T5853] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 147.982311][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 148.004763][ T9] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 148.018284][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.031909][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 148.044010][ T5853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.064305][ T5853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.075667][ T9] usb 6-1: Product: syz [ 148.087469][ T9] usb 6-1: Manufacturer: syz [ 148.096534][ T9] usb 6-1: SerialNumber: syz [ 148.101247][ T5853] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.121813][ T9] usb 6-1: config 0 descriptor?? [ 148.138279][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 148.154594][ T5853] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 148.180016][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.199230][ T5853] usb 3-1: Product: syz [ 148.210709][ T5853] usb 3-1: Manufacturer: syz [ 148.252088][ T29] audit: type=1400 audit(1734350623.342:446): avc: denied { sys_chroot } for pid=7524 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 148.300999][ T5853] usb 3-1: SerialNumber: syz [ 148.310498][ T29] audit: type=1400 audit(1734350623.342:447): avc: denied { setgid } for pid=7524 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 148.378033][ T29] audit: type=1400 audit(1734350623.342:448): avc: denied { setrlimit } for pid=7524 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 148.403024][ T5853] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 148.436075][ T5853] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 148.451091][ T5853] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 148.668728][ T5853] usb 3-1: USB disconnect, device number 13 [ 148.873579][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.383'. [ 149.085502][ T29] audit: type=1400 audit(1734350624.182:449): avc: denied { remount } for pid=7552 comm="syz.6.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 149.374044][ T7558] binder: 7557:7558 ioctl d0009412 200021c0 returned -22 [ 149.640339][ T7569] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 149.659634][ T7569] netlink: 224 bytes leftover after parsing attributes in process `syz.2.387'. [ 149.820054][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.389'. [ 149.822923][ T7585] netlink: 52 bytes leftover after parsing attributes in process `syz.5.372'. [ 149.832662][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 150.022760][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 150.061114][ T867] libceph: connect (1)[c::]:6789 error -101 [ 150.071636][ T9] gspca_ov534_9: reg_w failed -110 [ 150.083235][ T867] libceph: mon0 (1)[c::]:6789 connect error [ 150.173585][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.389'. [ 150.431151][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 150.437501][ T867] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 150.445848][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 150.601761][ T867] usb 3-1: Using ep0 maxpacket: 16 [ 150.615120][ T867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.651672][ T867] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 150.688940][ T867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.722974][ T867] usb 3-1: config 0 descriptor?? [ 150.751692][ T9] gspca_ov534_9: Unknown sensor 0000 [ 150.751741][ T9] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 150.973133][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 150.979221][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 151.084226][ T7586] ceph: No mds server is up or the cluster is laggy [ 151.151620][ T5867] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 151.406064][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 151.414119][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.447010][ T5867] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 151.466562][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.476492][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.487804][ T5867] usb 4-1: Product: syz [ 151.494136][ T5867] usb 4-1: Manufacturer: syz [ 151.498982][ T5867] usb 4-1: SerialNumber: syz [ 151.517348][ T5867] usb 4-1: config 0 descriptor?? [ 151.532938][ T867] usbhid 3-1:0.0: can't add hid device: -71 [ 151.538963][ T867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.562331][ T5867] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 151.599795][ T867] usb 3-1: USB disconnect, device number 14 [ 151.810521][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 151.810649][ T29] audit: type=1400 audit(1734350626.902:455): avc: denied { ioctl } for pid=7621 comm="syz.1.396" path="socket:[16479]" dev="sockfs" ino=16479 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 151.841405][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.858604][ T7631] [U] [ 151.865081][ T7631] [U] [ 151.868416][ T7631] [U] B-LRJ[Ćќ6}%4̾ H@K-YLEU@F%PEZE,9F* [ 151.878878][ T7631] [U] CW* 9JQ#ESWCV1! GPX [ 151.886615][ T7631] [U] N%9C_NʅBC$4( [ 151.895145][ T7631] [U] H Q؛TORI#ıTNBS_RЬƫ:؀ɦTȯ 0ÏWڙ_[HN% [ 151.906983][ T7631] [U] Ϡ4RЛ<)6JG؃K^R\ [ 151.913036][ T7631] [U] 7R:J37 [ 151.923335][ T7631] [U] YP<ԅUH3 ư-̤\PQBX!Q6SO'}[P5O>D֎YJ>|H0=ԷTXZY֦ʢĚ4IǢ5AZ~ZA~K^TGSJI:OD!M2KWR>ƈΗKC?X8H*@QEۻU .J9ȓ~{`'R)-Ǭ=5֝JLY CB;+LP,FNY%3P&)][ȋ4Lö!J> [ 151.949699][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.958135][ T7631] [U] .”C֯EJJ@KJ605RXUTTO&XO֕\&N%Y176`IW [ 151.975503][ T7631] [U] M<@NKJ(6))VLR [ 151.984255][ T7631] [U] >YG Z?`OMX؍Ӈ"9+DE{Ō$~BYDUME!XݛAAU}J£2N%MBQ [ 151.997762][ T7631] [U] WVW@HZ=(EJ~OS@BH:"!JIUJ=)ΎU GԖ=Y=KADR:=SAX X [ 152.018852][ T7631] [U] BIޙE}ET@3( V{κ~UK+{3T$ƻ.N[8Sʇ""ʔ̺]RG5 [ 152.029933][ T7631] [U] V{ըVNB>DMTQT [ 152.039052][ T7631] [U] G*|9ٺņ [ 152.044211][ T7631] [U] GMIUE! Tό*ߐ8A7I5-|6LK [ 152.053447][ T7631] [U] NūD  S}RBYWIOQ&O,P],7͛UI [ 152.071974][ T7631] [U] $LU2F_3+|NWµZEǗP1W~N(O͝8D SCDʮF65ZGRް{TK"@ :5}GBDѸ\K [ 152.090283][ T7631] [U] Yҟ844N<; [ 152.102459][ T7631] [U] UI7X#E4VMLȋG͔A)-(N̗NL#)׌SU6 [ 152.113587][ T7631] [U] )<E?AUܤ9 %]DCCE+L<'T1Kȅ3.ɻ WSZYϼ9I>]Ȝ}{/`ܿ5'E 41 TNAX߿ʯϭQëI T%G7L~BS [ 152.130678][ T7631] [U] ͢ [ 152.146102][ T7631] [U] ZUĪ4&˙E~8Eσ1L{ȨGVY$PNO4M*F`ATM0?*I#;Ѥ+4VGAݬ%H[AYX)LG]F H|ZVE/ϧ17Ǭ-ǽHO+^)8&E@A8G˅-WRS-V-ұO>ŝQ#9UAH)FSA֙INZ@C>KLVD^1)M$/Є78..QA|Ȧ)9">D>E#I`\|{UFH.. EMW}]5 -,ŢRK}FQCO*PNF [ 152.179350][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.186082][ T7631] [U]  [ 152.192057][ T7631] [U] T0ԝ*հXAɣA4WKC]X]L= [ 152.203518][ T7631] [U] $CUGSEԲ6TτPP˒Z3T2ȍ9W-֑̙ARݻNBڎ:^XϧB̲~{J [ 152.221170][ T7631] [U] T̷E' 2L*A -;P;BT.N`_Ӯ;*U;5C#R/QK*MSA#)AB>YؐO\;^'O5_YHLCE&A`;œԸЕSSƇ{H TM0BI^L>8٢VV8<-{$>D ý]WU0?K ˼ڹ[UIRB_IL/ESI*WS*ZS͎ђ [ 152.222320][ T5867] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 152.247089][ T7631] [U] [ 152.495733][ T7628] [U] [ 152.582753][ T5867] usb 4-1: USB disconnect, device number 12 [ 152.687675][ T29] audit: type=1400 audit(1734350627.782:456): avc: denied { create } for pid=7640 comm="syz.2.399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.021244][ T29] audit: type=1400 audit(1734350628.112:457): avc: denied { getopt } for pid=7643 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.089347][ T29] audit: type=1400 audit(1734350628.152:458): avc: denied { write } for pid=7640 comm="syz.2.399" name="file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.183884][ T867] usb 6-1: USB disconnect, device number 2 [ 153.206673][ T29] audit: type=1400 audit(1734350628.152:459): avc: denied { open } for pid=7640 comm="syz.2.399" path="/36/file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.255672][ T29] audit: type=1400 audit(1734350628.152:460): avc: denied { ioctl } for pid=7640 comm="syz.2.399" path="/36/file0" dev="tmpfs" ino=208 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.279834][ T29] audit: type=1400 audit(1734350628.332:461): avc: denied { unlink } for pid=6591 comm="syz-executor" name="file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.302447][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.430221][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.503732][ T29] audit: type=1400 audit(1734350629.572:462): avc: denied { read } for pid=7661 comm="syz.6.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.516589][ T7680] syzkaller0: entered promiscuous mode [ 154.529126][ T7680] syzkaller0: entered allmulticast mode [ 154.841838][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.883934][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 155.118951][ T29] audit: type=1400 audit(1734350630.222:463): avc: denied { write } for pid=7717 comm="syz.6.415" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 155.226045][ T29] audit: type=1400 audit(1734350630.312:464): avc: denied { setopt } for pid=7717 comm="syz.6.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.392339][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.415003][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.492053][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.002262][ T7752] befs: (nbd2): No write support. Marking filesystem read-only [ 158.011352][ T7752] syz.2.425: attempt to access beyond end of device [ 158.011352][ T7752] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 158.977070][ T7757] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 158.984844][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 158.984860][ T29] audit: type=1400 audit(1734350634.062:466): avc: denied { setopt } for pid=7756 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.055682][ T29] audit: type=1400 audit(1734350634.072:467): avc: denied { ioctl } for pid=7756 comm="syz.3.427" path="socket:[17704]" dev="sockfs" ino=17704 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.148418][ T29] audit: type=1400 audit(1734350634.112:468): avc: denied { bind } for pid=7756 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.167577][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.173934][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 159.183180][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.428'. [ 159.210428][ T29] audit: type=1400 audit(1734350634.112:469): avc: denied { name_bind } for pid=7756 comm="syz.3.427" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 159.258994][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 159.271493][ T29] audit: type=1400 audit(1734350634.112:470): avc: denied { node_bind } for pid=7756 comm="syz.3.427" saddr=100.1.1.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 159.471564][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 159.513207][ T9] usb 3-1: config 5 has an invalid interface number: 72 but max is 0 [ 159.521351][ T9] usb 3-1: config 5 has no interface number 0 [ 159.603570][ T9] usb 3-1: config 5 interface 72 has no altsetting 0 [ 159.812858][ T9] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 160.723982][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.732158][ T9] usb 3-1: Product: syz [ 160.736337][ T9] usb 3-1: Manufacturer: syz [ 160.740953][ T9] usb 3-1: SerialNumber: syz [ 161.139895][ T29] audit: type=1400 audit(1734350636.232:471): avc: denied { bind } for pid=7785 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.321114][ T9] ftdi_sio 3-1:5.72: FTDI USB Serial Device converter detected [ 161.392072][ T9] usb 3-1: Detected FT4232H [ 161.397925][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 161.471558][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 161.539742][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 161.685858][ T9] usb 3-1: USB disconnect, device number 15 [ 161.996658][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.008938][ T9] ftdi_sio 3-1:5.72: device disconnected [ 162.563942][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 163.131487][ T29] audit: type=1400 audit(1734350638.202:472): avc: denied { setopt } for pid=7823 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.186507][ T29] audit: type=1400 audit(1734350638.222:473): avc: denied { ioctl } for pid=7823 comm="syz.2.444" path="socket:[17858]" dev="sockfs" ino=17858 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.292310][ T5867] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 163.420537][ T7830] dns_resolver: Unsupported server list version (0) [ 163.462612][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 163.473129][ T5867] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 163.487607][ T5867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.597289][ T5867] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 163.658065][ T5867] usb 7-1: config 0 has no interface number 1 [ 163.725343][ T5867] usb 7-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 163.988564][ T5867] usb 7-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 164.011494][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.019644][ T5867] usb 7-1: Product: syz [ 164.024068][ T5867] usb 7-1: Manufacturer: syz [ 164.028769][ T5867] usb 7-1: SerialNumber: syz [ 164.071348][ T5867] usb 7-1: config 0 descriptor?? [ 164.775229][ T5867] kaweth 7-1:0.235: Firmware present in device. [ 164.915955][ T5867] kaweth 7-1:0.235: Error reading configuration (-71), no net device created [ 164.925284][ T5867] kaweth 7-1:0.235: probe with driver kaweth failed with error -5 [ 164.957900][ T5867] kaweth 7-1:0.0: Firmware present in device. [ 164.995915][ T5867] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 165.016126][ T5867] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 165.049824][ T5867] usb 7-1: USB disconnect, device number 2 [ 165.130418][ T7875] tmpfs: Unknown parameter 'grpquotaocess_wait' [ 165.399621][ T29] audit: type=1400 audit(1734350640.472:474): avc: denied { mount } for pid=7880 comm="syz.1.452" name="/" dev="ramfs" ino=16905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 166.135306][ T7885] Process accounting resumed [ 166.567696][ T7897] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.576586][ T7897] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.585443][ T7897] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.594237][ T7897] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.646502][ T29] audit: type=1400 audit(1734350641.722:475): avc: denied { ioctl } for pid=7901 comm="syz.1.455" path="socket:[17965]" dev="sockfs" ino=17965 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 166.696914][ T7897] vxlan0: entered promiscuous mode [ 166.706465][ T7897] vxlan0: entered allmulticast mode [ 166.719038][ T7897] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.728276][ T7897] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.737304][ T7897] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.746344][ T7897] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.077273][ T5815] Bluetooth: hci5: ISO packet for unknown connection handle 2560 [ 167.405395][ T29] audit: type=1400 audit(1734350642.502:476): avc: denied { connect } for pid=7925 comm="syz.6.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.453619][ T29] audit: type=1400 audit(1734350642.522:477): avc: denied { bind } for pid=7925 comm="syz.6.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.473888][ T29] audit: type=1400 audit(1734350642.522:478): avc: denied { write } for pid=7925 comm="syz.6.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.506207][ T29] audit: type=1400 audit(1734350642.522:479): avc: denied { getopt } for pid=7925 comm="syz.6.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.802073][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 167.972130][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 167.998260][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 168.006507][ T9] usb 3-1: can't read configurations, error -61 [ 169.111491][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 169.236813][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.471'. [ 169.245702][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.6.471'. [ 169.281494][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 169.289283][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 169.298094][ T9] usb 3-1: can't read configurations, error -61 [ 169.305775][ T9] usb usb3-port1: attempt power cycle [ 169.781575][ T29] audit: type=1400 audit(1734350644.832:480): avc: denied { create } for pid=7980 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 170.193301][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 170.266611][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 170.301121][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 170.312651][ T9] usb 3-1: can't read configurations, error -61 [ 170.471504][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 170.495436][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 170.503091][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 170.510709][ T9] usb 3-1: can't read configurations, error -61 [ 170.518267][ T9] usb usb3-port1: unable to enumerate USB device [ 171.511526][ T5867] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 171.683123][ T5867] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 172.067255][ T29] audit: type=1400 audit(1734350647.162:481): avc: denied { listen } for pid=8020 comm="syz.1.481" laddr=::ffff:172.20.20.170 lport=47695 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.067690][ T5867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.114768][ T5867] usb 7-1: config 0 has no interface number 0 [ 172.117627][ T29] audit: type=1400 audit(1734350647.212:482): avc: denied { accept } for pid=8020 comm="syz.1.481" laddr=::ffff:172.20.20.170 lport=47695 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.120896][ T5867] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 172.156638][ T5867] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.234838][ T5867] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 172.244041][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.252190][ T5867] usb 7-1: Product: syz [ 172.256376][ T5867] usb 7-1: Manufacturer: syz [ 172.263200][ T5867] usb 7-1: SerialNumber: syz [ 172.275564][ T5867] usb 7-1: config 0 descriptor?? [ 172.318075][ T29] audit: type=1326 audit(1734350647.412:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.2.482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9956d85d19 code=0x0 [ 172.327969][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 172.350861][ T8031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.483'. [ 172.363557][ T8031] gtp0: entered promiscuous mode [ 172.368542][ T8031] gtp0: entered allmulticast mode [ 172.391870][ T29] audit: type=1400 audit(1734350647.482:484): avc: denied { remount } for pid=8027 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.324417][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.337854][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.352439][ T5867] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 173.369792][ T5867] usb 7-1: USB disconnect, device number 3 [ 173.494946][ T5815] ------------[ cut here ]------------ [ 173.500716][ T5815] WARNING: CPU: 0 PID: 5815 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 173.510757][ T5815] Modules linked in: [ 173.514962][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/u9:2 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 173.526054][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 173.536913][ T5815] Workqueue: hci3 hci_conn_timeout [ 173.542193][ T5815] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 173.548078][ T5815] Code: 00 e8 aa 05 74 f7 4c 89 f1 4c 89 e2 48 c7 c6 00 29 b4 8c 48 c7 c7 d0 d1 5a 90 e8 51 de a7 fa e9 4d ff ff ff e8 87 05 74 f7 90 <0f> 0b 90 e8 7e 05 74 f7 48 8d bb 55 f7 ff ff 48 b8 00 00 00 00 00 [ 173.567856][ T5815] RSP: 0000:ffffc900041dfc98 EFLAGS: 00010293 [ 173.574494][ T5815] RAX: 0000000000000000 RBX: ffff888068c0c8e8 RCX: ffffffff8a260e0f [ 173.582595][ T5815] RDX: ffff888029bb0000 RSI: ffffffff8a260eb9 RDI: 0000000000000005 [ 173.590597][ T5815] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 173.598659][ T5815] R10: 00000000ffffffff R11: 1ffffffff2c42a45 R12: ffff888068c0c000 [ 173.606754][ T5815] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880359df800 [ 173.614826][ T5815] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 173.623926][ T5815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.630536][ T5815] CR2: 000000110c2b027d CR3: 000000007fe58000 CR4: 00000000003526f0 [ 173.638598][ T5815] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.646660][ T5815] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.654851][ T5815] Call Trace: [ 173.658144][ T5815] [ 173.661071][ T5815] ? __warn+0xea/0x3c0 [ 173.665401][ T5815] ? hci_conn_timeout+0x11a/0x210 [ 173.670473][ T5815] ? report_bug+0x3c0/0x580 [ 173.675051][ T5815] ? handle_bug+0x54/0xa0 [ 173.679423][ T5815] ? exc_invalid_op+0x17/0x50 [ 173.684213][ T5815] ? asm_exc_invalid_op+0x1a/0x20 [ 173.689263][ T5815] ? hci_conn_timeout+0x6f/0x210 [ 173.694285][ T5815] ? hci_conn_timeout+0x119/0x210 [ 173.699329][ T5815] ? hci_conn_timeout+0x11a/0x210 [ 173.704422][ T5815] ? hci_conn_timeout+0x119/0x210 [ 173.709977][ T5815] process_one_work+0x9c5/0x1ba0 [ 173.714968][ T5815] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 173.720614][ T5815] ? __pfx_process_one_work+0x10/0x10 [ 173.726151][ T5815] ? rcu_is_watching+0x12/0xc0 [ 173.730936][ T5815] ? assign_work+0x1a0/0x250 [ 173.735597][ T5815] worker_thread+0x6c8/0xf00 [ 173.740201][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 173.745392][ T5815] kthread+0x2c1/0x3a0 [ 173.749481][ T5815] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.754729][ T5815] ? __pfx_kthread+0x10/0x10 [ 173.759341][ T5815] ret_from_fork+0x45/0x80 [ 173.763828][ T5815] ? __pfx_kthread+0x10/0x10 [ 173.768433][ T5815] ret_from_fork_asm+0x1a/0x30 [ 173.773299][ T5815] [ 173.776327][ T5815] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.783601][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/u9:2 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 173.794439][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 173.804485][ T5815] Workqueue: hci3 hci_conn_timeout [ 173.809603][ T5815] Call Trace: [ 173.812869][ T5815] [ 173.815791][ T5815] dump_stack_lvl+0x3d/0x1f0 [ 173.820379][ T5815] panic+0x71d/0x800 [ 173.824361][ T5815] ? __pfx_panic+0x10/0x10 [ 173.828774][ T5815] ? show_trace_log_lvl+0x29d/0x3d0 [ 173.833989][ T5815] ? check_panic_on_warn+0x1f/0xb0 [ 173.839097][ T5815] ? hci_conn_timeout+0x11a/0x210 [ 173.844139][ T5815] check_panic_on_warn+0xab/0xb0 [ 173.849064][ T5815] __warn+0xf6/0x3c0 [ 173.852946][ T5815] ? hci_conn_timeout+0x11a/0x210 [ 173.857966][ T5815] report_bug+0x3c0/0x580 [ 173.862291][ T5815] handle_bug+0x54/0xa0 [ 173.866466][ T5815] exc_invalid_op+0x17/0x50 [ 173.871020][ T5815] asm_exc_invalid_op+0x1a/0x20 [ 173.875894][ T5815] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 173.881540][ T5815] Code: 00 e8 aa 05 74 f7 4c 89 f1 4c 89 e2 48 c7 c6 00 29 b4 8c 48 c7 c7 d0 d1 5a 90 e8 51 de a7 fa e9 4d ff ff ff e8 87 05 74 f7 90 <0f> 0b 90 e8 7e 05 74 f7 48 8d bb 55 f7 ff ff 48 b8 00 00 00 00 00 [ 173.901233][ T5815] RSP: 0000:ffffc900041dfc98 EFLAGS: 00010293 [ 173.907291][ T5815] RAX: 0000000000000000 RBX: ffff888068c0c8e8 RCX: ffffffff8a260e0f [ 173.915277][ T5815] RDX: ffff888029bb0000 RSI: ffffffff8a260eb9 RDI: 0000000000000005 [ 173.923245][ T5815] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 173.931204][ T5815] R10: 00000000ffffffff R11: 1ffffffff2c42a45 R12: ffff888068c0c000 [ 173.939167][ T5815] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880359df800 [ 173.947140][ T5815] ? hci_conn_timeout+0x6f/0x210 [ 173.952093][ T5815] ? hci_conn_timeout+0x119/0x210 [ 173.957113][ T5815] ? hci_conn_timeout+0x119/0x210 [ 173.962133][ T5815] process_one_work+0x9c5/0x1ba0 [ 173.967070][ T5815] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 173.972716][ T5815] ? __pfx_process_one_work+0x10/0x10 [ 173.978076][ T5815] ? rcu_is_watching+0x12/0xc0 [ 173.982847][ T5815] ? assign_work+0x1a0/0x250 [ 173.987426][ T5815] worker_thread+0x6c8/0xf00 [ 173.992014][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 173.997125][ T5815] kthread+0x2c1/0x3a0 [ 174.001185][ T5815] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.006374][ T5815] ? __pfx_kthread+0x10/0x10 [ 174.010957][ T5815] ret_from_fork+0x45/0x80 [ 174.015362][ T5815] ? __pfx_kthread+0x10/0x10 [ 174.019946][ T5815] ret_from_fork_asm+0x1a/0x30 [ 174.024808][ T5815] [ 174.028019][ T5815] Kernel Offset: disabled [ 174.032388][ T5815] Rebooting in 86400 seconds..