last executing test programs: 1m33.022938304s ago: executing program 1 (id=166): sync() sync() (async) sync() ioperm(0xffffeffe, 0x40000007, 0x83) (async) ioperm(0xffffeffe, 0x40000007, 0x83) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwrite64(r2, &(0x7f0000000100)="4357e4f5438df44518772f39ea3c16a71cf0e72fdccb43aac6b8cf764a9d04e1f795ed6d903bc49849", 0x29, 0x8) socket$nl_route(0x10, 0x3, 0x0) 1m17.137062858s ago: executing program 0 (id=209): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @rose, @bcast, @null, @default, @netrom]}, &(0x7f0000000080)=0x48, 0x80800) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_clone(0x0, &(0x7f0000000140)="3d6b56198b4423a3afe49f4778d3a6db82dc4e1a2dd675929540a98aadf5f0fb5328592f979a1c3d590a6702ae862bde8fecbbe39b9fbf7766b876bcfd29de4ec7d31c725d913eeb2449def825241fb7ebff9b90a49a06804695e29e", 0x5c, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="0d13ebf2a97fad326505168cddc256af442c136439f471e196e4fa2595da44e8b17a9ba732212480693ce9a533fc3d7109ef16281c6bee9fb9af17761d78a8a5c6946a5a00eadd6bba19e31f4d665e0a35c2ece00370e5f17209451876af583a86be67f85d020508f561541afd556ca88a8b8416839a7cd03e00ab4048d4bc6eb3fa6fdfb6205c84f1d391b7687fa8b8233715b13610a728ad83ca6135f1226972eba7a46b") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) kcmp(r1, r2, 0x1, r0, r0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000400)={0xa, 0x4, 0xfa00, {r4}}, 0xc) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000600)={r6, 0x4, &(0x7f0000000500)=[0xa, 0x80000001, 0x7, 0x4], &(0x7f0000000540)=[0x3, 0x80000000], 0x2, 0x0, 0xffff6621, &(0x7f0000000580), &(0x7f00000005c0)=[0x2, 0x81, 0x0, 0x200, 0x0, 0xffff, 0x9e5]}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000640)={0x2a, 0x0, 0x1, "124f1b0710d2281dda840592f5d2b2cf5f74abca6b9fada390a4309c9a995d5a48606445f6c82311e915"}) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000680)={'ipvs\x00'}, &(0x7f00000006c0)=0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000017c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x2, &(0x7f0000000740)=@raw=[@generic={0x10, 0x9, 0x4, 0x800, 0x401}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8000}], &(0x7f0000000780)='GPL\x00', 0x9, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x3, '\x00', r9, 0x0, r5, 0x8, &(0x7f0000001800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001840)={0x2, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001880)=[0xffffffffffffffff, 0x1, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x2, @void, @value}, 0x94) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000001980)={0x0, 0x0, 0x40, r9, 0x4}, 0xc) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a00), r5) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000001c00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x170, r10, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7c}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x533}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49aa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa304}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xba}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0xec1b7c12c0652c18) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000004a80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004a40)={&(0x7f0000001c80)={0x2da8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "5cea7ee9fce0"}]}, @NL80211_ATTR_NAN_FUNC={0x24b0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1180, 0xe, 0x0, 0x1, [{0x45, 0x0, "2116562c72c324a0682f605d57a08b2b71b3c58f12f54c95ea4925898a0c6b143c2897191cafd3643a59d7c06911974aed12b2d06a22871f0c2831b379ba211a3a"}, {0x22, 0x0, "e14a6c086e726335512ee7c7c39ebe8f77721d75ddfb2dd56f6e3046de95"}, {0x1004, 0x0, "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"}, {0x49, 0x0, "b8a7455582fe6b7bd05a98278bdb3cee4dbf33e46267b626a8cfe795c93f943442b3a98d697f029724919bdf422e62663b995e1911d6c0f8fc886485490e49ab3225a266a6"}, {0x5d, 0x0, "ce3cef0140022e4def6a90722b3585597ac451668039624d139e2879d3161a4fdc1654f0a70f87daf96fe5b3a2f9a1825f3dc051450287dfb5d63cac95c47fbf2964bef3eb32b36c3fb69223868ad0764e2a5effa2d923e84e"}, {0x47, 0x0, "bb530f02d7aeabcb438acb03058874161dee4e97fcde03120a69e60ae3419d80f8223fe9d8a8d2652a952c6ee76c0518970bd059b498857998287a8d300320bfda0139"}, {0x17, 0x0, "ba4fd046bef7b52cf67470c186ebcfa42a403c"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xb0, 0xe, 0x0, 0x1, [{0xac, 0x0, "e258804c68b02ff52d42fd432bc600c0f4f27b9309facd32d23a7c0607750c431ce86dbe464c8a65b9d2d3ec976045825fca7395d4e573d0cf403bfcfcfe63277ff11c3e822d12863f861278e3720e3bc29652ff6d129679ff95b5dd42b3baa86e92bde784e515250fbb71613d0197307acd95f9478a73649fab3e374c30b70ee0197b903a5a619a7258acea674cec2e2eccb3a5a835a54b4dd6811be467fe47190317dfdfdaa71b"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1248, 0xe, 0x0, 0x1, [{0xf1, 0x0, "58667f7f88cb1102f92eab3a596611f47a82b5670fb2e45f03375b6c9cdd74e8806dff4a63864cdc312f7dd768ecabd53ec56f3f7812376e7288bc7eb786ce1b89755d6bf7c9c57a747cfc7d497a999d9f44a1ec87f7f2b93bb3907d1ed9f533f9312c1ed8ae4fb7e528630a177f92f71e1f303fe0005eeb45bb5df65cec38aa3ef43234a7dedff19cf4b6c4aac383d8b011f2ba566c100afeea77b0e411335174fe2f253d84c4d87cfa3da3d57091114e9427a6e003fd1c43c592e1082f57609c492598a7c69bd179c6588c4ca133a0012519844006b9a33cee6e31fb009412c61876835cda95a9b864c75366"}, {0x25, 0x0, "ee9c46a2378e3fb832d8dfbd0261963ad5aaf4e3aa6f9b090da3c95b92822a05fb"}, {0x7a, 0x0, "c0ec1adeedc5a6c7869d08403886000ebd03d93490852c7df8785a4206b6954fb4dfdb481bf2b7aedac639865d6761ce6b518ccf88216cd9fecb12de631a08ae531c4f61a7dea607840b4ab98492c74b6ed4380a1647538263fc51ecf9dae7958dcdee77c46650d9b615d55c3554712072318a01209c"}, {0x7a, 0x0, "b12604310e997e4c36101274b3cddd53f0fd823311cbf2dcf343ed0c01834638ac2b45fad01c99e2ab621bbd1b760866fa937763429fa2900676dd14cb306c896094a4c5fff9f8b774cacfce452740ab2cfc2379c8defe84c03068122b8bc5ae2c609e8e505127f6843bea4a08a312dd5ffd83a3cfbe"}, {0x2b, 0x0, "4875c635e513e14013617e7c22893403b6f41d9d5da82f6594e1a4efb9cd8396fb4c12d4748a5c"}, {0x1004, 0x0, "06f1147060d4987da4ad9d7da15dda7d37be510da33ee18b199ad08f4219960b9208ad340ec53f7d4a9aa9751c02ddfe57a8c8b8d3218a3a735a6b68f1cb83ca41d5e88b30d4f06346b47245b719c50ba45663703b8e9e26554d6f6dc3e3a82faf4287efb8b2259f856e7beb7fa58b95fc96b1a9af13f86fc9dae8f03c6fc45b70fbcc38200532b064115a7afde0f97fa3f92af412db3ba74747fbf163a9fdfc98ecf3ae8853bf63a0313f739561f3afbd61384da77e5619fb02990d2e77b256ae68d264ba8629bbeaecb025770a4a8fcbcbf5ccfc999ccab9bd63faa0e695519b8ef72988e4bfebcd8dda7d128c27d6086f2a67a3b81a37219daee808d0d01320b5ce17a9c1648957d065f2c6a5621d2a6c5607ee63f58619ea4fd50be1150c55177b546f3979b6360d7d7afede22a4af5b643fb739cb3bc249e39eebddeff7dd456e6e7f59bf937babe06c76afce5dfed15b1408284c4aa54c6b08946bf8a053c0491b1f1654d8acb2b5d03c2e3435fe3863f4c9b67e377ee9888399d2c2dbf7a37557b1341e42284e6daf3caa43fd66864320bb8402849d5dec42108aade8f7685f7acdc9f111037d9c6c11d5db88fdb9891c5eca6e3515c63670822fe040e6cd73ac01755caa0af884cc1ef96a8f49f256df653dcd62671632abf693a32c3a2de6b2e873a103c54c34c63d3f882557116c0cf4b950494c61329f7c0b85df4bd33ef8adcaf9c5631ec027b0e7cf54d4511de143358713b5b86ff34218cd59a16556a10f9176d3e6176ef2a4ca9b9bd4273fc3ca356f5fca184e91dc7d5a452de35f1b34d4d628e4f1ae77808fcca9c560db6abb922d331ed7c9ce6bcc86d44e1341bbe9a0a6f0f843ca0d666ee9305ea5cdec5a00a16d727c41f7ead23ac73dac6c72ba0934c9d2285ea48677d11983bf5b48793b6f929d94b65e7bbf7585d34e1173f4abe749380fa2a35bd596523e5bd89b086cef465f73ea6050ba048bcb85a941cf8369f3a490b1b5160dc5dcd6977723bff9e42685f2e9c03ce355da8b162b76e498ee3173c2912f8cf01347266522f98e241ae94bc03d98703b3b21124ac0f45fb41cf17a8bd5c80170bb42408321e67704e4f4c8fc2cef9f633d7dbda7b5d8686cf0710066dee6fe8ca798249732523aac5c2f9049120ed9391b362acc51c7a889213deca495601e035463b4574b02d34e0bf7c692d9b74850a2ed5e9378842c201b850383ca8f74cee9b141a51a301fdf27c0db4718d6ee7b7a3f48d9fa3d26d3b7d77bf0f740d50c77ea23a2eb23ab8545f612b5c64981766fae5ef22edba138cfea3d7e002d0e491c73562e63199c41f68c96a418370f5476e9128776f7b15d449bf81443268f85ef03c32e7972f74dbbe7dd2c144b88d9e9bc804bef2858de3c0d74f2a2256b80e0bb60ce36e6fbe61c8b8f5f05a1ba3ad80bb086dff0c37f351e66e72d4e6d4bc439db9b671fbecdea31b7b1fb57f7e1b1a110b430225cd3aeefed4cc94be809f2877013861b1535ce58873212d47aa2b9e1c50b491ac6dcb0227bc510504d625f734896d84680f9d26d9e1e44126ca3e29f37f350f9cdcc146f1687ba899f18a4773f7c75bbb9b333d03e72770ca841278b1797462ac195b20dd8493abda08a174f67879dc473963381efc982d3be3051a4cd82bd20f881ae29e7c02d46d94e1f340f3a5de96ecf6bedc2064c6bf9941d6a8798ea4cba4332eed060b17ea5f885d48fe074d1f853cbb7183a0b2df9c94d2daf2fa1347c2c168e0f3cd09ac25af36d7cdb946864c770d9a12a511de4e005b30a72422b92e230559b31036076508c17668921e85cb2c5949151477d0971d78fbe84dc36a328c18ec169661265bdbe883987d7f01b40f934e1d60d052e3de37d9d9b8a6ab30466421a18619ec58deadf46e805d73fe0c5fce3b95d818c898371be088b38fa9dea4df874e7458327e6232358dac7fdb2c1dc6b43765aecdc95621ef554dd28a92533371c59759950d94b2249ea81d71ec54257ea5813f7bcc1411bb84f464d94d31f25852aa0d7129406fc1985916e047974bcc17876967c3c7ec887be8a0989556e708c96c039e2455f10a2c80a2be1030d36e937a0fa2038cdae8a1d9ba5af2a46a80f7be13a70b370cf9b534db9c1232943d68552103109525fabb735a133b2ae58a2585f6600545ce26d8bdf6c886fc6f9b46812b5ec3a9f9fdd81d346a14ebea9d477d602f8759abe38f7d4845e109fbad6b4eeeb4e7a3ed429af2fce574e6e2784fb78860ff9444cd4818551d090f5a11fba1cd99d999a6526d8c85774fe2ce31008cacd50c25f0c25274a06e4cfa1fef4cbdf2735c9f6d7537a369baca1ae28358e5e63df630575a4106a12f702ad6549f1d31852319f576b64b05e88404007683ba576572f09d8f4fecf3f2002723e6a979644b9b1cbfa4c12535d827390fb764a178e3bf37bfa3d43783d3d5a93e1e7993e01616e5df657cd8aa0ddefdb5770a6d72a126f9f554c4e9131d8301a102ae239118c1581f38dbb4bce67ea0aea711d5fa03066188cbd9525050c2174b5a50d51f4846bdbf4cdba46229e773f26ab330e0b3ac1ca8013ae7926115966f8b40271a04f2524c9606c73019aec20db8b707749debbf61a689114f73f31ef9979a2df598bc303b68fff136882252c27a580316c65b4ff24870f347a1c098f7d2b8e113ca4e081e3e95bcb72c872910b6406309ce6bd037daf43967795e18385353abd9b475d01a1000fc46f79391cc5c7e7b661023278875c43a391248423f965eac72ff9c8ed12632cf86d296dfae625b01bbe2addd523d4140f051e5edfd371d137f4249d11704f1a6b21637191af3a5d328edbac90a6e1d9a4a8652047c6af849e93ec548b57a4929c2504f8569f3bcbb94ba693119a791e2a4f48dba6cb62e8b4dcdcae2ea04b479eaf5b7b92014b6547343ae37c7ebdd7e62725acad285d4b2d2e43076f549eaf53295158027574963de254c0f5bf1dad253424c430f661de81a952301aa2d29e3247a9ee8991f1d909e0ade8a671426e6c9cd8481ee090b7351ea70553dda55a56d6c8dbb264f5019009b13e9eb9dbbedf2982672d67c053f27e1624922c2dde12edc503080880aec1cd958ca9d523856194ff6edb3c80e3c054fa9d989f5f249b1890506734012fb717f258d5133aae33dd3ccb6cefb104d7508821b4289e0bafbca7cd871462d03417582a13b681b92c622410d7daa00d7585c07a04fc0a92372ce9a628af0155faf5c3f52c805674d1bd277736c137d20f73fd718d5eadcc7cacc2d8d71d167a76efd058a96ce3c384dc09ee5c7a9b8967a8a297dad34b4777c41601031dcf35763f9ee25cbca32fe02c5a6c692c58ada8c9f7d5b4837b687c8d1f2faea214c07eb10f6abcd737f7a43f691ea32e9f42cd8e4c89dd732b88900b13186fc9139fc370df7186678b1f8168302fd3676766a2e02fd508fe254fbf7a16a342b9d7389dd0390d3ffbbe41d6511eb49c81aa60074d90984238d537eee3b92b9680bdb1502609fac11faf949fb7211fce93c2136c5bf7733cbf6e0520fb4fcdd7d0f6e1a1bd0e8b9f636b3482449d2b52bd4f1f6c7c7459cb13c54528a69b41d69ec2576f78b839016040ae245bb10ca08d99c884f4bdb00890ad4fe1fb2a225d5c7152903a50d2956272bdd29a0ba2ac49ee4e6e9b8de2c9f8864ee5e84d9b9e97d7ce184355323ebcaceff0dde45ec7b2a26dc962932a3a014e3f55e524b10ca4f811f94e5c09702da1a5b7c469c5fa108ac89d5b603e0b071ed6a7ffbafb20ee94e7770872c8079a4a11b0b6b7c040cd1541cd07774fc52416df48d3c132a548fda548f6a1259525ac4b83e33f479aa39759e1ef0154af1199f1897f3fa8468e5ab341b535360985a641d3c62bd80b2737f3cff72c5cd7667a056a6892d484c494531d1d9a962c177d4e2fa3627d349724e85fb7e2a1b7cc427d224748a533d36b10ec01081d2fee9927d92815777d568283ab691550d96085dbc6b4ac1940a1bd51df764d93c3423ee02c1ec796120e6148a3185c05fb346d21797a6892b60e1a2365c6c5a1984ab2b3b109f825763fa44d54d9bd592f494fe41cd9830d0dc8079c638c58c0aa907520fc7c5d5a7244760885f6c0ea671ef91d527a9d40e2118a01b86db40aaaeecaa3b2b0ee1775bb78fc901aa04c9b52e2c2d5c6b7bbde10028b816ce9d40b6954f70ba23f2a5efdf5a56e40cc55a8108e28d8a312ede9ae64160bf15abd2ce7093e30f29de2d6e6d128418d3f12a9350d374de7de9ba21fc6fb63ae68b2c46386fc6e9a97663bec2b37334cf3a39552673cc94546a5360ccfc1b999c5219c750e18cf41fce527dd33735d7d994b560425870a9353abf73b07d2aab463d77088f52493e8d37bac02b529acd7e98a5232485fdb7ceb9e6708f00206b1a3fb696669f06616a5ba4f052e869fda1f91b55d90db594d4acec3399613c60c12beba6ff7733fcde5239aa7918c91213d605158df561c279fbab7e3960743d5c9564dd9dbccb85d1c4a8ad160f99c464f7d03313db08c004c8cae4c8a903fe64dde094842d29fba247f6d807eccee149624d55aa8a9dd2f534bcf570feff4cb493c834ab645ed42680dfd737602726c2f65c54bbdb03debedbed16ace4831b35647adf446bded04a81f68b7609402dbfe2ed7db43cecf2fcc3daf3991742dd57289c9419eea20088ce149ce65b1b1baed7532366797980fe943738291752992b4a3d0fd46f94e366b5fd32f2ed6cad7113b3eea8e5f8c26bc583f4155d247476d16a2cf8177023ef920368cf150bae8525bc8ace48b37afbcd98dbb151b88a8f84f804e856a036ec4c82446bc427ddc5cec1f3f4abd27ece726c558f97102deb401a390380c74e3beb1c9182c3a1f9fdbc48abbfb544620f0d359a4f4c6bf62e7e7c8b6e4eeb98425c2cc539ade6afc407c27592c5fab22c73247751de15846d541b44b7aa5253a8ac68f455f95e6b4b6b05b7c6708c08b824b1f88742f6f2676da5390ef70612c02637949675e62d100f29a8fb61c84a5c086306b43e100ecb009972bd34e710e592b3aa4de00b4fa2b1a995769778d32f6768fade471a20b78195c3b74978a36f2c02a45abd20268a55dd8de3493e02dd10e7e992a9185338ad59fc4e6fdfa248df8446b78891e3bea0269090c4bbd49e3302c054eaae97f0aefd1d6c5b4cc3494e4b6c12e729822f34e53a6d68ffe571abb032c1867f6e1b3cc741464dea6fb6793297a82a548ec690734ebef1488608226b9b91b33ecc39a442bf3ab616becda40d8872a93a0dff49c4558913e3c0353e9fc636660ea7cbbfaeb1fcc6c2d914562dad901af0396a7269994a297cdc4f541aa264ca26aaf0a038a36492065ddd50d1c7f811175bea4790b91407b71adb9b1b004daa645b0b00a3add6156d7a9242e07ae3732f69710866340d4b17ec55a28834a93d3ccfe37ae644f9c56b9f640f3ea06b056ddd2703e651aebb28377f4c32bf88edc8559b052521f9c2298894c39c6df2e2d6d836161b1e292b62cc7613c31d5dfa65f91c4b34307f42c544a2a2cfe92b7ff64d7f53c25386d5dc3b6770866473658054cc5c34b99a025c569b7edea3102e33e071cf1b70374f1046254a7d47f4ccaedb6020bd6b662f2528281b8b3aa0ad61c3f1f62f0107fe31028c568fbeda2b33b982e75ebcac395ac00cb7830b8a5e43c4669db3a36dcf45914b80bbad34a048eb8984ab7d2a1177a8c76be5ad6616c41467495be"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x874, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x20c, 0xd, 0x0, 0x1, [{0xe0, 0x0, "6ca325909078cbd9c5d1dee6faec098bea6ee2df798782af922bcc585de13c425f7c5e351f7c53acc4ce548a4cde85db6e0c9257f0ad864b4ae1093c20c7580f7da40ac02f191d8cf98d843104c586f39ce010d694a08aac5e0aad7e825f4ac0badae203590bddf151789ad0f793b576a14d111a39c1abaa9ea1802c80529778358715c38716c8ddbbb69e006f15915b98124c096b05d7b86b14e301203c35b3aebe0155f355262ef038b5c44b17a50c7b292a603bd52ee7811bc25ac1edc7bbcfa449209bc5f013ddf09e1483f0c0a7e1853c7992f0f7bfcc35a6e6"}, {0x33, 0x0, "7876094d30dc8a9f886ae6f77b1b9688b6dca4e62068f9ecc5c12ebcfd53816ce86babccc15e8018f630d4699ebe00"}, {0x97, 0x0, "2620f273597375b4bfe14b3511bb854a29928639c874ecbd3ab7495edffe70aade20cdb7550fcffcfa97378b72e6389ca05e908627435f13caeb86172bdc3cb6c629a3f03a6236afc920af76e774e3a292d73911aea7043778a03eaac08a39e02c7b1b566b644c536f8878a19adbed9f9271fdfcbe3ea2c4099fd03e14b542300a772a8e9e49542c3777cd8c6ef1f368fcca8a"}, {0x5a, 0x0, "6a6661b1407501baca4b635328a61287028fae73c3608366879af2331bbbe81f2ba4b4a600a62c5ea3e2e2cae1658f19e644687c61d1066648f3029682989839acf8b565da824c268c4f3f7aaf074df71f4083927658"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e7132a3aba4f"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xc4, 0xd, 0x0, 0x1, [{0xbf, 0x0, "8a8fa9624bbe6aa946fa8af04035a0a60c7327c6909d2745be53042d14ebe6fa6f253fe407858dfda7d509cf936b1d3bd5552bdb21cd35f3ed6450d8b2a6572a3dbc6cb582a0ee74cf205d22b9550a1d59c7ee6b24416964dd0605e673baffbb09f6a9b634d840eaaaf6b12ad94af68533f1cc9b26ddbcdf05fa5f691d191c7548d5e45b4d9771b713cf4d19b32b14ae9c448693f3a82995aaf18a6fa12a213c9444cf0c97bc9cdcedf99ea63d7831fc84dd994411323994b3473c"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x2b, 0xb, "809e9868e1d4a5aa41dd7ac86a3c0c3e015f177984b8d46e60a773672f76a24cba407830745365"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x10c, 0xd, 0x0, 0x1, [{0x98, 0x0, "640e66d1f9a8114a44a178986ffa452a14d827082a59645615ee25394ff8042299590b8ba0502c2402edf365191c16c057a31b3db0afa54a7f49ab739cd6130b604d017152bed591072214d705a68022ec3aa2e52c23c1cdef96b35e9dcf114f93d5751448e845d41c04048a1cd9de1118fdab7b32d9cac43f9dbc19dfb97aa188d7019096f97af2acc210d5696b6c8e6df9b663"}, {0x2d, 0x0, "55a3314851858bab85f088ab1a4a7f163962a1fb237fe6186b2cb9d73dae28030fdfd5e2c6ce25fb87"}, {0x3e, 0x0, "4c0d2eb51acbd8727d2bb60e2ff7d2560c46da87e2eef2fef439ba510f3ce1bd0e0c1c78cd4b6cbcd339d7c9fed21f89da233bd012e7e968ea41"}]}, @NL80211_NAN_FUNC_SRF={0x44c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf0}]}, @NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xd}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x2da8}}, 0x800) getpid() syz_open_dev$sndctrl(&(0x7f0000004ac0), 0xb6f1, 0x20000) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt(r7, 0x9, 0x2, &(0x7f0000004b00)="972fde26deb3f28ab671e66d98c4a9c2d4eb8f8c9eaf3d612a0aeb6715814575", 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000004b80)={0x16, 0x98, 0xfa00, {&(0x7f0000004b40), 0x2, r4, 0x1c, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000004c40)={{0xa, 0x4e21, 0x30, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, {0xa, 0x4e22, 0x400, @mcast2, 0x9}, 0x0, {[0x200, 0x500000, 0x1f42, 0x3, 0x1, 0x8, 0x5, 0x6]}}, 0x5c) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000004cc0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000004d00), &(0x7f0000004d40)=0x4) 1m16.149801416s ago: executing program 0 (id=213): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200f3000010400b000808004500001c0000000000029078ac1e0001e0000001167c9078e0000001"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$netlink(0x10, 0x3, 0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000001680)=@gcm_256={{0x303}, "a89a00", "d2666ed0afd02db4630144517abeb48994b5cd00000000000000000000000800", "c39d6ab5", "c6804d7d50b7bf75"}, 0x38) sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xfdef) sendto$inet6(r3, &(0x7f0000000080)="c62ee5d6a89f2387cb40936b2f723c22fc", 0x11, 0x8000, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) stat(0x0, 0x0) syz_open_procfs(0x0, 0x0) 1m15.87667921s ago: executing program 1 (id=166): sync() sync() (async) sync() ioperm(0xffffeffe, 0x40000007, 0x83) (async) ioperm(0xffffeffe, 0x40000007, 0x83) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwrite64(r2, &(0x7f0000000100)="4357e4f5438df44518772f39ea3c16a71cf0e72fdccb43aac6b8cf764a9d04e1f795ed6d903bc49849", 0x29, 0x8) socket$nl_route(0x10, 0x3, 0x0) 1m15.251818854s ago: executing program 0 (id=214): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000800)=0x8000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7a) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000800)=0x8000000) (async) 1m14.819030306s ago: executing program 0 (id=218): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x9, 0x100, 0x7f5, 0x2}, 0x14) socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000000017c0000"], 0x14}, 0x1, 0x0, 0x0, 0x28804}, 0x40000) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x2e}], 0x1}, 0x4000840) socket$inet(0x2, 0x3, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1m14.102641568s ago: executing program 0 (id=219): r0 = userfaultfd(0x80001) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000768000/0x3000)=nil, 0x3000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001"], 0x44}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) fsopen(0x0, 0x0) mmap(&(0x7f0000e63000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0xc5f3a000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902900003010000000904000000010100000a24010000000201020b240800000000822c81fb05240400000c2402000000000000000000090401000001020000090401010101020000090501090000000000072501000000000904d4ba00010200000d04020101010800000e24020100030000c0287800000007240100000100090582090002000000072501820000000f6eedb63e82bc6ea790cbbb4deb65c337442be26aff67cc2cad637397263f730e"], 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff13"], 0x30}}, 0x0) (async) r8 = userfaultfd(0x80000) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000600)) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d}) (async) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 1m13.01388933s ago: executing program 0 (id=224): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f0000000080)=0x6, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000240)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0], &(0x7f0000000280), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r6], 0x0, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x50) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmmsg$alg(r9, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="8c237cf7c58a0cffc857cc3a", 0xc}, {&(0x7f0000000180)="c549d9e1d2070fa519f6249a079e1c8e58f1d924bd43d388d7ab7deb258308c3c017", 0x22}], 0x2, 0x0, 0x0, 0x44}, {0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="12d101e9fc4f983bc49a2b9f61299633f76e097c4abdb7888a32d1a14bbecc0f303dbe47bbda745f33b9c6e9f971bb4e152f516bb619f9dabcee5c64304050b06b5c4acb650e235b081554dd4c5bf512f18faf52770eb8f2503ac4a523a06492a9cff28dd378fdb816d8d46554ca26505bb319612789446bd99e14f063613fd6710b3fd6868f1e64223e9dfd7559c74223d1ba3f431e4cac63a64f", 0x9b}], 0x1, &(0x7f0000000500)=[@iv={0xc0, 0x117, 0x2, 0xa5, "e3440137084242778a45d6e402055c3b86270fd6c8fb4ede67a07a1732af0f3e4cffa36a02088dbee5684edae4a47e776271cdfac5e697fc00a72938b2031b53fce225f6340ca19a35d0cd1096b78d8a55474d7654158129f6bffbf06c4f9e52bcab8e31f91ce9ecd2338dc745589921de7c583fa256d69cb8b8f8e17715513bc89c6cee5b03694aa3887567b0dfd122c6245d7ad5df0fecae1deab7467df099410276dc1f"}, @iv={0x88, 0x117, 0x2, 0x70, "4706a3f0cee6dc5701a3a4b0f4d476f84c5b49646c2d7bcf96190aaad6810e21d1eaa58db6074e1f4f1dfc6719de5e7b2d57c80c0815864d733b77d8fd63ae90519ac6f567bd1a988765d834ba116fc166f66c324ba5d7f7b9d3a95b5b6a02376891d2b7211516da2fe86a0edf693823"}, @iv={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x190, 0x8000}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)="22234e3bad614821a0dac35f570047dddea23ea1656c22a32082e54865dc3fc313105e7cda", 0x25}, {&(0x7f0000000700)="8971279c4cf30f4b88421bb6b61dd4bd6752bdd122f465d1dc24d9760c4ae63ceb93eef6d3d27c1619a307643f6baea3d683ac1aa6c0ee330ed0ac11075127035242a504c0a2b9f5e00af7e552805dfb123226ad775dc3f7aff82d9c3cbeb9d6252c2abfcb69f9ad58ea9ff34830981123ecbd73fa9f25e9d91363c7625e0b40f273356459c6378bdd96d9", 0x8b}, {&(0x7f00000007c0)="121842165039c8572bb59edff290d2d7209decb5cb0645172977e353cbe658161a85164342c8285e9767a60c4bb8134eba3dfc0eb5731cb4bfe5ccbdbbe30c987f11f7dc60427c38623734f6653b2ae2bf0107f9cbd545544cfa64f8a9dd59128387be9d4f1c27992418981ee55cee11d0c9f2c783310ab7", 0x78}, {&(0x7f0000000840)="144766be1df065d0", 0x8}, {&(0x7f0000000880)="a1a92f95739719e4b205fc3b5ee169f0803233b1d1808edc7e9908cca5396ed39b5249de88e79dcc4b", 0x29}, {&(0x7f00000008c0)="4b00bb5f1ec214eb1534c6e01ea9eb5cd31f533cbb4e2c0f3d2d804cfbd3aa53ba0e2292fc16b080a33e2a26b826ab8c09b2f47017658bd72ab12a424a1ecc51ca1bcd34894cdbed864602becacba8afc968dae6442be9feb03a11afb7eb65c0352cce96b6b8f06db815bb128da24767a390a69aed226e2a1a8703c0bacf0e66e060a8aef6a42e2e80b1b62139226f8c27a29c6c7a6ad30e03c924d4c16a13ac68bfe968580285d572abcf629fd973", 0xaf}, {&(0x7f0000000980)="ee32925fedd45f3c2c64efc9d4ea7d2bd09ac1ff90deec417a41c7f048395bc57ea4462191b20b722327d0f640677048b63f2f24c3c4d3257d90ca14f805a4d2e7e6cb6f5755d41fbc3b3dc7baa8a66899c5d4e22f2880c68802396d7988323049213c5e8627fb73b0a059f93575cefabc9f30ca9ab45159e43669cf9111a578df458761e88da47db536709e62971ff8a8c842937ba57a311569adf9c2a2d4773674f4787fe9be32570a10f2cefbf26f6c9b88fe21c908a71f632f14e678f35cd945f47ab0a065e5b1f8d04778", 0xcd}], 0x7, &(0x7f0000000b00)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4002080}], 0x3, 0x24000050) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x7d) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1m0.655817414s ago: executing program 1 (id=166): sync() sync() (async) sync() ioperm(0xffffeffe, 0x40000007, 0x83) (async) ioperm(0xffffeffe, 0x40000007, 0x83) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwrite64(r2, &(0x7f0000000100)="4357e4f5438df44518772f39ea3c16a71cf0e72fdccb43aac6b8cf764a9d04e1f795ed6d903bc49849", 0x29, 0x8) socket$nl_route(0x10, 0x3, 0x0) 57.299110975s ago: executing program 32 (id=224): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f0000000080)=0x6, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000240)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0], &(0x7f0000000280), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r6], 0x0, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x50) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmmsg$alg(r9, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="8c237cf7c58a0cffc857cc3a", 0xc}, {&(0x7f0000000180)="c549d9e1d2070fa519f6249a079e1c8e58f1d924bd43d388d7ab7deb258308c3c017", 0x22}], 0x2, 0x0, 0x0, 0x44}, {0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="12d101e9fc4f983bc49a2b9f61299633f76e097c4abdb7888a32d1a14bbecc0f303dbe47bbda745f33b9c6e9f971bb4e152f516bb619f9dabcee5c64304050b06b5c4acb650e235b081554dd4c5bf512f18faf52770eb8f2503ac4a523a06492a9cff28dd378fdb816d8d46554ca26505bb319612789446bd99e14f063613fd6710b3fd6868f1e64223e9dfd7559c74223d1ba3f431e4cac63a64f", 0x9b}], 0x1, &(0x7f0000000500)=[@iv={0xc0, 0x117, 0x2, 0xa5, "e3440137084242778a45d6e402055c3b86270fd6c8fb4ede67a07a1732af0f3e4cffa36a02088dbee5684edae4a47e776271cdfac5e697fc00a72938b2031b53fce225f6340ca19a35d0cd1096b78d8a55474d7654158129f6bffbf06c4f9e52bcab8e31f91ce9ecd2338dc745589921de7c583fa256d69cb8b8f8e17715513bc89c6cee5b03694aa3887567b0dfd122c6245d7ad5df0fecae1deab7467df099410276dc1f"}, @iv={0x88, 0x117, 0x2, 0x70, "4706a3f0cee6dc5701a3a4b0f4d476f84c5b49646c2d7bcf96190aaad6810e21d1eaa58db6074e1f4f1dfc6719de5e7b2d57c80c0815864d733b77d8fd63ae90519ac6f567bd1a988765d834ba116fc166f66c324ba5d7f7b9d3a95b5b6a02376891d2b7211516da2fe86a0edf693823"}, @iv={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x190, 0x8000}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)="22234e3bad614821a0dac35f570047dddea23ea1656c22a32082e54865dc3fc313105e7cda", 0x25}, {&(0x7f0000000700)="8971279c4cf30f4b88421bb6b61dd4bd6752bdd122f465d1dc24d9760c4ae63ceb93eef6d3d27c1619a307643f6baea3d683ac1aa6c0ee330ed0ac11075127035242a504c0a2b9f5e00af7e552805dfb123226ad775dc3f7aff82d9c3cbeb9d6252c2abfcb69f9ad58ea9ff34830981123ecbd73fa9f25e9d91363c7625e0b40f273356459c6378bdd96d9", 0x8b}, {&(0x7f00000007c0)="121842165039c8572bb59edff290d2d7209decb5cb0645172977e353cbe658161a85164342c8285e9767a60c4bb8134eba3dfc0eb5731cb4bfe5ccbdbbe30c987f11f7dc60427c38623734f6653b2ae2bf0107f9cbd545544cfa64f8a9dd59128387be9d4f1c27992418981ee55cee11d0c9f2c783310ab7", 0x78}, {&(0x7f0000000840)="144766be1df065d0", 0x8}, {&(0x7f0000000880)="a1a92f95739719e4b205fc3b5ee169f0803233b1d1808edc7e9908cca5396ed39b5249de88e79dcc4b", 0x29}, {&(0x7f00000008c0)="4b00bb5f1ec214eb1534c6e01ea9eb5cd31f533cbb4e2c0f3d2d804cfbd3aa53ba0e2292fc16b080a33e2a26b826ab8c09b2f47017658bd72ab12a424a1ecc51ca1bcd34894cdbed864602becacba8afc968dae6442be9feb03a11afb7eb65c0352cce96b6b8f06db815bb128da24767a390a69aed226e2a1a8703c0bacf0e66e060a8aef6a42e2e80b1b62139226f8c27a29c6c7a6ad30e03c924d4c16a13ac68bfe968580285d572abcf629fd973", 0xaf}, {&(0x7f0000000980)="ee32925fedd45f3c2c64efc9d4ea7d2bd09ac1ff90deec417a41c7f048395bc57ea4462191b20b722327d0f640677048b63f2f24c3c4d3257d90ca14f805a4d2e7e6cb6f5755d41fbc3b3dc7baa8a66899c5d4e22f2880c68802396d7988323049213c5e8627fb73b0a059f93575cefabc9f30ca9ab45159e43669cf9111a578df458761e88da47db536709e62971ff8a8c842937ba57a311569adf9c2a2d4773674f4787fe9be32570a10f2cefbf26f6c9b88fe21c908a71f632f14e678f35cd945f47ab0a065e5b1f8d04778", 0xcd}], 0x7, &(0x7f0000000b00)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4002080}], 0x3, 0x24000050) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x7d) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 45.148853531s ago: executing program 1 (id=166): sync() sync() (async) sync() ioperm(0xffffeffe, 0x40000007, 0x83) (async) ioperm(0xffffeffe, 0x40000007, 0x83) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwrite64(r2, &(0x7f0000000100)="4357e4f5438df44518772f39ea3c16a71cf0e72fdccb43aac6b8cf764a9d04e1f795ed6d903bc49849", 0x29, 0x8) socket$nl_route(0x10, 0x3, 0x0) 29.778803099s ago: executing program 1 (id=166): sync() sync() (async) sync() ioperm(0xffffeffe, 0x40000007, 0x83) (async) ioperm(0xffffeffe, 0x40000007, 0x83) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwrite64(r2, &(0x7f0000000100)="4357e4f5438df44518772f39ea3c16a71cf0e72fdccb43aac6b8cf764a9d04e1f795ed6d903bc49849", 0x29, 0x8) socket$nl_route(0x10, 0x3, 0x0) 8.92479686s ago: executing program 2 (id=404): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @pic={0x2, 0x8, 0x2, 0x9, 0x2, 0xd, 0x1, 0x7, 0x8, 0x5, 0x10, 0x3, 0x7, 0x96, 0x10, 0x7}}) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000280)=""/77, 0x4d, 0xc1, &(0x7f0000000300)=@generic={0x2c, "7c65666bc51fa4c8ba13404d1843ef4172693c39bd24802cc41ca3ed208a8abb97091ad6d07527f6d3d71dc5d4f0b899900df6a7f994c590d017f7664ad91511831c26ba70bbe8b0d42baee4d2b96e4421d552eaa9043ccec64702dc51b8cce004810e8f28a1239741bbfafe34e7aeb40bf74ef0fab4b6914c84267922db"}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xace}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000500)={0x18, r3, 0xe08e, 0x4}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x100) fcntl$notify(r1, 0x402, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x400}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000800)={0xfffffffffffffffe, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20008004) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r6, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'macsec0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x805) io_setup(0x7, &(0x7f0000000980)=0x0) io_getevents(r7, 0xc, 0x1, &(0x7f00000009c0)=[{}], &(0x7f0000000a00)) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="fd6da5159dedb2255396151fa852f6ab743943f1d7b0ab769259312bb06abfe88ec537605d8bd91265a9a8e68dc5d7d7253de458297e3bd47e9fa833f1c86ef195dae43028c37138282c178de4ef7dd800", 0x51}, {&(0x7f0000000ac0)="65a1ea1141cc3428a65339c51c6df7c231702bc6d1c65585d3c2bd7f7c3ccdf705994032b183baf03ca0a720b4a9dee2761581abe392d9fbbfd693d2ae1d6dd256de5a543c85f0c4a4aad79dfb9d508514079f7dc1e8f3b70d946a29369b3a222d47da58e8e600b6cf9631e73245c217752f24400aaf42de4b0726cd8d7754d3371f90f51c8d54dd54f1139f0426eb1c4eaeb8367560c67919a9319fa461cbc44a0371714a273c6da901d3631877612dda75601931f6a3e459e1f3aa27110c69c71f27aab1f790b9", 0xc8}, {&(0x7f0000000bc0)="099252db1fa33a6450c9f7ce0ba7084af895e645bdba24e411c48227945afead27ced64c5869bb84956e210ccd94fbc4ff", 0x31}, {&(0x7f0000000c00)="f0decb077825a5b1d142d469b7e70b368468e4e55348b8c60c9b09bb85dba1c7bc393622b6308ced3fa57a5d8cb71d4ccb57805272ee9f8e449299d6d196c81f340addad149132f87261091c2445a187162864b2b03ad4cd25242441941fd0f90cb0ea2e6e170f9d8a54a1cb4c36a168a08435f1f2f848350517d32641311894b193c6427540198a41b93ddcf7e82841b132505def3bcf2d288b7a15352fe4af2b49a28005f73e071b7bbd", 0xab}], 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)={0x220, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffa}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd4, 0x3, "bc4a2c240d0a876dcd79b2a3205916f5df31cd28c3f31e64677bd200cf5e576bd713fff33c7bf27903b0ca96ca286950d2d29d65beac437b987d34e3c5fec9d2cc619f92e18c22ac39eaaa9ed965d4cff1ee8c37564204f8cb0b7c908ba40b4405e975290259ff8c76533371542c9d6c22fc423cdf6e4252b8f514f636e1cc8c19ae605737508a744ab77a311d531262f8c41e7f3107d0754490e8f34efa264258d7ef6c3efc7fbc514166cf88ec4f1e2438b269419736f678dfba9b8aa804f8b21164541460767e0ac82eb51a6de449"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bind$inet(0xffffffffffffffff, &(0x7f0000001080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001100)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@bridge_getlink={0x28, 0x12, 0x200, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r10, 0x20000, 0x50040}, [@IFLA_CARRIER={0x5, 0x21, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4000844) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000001200)) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) pipe2(&(0x7f00000013c0), 0x800) 7.916360164s ago: executing program 2 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000980)='%pK \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$nvram(0xffffffffffffff9c, 0x0, 0x2200, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8, r0}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002034f162a5067756cd077aa4d88201d44943a23113471a40c9d01749a1848ff7575b9cc91f5fef30ed0fecb11cc52f295233c625a1", @ANYRESHEX=r5, @ANYBLOB="090b29bd7000fddbdf250500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000091) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x1e, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa6}, {}, {}, [@jmp={0x5, 0x1, 0x0, 0x2, 0x3, 0x30, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xb0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x1, 0x2, 0x8, 0x8, 0x80, 0x8}, @alu={0x4, 0x1, 0xd, 0xa, 0x2, 0xfffffffffffffff0, 0x8}, @tail_call, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x7, 0x4, 0x4, 0x1, 0x80000000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x4, 0x57, &(0x7f0000000880)=""/87, 0x1e00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r1, r2, r3], 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dri(0x0, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) creat(0x0, 0x124) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 7.416140126s ago: executing program 2 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x181102, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0xc0641, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0xe24, 0x4e21, 0x8}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x36) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000012c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 7.377480924s ago: executing program 5 (id=408): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'tunl0\x00', r1, 0x1, 0x7, 0x1, 0x4, {{0x22, 0x4, 0x2, 0x3e, 0x88, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xe9, 0x3, 0xd, [{@loopback, 0x5}, {@remote, 0xfffffff7}, {@multicast2, 0x8}]}, @cipso={0x86, 0x44, 0x3, [{0x6, 0x4, '(G'}, {0x0, 0x8, "cc65f2364933"}, {0x6, 0x12, "48062e705d522f243f2cef02ae480c0d"}, {0x7, 0x2}, {0x2, 0xa, "1f8c5237d067b710"}, {0x2, 0xa, "5c966688c5644ddd"}, {0x5, 0xa, "691113289f72ae02"}]}, @generic={0x6214c41ea6edbcbd, 0x9, "3d44353f807061"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x4040}], 0x1, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000200)={[0x6]}, 0x8) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@userptr={0xb, 0x3, 0x4, 0x200a, 0x0, {}, {0x1, 0x8, 0x5, 0x9, 0x9, 0xa, "9fbbc79c"}, 0x5, 0x2, {&(0x7f0000000240)}, 0x5762, 0x0, r5}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, 0x1, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x72, 0x6, "43dbce41cdf55517c6a317194ebdd106309b36e1224d6109011319c683f4a25f6da0f9e578bda85a75333edab80eebb58de32a5b48405f0fbf96ae410c023c772499a3c8ed3c25fb2dcdaaa72df698987615213932b3a6483042dc6ed19bf7dfabc78ac7e1ab5c3c1526e3e10a32"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r7) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000580)={0x0, @rand_addr, @initdev}, &(0x7f00000005c0)=0xc) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6tnl0\x00', r2, 0x4, 0x5, 0x4, 0x2fb2, 0x49, @remote, @remote, 0x40, 0x1, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000b00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000740)={0x350, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xffff, 0x0, 0x1, 0x2}, {0x6, 0xb9, 0x8, 0x67db}]}}}]}}, {{0x8, 0x1, r10}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb7}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r1}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000b40)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x1d, r12}, 0x10, &(0x7f0000000c00)={&(0x7f0000000bc0)=@can={{0x3, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "f6b51f478cfb21e6"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40804) r13 = dup3(r5, r6, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000c80)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000cc0)=[@mss={0x2, 0x8001}], 0x1) process_mrelease(r13, 0x0) r14 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r14, 0x21, 0xc0, &(0x7f0000000d00)=""/129, &(0x7f0000000dc0)=0x81) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000e00)={0x72ca, 0x9, 0x3, 0x0, 0x8000, 0x9}) ioctl$KVM_CREATE_PIT2(r13, 0x4040ae77, &(0x7f0000000e40)) socket$nl_generic(0x10, 0x3, 0x10) connect$ax25(r13, &(0x7f0000000e80)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f00)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000f40)={0x8, 'veth1_to_bridge\x00', {'hsr0\x00'}, 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000001000)={'ip6tnl0\x00', &(0x7f0000000f80)={'syztnl1\x00', r1, 0x2f, 0x3, 0xdb, 0x0, 0x40, @loopback, @private1, 0x20, 0x7, 0xfff, 0x2}}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000010c0)={0x2, 0x4}, 0x4) 6.37517406s ago: executing program 5 (id=409): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000ec0)={0x54, r4, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@broadcast, {0x9, 0xc4d}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x10, 0x9, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 4.486933532s ago: executing program 3 (id=414): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0xfffffffd, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, 0x0) r6 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000240)='source', 0x0, r6) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.517615804s ago: executing program 3 (id=415): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_io_uring_setup(0x50ca, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000600)=@hci}) (async) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x20000810, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102c82be74021046e04f0330102030109021b000154415e5201100609046f04000202ff040924242926f6bd5f7d2aeeb4aa4b5d000000015b020709c0"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1401}}, {0x6b, &(0x7f0000000280)=@string={0x6b, 0x3, "a19ecf7332fb3ac9eead7276e7a21723f9ce7cc5f09a4f8ecf940e078e45eb9b7c6ed8c05c5a64a06f9f191f43e8b11897bc43e3b7de2f00edff3e882fcbefa08b257bbdb185a12f224d9f346feb2a7060618fe5176b43f285c079f6efd04c77940832f347fbf47217"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1401}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) (async, rerun: 32) fanotify_init(0x81, 0x0) (async, rerun: 32) io_submit(0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r4, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) (async) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 32) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001007866726d0000000f0000008008000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a253becb51a8a91c353024052ca3ae66f4f5ef5203b56e6d5d04fbeed7099ff30af6b025d917f62f2a62e32bed2ecec31a3e512582718444c0dbea8b8"], 0x74}}, 0x0) 2.875856816s ago: executing program 5 (id=416): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x671}, {0x800, 0x0, 0x4}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xe8) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) rmdir(&(0x7f0000000000)='.\x00') sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0212000005020000fcffffff0000000001020900008000006bdae99676f5d98b222c1d175b1bde5f2af814867595cca148f284845d6726daecb906b52bcbe4a0671f0cfe91064a71252070eab7b079faae2437c1c6375c071120ac3c3dfb0e5500269ca1cd7c4713a0369feb90311ab8556d5bac400f5ffbe90545162b4d370163c56d991d223d5da19c52bdbff65404e119035c710bccfff638d731934ecdd791b655adfc821d0887903e07df64c986fa6fb88f4a7d0b3f81044ac984488238d0f3c48cf099ab574e73f1a68d600ab06ec38d634b447f1d4aad0dd4f056494500bab1d7792480ea186568121117e75c05a8bde6476b7304bb2b64f14f54921845a91f868fa925cf0a818b9bba4ea375d10464e94cba1fefd1cf5efc16c2e5c1cf9adb172617d21d333c27c4554adf58cd7508fe0eed1a11186e77fce9e4518b7280db2fc8acac72e4934e0ae31d2132afdb95c105813b90284c0f3bd48d2bae45cd2d03aeb092f6ad45692fc26c26909b57d12e3bf2024de3edce03c2dd8cf1081fbc181cb24fb432907ee893125e386edee1e48b5fb72dc536fd879fc356b5bff8ae29afeda341fbb0fbba2d1a133f05b1cac0479743ca5c562d8a9d0ddb7bee5282f97fea614ca3aab3c10d6d6a81f495737f3787737ade4f9af413bc0298d7364c46dbcacedb88aba3b4add5e20c7927ca485152618468c3d23edc4d9cd368d4791e555fd2b8ec465a838f331950b862e23a9d8291dc879d7ea58209a3372319c8a5f2db16e3ebd1e349eb699a79faa391f8cee02ba5e9d1bc0f71b4e912681dfe4716c490dbf06199553c3bac487a1f2964d2f5fd7f064807dd11c3ca2f12c7a3ec79362c247f63d20d3ca52f0474b47c40a394ddfed196dce0259bf849bcb86f2d4919522d46f87443998f7ed5e40da41a80428d3b6e3845a9b377b3c6577add73ead5d1dc4d3620b53818be04d9f7ba74600cf5b462a7ed38b53b701465a152983c8fabe301fc42bebcb7c631e94afec308dee54b51e9c1df0f446fcd47612e90a275e51516310c59eb67c1e3b2da93bd52a7c9c4135fdc36027aad74c3cfd5c6ca6f5ae914a7cab1a3a5d397422163c49c609f53bd370fdecb126cea447defd3d448dadf5079430c058cba11fbb17c14ea71f96091f9a5d3a034ae9b34ac7a0b1d4eca440a51e4cd265911eeba260345b28ac84c065553e9aace53f1f29aa6b80ef7c4070192e4c12cb4389c3476b1f0a69825fdf4de60e9d02266fe9f50cba35775b2103bf85b312b04f3c6bec4b67e1b642a6b9bbef45d28ea1af055bf3c6cc62cb571cfbc4229c7d5aa62a2ed3ce2f42666fa295c71f44263c703d207fb6925f303a3facbd7afa4dccb0b6c37cf8e8a3fdc8ed1cfff049b48a94e50a5631a75589317dbcfd154f16e7dddac2945baf059a2aa4b14b9ac1d411c81dc600343abf5e9c4750e190a5116bab2258d8f1d5e0d3ab740423267be7e21c2eac41ae2aefead42fd71f91c4c3694617fb7fc265a48c3b82eea6e57c90824914847f857deb94c810b34ad53a9824127c2fef4cc5d7fd23307dd90c01bc32c79c2344459a58442b59260d8e21dc41f0b54d5d5433b9fd44ba4803766cacfec5bb5fd1ca3ccbc7c11cfd7274b526b9b61a231499a83831b9be1f708cde614165ce3bd0ccd42ab401bcd35143199d43395107e240e61c3abbcbad69a53ec9205bc2946dab619214ae55dfc6aad9a72683cb84f489efd02f1d439d6abfc4a9d2588c4db6419a7dd6c2387461298941a1d8d5bf4c0e35d0294014f217985cca434d557899c3090c236efe06bc9f2c5dc46f67896d56450a0aa4b6b6247ce45c12a1f547825cbac09f13bb48200ee1f85b00a0ce88723c19449fe2bbe500861bb03dbc2ae489e9b3f5ddaea3b4459be8aebd66cdc054affa87d60e0e86bb0ce56f604f697c5be3cb868e6dad28e3366ef5b6e9a26f8e1ba44d700eda13fa3f589ae638843a8a98c157f25c5e88c3df285e1e70d32110614c51d0e0a74abc7800006cf0d1d3d66e84ec726edc5c52f26f702d182e702be580bf74670201ebeffecc62630b637320626cbac4e9e98c608252e3932da36804e3e1e3ec3bee53bcf0071088c84f2a014b0122dcd9507d6003e63e34d7b59807dd24907e17ba43b83af0b734d9861870f137464be924a415a7607d7c2936c9156f6bc604c51600c558cdf18fe73fffa575443a4174311ecab11cd96572306b00a8998c20bb3879c37c9d400b06f03fd7b54ab24cefc134176df98af05086839f83eeaa9efa3e7629bdb0bc8377020b040e86cf36ff9f2bcc788091c9285b423cc7670a8290c394db287b24533b508a7df6786d571e6be8cd989ea2d1b846a03f24fcdae10333f55461716292e0589efbf61462943b8c8544ac128c8ce01e99ae5ba81cf037e86e1f35271c405c640a8429bc189a749033b831ef71bfb05fa72d2da716f2d86046296f481e4364f7e033dcb4fed15eb0937a66b62143ad51e76242f4cf425d662eeeb179a46a059489c2bbdee163cf5ac3d0fb6441bf171a7c34bbbcf2e3a59e637d35f32301d9d4a85b2a1db1a5cb6fffa7ebec998674711fdfd49297d7ac33f5c89d0999172bc3dad8e76ac1f081e4c1bb755562ff5715361000f56fb464881dfe6abb4f039a139f8fb2e2dca14b895ad3ee1d2835e0cd47051ea34d855b7c8387ef1a85d94b851602cbdb2242a2afb59d26292be2ebbd8ca3b2866b293c1ef2048dd65addb63230643502ab8e9548dfee031ee8306344f89973dc22712ae6896ab40c61e6093c026524da15ca192b1ecd14ec10cebfea7faed1a9bae2be7edf9c53182805fa4af868751ff3758b9c4f7e877dc8e16475592c85bda5a62c1b38938ac3b7031773c06c5eb5539baeb0588e6ede91d2da317a1a823045e375bb4ac29d6dc75d228a4ade916671eccd320ee5c0298650b541d98c4d1e09ed841f1cffbf0c7551c5ae725ad0f77f612829a409becb4e60ccc3cbb80d77e8d9bac59cfcac2c8a4c857f862747473148d9089dc56ed827784a63390eeb78f791c75c4eb3a1efad0f75e062cc4948e4b1b67a373494b88ff819a695ceac580bdd7b2c63222a663432e31b8531ee74d34afa70266ffe08d6ab6439c1b442df9195bd1b729d9ebfa25f326e48f7104303120046b2f1eb45c59a415b68d9cc3f6ca68dadf64748393f4c1f4a5876173ef0c95ea73c682b05e9e05c9a8a1d65500106a980f0a0effa10b93a03715f40f851d122a15fd4b60740a711b1121c146bb59b740ccf8db57b2eee36e4c5a3c6aadaca73b9637cb21f1d87acd9b76885b8694a5d036b6e3dde6ceb589575b6414bef68ae179973b5e04012a3ad10c55f9049ccd757185583633543f556967796eeebb8348e969860fdeb9166f1a431d44a2ae6e73c75d3b891ea014ce2be631c9d1eb301c7043aa03b66218095c0375ed12090e5bc32c44e3ddfbbcbe48f8d396e489db24cd7d8779d659b48193b96374e2937d3087e911b4d1c70cef3b984a72f80ed2f17ef50aab6f5931c897367aa6dd86e8e93de921c611f112f676e34b4ee720f46434b2c70742c1af99bee1b0c72683cd840bbba4e75e3a0128d0ebf1010dea64f896ef3cfd82a73fe329ce53b63697cb7bc0c03e127fd59d3241646f62a25ceb692d9e469c649dec8b693975d718d89394345b684ea2507d295422c88892de4e69c71e2dbf6bfd160a1c20b63e6e21b73d6bb14377ce3578664196f7ab33be87d3fe5772415361f857f6128b7ecd261638f4133f6384b1e2ba1c045985636e818e622460d4ef2af43267efb71168a92d22ec6b337158d3bcff2f0913ece4258ba89b5e19f8cae9c7f87ac8d051247f3635f398404f1d9fb1ace4082dd6897024070dddd7942b566d3f7f2a4fd9ec148397ddb814057c66b738f45ccb08f2f9ed8c5c8735a9c6938b7c5260a8cb0cbfd2bb9656592b4a70f368ecdcc8fdfcd52ad0ea0b9c3152147e9e441519eb1a69bc1b216fda362376ce23729bd384e8579c37aadf759b6c23ea54bfde28652d0b37cbcea221da9125919212cbad64e4aec3075bb70cc7eca71a25cb2a77c898fd775d74d61dcfcbff9d4d20102f3b5c804ccc3bb711b88140508a8802dcb205ebff54cbd9af252f36cf44b2337c382a7562ad6fc035313bff7f7d30a45fe01a083fb744460147a3a4b34b8dcc047607f38ba6b927c93872830e8d0c84031889b29afc2ef3944c4c0a3f3060f337bf0da8c7209e79a81f09330ecbf0024dcf85f7e4ec644867f5343f259825b1f421c51d30f3da87bbcb67946f133c6a4add120054b1b8a16a12a58352d37425f68d55e8e3a0391ed03085fef286214f51ab917906b2b9fcbf6ef85e04ba368f8811f9ec5a3a112c1b498f553e6659ed41b10ad141d921cca6878c7e1960380a2d0f86226f6b7e95a9639b41be4f73c392d3e7b133cfc2009f6a02edcfeb11bd2c84b3fcf50d4cb0d49f770ae2c71c73c766d327fb0c8d79c9908e1f7292eff8657f0ff0542df3127613c31cc2387d270b9510bd0a9709d80ed781b828d3a0f92df1be687206d572066d44b9afcf6b440b7298bf30f657fd9f986debea4f23032f37d711859854a134e7ad44613643eb7104e624e0bc34dddc2dd0ecee2bd04a87b03e06864710c51d561f28718c88ddc35dcbf23f1c5f0ef8149e24949e1d50572f039da9ef0fd29934fc6c7bcc9c44771b0d8c1dd739796eedd036abd78f4f26da1bb680138f9191eac4669d84e4866974257d8438f3253198b0478d33c325f633aaf85d9e6056766d1a17fa6cc1e1d639cf59dd06c1d8c1f4d48ea9ab2c3cc08fa812821eda5f32f17e808c14002aa846ee6f18177d27e6f715462e5562f0f7afbe6f5fa6ec031536b478733270175d928a46bc23cf14ed073854afd5032a8bef43d4c5664e159ffa7e9cdef4fe17c2c5ef36c6e6ddf342d16ce207cfe09b8067f2e48c6bae69b620d8be76725200b63522d766517203c6641e7d891469bf239c7a48d14f7c690e182c4f6a1fd02f2aa1b97dbecb8e120cc0fbd374ff598c53cb505698f94429466b97acb1a0232169e0e19e9ad7e3a41ee63e3b9ddcc0d40385c3d5acbb51e1987821de029bd9dc1fabd200a2e55bf786c52ae9ffc335d8a82e9156705ebfaff0992c1f5bca9d0d020834fea9163fcb691bf06deb6f92b76e2c21b3fa1625910846f3c715cbfb7de75209aec43c1a9acd2b4f833ac3a3883ba23349aa2a439871764c54ac8842a4a10280ff498072928aa1b4ced9ab3d9d27e4b5fab13bb979788848f7a4239896fe73a176a38766ed7fa1e84e88efb12a9c75c2e4431396b192b9dc4fa92343a702538feef01ae577fa443f4b50666bb87fc62577045963e8168981e1b6063b7454345a84dfdb278a4090d155220a18fd21e90a2c84943d947f5079aaa3e04364ffeb8a804df0f6e3c1b45782fcd5a4535940f26636ee79188ccb2ba071e0c832d9e9a9a391e0992e0f6965100ad2e6608d5db25847b2aa794ea6ee9b7687a1f9357320d073d06db8c38fbdc1be781bf53d05a5deeeb9e8d8ff66876b3a88b309d27bb83f8b3390947fd97c9f9ea41b215803088ac254cdab849291ed081e4a0cfd611fb7819d50753121bdda8770ad38d84bfadd9da9d7e9ffa5b9af3b9b8c13d7f73d920173137a6d4d17f2a2d0605926a68623947ee798dffe22746288195a718ae5dbfcc03b7da8a8ff0aa40c133b56c0c3ee95dd1dfaadafbdb37dc17ec84b0a0ce29ad46d50ef4fde31b6ba31c76498091fea2ef0c785be2daf492121dbc2101fd102000a"], 0x1028}}, 0x20000050) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) io_setup(0x200, &(0x7f0000000140)) 2.764693886s ago: executing program 4 (id=417): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000001480), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000008) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xc4, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x13}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x600}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83c}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20000000}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_stats}) 2.628966804s ago: executing program 2 (id=418): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000028000"}) 2.593123024s ago: executing program 3 (id=419): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000}, 0x18) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) (async, rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, 0x5}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r3, 0x0, 0x2fff, 0x2, &(0x7f00000000c0)='zr', 0x5}) (async) prctl$PR_SET_NAME(0xf, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000080)='bridge0\x00') (async) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) 2.549746482s ago: executing program 2 (id=420): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.466843339s ago: executing program 4 (id=421): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x0, 0x7fff0000}]}) rmdir(0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x20010, r0, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/134) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd70000000007b280000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) socket$inet(0x2, 0x3, 0x3) 2.39213539s ago: executing program 3 (id=422): r0 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) syz_open_dev$vcsu(0x0, 0x8001, 0x400) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff0000012200008848000000004a0500ac0067000080029078ac1e0001e0000002b90d35900ab0155356dfa5b5aeeebf7cfdcb9c320d6317cd2f6700034a0194040000000017059078e0000002534cc61a450fdca1f05450a0b42b79046bd86aa7ab56da60fa1109e25c303edf215ce3b0b49baf750ec8c27eac2be9b4e07f806f1ab8746e87eba34edb6daccb28b80c1c9c5ab16e69060e3b0cac639fe3dccbfa5d633ed654ad4297e3cf855cff5ab4d1fff63a543b0d947153b41c6c4f0943c79aa11be8c80c6168bfcede2fb68f3e8914888e0000000000000000"], 0x0) syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0xfffffffe, 0x1000}, &(0x7f0000000240), &(0x7f0000001880)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000ff000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40032143, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x4000103d1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x110}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1e}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x4) 1.665446609s ago: executing program 5 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002000000e0000001"], 0x190) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) chroot(&(0x7f0000000000)='./file0\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x9b49, 0x4000, 0x0, 0x0, 0x0, r5}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x2f67, 0x10a5, 0x3, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9c40, '\x00', r3, r5, 0x4, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x3, 0xc}}, './file0\x00'}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000000000000095000000000000f0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000000), &(0x7f0000000100)=@udp, 0x1}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xcd, 0xf9, 0xf8, 0x8, 0xbc3, 0x1, 0x1185, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xd2, 0x96}}]}}]}}, 0x0) 1.588846259s ago: executing program 4 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x2000, 0x0) (async) r1 = msgget(0x0, 0x600) msgctl$MSG_STAT(r1, 0xb, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_out(r4, 0x5460, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) (async, rerun: 32) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 32) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)='4', 0x1}], 0x1) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e2dbb256537437b, 0x61, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 1.298885628s ago: executing program 4 (id=427): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = semget(0x3, 0x2, 0x282) semctl$SEM_INFO(r3, 0x1, 0x13, &(0x7f0000000000)=""/24) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000001c0)=""/215, &(0x7f0000000080)=0xd7) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0x1}], 0x1}}], 0x1, 0x4008440) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) semget(0x3, 0x2, 0x282) (async) semctl$SEM_INFO(r3, 0x1, 0x13, &(0x7f0000000000)=""/24) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) (async) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000001c0)=""/215, &(0x7f0000000080)=0xd7) (async) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0x1}], 0x1}}], 0x1, 0x4008440) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) 975.677423ms ago: executing program 4 (id=428): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x181102, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x4e0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0xd0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [0x0, 0x0, 0xffffffff], [0x0, 0xff], 'macvlan1\x00', 'veth0_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@empty, @private0, [], [], 'syzkaller0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0xa7}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xb}, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000002000000020202000900010000020000000000000900030073797a3000000000522c5683ef7c7e96e6829897d364cd0e7a2ec9e90c9ae7c5d855528f832a8e83f4bdb8620fb817423401c6a65dda5c4a6c95c5c17ebe53b5773ee4fab7f7fd3480aa9f429749f912187144e59bb104d4f5a2393c2097e7e5e11d489b2f3dfb461912a9d1721097274e43568d2340b3b90537b4e9b834d2bb500b3bef1e6422169b83c9ef52017c50efe25976de0f049603d78dc60000000000"], 0x2c}, 0x1, 0x40030000000000}, 0x40080) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000012c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 907.729727ms ago: executing program 1 (id=166): sync() sync() (async) sync() ioperm(0xffffeffe, 0x40000007, 0x83) (async) ioperm(0xffffeffe, 0x40000007, 0x83) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) unshare(0x44040000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwrite64(r2, &(0x7f0000000100)="4357e4f5438df44518772f39ea3c16a71cf0e72fdccb43aac6b8cf764a9d04e1f795ed6d903bc49849", 0x29, 0x8) socket$nl_route(0x10, 0x3, 0x0) 8.506498ms ago: executing program 5 (id=429): listen(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000001fa80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0xc1, @local, 0x75}}}, 0x80, 0x0}}], 0x3, 0x4000094) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) read$hiddev(r1, &(0x7f0000000500)=""/213, 0xd5) 7.468942ms ago: executing program 2 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x10000}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x121000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x40000c0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0053a302000000040000000100000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880), 0x2000000}, 0x20) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 914.369µs ago: executing program 3 (id=431): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 0s ago: executing program 4 (id=432): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup3(r3, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f00000001c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6Op\x9e6+W\xbd\xb3A9\xc2\xa1\x05\x060\n7\x1a/\xe8\xa8\x91\xe2\xcd', 0x3) splice(r4, 0x0, r5, 0x0, 0x200002, 0x800000000000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0xb4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): bject_r:usb_device_t tclass=chr_file permissive=1 [ 102.626424][ T6392] overlayfs: failed to resolve './file2': -2 [ 102.647255][ T6394] xt_TCPMSS: Only works on TCP SYN packets [ 102.653906][ T6392] capability: warning: `syz.4.136' uses 32-bit capabilities (legacy support in use) [ 102.870652][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 102.926137][ T6396] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 103.244634][ T6416] ======================================================= [ 103.244634][ T6416] WARNING: The mand mount option has been deprecated and [ 103.244634][ T6416] and is ignored by this kernel. Remove the mand [ 103.244634][ T6416] option from the mount to silence this warning. [ 103.244634][ T6416] ======================================================= [ 103.439407][ T6423] overlay: filesystem on ./bus not supported as upperdir [ 103.463213][ T6416] syz.4.143: attempt to access beyond end of device [ 103.463213][ T6416] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 103.478888][ T6416] hfsplus: unable to find HFS+ superblock [ 103.577752][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 103.871513][ T5828] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 104.017199][ T5828] usb 5-1: device descriptor read/64, error -71 [ 104.170347][ T5894] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 104.281571][ T5828] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 104.450489][ T5894] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.695857][ T5828] usb 5-1: device descriptor read/64, error -71 [ 104.724624][ T5894] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.751254][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.797500][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.841839][ T5828] usb usb5-port1: attempt power cycle [ 104.853087][ T6437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 104.874954][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.030293][ T969] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 105.110904][ T5894] usb 3-1: USB disconnect, device number 11 [ 105.220406][ T5828] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 105.239790][ T969] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.249426][ T969] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 105.270246][ T969] usb 4-1: can't read configurations, error -71 [ 105.278268][ T5828] usb 5-1: device descriptor read/8, error -71 [ 105.290271][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.319149][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 105.319166][ T29] audit: type=1400 audit(1740427241.152:340): avc: denied { read write } for pid=6433 comm="syz.2.146" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.364554][ T29] audit: type=1400 audit(1740427241.192:341): avc: denied { write } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.387049][ T29] audit: type=1400 audit(1740427241.192:342): avc: denied { remove_name } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.413065][ T29] audit: type=1400 audit(1740427241.192:343): avc: denied { rename } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.445801][ T29] audit: type=1400 audit(1740427241.192:344): avc: denied { add_name } for pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.474971][ T29] audit: type=1400 audit(1740427241.192:345): avc: denied { unlink } for pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.498198][ T29] audit: type=1400 audit(1740427241.192:346): avc: denied { create } for pid=5174 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.500197][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 105.522093][ T5828] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 105.533092][ T29] audit: type=1400 audit(1740427241.202:347): avc: denied { open } for pid=6433 comm="syz.2.146" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.552994][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.558150][ T5828] usb 5-1: device descriptor read/8, error -71 [ 105.579709][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 105.589210][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 105.597667][ T25] usb 1-1: SerialNumber: syz [ 105.606480][ T25] usb 1-1: config 0 descriptor?? [ 105.681196][ T5828] usb usb5-port1: unable to enumerate USB device [ 105.821408][ T25] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 105.835194][ T25] usb 1-1: No valid video chain found. [ 105.850866][ T25] usb 1-1: USB disconnect, device number 4 [ 105.924724][ T6476] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 105.951474][ T6476] CIFS mount error: No usable UNC path provided in device string! [ 105.951474][ T6476] [ 105.962337][ T6476] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 106.573468][ T29] audit: type=1400 audit(1740427242.412:348): avc: denied { create } for pid=6479 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.694041][ T29] audit: type=1400 audit(1740427242.432:349): avc: denied { read } for pid=6479 comm="syz.0.155" path="socket:[11213]" dev="sockfs" ino=11213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.690853][ T5828] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.113130][ T5817] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 108.203142][ T5828] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 108.212659][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.234278][ T5828] usb 1-1: config 0 descriptor?? [ 108.249944][ T5828] usb 1-1: selecting invalid altsetting 1 [ 108.250506][ T5817] usb 3-1: device descriptor read/64, error -71 [ 108.256178][ T5828] flexcop_usb: set interface failed. [ 108.269608][ T5828] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 108.516516][ T5817] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 108.552813][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.661759][ T5817] usb 3-1: device descriptor read/64, error -71 [ 108.680572][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.860477][ T5817] usb usb3-port1: attempt power cycle [ 108.908338][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.928934][ T6530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.941099][ T6530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.982390][ T969] usb 1-1: USB disconnect, device number 5 [ 109.037720][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.107212][ T6532] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 109.220232][ T5817] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 109.256389][ T5817] usb 3-1: device descriptor read/8, error -71 [ 109.510170][ T5817] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 109.530600][ T5817] usb 3-1: device descriptor read/8, error -71 [ 109.644515][ T5817] usb usb3-port1: unable to enumerate USB device [ 109.664460][ T11] bridge_slave_1: left allmulticast mode [ 109.685603][ T11] bridge_slave_1: left promiscuous mode [ 109.715213][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.737342][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.750142][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.758459][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.775704][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.783427][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.790931][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.817695][ T11] bridge_slave_0: left allmulticast mode [ 109.823494][ T11] bridge_slave_0: left promiscuous mode [ 109.829673][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.560227][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 110.560262][ T29] audit: type=1400 audit(1740427246.302:353): avc: denied { nlmsg_read } for pid=6558 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 111.290921][ T5865] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 111.345619][ T29] audit: type=1400 audit(1740427247.182:354): avc: denied { mounton } for pid=6564 comm="syz.2.173" path="/35/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 111.540357][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 111.549022][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.602995][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.643592][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.688313][ T5865] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.727726][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.797412][ T5865] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.831541][ T5865] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.861557][ T5822] Bluetooth: hci3: command tx timeout [ 111.878945][ T5865] usb 4-1: Manufacturer: syz [ 111.937363][ T5865] usb 4-1: config 0 descriptor?? [ 112.128692][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 112.241346][ T5865] rc_core: IR keymap rc-hauppauge not found [ 112.247292][ T5865] Registered IR keymap rc-empty [ 112.261352][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.276709][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.288373][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.290253][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.307114][ T11] bond0 (unregistering): Released all slaves [ 112.321974][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 112.363242][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 112.416691][ T29] audit: type=1400 audit(1740427248.252:355): avc: denied { read } for pid=5177 comm="acpid" name="event4" dev="devtmpfs" ino=2819 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.450977][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.462297][ T29] audit: type=1400 audit(1740427248.292:356): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2819 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.485927][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.517263][ T29] audit: type=1400 audit(1740427248.292:357): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2819 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.542978][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.550556][ T29] audit: type=1400 audit(1740427248.352:358): avc: denied { create } for pid=6572 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 112.570482][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.625229][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.670281][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.710223][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.731194][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.750160][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.770222][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.798613][ T5865] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 112.808635][ T5865] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 113.093423][ T29] audit: type=1400 audit(1740427248.912:359): avc: denied { setopt } for pid=6591 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.292658][ T11] hsr_slave_0: left promiscuous mode [ 113.303474][ T11] hsr_slave_1: left promiscuous mode [ 113.313897][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.329170][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.355730][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.375594][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.449524][ T11] veth1_macvtap: left promiscuous mode [ 113.456725][ T11] veth0_macvtap: left promiscuous mode [ 113.468463][ T11] veth1_vlan: left promiscuous mode [ 113.484085][ T11] veth0_vlan: left promiscuous mode [ 113.850375][ T9] usb 4-1: USB disconnect, device number 8 [ 113.940673][ T5822] Bluetooth: hci3: command tx timeout [ 115.029017][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'. [ 115.597491][ T29] audit: type=1400 audit(1740427251.422:360): avc: denied { setopt } for pid=6635 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.663194][ T29] audit: type=1400 audit(1740427251.432:361): avc: denied { create } for pid=6635 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 116.020394][ T5822] Bluetooth: hci3: command tx timeout [ 116.244535][ T11] team0 (unregistering): Port device team_slave_1 removed [ 116.292790][ T11] team0 (unregistering): Port device team_slave_0 removed [ 116.388029][ T6640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.666805][ T29] audit: type=1400 audit(1740427252.492:362): avc: denied { bind } for pid=6658 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.686847][ T29] audit: type=1400 audit(1740427252.502:363): avc: denied { listen } for pid=6658 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.707959][ T29] audit: type=1400 audit(1740427252.502:364): avc: denied { accept } for pid=6658 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.732259][ T29] audit: type=1400 audit(1740427252.562:365): avc: denied { read } for pid=6658 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.890459][ T5865] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 117.044890][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 117.070383][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 117.101641][ T5865] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.130648][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 117.139509][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.170085][ T6672] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.174359][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.216245][ T5865] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.286881][ T5865] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.339039][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.429284][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.444344][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.591421][ T6542] bridge_slave_0: entered allmulticast mode [ 117.619105][ T6542] bridge_slave_0: entered promiscuous mode [ 117.627183][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.627314][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.627461][ T6542] bridge_slave_1: entered allmulticast mode [ 117.628488][ T6542] bridge_slave_1: entered promiscuous mode [ 118.130171][ T5822] Bluetooth: hci3: command tx timeout [ 118.372318][ T5865] usb 3-1: GET_CAPABILITIES returned 0 [ 118.372352][ T5865] usbtmc 3-1:16.0: can't read capabilities [ 118.469823][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.486716][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.593148][ T6542] team0: Port device team_slave_0 added [ 118.606247][ T6542] team0: Port device team_slave_1 added [ 118.699131][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.699157][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.699179][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.714894][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.714911][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.714933][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.745007][ T6694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'. [ 118.912364][ T9] usb 3-1: USB disconnect, device number 16 [ 118.926378][ T6542] hsr_slave_0: entered promiscuous mode [ 118.939510][ T6542] hsr_slave_1: entered promiscuous mode [ 118.956073][ T6542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.966457][ T6542] Cannot create hsr debugfs directory [ 119.140604][ T5865] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.480553][ T29] audit: type=1400 audit(1740427255.282:366): avc: denied { write } for pid=6698 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.660121][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 119.700272][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.731040][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.767968][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.779903][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.851744][ T5865] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c06, bcdDevice=47.00 [ 119.876604][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.928498][ T5865] usb 1-1: config 0 descriptor?? [ 121.032988][ T5865] corsair-psu 0003:1B1C:1C06.0001: item fetching failed at offset 5/7 [ 121.093192][ T5865] corsair-psu 0003:1B1C:1C06.0001: probe with driver corsair-psu failed with error -22 [ 121.430629][ T6724] syz.2.199: attempt to access beyond end of device [ 121.430629][ T6724] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 121.505726][ T6724] gfs2: error -5 reading superblock [ 121.579281][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.588056][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.631109][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 121.800772][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 121.812499][ T6542] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.824476][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.833712][ T6542] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.855345][ T6542] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.861841][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.894193][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.906473][ T6542] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.927517][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.973462][ T9] usb 5-1: config 0 descriptor?? [ 121.996148][ T9] hub 5-1:0.0: USB hub found [ 122.231479][ T9] hub 5-1:0.0: 1 port detected [ 122.859262][ T29] audit: type=1400 audit(1740427258.142:367): avc: denied { connect } for pid=6752 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.988519][ T6762] PM: Enabling pm_trace changes system date and time during resume. [ 122.988519][ T6762] PM: Correct system time has to be restored manually after resume. [ 123.043731][ T5865] usb 1-1: USB disconnect, device number 6 [ 123.052382][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.109727][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.153977][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.161216][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.216771][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.224004][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.360276][ T5817] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 123.412785][ T29] audit: type=1400 audit(1740427259.252:368): avc: denied { wake_alarm } for pid=6742 comm="syz.3.203" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.520352][ T5817] usb 3-1: device descriptor read/64, error -71 [ 123.537853][ T9] hub 5-1:0.0: activate --> -90 [ 123.659353][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.752217][ T5894] usb 5-1: USB disconnect, device number 19 [ 123.759808][ T9] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 123.770123][ T5817] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 123.807125][ T6542] veth0_vlan: entered promiscuous mode [ 123.822363][ T6542] veth1_vlan: entered promiscuous mode [ 123.846698][ T6542] veth0_macvtap: entered promiscuous mode [ 123.857567][ T6542] veth1_macvtap: entered promiscuous mode [ 123.875871][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.886702][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.897249][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.908606][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.919053][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.930701][ T5817] usb 3-1: device descriptor read/64, error -71 [ 123.937608][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.949353][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.961384][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.973060][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.003582][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.014279][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.030053][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.040401][ T5817] usb usb3-port1: attempt power cycle [ 124.042460][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.055992][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.068367][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.082401][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.094322][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.105797][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.132286][ T6542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.146832][ T29] audit: type=1400 audit(1740427259.962:369): avc: denied { write } for pid=6787 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.164160][ T6542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.195708][ T6542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.196438][ T29] audit: type=1400 audit(1740427259.962:370): avc: denied { name_connect } for pid=6787 comm="syz.3.207" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 124.218705][ T6542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.368715][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.382116][ T5817] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 124.405497][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.451001][ T5817] usb 3-1: device descriptor read/8, error -71 [ 124.489412][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.519489][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.535091][ T6806] random: crng reseeded on system resumption [ 124.542791][ T29] audit: type=1400 audit(1740427260.372:371): avc: denied { write } for pid=6804 comm="syz.4.210" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.630909][ T29] audit: type=1400 audit(1740427260.372:372): avc: denied { open } for pid=6804 comm="syz.4.210" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.678238][ T29] audit: type=1400 audit(1740427260.422:373): avc: denied { mount } for pid=6542 comm="syz-executor" name="/" dev="gadgetfs" ino=7273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 124.720382][ T5817] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 124.762107][ T5817] usb 3-1: device descriptor read/8, error -71 [ 124.930519][ T5817] usb usb3-port1: unable to enumerate USB device [ 125.386284][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.396962][ T6826] batadv_slave_1: entered promiscuous mode [ 125.404941][ T5867] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.614501][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 125.785758][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 125.800901][ T5867] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 125.849583][ T5867] usb 4-1: Product: syz [ 125.859172][ T5867] usb 4-1: Manufacturer: syz [ 125.874337][ T2970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.890310][ T5867] usb 4-1: SerialNumber: syz [ 125.911329][ T5867] usb 4-1: config 0 descriptor?? [ 125.929631][ T29] audit: type=1400 audit(1740427261.762:374): avc: denied { create } for pid=6827 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 126.011834][ T5867] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 126.390399][ T2970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.420670][ T5867] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 126.623219][ T5894] usb 4-1: USB disconnect, device number 10 [ 127.147650][ T29] audit: type=1400 audit(1740427262.972:375): avc: denied { accept } for pid=6844 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.530274][ T2970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.710070][ T29] audit: type=1400 audit(1740427263.542:376): avc: denied { read } for pid=6863 comm="syz.3.220" lport=49193 faddr=::ffff:100.1.1.1 fport=20260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.249264][ T2970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.505576][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.516245][ T29] audit: type=1400 audit(1740427264.312:377): avc: denied { listen } for pid=6875 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.582295][ T6885] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 128.602927][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.621287][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.637456][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.666364][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.675875][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.913657][ T29] audit: type=1400 audit(1740427264.412:378): avc: denied { write } for pid=6875 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.066423][ T6895] IPv6: addrconf: prefix option has invalid lifetime [ 129.181564][ T2970] bridge_slave_1: left allmulticast mode [ 129.187256][ T2970] bridge_slave_1: left promiscuous mode [ 129.209414][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.248295][ T2970] bridge_slave_0: left allmulticast mode [ 129.261290][ T2970] bridge_slave_0: left promiscuous mode [ 129.267146][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.510332][ T5817] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.982101][ T5865] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 130.070121][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 130.112126][ T29] audit: type=1400 audit(1740427265.952:379): avc: denied { create } for pid=6910 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.140155][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.173646][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.190080][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 130.195398][ T29] audit: type=1400 audit(1740427265.992:380): avc: denied { accept } for pid=6910 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.218018][ T5817] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 130.230539][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.246563][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.256589][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.277478][ T5817] usb 1-1: config 0 descriptor?? [ 130.282579][ T5865] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00 [ 130.310130][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.329158][ T5865] usb 5-1: config 0 descriptor?? [ 130.703026][ T5865] hid-generic 0003:FFFF:FFFF.0002: hidraw0: USB HID v0.00 Device [HID ffff:ffff] on usb-dummy_hcd.4-1/input0 [ 130.731353][ T5131] Bluetooth: hci3: command tx timeout [ 130.753963][ T5817] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 130.789332][ T5865] usb 5-1: USB disconnect, device number 20 [ 130.927023][ T5817] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 131.424819][ T5817] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 131.522566][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.557731][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.585871][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.602261][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.719315][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.737680][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.754141][ T2970] bond0 (unregistering): Released all slaves [ 131.800144][ T5894] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 131.810409][ T5865] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 131.937298][ T5894] usb 3-1: device descriptor read/64, error -71 [ 131.996147][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 132.020535][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.039896][ T5865] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.060707][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.082537][ T5865] usb 5-1: config 0 descriptor?? [ 132.178991][ T2970] hsr_slave_0: left promiscuous mode [ 132.193032][ T5894] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 132.209297][ T2970] hsr_slave_1: left promiscuous mode [ 132.220770][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.238412][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.275914][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.287555][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.321261][ T2970] veth1_macvtap: left promiscuous mode [ 132.329517][ T5865] usbhid 5-1:0.0: can't add hid device: -71 [ 132.330438][ T2970] veth0_macvtap: left promiscuous mode [ 132.341062][ T5894] usb 3-1: device descriptor read/64, error -71 [ 132.349766][ T5865] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.362509][ T2970] veth1_vlan: left promiscuous mode [ 132.372041][ T2970] veth0_vlan: left promiscuous mode [ 132.391879][ T5865] usb 5-1: USB disconnect, device number 21 [ 132.450417][ T5894] usb usb3-port1: attempt power cycle [ 132.804197][ T5894] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 132.810392][ T5131] Bluetooth: hci3: command tx timeout [ 132.834280][ T5894] usb 3-1: device descriptor read/8, error -71 [ 132.892209][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.898564][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.915839][ T6949] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 133.035634][ T2970] team0 (unregistering): Port device team_slave_1 removed [ 133.084477][ T5894] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 133.112371][ T5894] usb 3-1: device descriptor read/8, error -71 [ 133.137679][ T2970] team0 (unregistering): Port device team_slave_0 removed [ 133.241178][ T5894] usb usb3-port1: unable to enumerate USB device [ 133.779309][ T6944] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 133.784674][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 133.957982][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.958890][ T6957] syz.4.238 uses obsolete (PF_INET,SOCK_PACKET) [ 133.965671][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.979358][ T6878] bridge_slave_0: entered allmulticast mode [ 133.991009][ T6878] bridge_slave_0: entered promiscuous mode [ 133.999404][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.007272][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.014919][ T6878] bridge_slave_1: entered allmulticast mode [ 134.022216][ T6878] bridge_slave_1: entered promiscuous mode [ 134.089592][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.101931][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.141829][ T6962] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 134.158463][ T6962] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 134.173791][ T6878] team0: Port device team_slave_0 added [ 134.199616][ T6878] team0: Port device team_slave_1 added [ 134.239823][ T29] audit: type=1400 audit(1740427270.072:381): avc: denied { getopt } for pid=6961 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.281575][ T6964] pim6reg: entered allmulticast mode [ 134.298187][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.307974][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.339877][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.389580][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.404782][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.431094][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.482350][ T6878] hsr_slave_0: entered promiscuous mode [ 134.488483][ T6878] hsr_slave_1: entered promiscuous mode [ 134.494835][ T6878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.502554][ T6878] Cannot create hsr debugfs directory [ 134.830071][ T5867] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 135.514157][ T5131] Bluetooth: hci3: command tx timeout [ 135.684928][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 135.889765][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.917949][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.980604][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.120099][ T5867] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 136.130376][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.150921][ T5867] usb 5-1: config 0 descriptor?? [ 136.655770][ T5817] ft260 0003:0403:6030.0003: failed to retrieve status: -110, no wakeup [ 137.245387][ T5867] wacom 0003:056A:0022.0004: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 137.270359][ T5817] ft260 0003:0403:6030.0003: failed to retrieve status: -32 [ 137.284723][ T5817] ft260 0003:0403:6030.0003: failed to reset I2C controller: -32 [ 137.288168][ T6878] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.321817][ T5867] wacom 0003:056A:0022.0004: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.4-1/input0 [ 137.336408][ T5867] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0022.0004/input/input8 [ 137.379546][ T5867] usb 5-1: USB disconnect, device number 22 [ 137.520184][ T6878] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.565315][ T5131] Bluetooth: hci3: command tx timeout [ 137.576980][ T6878] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.635035][ T6878] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.689264][ T6991] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.724994][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.854717][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.870972][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.878142][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.933341][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.940508][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.494155][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.619904][ T6878] veth0_vlan: entered promiscuous mode [ 138.662907][ T6878] veth1_vlan: entered promiscuous mode [ 138.735460][ T7010] capability: warning: `syz.2.251' uses deprecated v2 capabilities in a way that may be insecure [ 138.751782][ T6878] veth0_macvtap: entered promiscuous mode [ 138.775651][ T6878] veth1_macvtap: entered promiscuous mode [ 138.842357][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.870121][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.879964][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.910195][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.940137][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.970227][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.000072][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.016136][ T29] audit: type=1400 audit(1740427274.822:382): avc: denied { execute } for pid=7011 comm="syz.3.252" name="file2" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.038627][ T5867] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 139.057151][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.079155][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.092681][ T29] audit: type=1400 audit(1740427274.822:383): avc: denied { execute_no_trans } for pid=7011 comm="syz.3.252" path="/59/file2" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.122968][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.150045][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.170071][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.190039][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.200676][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.220030][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.230143][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 139.242244][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 139.250187][ T5864] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 139.253804][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.278748][ T5867] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 139.288188][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 139.320254][ T5867] usb 3-1: Product: syz [ 139.325063][ T6878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.334055][ T5867] usb 3-1: Manufacturer: syz [ 139.338724][ T5867] usb 3-1: SerialNumber: syz [ 139.345144][ T6878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.361634][ T5867] usb 3-1: config 0 descriptor?? [ 139.367250][ T7010] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.384709][ T6878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.391029][ T5867] hub 3-1:0.0: bad descriptor, ignoring hub [ 139.399668][ T5867] hub 3-1:0.0: probe with driver hub failed with error -5 [ 139.401937][ T6878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.445307][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 139.459623][ T5864] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 139.479732][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.528467][ T5864] usb 4-1: config 0 descriptor?? [ 139.577596][ T6976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.597377][ T7010] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 139.605940][ T6976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.654210][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.670038][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.100732][ T9] usb 3-1: USB disconnect, device number 25 [ 140.230152][ T5867] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 140.390123][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 140.396637][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.407784][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.425039][ T5867] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 140.434297][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.447450][ T5867] usb 5-1: config 0 descriptor?? [ 140.850160][ T3164] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 140.859850][ T5867] hid (null): report_id 1552405505 is invalid [ 140.899649][ T5867] nzxt-kraken2 0003:1E71:170E.0005: report_id 1552405505 is invalid [ 140.913355][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.924150][ T5867] nzxt-kraken2 0003:1E71:170E.0005: item 0 4 1 8 parsing failed [ 140.932468][ T5867] nzxt-kraken2 0003:1E71:170E.0005: hid parse failed with -22 [ 140.946380][ T5867] nzxt-kraken2 0003:1E71:170E.0005: probe with driver nzxt-kraken2 failed with error -22 [ 141.030406][ T3164] usb 3-1: Using ep0 maxpacket: 32 [ 141.039049][ T3164] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 141.047879][ T3164] usb 3-1: config 0 has no interface number 0 [ 141.056451][ T3164] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 141.066598][ T3164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.075280][ T3164] usb 3-1: Product: syz [ 141.079631][ T3164] usb 3-1: Manufacturer: syz [ 141.084995][ T3164] usb 3-1: SerialNumber: syz [ 141.098137][ T3164] usb 3-1: config 0 descriptor?? [ 141.106297][ T3164] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.133677][ T5867] usb 5-1: USB disconnect, device number 23 [ 141.283181][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.297578][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.307347][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.317318][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.325027][ T5822] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.339000][ T7024] ref_ctr_offset mismatch. inode: 0x149 offset: 0x0 ref_ctr_offset(old): 0x702f74656e2f666c ref_ctr_offset(new): 0x79656b66 [ 141.340949][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.373040][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.395107][ T7020] batadv_slave_1: entered promiscuous mode [ 141.436594][ T7019] batadv_slave_1: left promiscuous mode [ 141.452014][ T3164] usb 3-1: qt2_attach - failed to power on unit: -71 [ 141.472014][ T3164] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 141.483759][ T3164] usb 3-1: USB disconnect, device number 26 [ 141.512097][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.597302][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.612373][ T7022] chnl_net:caif_netlink_parms(): no params data found [ 141.690995][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.698293][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.711888][ T7022] bridge_slave_0: entered allmulticast mode [ 141.718957][ T7022] bridge_slave_0: entered promiscuous mode [ 141.731983][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.739311][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.746885][ T7022] bridge_slave_1: entered allmulticast mode [ 141.754131][ T7022] bridge_slave_1: entered promiscuous mode [ 141.800330][ T29] audit: type=1400 audit(1740427277.632:384): avc: denied { map } for pid=7032 comm="syz.4.255" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.827204][ T7022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.852315][ T29] audit: type=1400 audit(1740427277.682:385): avc: denied { connect } for pid=7032 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.883037][ T7022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.922111][ T7022] team0: Port device team_slave_0 added [ 141.952232][ T5864] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 141.958210][ T7022] team0: Port device team_slave_1 added [ 141.990538][ T5864] asix 4-1:0.0: probe with driver asix failed with error -71 [ 142.010302][ T5864] usb 4-1: USB disconnect, device number 11 [ 142.044100][ T11] bridge_slave_1: left allmulticast mode [ 142.063560][ T11] bridge_slave_1: left promiscuous mode [ 142.069754][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.871580][ T11] bridge_slave_0: left allmulticast mode [ 142.877282][ T11] bridge_slave_0: left promiscuous mode [ 142.883425][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.461510][ T5822] Bluetooth: hci3: command tx timeout [ 144.040222][ T29] audit: type=1400 audit(1740427279.872:386): avc: denied { create } for pid=7051 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.452204][ T7054] tty tty27: ldisc open failed (-12), clearing slot 26 [ 144.540114][ T5894] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 144.624377][ T29] audit: type=1400 audit(1740427280.462:387): avc: denied { getopt } for pid=7061 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.692016][ T5131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.710540][ T5131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.718338][ T5131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.727348][ T5131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.740471][ T5131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.748737][ T5131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.852400][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 144.873943][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 144.892129][ T5894] usb 3-1: can't read configurations, error -71 [ 144.947407][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.958552][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.968440][ T11] bond0 (unregistering): Released all slaves [ 144.982483][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.989450][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.017299][ T7022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.037502][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.045690][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.079310][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.108970][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.135774][ T7022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.215468][ T7022] hsr_slave_0: entered promiscuous mode [ 145.222194][ T7022] hsr_slave_1: entered promiscuous mode [ 145.230820][ T7022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.240226][ T7022] Cannot create hsr debugfs directory [ 145.489824][ T11] hsr_slave_0: left promiscuous mode [ 145.554985][ T5131] Bluetooth: hci3: command tx timeout [ 145.571681][ T11] hsr_slave_1: left promiscuous mode [ 145.590244][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.597702][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.245515][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.258262][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.489801][ T11] veth1_macvtap: left promiscuous mode [ 146.510218][ T11] veth0_macvtap: left promiscuous mode [ 146.516490][ T11] veth1_vlan: left promiscuous mode [ 146.524957][ T11] veth0_vlan: left promiscuous mode [ 146.811783][ T5131] Bluetooth: hci5: command tx timeout [ 146.902459][ T29] audit: type=1400 audit(1740427282.742:388): avc: denied { map } for pid=7086 comm="syz.3.270" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.010366][ T3164] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 147.226557][ T3164] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 42004, setting to 64 [ 147.240474][ T3164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.268867][ T3164] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.268896][ T3164] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.268915][ T3164] usb 5-1: Product: syz [ 147.268930][ T3164] usb 5-1: Manufacturer: syz [ 147.268944][ T3164] usb 5-1: SerialNumber: syz [ 147.271212][ T3164] usb 5-1: config 0 descriptor?? [ 147.277238][ T3164] usb 5-1: selecting invalid altsetting 0 [ 147.344719][ T7100] 9pnet_fd: Insufficient options for proto=fd [ 147.478260][ T7102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.273'. [ 147.602764][ T7105] netlink: 'syz.2.273': attribute type 8 has an invalid length. [ 147.610694][ T5131] Bluetooth: hci3: command tx timeout [ 147.628607][ T7105] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.273'. [ 147.799271][ T11] team0 (unregistering): Port device team_slave_1 removed [ 147.847567][ T11] team0 (unregistering): Port device team_slave_0 removed [ 148.634331][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 148.891431][ T5131] Bluetooth: hci5: command tx timeout [ 149.204008][ T7063] chnl_net:caif_netlink_parms(): no params data found [ 149.705014][ T5131] Bluetooth: hci3: command tx timeout [ 150.679858][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.698879][ T5828] IPVS: starting estimator thread 0... [ 150.705296][ T5867] usb 5-1: USB disconnect, device number 24 [ 150.730477][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.737634][ T29] audit: type=1400 audit(1740427286.562:389): avc: denied { listen } for pid=7129 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 150.770763][ T7063] bridge_slave_0: entered allmulticast mode [ 150.842078][ T7063] bridge_slave_0: entered promiscuous mode [ 150.846643][ T7132] tmpfs: Unknown parameter '' [ 150.860943][ T7133] IPVS: using max 29 ests per chain, 69600 per kthread [ 150.919419][ T29] audit: type=1400 audit(1740427286.622:390): avc: denied { setopt } for pid=7129 comm="syz.3.279" lport=53067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 150.989084][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.007174][ T5131] Bluetooth: hci5: command tx timeout [ 151.036446][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.054821][ T7063] bridge_slave_1: entered allmulticast mode [ 151.133295][ T7063] bridge_slave_1: entered promiscuous mode [ 151.747215][ T7063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.803962][ T7063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.942790][ T29] audit: type=1400 audit(1740427287.782:391): avc: denied { read } for pid=7141 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.989690][ T7063] team0: Port device team_slave_0 added [ 152.003363][ T7063] team0: Port device team_slave_1 added [ 152.076005][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.090390][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.121089][ T5867] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 152.140137][ T7063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.180860][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.187850][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.216731][ T7063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.240744][ T7022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.270211][ T5894] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 152.290116][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 152.291665][ T7022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.329406][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.352952][ T5867] usb 3-1: config 127 has an invalid interface number: 28 but max is 1 [ 152.370070][ T5867] usb 3-1: config 127 has an invalid interface number: 204 but max is 1 [ 152.378453][ T5867] usb 3-1: config 127 has no interface number 0 [ 152.402208][ T7022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.410119][ T5867] usb 3-1: config 127 has no interface number 1 [ 152.420148][ T5867] usb 3-1: config 127 interface 28 has no altsetting 0 [ 152.425682][ T7063] hsr_slave_0: entered promiscuous mode [ 152.427668][ T5867] usb 3-1: config 127 interface 204 has no altsetting 0 [ 152.450044][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 152.452738][ T7063] hsr_slave_1: entered promiscuous mode [ 152.469623][ T5894] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 152.477882][ T5867] usb 3-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=24.36 [ 152.490033][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.501502][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.509503][ T5867] usb 3-1: Product: syz [ 152.512389][ T7063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.537894][ T7063] Cannot create hsr debugfs directory [ 152.553970][ T7022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.559191][ T5894] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.579863][ T5867] usb 3-1: Manufacturer: syz [ 152.586123][ T5867] usb 3-1: SerialNumber: syz [ 152.594018][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.700199][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.745523][ T5894] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 152.753373][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.764912][ T5894] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.778541][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.789858][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.809962][ T5894] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 152.842557][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.862477][ T5894] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.885139][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.920270][ T5894] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.943959][ T7022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.949862][ T5894] usb 4-1: string descriptor 0 read error: -22 [ 152.957189][ T5894] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 152.975693][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.983968][ T5867] dvb-usb: found a 'Gigabyte U8000-RH' in cold state, will try to load a firmware [ 153.005206][ T5894] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 153.016450][ T5867] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 153.022697][ T7022] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.039707][ T5867] dib0700: firmware download failed at 7 with -22 [ 153.050216][ T5131] Bluetooth: hci5: command tx timeout [ 153.059866][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.067054][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.080036][ T5867] dvb-usb: found a 'Gigabyte U8000-RH' in cold state, will try to load a firmware [ 153.096974][ T5867] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 153.107417][ T5867] dib0700: firmware download failed at 7 with -22 [ 153.119148][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.126309][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.157250][ T5867] usb 3-1: USB disconnect, device number 29 [ 153.246473][ T5894] usb 4-1: USB disconnect, device number 12 [ 153.258816][ T7022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.320921][ T7063] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.342747][ T7063] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.368681][ T7063] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.389643][ T7063] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.493095][ T7022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.509301][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.554080][ T29] audit: type=1400 audit(1740427289.392:392): avc: denied { create } for pid=7159 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.573688][ T7063] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.587941][ T7022] veth0_vlan: entered promiscuous mode [ 153.598416][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.605581][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.628622][ T7022] veth1_vlan: entered promiscuous mode [ 153.638713][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.640358][ T5864] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 153.645888][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.699082][ T7022] veth0_macvtap: entered promiscuous mode [ 153.708554][ T7022] veth1_macvtap: entered promiscuous mode [ 153.807002][ T29] audit: type=1400 audit(1740427289.642:393): avc: denied { ioctl } for pid=7159 comm="syz.2.287" path="socket:[16527]" dev="sockfs" ino=16527 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.809934][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.946120][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 153.961564][ T5864] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 153.992456][ T5864] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.007435][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.019403][ T5864] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.731038][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.741577][ T5864] usb 5-1: config 1 interface 1 has no altsetting 0 [ 154.748281][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.759199][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.771743][ T5864] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.781227][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.789209][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.801261][ T5864] usb 5-1: Product: syz [ 154.805417][ T5864] usb 5-1: Manufacturer: syz [ 154.810366][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.825026][ T5864] usb 5-1: SerialNumber: syz [ 154.830840][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.863199][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.930769][ T29] audit: type=1400 audit(1740427290.742:394): avc: denied { block_suspend } for pid=7170 comm="syz.3.289" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.947822][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.989165][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.040140][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.076162][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.087677][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.098157][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.109239][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.129818][ T7022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.144587][ T7022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.154274][ T7022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.164096][ T7022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.239525][ T7063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.290149][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 155.359791][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.397915][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.451943][ T25] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 155.460629][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.469150][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.478434][ T25] usb 3-1: config 0 has no interface number 0 [ 155.480535][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.485991][ T25] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 155.510773][ T25] usb 3-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.527666][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 155.537317][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.546838][ T25] usb 3-1: Product: syz [ 155.552476][ T25] usb 3-1: Manufacturer: syz [ 155.557160][ T25] usb 3-1: SerialNumber: syz [ 155.568747][ T25] usb 3-1: config 0 descriptor?? [ 155.681296][ T5865] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 155.731103][ T7063] veth0_vlan: entered promiscuous mode [ 155.744660][ T7063] veth1_vlan: entered promiscuous mode [ 155.767741][ T7063] veth0_macvtap: entered promiscuous mode [ 155.783448][ T7063] veth1_macvtap: entered promiscuous mode [ 155.789043][ T25] usb 3-1: Found UVC 0.00 device syz (05ac:8600) [ 155.811066][ T25] usb 3-1: No valid video chain found. [ 155.816407][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.821238][ T25] usb 3-1: USB disconnect, device number 30 [ 155.835036][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.835841][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.861008][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.863285][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.885319][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.900910][ T5865] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.911767][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.919576][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.923126][ T5865] usb 4-1: config 0 descriptor?? [ 155.934950][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.955241][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.966317][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.976828][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.986719][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.997240][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.009024][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.039131][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.049885][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.060959][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.072925][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.082831][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.093364][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.103301][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.114664][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.125482][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.137578][ T7063] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.146380][ T7063] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.155711][ T7063] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.164781][ T7063] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.251832][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.267884][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.318897][ T5864] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 156.345571][ T5864] usb 5-1: 2:1 : invalid channels 0 [ 156.354651][ T5865] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 156.369020][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.395336][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.428234][ T5864] usb 5-1: USB disconnect, device number 25 [ 156.438165][ T5865] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 156.608886][ T6976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.082891][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.147389][ T6976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.416706][ T6976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.473489][ T6976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.567773][ T29] audit: type=1400 audit(1740427293.402:395): avc: denied { read } for pid=7201 comm="syz.2.294" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.744980][ T29] audit: type=1400 audit(1740427293.432:396): avc: denied { open } for pid=7201 comm="syz.2.294" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.162109][ T3164] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 158.234925][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 158.250923][ T6976] bridge_slave_1: left allmulticast mode [ 158.256609][ T6976] bridge_slave_1: left promiscuous mode [ 158.260086][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 158.279947][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.313052][ T7211] netlink: 'syz.2.296': attribute type 13 has an invalid length. [ 158.474781][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.484939][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.493846][ T6976] bridge_slave_0: left allmulticast mode [ 158.499580][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.508265][ T6976] bridge_slave_0: left promiscuous mode [ 158.521165][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.532079][ T5822] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.539319][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.553252][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.897644][ T29] audit: type=1400 audit(1740427294.732:397): avc: denied { ioctl } for pid=7226 comm="syz.3.300" path="socket:[17410]" dev="sockfs" ino=17410 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.143746][ T5817] usb 4-1: USB disconnect, device number 13 [ 159.255935][ T7231] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 159.274627][ T6976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.313883][ T6976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.339045][ T6976] bond0 (unregistering): Released all slaves [ 160.641418][ T7246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7246 comm=syz.5.305 [ 160.656065][ T5131] Bluetooth: hci3: command tx timeout [ 160.662630][ T7246] netlink: 'syz.5.305': attribute type 1 has an invalid length. [ 160.832744][ T7249] Illegal XDP return value 7249 on prog (id 57) dev N/A, expect packet loss! [ 160.981443][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 161.033884][ T7256] overlayfs: failed to resolve './file0': -2 [ 161.065785][ T29] audit: type=1400 audit(1740427296.892:398): avc: denied { ioctl } for pid=7253 comm="syz.2.307" path="socket:[17504]" dev="sockfs" ino=17504 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.137469][ T6976] hsr_slave_0: left promiscuous mode [ 161.150400][ T6976] hsr_slave_1: left promiscuous mode [ 161.174299][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.180123][ T29] audit: type=1400 audit(1740427296.902:399): avc: denied { listen } for pid=7253 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.194368][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.238470][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.260845][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.314029][ T6976] veth1_macvtap: left promiscuous mode [ 161.339636][ T6976] veth0_macvtap: left promiscuous mode [ 161.358882][ T6976] veth1_vlan: left promiscuous mode [ 161.377274][ T6976] veth0_vlan: left promiscuous mode [ 161.572321][ T7265] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 161.590571][ T7264] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 161.761132][ T5822] Bluetooth: unknown link type 55 [ 161.767748][ T5822] Bluetooth: hci2: connection err: -111 [ 162.204901][ T7277] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 162.343326][ T7282] No such timeout policy "syz1" [ 162.363160][ T29] audit: type=1400 audit(1740427298.202:400): avc: denied { bind } for pid=7278 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.363339][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 162.401218][ T7282] netlink: 'syz.4.314': attribute type 39 has an invalid length. [ 162.559236][ T6976] team0 (unregistering): Port device team_slave_1 removed [ 162.598237][ T6976] team0 (unregistering): Port device team_slave_0 removed [ 162.730340][ T5822] Bluetooth: hci3: command tx timeout [ 163.038794][ T7272] bridge1: entered promiscuous mode [ 163.050764][ T7281] bridge_slave_1: left allmulticast mode [ 163.089761][ T7281] bridge_slave_1: left promiscuous mode [ 163.095910][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.116561][ T29] audit: type=1400 audit(1740427298.952:401): avc: denied { append } for pid=7283 comm="syz.5.315" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 163.165551][ T7281] bridge_slave_0: left allmulticast mode [ 163.206522][ T7281] bridge_slave_0: left promiscuous mode [ 163.219977][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.314961][ T7285] dlm: no local IP address has been set [ 163.334796][ T7285] dlm: cannot start dlm midcomms -107 [ 163.392075][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.408047][ T7284] dlm: no local IP address has been set [ 163.418215][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.430184][ T7284] dlm: cannot start dlm midcomms -107 [ 163.435842][ T7220] bridge_slave_0: entered allmulticast mode [ 163.462032][ T7220] bridge_slave_0: entered promiscuous mode [ 163.492127][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.529836][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.560572][ T7220] bridge_slave_1: entered allmulticast mode [ 163.567537][ T7220] bridge_slave_1: entered promiscuous mode [ 163.641516][ T29] audit: type=1400 audit(1740427299.482:402): avc: denied { accept } for pid=7295 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.852244][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.914308][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.162688][ T7220] team0: Port device team_slave_0 added [ 164.203508][ T7220] team0: Port device team_slave_1 added [ 164.736746][ T7317] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 164.810165][ T5822] Bluetooth: hci3: command tx timeout [ 165.211509][ T5894] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 165.296234][ T5822] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 165.314960][ T5822] Bluetooth: hci5: Injecting HCI hardware error event [ 165.321935][ T5817] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 165.341434][ T5131] Bluetooth: hci5: hardware error 0x00 [ 165.350231][ T5894] usb 4-1: device descriptor read/64, error -71 [ 165.510125][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 165.518004][ T5817] usb 3-1: config index 0 descriptor too short (expected 17170, got 18) [ 165.535953][ T5817] usb 3-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 165.551172][ T5817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 165.568991][ T5817] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 165.578322][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.586749][ T5817] usb 3-1: Product: syz [ 165.590108][ T5894] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 165.596994][ T5817] usb 3-1: Manufacturer: syz [ 165.603243][ T5817] usb 3-1: SerialNumber: syz [ 165.622081][ T5817] usb 3-1: config 0 descriptor?? [ 165.638168][ T5817] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 165.736025][ T5894] usb 4-1: device descriptor read/64, error -71 [ 165.841517][ T5817] usb 3-1: USB disconnect, device number 31 [ 165.863790][ T5894] usb usb4-port1: attempt power cycle [ 166.210129][ T5894] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 166.230776][ T5894] usb 4-1: device descriptor read/8, error -71 [ 166.472474][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 166.482315][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 166.485997][ T5894] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 166.528456][ T5894] usb 4-1: device descriptor read/8, error -71 [ 166.641407][ T5894] usb usb4-port1: unable to enumerate USB device [ 166.882869][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.890507][ T5822] Bluetooth: hci3: command tx timeout [ 166.898922][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.925205][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.941349][ T7319] vlan2: entered promiscuous mode [ 166.946566][ T7319] bridge0: entered promiscuous mode [ 166.952968][ T7319] vlan2: entered allmulticast mode [ 166.958224][ T7319] bridge0: entered allmulticast mode [ 166.981256][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.010264][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.036702][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.166381][ T7220] hsr_slave_0: entered promiscuous mode [ 167.186287][ T7220] hsr_slave_1: entered promiscuous mode [ 167.194152][ T7220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.201959][ T7220] Cannot create hsr debugfs directory [ 167.226097][ T7343] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 167.236974][ T7342] IPVS: stopping master sync thread 7343 ... [ 167.360231][ T5894] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 167.451459][ T5131] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 167.520148][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 167.529707][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.543287][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.559662][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.592255][ T5894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.613142][ T5894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.626316][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.780057][ T29] audit: type=1400 audit(1740427303.612:403): avc: denied { ioctl } for pid=7352 comm="syz.2.335" path="socket:[17358]" dev="sockfs" ino=17358 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.139647][ T29] audit: type=1400 audit(1740427303.692:404): avc: denied { write } for pid=7352 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.263633][ T5894] usb 5-1: GET_CAPABILITIES returned 0 [ 168.269228][ T5894] usbtmc 5-1:16.0: can't read capabilities [ 168.333736][ T7220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 168.342336][ T29] audit: type=1400 audit(1740427304.132:405): avc: denied { setopt } for pid=7335 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.442204][ T7220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.479828][ T7220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.518540][ T7220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.559368][ T7363] SELinux: syz.3.336 (7363) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 168.632074][ T29] audit: type=1400 audit(1740427304.472:406): avc: denied { mount } for pid=7362 comm="syz.3.336" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 168.648275][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.725164][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.767588][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.774776][ T7196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.827183][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.834360][ T7196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.891016][ T5867] usb 5-1: USB disconnect, device number 26 [ 169.138895][ T29] audit: type=1400 audit(1740427304.972:407): avc: denied { ioctl } for pid=7369 comm="syz.4.339" path="socket:[17952]" dev="sockfs" ino=17952 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.213914][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.249841][ T7220] veth0_vlan: entered promiscuous mode [ 169.260395][ T7220] veth1_vlan: entered promiscuous mode [ 169.274756][ T7377] block nbd2: shutting down sockets [ 169.325277][ T7220] veth0_macvtap: entered promiscuous mode [ 169.343621][ T7220] veth1_macvtap: entered promiscuous mode [ 169.387995][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.408173][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.466628][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.490183][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.526936][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.546963][ T29] audit: type=1400 audit(1740427305.382:408): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 169.551032][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.618536][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.653245][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.677487][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.680059][ T29] audit: type=1400 audit(1740427305.512:409): avc: denied { map } for pid=7378 comm="syz.2.341" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.689492][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.903126][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.913239][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.923944][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.936686][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.947353][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.957328][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.967934][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.977875][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.030669][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.082933][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.116525][ T7220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.143348][ T7220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.182429][ T7220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.196849][ T7220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.499940][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 170.555664][ T7403] VFS: could not find a valid V7 on nullb0. [ 170.605954][ T7395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.623074][ T7395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.670376][ T25] usb 3-1: device descriptor read/64, error -71 [ 170.707791][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.724421][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.920832][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 171.393603][ T7418] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 171.432364][ T25] usb 3-1: device descriptor read/64, error -71 [ 171.550358][ T25] usb usb3-port1: attempt power cycle [ 171.588354][ T29] audit: type=1400 audit(1740427307.422:410): avc: denied { write } for pid=7422 comm="syz.5.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.629842][ T29] audit: type=1400 audit(1740427307.452:411): avc: denied { bind } for pid=7422 comm="syz.5.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.652082][ T29] audit: type=1400 audit(1740427307.452:412): avc: denied { name_bind } for pid=7422 comm="syz.5.348" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 171.673147][ T29] audit: type=1400 audit(1740427307.452:413): avc: denied { node_bind } for pid=7422 comm="syz.5.348" src=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 171.744161][ T7396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.890227][ T3164] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 171.920125][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 171.942097][ T25] usb 3-1: device descriptor read/8, error -71 [ 172.080073][ T3164] usb 4-1: Using ep0 maxpacket: 8 [ 172.107410][ T3164] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.130659][ T3164] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.142442][ T3164] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.152573][ T3164] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.165629][ T3164] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.174743][ T3164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.200090][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 172.230725][ T25] usb 3-1: device descriptor read/8, error -71 [ 172.344130][ T25] usb usb3-port1: unable to enumerate USB device [ 172.402352][ T7426] o2cb: This node has not been configured. [ 172.408370][ T7426] o2cb: Cluster check failed. Fix errors before retrying. [ 172.415816][ T7426] (syz.3.349,7426,0):user_dlm_register:674 ERROR: status = -22 [ 172.423726][ T7426] (syz.3.349,7426,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 172.473107][ T3164] usb 4-1: usb_control_msg returned -71 [ 172.495661][ T3164] usbtmc 4-1:16.0: can't read capabilities [ 172.541238][ T3164] usb 4-1: USB disconnect, device number 18 [ 172.581561][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.350'. [ 172.591062][ T7432] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.850105][ T5867] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 172.889719][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.899535][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.909033][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.923140][ T7396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.933717][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.943540][ T5822] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.957595][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.021988][ T5867] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.058067][ T5867] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.094837][ T7396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.107804][ T5867] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.123262][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.144563][ T7434] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 173.193095][ T5867] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.269222][ T7396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.502472][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.590557][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.912057][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 173.912070][ T29] audit: type=1400 audit(1740427309.662:424): avc: denied { module_request } for pid=7439 comm="syz.2.354" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.996406][ T5894] usb 5-1: USB disconnect, device number 27 [ 174.162926][ T7435] chnl_net:caif_netlink_parms(): no params data found [ 174.333238][ T7396] bridge_slave_1: left allmulticast mode [ 174.360632][ T7396] bridge_slave_1: left promiscuous mode [ 174.382115][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.401872][ T7396] bridge_slave_0: left allmulticast mode [ 174.422800][ T7396] bridge_slave_0: left promiscuous mode [ 174.428552][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.952384][ T29] audit: type=1400 audit(1740427310.722:425): avc: denied { sqpoll } for pid=7457 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 175.031282][ T5131] Bluetooth: hci3: command tx timeout [ 175.386137][ T29] audit: type=1400 audit(1740427311.222:426): avc: denied { ioctl } for pid=7464 comm="syz.5.359" path="socket:[19480]" dev="sockfs" ino=19480 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.870836][ T29] audit: type=1400 audit(1740427312.702:427): avc: denied { ioctl } for pid=7462 comm="syz.3.358" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 177.130234][ T5131] Bluetooth: hci3: command tx timeout [ 177.209759][ T29] audit: type=1400 audit(1740427312.792:428): avc: denied { getopt } for pid=7462 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.468490][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.363'. [ 178.098440][ T7396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.195026][ T7396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.269860][ T7396] bond0 (unregistering): Released all slaves [ 179.290879][ T5823] Bluetooth: hci3: command tx timeout [ 179.334753][ T7497] loop2: detected capacity change from 0 to 456 [ 179.500584][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.507658][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.670217][ T7435] bridge_slave_0: entered allmulticast mode [ 179.676839][ T7435] bridge_slave_0: entered promiscuous mode [ 179.704613][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.366'. [ 180.309839][ T7507] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.381379][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.400644][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.408179][ T7435] bridge_slave_1: entered allmulticast mode [ 180.463335][ T7435] bridge_slave_1: entered promiscuous mode [ 181.365066][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.374403][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 181.380481][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 181.386687][ T5833] Bluetooth: hci3: command tx timeout [ 181.394227][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 181.470313][ T7396] hsr_slave_0: left promiscuous mode [ 181.522388][ T7396] hsr_slave_1: left promiscuous mode [ 181.538774][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.546350][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.566274][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.586013][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.613908][ T29] audit: type=1400 audit(1740427317.452:429): avc: denied { read } for pid=7529 comm="syz.2.374" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.665664][ T7396] veth1_macvtap: left promiscuous mode [ 181.676900][ T7396] veth0_macvtap: left promiscuous mode [ 181.686568][ T7396] veth1_vlan: left promiscuous mode [ 181.693426][ T7396] veth0_vlan: left promiscuous mode [ 181.741735][ T29] audit: type=1400 audit(1740427317.472:430): avc: denied { open } for pid=7529 comm="syz.2.374" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.891048][ T29] audit: type=1400 audit(1740427317.472:431): avc: denied { ioctl } for pid=7529 comm="syz.2.374" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 182.660776][ T7396] team0 (unregistering): Port device team_slave_1 removed [ 182.739113][ T7396] team0 (unregistering): Port device team_slave_0 removed [ 183.301018][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.321983][ T7539] bridge_slave_0: invalid flags given to default FDB implementation [ 183.370574][ T7553] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 183.430701][ T7553] macsec1: entered promiscuous mode [ 183.436096][ T7553] macsec1: entered allmulticast mode [ 183.454025][ T7553] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 183.552424][ T7435] team0: Port device team_slave_0 added [ 183.598743][ T29] audit: type=1400 audit(1740427319.432:432): avc: denied { bind } for pid=7564 comm="syz.5.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 183.598894][ T7435] team0: Port device team_slave_1 added [ 183.640065][ T5828] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 183.843327][ T29] audit: type=1400 audit(1740427319.432:433): avc: denied { bind } for pid=7564 comm="syz.5.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.996522][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 184.005450][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.382'. [ 184.850767][ T29] audit: type=1400 audit(1740427319.432:434): avc: denied { ioctl } for pid=7564 comm="syz.5.382" path="socket:[18910]" dev="sockfs" ino=18910 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 184.910831][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.938663][ T5828] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 184.947972][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.956051][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.956078][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.991375][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.010112][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.043535][ T7576] SELinux: failed to load policy [ 185.070146][ T29] audit: type=1400 audit(1740427320.872:435): avc: denied { load_policy } for pid=7562 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.115887][ T5828] usb 3-1: Product: syz [ 185.120189][ T5828] usb 3-1: Manufacturer: syz [ 185.124820][ T5828] usb 3-1: SerialNumber: syz [ 185.132387][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 185.133343][ T5828] usb 3-1: config 0 descriptor?? [ 185.147351][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.171173][ T29] audit: type=1400 audit(1740427320.962:436): avc: denied { watch watch_reads } for pid=7562 comm="syz.4.381" path="/75" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.247329][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.262878][ T7435] hsr_slave_0: entered promiscuous mode [ 185.292285][ T7435] hsr_slave_1: entered promiscuous mode [ 185.299041][ T7435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.319347][ T7435] Cannot create hsr debugfs directory [ 185.376979][ T29] audit: type=1400 audit(1740427321.212:437): avc: denied { ioctl } for pid=7555 comm="syz.2.379" path="socket:[19834]" dev="sockfs" ino=19834 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.451510][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 185.689592][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 185.709318][ T9] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 185.740267][ T9] usb 6-1: Product: syz [ 185.760155][ T29] audit: type=1326 audit(1740427321.212:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.2.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7646d8d169 code=0x0 [ 185.906841][ T7586] kAFS: No cell specified [ 186.064741][ T9] usb 6-1: Manufacturer: syz [ 186.085727][ T9] usb 6-1: SerialNumber: syz [ 186.175721][ T9] usb 6-1: config 0 descriptor?? [ 186.207024][ T7588] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 186.217531][ T7588] netlink: 224 bytes leftover after parsing attributes in process `syz.4.386'. [ 186.221531][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 186.234335][ T5828] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 186.242900][ T5828] peak_usb 3-1:0.0: unable to read PCAN-USB X6 firmware info (err -71) [ 186.381635][ T5828] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 186.459675][ T5828] usb 3-1: USB disconnect, device number 36 [ 186.580628][ T7599] netlink: 'syz.3.390': attribute type 3 has an invalid length. [ 186.627143][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 186.627160][ T29] audit: type=1400 audit(1740427322.462:445): avc: denied { read } for pid=7598 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.689622][ T7599] netlink: 'syz.3.390': attribute type 3 has an invalid length. [ 186.753287][ T7605] ipt_REJECT: TCP_RESET invalid for non-tcp [ 186.846511][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 186.871051][ T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 187.030349][ T5828] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 187.210140][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 187.228930][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.278894][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.324554][ T5828] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 187.385813][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.396851][ T5828] usb 3-1: config 0 descriptor?? [ 187.416257][ T7435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.918588][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.928444][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.006342][ T7435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.042166][ T7435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.116051][ T7435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.346767][ T7625] overlay: ./bus is not a directory [ 188.602864][ T29] audit: type=1400 audit(1740427324.432:446): avc: denied { connect } for pid=7627 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.694352][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.834955][ T7435] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.858642][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.865825][ T6976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.583746][ T5828] usbhid 3-1:0.0: can't add hid device: -71 [ 189.625731][ T5828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.830391][ T5817] usb 6-1: USB disconnect, device number 2 [ 189.836336][ T29] audit: type=1400 audit(1740427324.882:447): avc: denied { write } for pid=7627 comm="syz.4.396" path="socket:[20089]" dev="sockfs" ino=20089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.866517][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.873715][ T6976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.860701][ T5828] usb 3-1: USB disconnect, device number 37 [ 191.656030][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 191.852282][ T29] audit: type=1400 audit(1740427327.692:448): avc: denied { bind } for pid=7652 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.481883][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.551866][ T7435] veth0_vlan: entered promiscuous mode [ 192.753273][ T7435] veth1_vlan: entered promiscuous mode [ 192.867668][ T7668] overlayfs: missing 'lowerdir' [ 193.582692][ T7435] veth0_macvtap: entered promiscuous mode [ 193.611490][ T7435] veth1_macvtap: entered promiscuous mode [ 193.631281][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.671896][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.808507][ T7674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7674 comm=syz.2.406 [ 193.996995][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.008676][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.030237][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.056581][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.113172][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.144030][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.164357][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.186352][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.208308][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.218974][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.234068][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.244366][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.255363][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.266730][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.277752][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.288241][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.299303][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.314140][ T5817] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 194.315135][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.335069][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341516][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.356706][ T29] audit: type=1400 audit(1740427330.192:449): avc: denied { getopt } for pid=7678 comm="syz.5.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 194.357783][ T7435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.389409][ T7435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.436604][ T7435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.466261][ T7435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.527397][ T7683] syzkaller0: entered promiscuous mode [ 194.535137][ T7683] syzkaller0: entered allmulticast mode [ 194.600120][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 194.608371][ T5817] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.632405][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.639312][ T5817] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 194.657402][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.696302][ T5817] usb 4-1: config 0 descriptor?? [ 194.928330][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.940356][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.962230][ T29] audit: type=1400 audit(1740427330.792:450): avc: denied { setopt } for pid=7672 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.992612][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.405'. [ 195.258880][ T5817] pantherlord 0003:0810:0001.0007: item fetching failed at offset 6/7 [ 195.271489][ T5817] pantherlord 0003:0810:0001.0007: parse failed [ 195.278248][ T5817] pantherlord 0003:0810:0001.0007: probe with driver pantherlord failed with error -22 [ 195.528647][ T7646] usb 4-1: USB disconnect, device number 19 [ 196.044481][ T29] audit: type=1400 audit(1740427331.872:451): avc: denied { write } for pid=7690 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 196.443626][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.518556][ T7704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7704 comm=syz.4.411 [ 198.262617][ T5869] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 198.421798][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.436906][ T5869] usb 4-1: config 84 has an invalid descriptor of length 1, skipping remainder of the config [ 198.447279][ T5869] usb 4-1: config 84 has 0 interfaces, different from the descriptor's value: 1 [ 198.475698][ T5869] usb 4-1: string descriptor 0 read error: -22 [ 198.482211][ T5869] usb 4-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0 [ 198.491421][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.740143][ T7395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.747984][ T7395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.783327][ T7646] IPVS: starting estimator thread 0... [ 198.836849][ T5864] usb 4-1: USB disconnect, device number 20 [ 198.842844][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.842867][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.880607][ T7723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7723 comm=syz.4.417 [ 198.910325][ T7725] IPVS: using max 28 ests per chain, 67200 per kthread [ 199.292324][ T7646] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 199.448280][ T7747] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.424'. [ 199.470645][ T7746] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.424'. [ 199.471066][ T5864] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 199.712314][ T7646] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 199.732037][ T7646] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 199.752740][ T7646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.777009][ T7646] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 199.880021][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 199.899796][ T5864] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.920163][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.929930][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.020121][ T5864] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.046918][ T5864] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.080895][ T7751] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 200.099053][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 200.105241][ T5828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.110101][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.118519][ T29] audit: type=1400 audit(1740427335.952:452): avc: denied { append } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.164915][ T29] audit: type=1400 audit(1740427335.962:453): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.195995][ T29] audit: type=1400 audit(1740427335.962:454): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.230924][ T29] audit: type=1400 audit(1740427335.962:455): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.264036][ T29] audit: type=1400 audit(1740427335.992:456): avc: denied { ioctl } for pid=7748 comm="syz.5.425" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.293315][ T29] audit: type=1400 audit(1740427336.032:457): avc: denied { read } for pid=5174 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 200.315415][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 200.330845][ T29] audit: type=1400 audit(1740427336.032:458): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.382052][ T5864] usb 4-1: GET_CAPABILITIES returned 0 [ 200.395171][ T5828] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 200.397832][ T5864] usbtmc 4-1:16.0: can't read capabilities [ 200.404506][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.404534][ T5828] usb 6-1: Product: syz [ 200.404551][ T5828] usb 6-1: Manufacturer: syz [ 200.404568][ T5828] usb 6-1: SerialNumber: syz [ 200.411018][ T5828] usb 6-1: config 0 descriptor?? [ 200.457093][ T29] audit: type=1400 audit(1740427336.032:459): avc: denied { open } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.500638][ T5828] ipw 6-1:0.0: IPWireless converter converter detected [ 200.521226][ T29] audit: type=1400 audit(1740427336.032:460): avc: denied { getattr } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.594121][ T29] audit: type=1400 audit(1740427336.192:461): avc: denied { map_create } for pid=7733 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 200.616709][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 200.639812][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 200.706940][ T5828] usb 6-1: USB disconnect, device number 3 [ 200.714310][ T5828] ipw 6-1:0.0: device disconnected [ 200.756047][ T7395] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.810747][ T7646] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 200.822374][ T7646] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 200.830318][ T9] usb 4-1: USB disconnect, device number 21 [ 200.855416][ T7646] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 200.884213][ T7646] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 200.893729][ T7395] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.904545][ T7646] usb 3-1: USB disconnect, device number 38 [ 200.982612][ T7395] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.058364][ T7395] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.177920][ T7395] bridge_slave_1: left allmulticast mode [ 201.185932][ T7395] bridge_slave_1: left promiscuous mode [ 201.192418][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.202473][ T7395] bridge_slave_0: left allmulticast mode [ 201.208139][ T7395] bridge_slave_0: left promiscuous mode [ 201.214240][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.579946][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 306.587003][ C0] rcu: 1-...!: (0 ticks this GP) idle=413c/1/0x4000000000000000 softirq=25824/25824 fqs=0 [ 306.598332][ C0] rcu: (detected by 0, t=10502 jiffies, g=23145, q=372 ncpus=2) [ 306.606065][ C0] Sending NMI from CPU 0 to CPUs 1: [ 306.606100][ C1] NMI backtrace for cpu 1 [ 306.606122][ C1] CPU: 1 UID: 0 PID: 6261 Comm: udevd Not tainted 6.14.0-rc4-syzkaller #0 [ 306.606139][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.606150][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 306.606180][ C1] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 44 f9 49 7e 65 8b 05 45 f9 49 7e a9 00 01 [ 306.606195][ C1] RSP: 0018:ffffc90000a18d78 EFLAGS: 00000082 [ 306.606209][ C1] RAX: ffff88802848a440 RBX: 0000000000000000 RCX: 1ffff110050915e3 [ 306.606218][ C1] RDX: ffff88802848a440 RSI: ffffffff81a70e26 RDI: ffff888077587340 [ 306.606229][ C1] RBP: 000000000003d94c R08: 0000000000000001 R09: 0000000000000000 [ 306.606239][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888077587340 [ 306.606248][ C1] R13: ffff8880b872c780 R14: ffff888077587340 R15: ffffffff896a7a20 [ 306.606259][ C1] FS: 00007f64ec897280(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 306.606274][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.606284][ C1] CR2: 000000110c303a79 CR3: 0000000031acc000 CR4: 00000000003526f0 [ 306.606294][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 306.606303][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 306.606312][ C1] Call Trace: [ 306.606318][ C1] [ 306.606329][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 306.606359][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 306.606379][ C1] ? nmi_handle+0x1ac/0x5d0 [ 306.606401][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 306.606425][ C1] ? default_do_nmi+0x6a/0x160 [ 306.606447][ C1] ? exc_nmi+0x170/0x1e0 [ 306.606467][ C1] ? end_repeat_nmi+0xf/0x53 [ 306.606488][ C1] ? __pfx_advance_sched+0x10/0x10 [ 306.606514][ C1] ? __hrtimer_run_queues+0x1d6/0xae0 [ 306.606529][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 306.606552][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 306.606576][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 306.606598][ C1] [ 306.606603][ C1] [ 306.606608][ C1] advance_sched+0x1a/0xc60 [ 306.606632][ C1] ? timerqueue_del+0x83/0x150 [ 306.606653][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 306.606669][ C1] ? __pfx_advance_sched+0x10/0x10 [ 306.606689][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 306.606708][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 306.606723][ C1] ? read_tsc+0x9/0x20 [ 306.606742][ C1] hrtimer_interrupt+0x392/0x8e0 [ 306.606763][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 306.606788][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 306.606804][ C1] [ 306.606809][ C1] [ 306.606815][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.606836][ C1] RIP: 0010:stack_depot_save_flags+0x135/0x9c0 [ 306.606860][ C1] Code: 29 df 31 f8 c1 cf 08 29 f8 89 c3 41 89 d9 44 23 0d d0 45 c3 15 49 c1 e1 04 4c 03 0d cd 45 c3 15 65 ff 05 26 0f 10 7b 49 8b 09 <4c> 39 c9 75 11 e9 91 00 00 00 48 8b 09 49 39 c9 0f 84 d8 01 00 00 [ 306.606874][ C1] RSP: 0018:ffffc9000c1af568 EFLAGS: 00000282 [ 306.606886][ C1] RAX: 00000000a57e4c6c RBX: 00000000a57e4c6c RCX: ffff888033b89e80 [ 306.606900][ C1] RDX: 00000000fb53c4e9 RSI: 000000006a7be26e RDI: 000000004f6b5c95 [ 306.606910][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffff88823bc4c6c0 [ 306.606920][ C1] R10: ffffffff90625617 R11: 0000000000000000 R12: 0000000000000cc0 [ 306.606929][ C1] R13: ffffc9000c1af5c8 R14: 000000000000000c R15: 000000000000000c [ 306.606945][ C1] ? stack_depot_save_flags+0x28/0x9c0 [ 306.606968][ C1] ? __pfx_mark_lock+0x10/0x10 [ 306.606989][ C1] kasan_save_stack+0x42/0x60 [ 306.607004][ C1] ? kasan_save_stack+0x33/0x60 [ 306.607017][ C1] ? kasan_save_track+0x14/0x30 [ 306.607031][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 306.607047][ C1] ? kmem_cache_alloc_noprof+0x226/0x3d0 [ 306.607063][ C1] ? skb_clone+0x190/0x3f0 [ 306.607082][ C1] ? netlink_broadcast_filtered+0xb11/0xef0 [ 306.607100][ C1] ? netlink_sendmsg+0xa06/0xd70 [ 306.607117][ C1] ? ____sys_sendmsg+0xaaf/0xc90 [ 306.607132][ C1] ? ___sys_sendmsg+0x135/0x1e0 [ 306.607150][ C1] ? __sys_sendmsg+0x16e/0x220 [ 306.607168][ C1] ? do_syscall_64+0xcd/0x250 [ 306.607185][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.607221][ C1] kasan_save_track+0x14/0x30 [ 306.607236][ C1] __kasan_slab_alloc+0x89/0x90 [ 306.607252][ C1] kmem_cache_alloc_noprof+0x226/0x3d0 [ 306.607268][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 306.607285][ C1] ? skb_clone+0x190/0x3f0 [ 306.607307][ C1] skb_clone+0x190/0x3f0 [ 306.607327][ C1] netlink_broadcast_filtered+0xb11/0xef0 [ 306.607349][ C1] ? __pfx_selinux_netlink_send+0x10/0x10 [ 306.607368][ C1] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 306.607387][ C1] ? __virt_addr_valid+0x1a4/0x590 [ 306.607409][ C1] netlink_sendmsg+0xa06/0xd70 [ 306.607430][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.607456][ C1] ____sys_sendmsg+0xaaf/0xc90 [ 306.607471][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 306.607490][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.607507][ C1] ? kasan_save_stack+0x42/0x60 [ 306.607521][ C1] ? kasan_save_stack+0x33/0x60 [ 306.607534][ C1] ? kasan_record_aux_stack+0xb8/0xd0 [ 306.607554][ C1] ? __call_rcu_common.constprop.0+0x9a/0x870 [ 306.607577][ C1] ? kmem_cache_free+0x179/0x4d0 [ 306.607591][ C1] ? __fput+0x68d/0xb70 [ 306.607607][ C1] ? __fput_sync+0xa1/0xc0 [ 306.607623][ C1] ? __x64_sys_close+0x86/0x100 [ 306.607644][ C1] ___sys_sendmsg+0x135/0x1e0 [ 306.607664][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.607695][ C1] ? __call_rcu_common.constprop.0+0x3ea/0x870 [ 306.607717][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.607735][ C1] __sys_sendmsg+0x16e/0x220 [ 306.607755][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.607783][ C1] do_syscall_64+0xcd/0x250 [ 306.607801][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.607821][ C1] RIP: 0033:0x7f64ec524a4b [ 306.607838][ C1] Code: ff 89 ef 48 89 04 24 e8 22 56 f9 ff 48 8b 04 24 48 83 c4 20 5d c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6d 48 8b 15 ae c3 0c 00 f7 d8 64 89 02 48 83 [ 306.607852][ C1] RSP: 002b:00007fffd716f7e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.607865][ C1] RAX: ffffffffffffffda RBX: 0000560543a70ce0 RCX: 00007f64ec524a4b [ 306.607875][ C1] RDX: 0000000000000000 RSI: 00007fffd716f7f8 RDI: 000000000000000c [ 306.607885][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 3d361ada87b6a5e3 [ 306.607909][ C1] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 306.607919][ C1] R13: 0000000000000088 R14: 0000000000000000 R15: 00005605439db2c0 [ 306.607935][ C1] [ 306.608093][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g23145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 307.276477][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=12925 [ 307.284362][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g23145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 307.295743][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 307.305705][ C0] rcu: RCU grace-period kthread stack dump: [ 307.311583][ C0] task:rcu_preempt state:I stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 307.323517][ C0] Call Trace: [ 307.326790][ C0] [ 307.329742][ C0] __schedule+0xf43/0x5890 [ 307.334180][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 307.339417][ C0] ? __pfx___schedule+0x10/0x10 [ 307.344277][ C0] ? schedule+0x298/0x350 [ 307.348606][ C0] ? __pfx_lock_release+0x10/0x10 [ 307.353639][ C0] ? lock_acquire+0x2f/0xb0 [ 307.358146][ C0] ? schedule+0x1fd/0x350 [ 307.362482][ C0] schedule+0xe7/0x350 [ 307.366554][ C0] schedule_timeout+0x124/0x280 [ 307.371407][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 307.376786][ C0] ? __pfx_process_timeout+0x10/0x10 [ 307.382079][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.387886][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 307.393355][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 307.398129][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 307.403418][ C0] ? rcu_gp_init+0xc82/0x1630 [ 307.408124][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 307.413330][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 307.419140][ C0] rcu_gp_kthread+0x271/0x380 [ 307.423823][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 307.429026][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.434225][ C0] ? __kthread_parkme+0x148/0x220 [ 307.439250][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 307.444457][ C0] kthread+0x3af/0x750 [ 307.448525][ C0] ? __pfx_kthread+0x10/0x10 [ 307.453120][ C0] ? __pfx_kthread+0x10/0x10 [ 307.457714][ C0] ret_from_fork+0x45/0x80 [ 307.462132][ C0] ? __pfx_kthread+0x10/0x10 [ 307.466724][ C0] ret_from_fork_asm+0x1a/0x30 [ 307.471499][ C0]