last executing test programs: 13m13.025000435s ago: executing program 32 (id=236): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x0, 0x1}}]}, 0x28}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7) 6m33.917135296s ago: executing program 0 (id=1775): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000880)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{r2, 0x5, 0x0, 0x7, 0xfe54, 0x0, 0x200, 0x7f, 0x3, 0x9, 0x9, 0x9, 0x7, 0xa4, 0x8}}) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r1, 0xb) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) timer_create(0x2, &(0x7f00000006c0)={0x0, 0x6, 0x2, @thr={0x0, &(0x7f0000000840)="3526b365af22afc86cf76e67eade1d19ce252f318e5ded117d687f3afaeef2ac00"}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x8, 0x120052, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x7, r5, 0x80000}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) write(r5, &(0x7f0000000180)="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"/321, 0x141) 6m32.427398841s ago: executing program 0 (id=1777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000980)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/172, 0xac}, {0x0}, {&(0x7f00000005c0)=""/82, 0x52}, {0x0}, {&(0x7f0000000300)=""/30, 0x1e}, {&(0x7f0000000700)=""/251, 0xfb}, {&(0x7f0000000800)=""/173, 0xad}], 0x7, &(0x7f0000000940)=""/37, 0x25}}], 0x1, 0x82, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(0x0, 0x0, 0x101000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r1], 0x54}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000c80)={0x1, 0x0, @ioapic={0xfee00, 0xd88, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xc, 0x5, 0x9, '\x00', 0x13}, {0x3, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0xb, 0xd2, 0x6, '\x00', 0x7}, {0x4, 0xfa, 0x1a, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x4, 0x4, 0x43, '\x00', 0x9f}, {0x40, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8e, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x7, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x6}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x1, 0x44, 0x9, '\x00', 0x10}, {0x1, 0x8, 0x9, '\x00', 0xfc}, {0x8d, 0xc, 0xc6, '\x00', 0x8}]}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f00000000c0)}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32=0x0], 0x12b0}, 0x1, 0x0, 0x0, 0x44054}, 0x1) dup2(r5, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 6m30.962693993s ago: executing program 0 (id=1785): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$inet_udp(0x2, 0x2, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000040), 0x1001) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) 6m29.509209726s ago: executing program 0 (id=1792): close(0xffffffffffffffff) r0 = getpid() r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = dup(0xffffffffffffffff) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES8=r0, @ANYBLOB="ac14e445b5450000000000001800000000000000070500004d04730001000000000000008c5057b2019003664d20dd7e479c75b8ea62cae8525ecd4d5ec8e3260e80b587d1c64ecbfe1b14b30e31400000008dfe49e9929351ea98f60213cd989b6542b2134aed64a6d3bc6973eb4aa6defaa226a8ff95d5119f0966b345d975612588a9d3c8f25ae8837ffc6fd0e266cf3c5430a3a3ef371e851b18d69041a2ab1a96ff8e4050554b3e0ef493c23b0000"], 0x38}, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/147, 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bind$xdp(r2, &(0x7f0000000740)={0x2c, 0x1, r7, 0xa}, 0x10) listen(r1, 0xfe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0xffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a64001280110001006272696467655f736c617665000000004c000580080025000700000006001f0001000000050009000000000008002200", @ANYRES32, @ANYBLOB="05001e000100000006000200ff030000080008000000000008000300090000000800250009000000140003006272696467655f736c6176655f3000"], 0x98}, 0x1, 0x0, 0x0, 0x200cc010}, 0x4040) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6m27.903459262s ago: executing program 0 (id=1796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) (async) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x5b, 0x81, 0x2, 0x42, @private1={0xfc, 0x1, '\x00', 0x4}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x80, 0x9, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socket(0x200000000000011, 0x4000000000080002, 0x9) (async) r5 = socket(0x200000000000011, 0x4000000000080002, 0x9) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000d00)={0x11, 0x10, r7, 0x1, 0x0, 0x6, @local}, 0x14) write(r5, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={r4, @remote, @remote}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r1, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x545e28c4f9e6edf9) (async) ioctl$TUNSETLINK(r8, 0x400454cd, 0x545e28c4f9e6edf9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x31, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'pim6reg1\x00', @local}) 6m27.64525031s ago: executing program 0 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020400) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x48042, 0xe6985289f0a17062) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003"], 0xf0}}, 0x0) 6m12.376300712s ago: executing program 33 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020400) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x48042, 0xe6985289f0a17062) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003"], 0xf0}}, 0x0) 5m6.870803428s ago: executing program 1 (id=2171): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, 0x0, 0x4000010) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e1f, 0x1, @remote, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001740)=ANY=[@ANYRES64=r2, @ANYRES32=r0, @ANYRESOCT=r2], 0xc0) writev(r2, &(0x7f0000001680)=[{&(0x7f0000000040)="47b1227faf81600a8aec86c0e53156f5644fc14bb759db5f7a2420b8adb0192b2aa29b95677d591612dcc90c81e85bfd0a128ad3979a6d68c19126523445c8cac5d8572688e4546db3e1e4dc27a30fdbdd2e289197e80dc7f9e7a9f59c42c03ebd9b7f00784528fab9b454c5a285294cacf8e10c498715de7919d445d5d3e6c75eaabe53d9", 0x85}, {&(0x7f0000000100)="da82da0bdf549fea0748a8a7001a868ebc1ffccdbb2efe130bc37bc62d6a1a1ac4f4bfc98446fe89f410980331b97afc749f10c7e2d0ebbd9ce46098b65cb9073b35d311c4906f1a2183a07902d03ecb23d2087fcff2b9e276e2b875ebfdbfd98baa7f820b0097849c64ba9d5285ab6cb07ecb38866e", 0x76}, {&(0x7f0000000180)="054230c407eb51b9387bfe4b793909053541a946ca58eb63d7b2a2805e9484a82d0f18b78f3d6f084250f2fb87667ce6299f0868228d9a61a67dbc23eb3f47e540fbdf185a89a989b0921ce8d92e8c059747f026a204c8863a569c2da27e7968", 0x60}, {&(0x7f0000000200)="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", 0xff8}, {&(0x7f0000001200)="d073e8ebbea6563159cc8e0d9160ad99833bef3cde6a3fee5cb33fba5714cdb6bfbc81ffc673741493b9dd5abe59ea7d90af4293993bebbe32acbea7249534d35cf71a96207d254e6bf2e8e93bfc70a74e42104013c49d15aa613d470c6f2ddce665a8b7a75bf4611fad6484c39e64859fdaadaa3f2e739ccbd50e8c3b614578d8cf74a84d48c8d871b36adebab4d3fea400915bdce32d7b9e30ddce991b9b6b0637b40ae7e5d0feca2302bb1e4a1a74ae87cd1173d78c5426c3e591fbcb6c16ab81f76d9c0abf9ae52c382db025b8005a76d9ffcbaed3606beb616937037e602450a0ca3d69247cbcdd73aeccaa806e3e11f19d768f3e3b5839a2f59b88", 0xfe}, {&(0x7f0000001300)}, {&(0x7f0000001400)}, {&(0x7f0000001480)="1d4be6450671812a5e07298a9ed09f3663a70e57cc9b812bbf270a07b6aad84fef6739efafb666472d8cd21ee99377c02d68a3db3959f62b48476cef01494c5a4829f87f59cacc9c4933d30413f20027381ba60dd183c810997fa012948a20933297ae087f8cfb73522bcebaa1b7021a2b74368efcc1ff64a7e602d9db48a9fa425788310a86d863e0bd36bdf25cc94d4acb1d024f102b08e05a634f6878cf0ece0af5121f40ee64da518ab1d4e90b4649d52968921c1d196b37b87a2a84b1fc44e6f46e220685ac712d7b04819d", 0xce}, {&(0x7f0000001580)="b07e792ccb9fcc831880fef07b07b561456a30df67779eb506c8a1fcda2c3a3b050f1a98abcd326190d80a0d5262a972cc6afa2b1ef456d4badc9a619330bc45f64bb1f3d9d1ec15bf70618d1d30c38604714bc1f0183d0833d5d7b237191760e005af7fedf1be81d0826da67dec4592e2b2f9bf4b3a7ce0710b2caa356f280268f7d7c6635861abf43e96fcc71a51245f62c0f93afab4fc162355a2e030f7e1a47763ec26d672199029dcbef2fbfd101e78bd26c49399921c11a827651eea070309fbcb4d027d2a54707b239659f6b67a3261dd04f76bef9bdb1fb93beee5bd10160df9ffd83dd8d79a5735", 0xec}], 0x9) 5m6.845012726s ago: executing program 1 (id=2172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4040) r0 = getpid() r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 5m5.468413021s ago: executing program 1 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 5m4.483240207s ago: executing program 1 (id=2178): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = creat(0x0, 0x71) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00", @ANYRES32=r1], 0x1c}}, 0x20000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, 0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) 5m3.607107421s ago: executing program 1 (id=2181): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008080) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x0, 0x1b0, 0x118, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@unspec=@realm={{0x30}, {0x7fffffff, 0x7, 0x1}}, @common=@inet=@set4={{0x50}, {{0x4, 0x3, 0x1}, {{0x6}, 0x40}, {{0x39d}, 0xf9}, 0x6}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x378) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x3d, 0x1) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000200)={0x80}) 4m59.929597766s ago: executing program 1 (id=2193): syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x175e800000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r5, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x81, 0x4, 0x202, 0x3ff, 0x14a3, 0x3, 0x101, 0x3, r5}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 4m44.489427554s ago: executing program 34 (id=2193): syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x175e800000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r5, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x81, 0x4, 0x202, 0x3ff, 0x14a3, 0x3, 0x101, 0x3, r5}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 4m27.901165795s ago: executing program 2 (id=2321): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000000)={&(0x7f00003ae000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xbbbbbbbb}) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000800)={&(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}, {}], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x2, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000880)={0xfffffffffffffff8, r2, r3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[{}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x7, r5, 0xcccccccc}) 4m27.071238662s ago: executing program 2 (id=2328): mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@flock_openafs}]}) 4m27.022787953s ago: executing program 2 (id=2329): r0 = syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x41000, 0xdddd1000, 0xb, 0x2, 0x8, 0x0, 0x0, 0x12, 0x0, 0x3, 0x5, 0x13}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x6, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x0, 0x5000, 0xc, 0x0, 0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x9000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1, 0x0, 0xfe, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x9, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0xe, 0x1, 0x1, 0x83, 0xa, 0x3b, 0x5}, {0x80a0000}, {0x2, 0xfc}, 0xddfdffdb, 0x0, 0xf000, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0xadb3, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8140aecc, &(0x7f0000000140)=@x86={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x9, 0x8, 0x2, 0x0, 0x2, 0x4000000, 0x8}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000001480)={0x9, {0x4}}) 4m26.940642334s ago: executing program 2 (id=2331): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x6000) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) syz_clone(0x80000, &(0x7f0000000c40)="ac21ccd67fbc1394002016145cd07848ef788b69dd8064b8207e3e28a113f828be5ee1f89799138ef8cba9b4437e2e6006394b42937d52630c167041077b426a6034126d8785755f657642ea74ba02b8e092afad1051067560e3d4e612718768a89fae49e88b6af47403351e9a94abfe2ca5", 0x72, &(0x7f0000000d00), 0x0, &(0x7f0000000d80)="2f0eaababb3a0e4978e6ea24ed") getgroups(0x2, &(0x7f0000000e80)=[0xee01, 0xee01]) getpgid(0xffffffffffffffff) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000029c0)={0x658, 0x0, 0x0, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, 0x0, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0x8, 0x2, 0xfffffe01, 0x3000, 0x2, 0x0, 0x0, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, 0x0, 0x0, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, 0x0, 0x0, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, 0x0, 0x0, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x20006, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, 0x0, 0x0, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf53, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, 0x0, 0x0, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, 0x0, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) fstat(r1, &(0x7f0000000ec0)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 4m12.997085682s ago: executing program 2 (id=2333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x2, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r9 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r9, {0x0}}, './file1\x00'}) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000601, r10, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 4m11.33720089s ago: executing program 2 (id=2393): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x6000) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) syz_clone(0x80000, &(0x7f0000000c40)="ac21ccd67fbc1394002016145cd07848ef788b69dd8064b8207e3e28a113f828be5ee1f89799138ef8cba9b4437e2e6006394b42937d52630c167041077b426a6034126d8785755f657642ea74ba02b8e092afad1051067560e3d4e612718768a89fae49e88b6af47403351e9a94abfe2ca5", 0x72, &(0x7f0000000d00), 0x0, &(0x7f0000000d80)="2f0eaababb3a0e4978e6ea24edc144f1") getgroups(0x2, &(0x7f0000000e80)=[0xee01, 0xee01]) getpgid(0xffffffffffffffff) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000029c0)={0x658, 0x0, 0x0, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, 0x0, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0x8, 0x2, 0xfffffe01, 0x3000, 0x2, 0x0, 0x0, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, 0x0, 0x0, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, 0x0, 0x0, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, 0x0, 0x0, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x20006, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, 0x0, 0x0, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf53, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, 0x0, 0x0, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, 0x0, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) fstat(r1, &(0x7f0000000ec0)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 3m56.034881453s ago: executing program 35 (id=2393): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x6000) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) syz_clone(0x80000, &(0x7f0000000c40)="ac21ccd67fbc1394002016145cd07848ef788b69dd8064b8207e3e28a113f828be5ee1f89799138ef8cba9b4437e2e6006394b42937d52630c167041077b426a6034126d8785755f657642ea74ba02b8e092afad1051067560e3d4e612718768a89fae49e88b6af47403351e9a94abfe2ca5", 0x72, &(0x7f0000000d00), 0x0, &(0x7f0000000d80)="2f0eaababb3a0e4978e6ea24edc144f1") getgroups(0x2, &(0x7f0000000e80)=[0xee01, 0xee01]) getpgid(0xffffffffffffffff) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000029c0)={0x658, 0x0, 0x0, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, 0x0, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0x8, 0x2, 0xfffffe01, 0x3000, 0x2, 0x0, 0x0, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, 0x0, 0x0, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, 0x0, 0x0, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, 0x0, 0x0, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x20006, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, 0x0, 0x0, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf53, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, 0x0, 0x0, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, 0x0, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) fstat(r1, &(0x7f0000000ec0)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 3m31.562616347s ago: executing program 5 (id=2528): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000004000000", 0x6033) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x28) 3m31.364776369s ago: executing program 5 (id=2530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18007498b2c400000000191a350400b69529d9e54cf20200000000d8009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="04004000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) 3m30.809099444s ago: executing program 5 (id=2533): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000000)={{0x0, @addr=0x6}, 0x8, 0x400, 0xa70}) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 3m30.615247835s ago: executing program 5 (id=2535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x6, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) read$msr(r2, &(0x7f0000000180)=""/30, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="60ba0000c68888725d4033f44ee199d85b30d2a5cdb4991adc60d59e1ea6", @ANYRES16=r5, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00a80066697273746e616d6500000008000300030000000c00a70008000000000000000800030003000000"], 0x60}}, 0x4000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb0e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 3m28.954589223s ago: executing program 5 (id=2541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b"], 0x94}}, 0x0) (fail_nth: 1) 3m28.633831928s ago: executing program 5 (id=2544): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4a, 0xffffffffffffffff, &(0x7f00000003c0)=0x5d) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000340)) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x102, 0xfffd, 0x0, 0x0, 0x0}) 3m13.46249366s ago: executing program 36 (id=2544): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4a, 0xffffffffffffffff, &(0x7f00000003c0)=0x5d) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000340)) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x102, 0xfffd, 0x0, 0x0, 0x0}) 2m0.260652403s ago: executing program 3 (id=2878): syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r1 = socket$inet(0x2, 0x3, 0x2) sendmmsg$sock(r1, &(0x7f0000001700)=[{{&(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}], 0x18}}], 0x1, 0x20000000) setfsuid(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x1, {0x1, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x7, 0x7}, {0x0, 0x5, 0x7ff, 0x3, 0x6, 0x400}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000ff0f00000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc001}, 0xc814) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007000000ef7457161070ccf252f0123d923ee569eb92f7102d543ae8a54b27e892352b0fcf2b4a9335f274e8326ea80095db868ffd9516874bde4daa3e53f241c89733aa0bd4d951b643b484f1d076a6d65279cd2cbbb224002f387ccc9e4248f2b08ac299c073906d22b7b171061ea396ff3c92fe94f7c71814a630eca60879d7ab96cb79b23b333bc7fa3d16fcb5ce952f209bed71b729aa7effc7a90db03bff98987f2483b9317df5fa9f1d7343cb36f2d20bed60599dee416d9e8aaf4a3d8fd387ff4790b797ce1003047e63146633"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbb0006040001000000000000be1414bbaaaaaaaaaa14ac1414bb00"/42], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)=0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000101401002cbd7000ffdbdf2508004a000200b00000000000000000001a13aea1d051516b458ee44f0304bf822707f87fc9e65eca7735954a8993c8878e9b65f2b70b13dc0d33e4be246dbe4fb665234623254b7675a428dc8767fb9f7353d621668f6c697ce0c6c8bba9048cd4a2206dddffb2dc8d25d2d1e3b1756e20b4dbb7aad524b7c8c083b64b3a42907fabefd1a6474815d0818eaced90572245"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) 1m59.418748272s ago: executing program 3 (id=2881): socket(0x0, 0x2, 0x9d) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x450401, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpriority(0x2, 0x0, 0xb0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xc, 0x0) read$msr(r6, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_int(r7, 0x0, 0x2, 0x0) sendfile(r8, r8, 0x0, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x5, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f00000000c0)) 1m55.866008049s ago: executing program 3 (id=2896): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 1m54.872768935s ago: executing program 3 (id=2903): socket$kcm(0x10, 0x3, 0x10) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x2000000100000003, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x10000, 0x87e, 0x6, 0x6, 0x57, 0x2, 0x2, 0x6, 0x5, 0x6, 0x8, 0x9, 0x80000}, {0x8, 0x5, 0x7f, 0x7, 0x3, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x6, 0x2}, {0x2, 0x6, 0x8, 0x48, 0xb0, 0x0, 0xb1, 0x1, 0x1, 0x8, 0x1, 0xf6, 0x4}], 0x101}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x7, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x2000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x3, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x24, 0x2, 0x8d00, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m54.182666258s ago: executing program 3 (id=2905): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x3}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0x0, 0xa277}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m53.497231204s ago: executing program 3 (id=2908): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x100000000000000, 0x0, 0x400c801}, 0x4008090) 1m37.022123205s ago: executing program 37 (id=2908): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x100000000000000, 0x0, 0x400c801}, 0x4008090) 8.54441441s ago: executing program 8 (id=3228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x200204) syz_emit_ethernet(0x36, &(0x7f0000001100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 8.365077821s ago: executing program 4 (id=3231): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = dup(r5) inotify_rm_watch(r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x14000000, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) write(r9, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000000c0)=0x1) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 8.225272588s ago: executing program 7 (id=3232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000c000004000000000400000095000000000000002cccd6cb0c22dd080ee4909a169e8cae0fd8f518ba247a616f70f56e2a903eef7828c417761c561cf3ac44a25ef5e05110defba5ab26b8b80c35fe91b23653d4a5314bcc779174598a915679042e2d7bf28de1fcbd5d17a631db381c9b50da2f7c33e48d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) shmdt(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 8.215908345s ago: executing program 8 (id=3233): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x4, @thr={&(0x7f0000000140)="ca89c993d2df64d9433c3952270777f552cdc44818e64d8532a8e60f419374329559ea72f7f3b43b1e9979657adfdc4ded0555", &(0x7f0000000080)="6ffa7403427e91d158e9b7f56e4e700679b0c9e8c9d978eb5b43fe5cd884d824686fdac2078a1f436e1aeecb75ab6be7d9c4a1e3670417dfbbc5bc9d56135d50db4a4140d947006ee59c8c7a8a006dc32a62f1d9a70bb43c43da305dd407619e380747f7ab6ab5d65e6cc688f675eb6a0cffcc94b3d760b58fbac29f7558c07d2258bcd5c7131e1a82"}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$kcm(0x2d, 0x2, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) socket$kcm(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x1ff, &(0x7f00000002c0)=0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18022da6fc"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r6, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.08108376s ago: executing program 8 (id=3234): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = dup(r0) mmap(&(0x7f0000044000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6.456160855s ago: executing program 7 (id=3236): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x827) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r2 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000005c0)={0x2000a210}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r6 = syz_io_uring_setup(0x108, &(0x7f0000000400)={0x0, 0x5841, 0x400, 0x0, 0x8b}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.433539213s ago: executing program 4 (id=3237): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001"], 0x3c}}, 0x10) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x40) r1 = fsopen(0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r3, 0x0, 0x9f) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7fff) dup3(r4, r3, 0x0) ftruncate(0xffffffffffffffff, 0x1) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000040000701aebd500000365fa7fd34765345000000047c00000400c280", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 6.199504054s ago: executing program 8 (id=3238): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x20008850) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x42}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x11, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) 6.158743736s ago: executing program 7 (id=3239): r0 = gettid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x31, 0x1}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) pivot_root(0x0, 0x0) 5.577146379s ago: executing program 8 (id=3241): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001"], 0x3c}}, 0x10) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x40) r1 = fsopen(0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r3, 0x0, 0x9f) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7fff) ftruncate(0xffffffffffffffff, 0x1) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000040000701aebd500000365fa7fd34765345000000047c00000400c280", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 5.576525876s ago: executing program 7 (id=3242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='target PCI:0:8:1f.1'], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) readv(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 4.958615392s ago: executing program 6 (id=3244): socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fcdb65250a000000200001801400040020010001000000000000000000000002060005004e2300002c000180060005004e2000000600ac073a05004e230000060005004e20ffde080006001b000000060005004e2400000c000180080006000200000007f9735cfaa4c4dd7644569dd8a364f678c935e07e1d401f9963d7f8d965ad304f7808c6d51dbc545141d3f6f63eb826b35035025304650ba0d3c0e771a2dae5ebb2a5d0e615eae6f4e9afb8a74033ea2db1623e1f3ca0614ea43b7dba3c34f8e0c61b7fe263a3fa13681b8fc8a8540e6166d47d10215e6079b8b59fd0f09f1dad137195be8531361a09face"], 0x6c}, 0x1, 0x0, 0x0, 0x80c5}, 0x4010004) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x4, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x801, 0x0) bind$inet(r9, 0x0, 0x0) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r9, 0x0, r10, 0x0, 0x7ffff000, 0x3) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xfffffffffffffffe) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, 0x0) close_range(r2, r7, 0x0) 3.641106779s ago: executing program 6 (id=3247): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/192, 0xc0}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @empty, @val={@val={0x88a8, 0x6, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x38, 0x66, 0x0, 0x6, 0x1, 0x0, @remote, @remote}, @redirect={0x5, 0x1, 0x0, @remote, {0x5, 0x4, 0x0, 0x24, 0x6, 0x65, 0x4c1, 0x31, 0xff, 0x81, @dev={0xac, 0x14, 0x14, 0x3c}, @remote}, "f84086b27a8efd26"}}}}}, 0x0) 3.623756526s ago: executing program 9 (id=3248): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@flock_openafs}]}) 3.553523101s ago: executing program 6 (id=3249): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = dup(r0) mmap(&(0x7f0000044000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.447817064s ago: executing program 6 (id=3250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000980)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f00000005c0)=""/82, 0x52}, {0x0}, {&(0x7f0000000300)=""/30, 0x1e}, {&(0x7f0000000700)=""/251, 0xfb}, {&(0x7f0000000800)=""/173, 0xad}], 0x6, &(0x7f0000000940)=""/37, 0x25}}], 0x1, 0x82, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(0x0, 0x0, 0x101000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r1], 0x54}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000c80)={0x1, 0x0, @ioapic={0xfee00, 0xd88, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xc, 0x5, 0x9, '\x00', 0x13}, {0x3, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0xb, 0xd2, 0x6, '\x00', 0x7}, {0x4, 0xfa, 0x1a, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x4, 0x4, 0x43, '\x00', 0x9f}, {0x40, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8e, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x7, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x6}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x1, 0x44, 0x9, '\x00', 0x10}, {0x1, 0x8, 0x9, '\x00', 0xfc}, {0x8d, 0xc, 0xc6, '\x00', 0x8}]}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f00000000c0)}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32=0x0], 0x12b0}, 0x1, 0x0, 0x0, 0x44054}, 0x1) dup2(r5, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 2.900025894s ago: executing program 4 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)={0x87, 0x0, '\x00', [@pad1]}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r9}, 0x18) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r10, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 2.659227973s ago: executing program 9 (id=3252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0xffffffffffffffff, 0xee00) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x20008000) 2.213206829s ago: executing program 7 (id=3253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)={0x87, 0x0, '\x00', [@pad1]}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r9}, 0x18) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r10, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 2.149091999s ago: executing program 9 (id=3254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x3, 0xa, 0x8, 0x5, "000064640000001503fe00", "defda28a", "0f00", 't0\x00', ["e86621d9cc668c391f77c506", "f548000000004000", "00000600", "000081909d8f00"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000480)={0x7, 0xc, 0x7, 0x0, 0x3, 0x202, "3bf9575d0000000010344a00", 0x2, 0x3, 0x0, 0x6, 0x0, 0x4, 0xff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.468777842s ago: executing program 4 (id=3255): r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x801) 928.025501ms ago: executing program 7 (id=3256): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchmod(0xffffffffffffffff, 0x18) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x400000000000}) 926.489792ms ago: executing program 9 (id=3257): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) accept4$ax25(r2, &(0x7f0000000100)={{}, [@bcast, @rose, @remote, @default, @remote, @netrom]}, &(0x7f0000000180)=0x48, 0x80800) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x8}) r3 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000dc0)={0x7f, 0xff}, 0x2) sendto$inet(r3, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r3, 0x0, 0x0, 0x2022, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) clock_getres(0x5617cc30d6b9cfeb, 0x0) 923.417559ms ago: executing program 8 (id=3258): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008080) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x0, 0x1b0, 0x118, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@unspec=@realm={{0x30}, {0x7fffffff, 0x7, 0x1}}, @common=@inet=@set4={{0x50}, {{0x4, 0x3, 0x1}, {{0x6}, 0x40}, {{0x39d}, 0xf9}, 0x6}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x378) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x3d, 0x1) r5 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) syz_pidfd_open(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000200)={0x80}) 921.535576ms ago: executing program 6 (id=3259): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad706738135", 0x23, 0x800, 0x0, 0x0) (async) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) alarm(0x7fff) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002) (async) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 914.720467ms ago: executing program 4 (id=3260): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = dup(r0) mmap(&(0x7f0000044000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 452.360673ms ago: executing program 9 (id=3261): syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r1 = socket$inet(0x2, 0x3, 0x2) sendmmsg$sock(r1, &(0x7f0000001700)=[{{&(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}], 0x18}}], 0x1, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x1, {0x1, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x7, 0x7}, {0x0, 0x5, 0x7ff, 0x3, 0x6, 0x400}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000ff0f00000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc001}, 0xc814) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007000000ef7457161070ccf252f0123d923ee569eb92f7102d543ae8a54b27e892352b0fcf2b4a9335f274e8326ea80095db868ffd9516874bde4daa3e53f241c89733aa0bd4d951b643b484f1d076a6d65279cd2cbbb224002f387ccc9e4248f2b08ac299c073906d22b7b171061ea396ff3c92fe94f7c71814a630eca60879d7ab96cb79b23b333bc7fa3d16fcb5ce952f209bed71b729aa7effc7a90db03bff98987f2483b9317df5fa9f1d7343cb36f2d20bed60599dee416d9e8aaf4a3d8fd387ff4790b797ce1003047e63146633"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbb0006040001000000000000be1414bbaaaaaaaaaa14ac1414bb00"/42], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)=0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000101401002cbd7000ffdbdf2508004a000200b00000000000000000001a13aea1d051516b458ee44f0304bf822707f87fc9e65eca7735954a8993c8878e9b65f2b70b13dc0d33e4be246dbe4fb665234623254b7675a428dc8767fb9f7353d621668f6c697ce0c6c8bba9048cd4a2206dddffb2dc8d25d2d1e3b1756e20b4dbb7aad524b7c8c083b64b3a42907fabefd1a6474815d0818eaced90572245"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) 358.213552ms ago: executing program 6 (id=3262): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x827) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r2 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000005c0)={0x2000a210}) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_io_uring_setup(0x108, &(0x7f0000000400)={0x0, 0x5841, 0x400, 0x0, 0x8b}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 356.630531ms ago: executing program 4 (id=3263): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x52, 0x1, 0x3, 0x9dff, 0xf, "800300eb00cbe600"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(&(0x7f00000001c0)='./file0\x00') read$char_usb(0xffffffffffffffff, &(0x7f0000000480)=""/131, 0x83) acct(0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@vsock={0x28, 0x0, 0x2711, @my=0x0}, {0x0, 0x6}, 0x0}, 0xa0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0xc0000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xa) 0s ago: executing program 9 (id=3264): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x52, 0x1, 0x3, 0x9dff, 0xf, "800300eb00cbe600"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(&(0x7f00000001c0)='./file0\x00') read$char_usb(0xffffffffffffffff, &(0x7f0000000480)=""/131, 0x83) acct(0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@vsock={0x28, 0x0, 0x2711, @my=0x0}, {0x0, 0x6}, 0x0}, 0xa0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b3"], 0x0}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0xc0000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xa) kernel console output (not intermixed with test programs): t tclass=pppox_socket permissive=1 [ 791.007512][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.016692][ T30] audit: type=1400 audit(2000000101.285:1875): avc: denied { read } for pid=16293 comm="syz.7.2745" path="socket:[62151]" dev="sockfs" ino=62151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 791.455997][T16292] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 791.824268][T16292] cgroup: name respecified [ 792.405209][ T30] audit: type=1326 audit(2000000102.365:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16307 comm="syz.7.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 792.444245][ T30] audit: type=1326 audit(2000000102.375:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16307 comm="syz.7.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 792.447019][T16316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.542195][ T30] audit: type=1326 audit(2000000102.375:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16307 comm="syz.7.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 792.568187][ T30] audit: type=1326 audit(2000000102.375:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16307 comm="syz.7.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 792.592677][T16316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.596963][ T30] audit: type=1326 audit(2000000102.375:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16307 comm="syz.7.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 792.627290][ T30] audit: type=1326 audit(2000000102.375:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16307 comm="syz.7.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9fd8df90 code=0x7ffc0000 [ 793.072873][ T30] audit: type=1326 audit(2000000102.385:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16307 comm="syz.7.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 793.155951][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2749'. [ 793.595684][T12878] Bluetooth: hci6: command 0x0405 tx timeout [ 794.366285][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 794.366304][ T30] audit: type=1326 audit(2000000104.635:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.9.2759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98f638f749 code=0x0 [ 795.568824][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2763'. [ 795.719683][ T30] audit: type=1400 audit(2000000105.975:1901): avc: denied { setattr } for pid=16353 comm="syz.6.2764" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 796.181628][ T30] audit: type=1326 audit(2000000106.025:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 796.227234][ T30] audit: type=1326 audit(2000000106.025:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 796.283145][ T30] audit: type=1326 audit(2000000106.025:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 796.336087][ T30] audit: type=1326 audit(2000000106.025:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 796.386790][ T30] audit: type=1326 audit(2000000106.025:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 796.465314][ T30] audit: type=1326 audit(2000000106.025:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 796.498530][ T30] audit: type=1326 audit(2000000106.025:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 796.553705][ T30] audit: type=1326 audit(2000000106.025:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98f638df90 code=0x7ffc0000 [ 797.006215][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2767'. [ 797.058890][T16376] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2767'. [ 797.141259][T16378] netlink: 'syz.3.2765': attribute type 10 has an invalid length. [ 797.198698][T16370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.205936][T16376] bond1: entered promiscuous mode [ 797.212957][T16376] bond1: entered allmulticast mode [ 797.226111][T16379] dummy0: entered promiscuous mode [ 797.231400][T16379] dummy0: entered allmulticast mode [ 797.237197][T16379] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 797.294146][T16371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.024198][ T3093] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 798.365237][ T3093] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 798.416262][ T3093] usb 9-1: USB disconnect, device number 4 [ 798.634926][ T5960] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 798.808649][ T5960] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 798.818013][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.826763][ T5960] usb 10-1: Product: syz [ 798.831510][ T5960] usb 10-1: Manufacturer: syz [ 798.832362][T16406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.845154][T16406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.878181][ T5960] usb 10-1: SerialNumber: syz [ 799.607227][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 799.607242][ T30] audit: type=1326 audit(2000000000.310:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 799.649384][ T30] audit: type=1326 audit(2000000000.310:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 799.709902][ T5960] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 799.737696][ T30] audit: type=1326 audit(2000000000.340:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 799.768024][ T30] audit: type=1326 audit(2000000000.340:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 799.792899][ T30] audit: type=1326 audit(2000000000.340:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 799.820585][ T5960] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 799.842687][ T5960] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 799.885537][ T30] audit: type=1326 audit(2000000000.340:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 799.911375][ T30] audit: type=1326 audit(2000000000.340:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 799.947596][ T5960] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 799.956122][ T30] audit: type=1326 audit(2000000000.340:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 799.979566][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.042822][ T5960] usb 10-1: USB disconnect, device number 3 [ 800.081965][ T30] audit: type=1326 audit(2000000000.340:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f358038df90 code=0x7ffc0000 [ 800.138073][ T30] audit: type=1326 audit(2000000000.340:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.6.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 800.161550][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.339288][T16422] netlink: 'syz.9.2780': attribute type 1 has an invalid length. [ 800.364242][T16422] bond2: entered promiscuous mode [ 800.369524][T16422] bond2: entered allmulticast mode [ 800.375355][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2780'. [ 800.454369][T16420] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 800.518088][T16420] bond2: (slave bridge1): making interface the new active one [ 800.570690][T16420] bridge1: entered promiscuous mode [ 800.582835][T16420] bridge1: entered allmulticast mode [ 800.597773][T16420] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 800.707175][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2782'. [ 801.640723][T16428] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 801.672459][T16428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.816446][T16445] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 802.218022][T16450] openvswitch: netlink: Missing valid actions attribute. [ 802.225425][T16450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.884625][ T5910] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 802.970204][ T5807] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 803.036501][ T5910] usb 10-1: config 0 has an invalid interface number: 133 but max is 0 [ 803.045312][ T5910] usb 10-1: config 0 has no interface number 0 [ 803.054655][ T5910] usb 10-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 803.064466][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.086398][T16467] netlink: 'syz.3.2791': attribute type 4 has an invalid length. [ 803.094220][T16467] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2791'. [ 803.184653][ T5807] usb 7-1: Using ep0 maxpacket: 32 [ 803.191335][ T5807] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 803.201249][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.212208][ T5807] usb 7-1: config 0 descriptor?? [ 803.238323][ T5807] usb 7-1: selecting invalid altsetting 3 [ 803.245352][ T5807] comedi comedi4: could not set alternate setting 3 in high speed [ 803.253649][ T5807] usbduxsigma 7-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 803.268206][ T5807] usbduxsigma 7-1:0.0: probe with driver usbduxsigma failed with error -22 [ 803.426079][ T5855] usb 7-1: USB disconnect, device number 22 [ 803.534574][ T5807] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 803.686043][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 803.698300][ T5807] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 803.707865][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.718656][ T5807] usb 8-1: config 0 descriptor?? [ 803.988814][ T5910] usb 10-1: Product: syz [ 803.997144][ T5910] usb 10-1: Manufacturer: syz [ 804.001847][ T5910] usb 10-1: SerialNumber: syz [ 804.015214][ T5910] usb 10-1: config 0 descriptor?? [ 804.021983][ T5910] usb-storage 10-1:0.133: USB Mass Storage device detected [ 804.044951][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 804.358479][T16479] netlink: 'syz.9.2789': attribute type 2 has an invalid length. [ 804.397522][ T10] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 804.436424][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.466808][ T10] usb 9-1: Product: syz [ 804.474734][ T10] usb 9-1: Manufacturer: syz [ 804.491529][ T10] usb 9-1: SerialNumber: syz [ 804.522217][ T10] usb 9-1: config 0 descriptor?? [ 804.525417][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2796'. [ 804.572566][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 805.079326][ T5960] usb 10-1: USB disconnect, device number 4 [ 805.448628][ T10] usb 9-1: Firmware version (0.0) predates our first public release. [ 805.457384][ T10] usb 9-1: Please update to version 0.2 or newer [ 805.503522][ T10] usb 9-1: USB disconnect, device number 5 [ 805.686858][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2798'. [ 806.081246][ T5807] usbhid 8-1:0.0: can't add hid device: -71 [ 806.088902][ T5807] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 806.098367][ T5807] usb 8-1: USB disconnect, device number 11 [ 806.216348][T16505] overlayfs: failed lookup in lower (newroot/195, name='file0', err=-40): overlapping layers [ 806.231861][T16505] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 806.684764][T16513] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 806.692928][T16513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.015265][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.024115][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.219782][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 807.219798][ T30] audit: type=1400 audit(2000000007.920:1969): avc: denied { mount } for pid=16530 comm="syz.7.2810" name="/" dev="pstore" ino=4219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 807.423901][ T30] audit: type=1326 audit(2000000008.120:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 807.639154][ T30] audit: type=1326 audit(2000000008.120:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 807.672588][ T30] audit: type=1326 audit(2000000008.120:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 807.803226][T16545] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2813'. [ 807.829390][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2813'. [ 807.849689][T16545] binder: 16544:16545 ioctl c0306201 200000000300 returned -22 [ 807.874373][ T30] audit: type=1326 audit(2000000008.120:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 807.901300][ T30] audit: type=1326 audit(2000000008.120:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 807.926590][ T30] audit: type=1326 audit(2000000008.120:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 807.950362][ T30] audit: type=1326 audit(2000000008.130:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98f638df90 code=0x7ffc0000 [ 807.975978][ T30] audit: type=1326 audit(2000000008.130:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 808.000430][ T30] audit: type=1326 audit(2000000008.130:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.9.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 808.238246][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.247243][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.344357][ T5855] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 808.421016][T16556] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 8196, id = 0 [ 808.521252][ T5855] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 808.532843][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.827259][ T5855] usb 7-1: config 0 descriptor?? [ 808.977929][T16562] netlink: 1912 bytes leftover after parsing attributes in process `syz.9.2818'. [ 809.019652][T16562] openvswitch: netlink: Flow key attr not present in new flow. [ 809.520856][T16548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.532618][T16548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.603068][ T5855] usb 7-1: Cannot set autoneg [ 810.613357][ T5855] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 810.704582][T16583] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 810.712700][T16583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.821099][ T10] usb 7-1: USB disconnect, device number 23 [ 811.720111][T16606] netlink: 'syz.6.2831': attribute type 10 has an invalid length. [ 811.743021][T16605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.367280][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 814.367295][ T30] audit: type=1400 audit(2000000015.070:1997): avc: denied { name_connect } for pid=16638 comm="syz.6.2839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 814.779031][ T30] audit: type=1400 audit(2000000015.461:1998): avc: denied { shutdown } for pid=16642 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 814.857960][T16649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.900803][T16649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.982067][ T30] audit: type=1400 audit(2000000015.658:1999): avc: denied { ioctl } for pid=16650 comm="syz.9.2843" path="socket:[64275]" dev="sockfs" ino=64275 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 816.185083][T16676] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2850'. [ 816.227244][ T5960] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 816.399817][ T5960] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 816.411809][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 816.424906][ T5960] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 816.436300][ T5960] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.450207][ T5960] usb 8-1: Product: syz [ 816.455072][ T5960] usb 8-1: Manufacturer: syz [ 816.459688][ T5960] usb 8-1: SerialNumber: syz [ 816.466618][ T5960] usb 8-1: config 0 descriptor?? [ 816.473439][ T5855] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 816.658973][ T5855] usb 10-1: Using ep0 maxpacket: 8 [ 816.697276][ T5855] usb 10-1: unable to get BOS descriptor or descriptor too short [ 816.737666][ T5855] usb 10-1: config 7 has an invalid interface number: 244 but max is 0 [ 816.878832][ T5855] usb 10-1: config 7 has no interface number 0 [ 816.891026][ T5855] usb 10-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=2a.4e [ 816.900310][ T5855] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.942277][ T5855] usb 10-1: Product: syz [ 816.947158][ T5855] usb 10-1: Manufacturer: syz [ 816.952232][ T5855] usb 10-1: SerialNumber: syz [ 817.236572][ C1] hrtimer: interrupt took 13137 ns [ 817.337283][T16676] 9pnet_fd: Insufficient options for proto=fd [ 817.345375][T16682] lo speed is unknown, defaulting to 1000 [ 817.423301][ T5855] mdc800 10-1:7.244: probe fails -> wrong Interface [ 817.434587][ T5855] usb 10-1: USB disconnect, device number 5 [ 817.600202][T16686] ALSA: mixer_oss: invalid OSS volume '' [ 817.833970][ T5807] usb 8-1: USB disconnect, device number 12 [ 819.691096][ T5855] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 819.710847][ T30] audit: type=1400 audit(2000000020.073:2000): avc: denied { name_bind 0x1000000 } for pid=16723 comm="syz.6.2865" path="socket:[64447]" dev="sockfs" ino=64447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 819.874860][ T5855] usb 8-1: Using ep0 maxpacket: 8 [ 819.883671][ T5855] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 819.892899][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.901749][ T5855] usb 8-1: Product: syz [ 819.906622][ T5855] usb 8-1: Manufacturer: syz [ 819.911254][ T5855] usb 8-1: SerialNumber: syz [ 819.917845][ T5855] usb 8-1: config 0 descriptor?? [ 819.924384][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 819.936902][ T5807] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 820.129506][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.159067][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.180340][ T5807] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 820.193298][ T5807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.205323][ T5807] usb 10-1: config 0 descriptor?? [ 820.258107][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2866'. [ 820.526315][ T5862] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 820.650749][ T5807] cm6533_jd 0003:0D8C:0022.003A: unknown main item tag 0x0 [ 820.658788][ T5807] cm6533_jd 0003:0D8C:0022.003A: unknown main item tag 0x0 [ 820.669992][ T5807] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0D8C:0022.003A/input/input36 [ 820.688353][ T5807] cm6533_jd 0003:0D8C:0022.003A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0 [ 820.719718][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 820.733218][ T5862] usb 7-1: config 0 has an invalid interface number: 10 but max is 0 [ 820.749515][ T5862] usb 7-1: config 0 has no interface number 0 [ 820.758158][ T5862] usb 7-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.df [ 820.767855][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.779200][ T5862] usb 7-1: Product: syz [ 820.783461][ T5862] usb 7-1: Manufacturer: syz [ 820.788105][ T5862] usb 7-1: SerialNumber: syz [ 820.795584][ T5862] usb 7-1: config 0 descriptor?? [ 820.890327][ T5862] usb 10-1: USB disconnect, device number 6 [ 821.231683][ T5855] gspca_sonixj: reg_r err -110 [ 821.236835][ T5855] sonixj 8-1:0.0: probe with driver sonixj failed with error -110 [ 821.950096][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2872'. [ 821.989550][ T5910] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 822.051232][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 822.068815][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 822.105303][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 822.183900][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.204988][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.225090][ T5910] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 822.243376][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.263469][ T5910] usb 9-1: config 0 descriptor?? [ 822.360365][ T5960] xfrm0 speed is unknown, defaulting to 1000 [ 822.367474][T16748] infiniband syz1: set active [ 822.372436][T16748] infiniband syz1: added xfrm0 [ 822.413885][T16748] RDS/IB: syz1: added [ 822.418907][T16748] smc: adding ib device syz1 with port count 1 [ 822.425379][T16748] smc: ib device syz1 port 1 has no pnetid [ 822.434781][ T5960] xfrm0 speed is unknown, defaulting to 1000 [ 822.446989][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 822.539594][T16752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.548563][T16752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.560314][T16752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.569120][T16752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.581040][T16737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.589997][T16737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.646743][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 822.772740][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 822.833710][T16737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.844438][T16737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.858068][ T5910] keytouch 0003:0926:3333.003B: fixing up Keytouch IEC report descriptor [ 822.870598][ T5910] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.003B/input/input37 [ 822.899994][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 822.919114][ T5960] usb 8-1: USB disconnect, device number 13 [ 822.953252][ T5910] keytouch 0003:0926:3333.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 822.990310][T12878] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 823.078766][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 823.110594][ T5910] usb 9-1: USB disconnect, device number 6 [ 823.261167][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 823.353835][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 823.406239][ T5960] usb 7-1: USB disconnect, device number 24 [ 823.458731][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 823.555567][T16748] xfrm0 speed is unknown, defaulting to 1000 [ 824.727804][T16782] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 824.735891][T16782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.786433][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2877'. [ 826.864397][ T5862] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 827.025200][ T5862] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 827.095504][ T5862] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 827.134970][ T5862] usb 10-1: can't read configurations, error -61 [ 827.223772][T16813] netlink: 'syz.6.2894': attribute type 12 has an invalid length. [ 827.292058][ T5862] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 827.453143][ T5862] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 827.462562][ T5862] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 827.470560][ T5862] usb 10-1: can't read configurations, error -61 [ 827.477612][ T5862] usb usb10-port1: attempt power cycle [ 827.837696][ T5862] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 827.860000][ T5862] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 827.871098][ T5862] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 827.879315][ T5862] usb 10-1: can't read configurations, error -61 [ 827.911518][T16821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.920248][T16821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.019068][ T5862] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 828.041223][ T5862] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 828.050500][ T5862] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 828.058315][ T5862] usb 10-1: can't read configurations, error -61 [ 828.065009][ T5862] usb usb10-port1: unable to enumerate USB device [ 828.517243][T16830] binder: 16829:16830 ioctl 4018620d 0 returned -22 [ 828.612939][ T5910] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 828.622344][T16837] binder: 16829:16837 ioctl c0306201 0 returned -14 [ 828.895584][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 828.904481][ T5910] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 828.913807][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.922019][ T5910] usb 7-1: Product: syz [ 828.926166][ T5910] usb 7-1: Manufacturer: syz [ 828.932031][ T5910] usb 7-1: SerialNumber: syz [ 828.937963][ T5910] usb 7-1: config 0 descriptor?? [ 828.944299][ T5910] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 828.962512][ T5910] usb 7-1: Detected FT-X [ 830.050796][ T5910] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 830.063569][ T5910] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 830.073025][ T5910] usb 7-1: USB disconnect, device number 25 [ 830.080441][ T5910] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 830.090552][ T5910] ftdi_sio 7-1:0.0: device disconnected [ 830.205560][T16860] dvmrp0: entered allmulticast mode [ 830.554391][ T5862] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 830.755838][ T5862] usb 9-1: Using ep0 maxpacket: 8 [ 830.761427][ T5862] usb 9-1: too many configurations: 65, using maximum allowed: 8 [ 830.770287][ T5862] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 830.780566][ T5862] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.794576][ T5862] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 830.825207][T16852] dvmrp0: left allmulticast mode [ 830.847512][ T5862] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.861937][ T5862] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 830.872228][ T5862] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.886108][ T5862] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 830.897472][ T5862] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.905589][ T5960] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 830.919524][ T5862] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 830.930623][ T5862] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.945489][ T5862] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 830.956195][ T5862] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.972118][ T5862] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 830.983333][ T5862] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.002714][ T5862] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 831.013490][ T5862] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.027346][ T5862] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 831.036910][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.097702][ T5862] usbtmc 9-1:16.0: bulk endpoints not found [ 831.484901][ T5960] usb 10-1: unable to get BOS descriptor or descriptor too short [ 831.502363][ T5960] usb 10-1: not running at top speed; connect to a high speed hub [ 831.512830][ T5960] usb 10-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 831.523875][ T5960] usb 10-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.537669][ T5960] usb 10-1: config 1 interface 0 has no altsetting 0 [ 831.551460][ T5960] usb 10-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.40 [ 831.560787][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.569671][ T5960] usb 10-1: Product: 喌堫뉡堒救配焲腞斲鲂挶ᮭ튲窻㼚ꯛ谮镗뫣첉㾄꣮ꢕኵ蠙蝅턢쪎웠˪኉쑕ƬᏘ퉕隓钯ﴨ꾢ꐟ䬹⩨⧆鱇楷«㴿૯纋ゝಭㅄﻻꤌ嚞捝㐷䑐Ṏ踉󧒵 [ 831.595233][ T5960] usb 10-1: SerialNumber: syz [ 831.603784][T16864] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 831.865645][ T5960] usbhid 10-1:1.0: can't add hid device: -71 [ 831.873148][ T5960] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 831.884204][ T5960] usb 10-1: USB disconnect, device number 11 [ 832.041552][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2914'. [ 832.057279][T16896] batadv_slave_0: entered promiscuous mode [ 832.545355][ T5807] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 832.621741][ T5855] usb 9-1: USB disconnect, device number 7 [ 832.808355][ T5807] usb 8-1: Using ep0 maxpacket: 16 [ 832.815018][ T5807] usb 8-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 832.824567][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.834621][ T5807] usb 8-1: config 0 descriptor?? [ 832.947553][ T5910] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 833.142588][ T5910] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 833.158277][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 833.180628][ T5910] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 833.189974][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.208722][ T5910] usb 10-1: Product: syz [ 833.216246][ T5910] usb 10-1: Manufacturer: syz [ 833.226532][ T5910] usb 10-1: SerialNumber: syz [ 833.241566][ T5910] usb 10-1: config 0 descriptor?? [ 833.254499][ T30] audit: type=1326 audit(2000000032.748:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 833.285669][ T30] audit: type=1326 audit(2000000032.748:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 833.310865][ T30] audit: type=1326 audit(2000000032.748:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 833.339233][ T30] audit: type=1326 audit(2000000032.748:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 833.367970][ T30] audit: type=1326 audit(2000000032.748:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 833.394765][ T30] audit: type=1326 audit(2000000032.748:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 833.420080][ T30] audit: type=1326 audit(2000000032.748:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 833.450116][ T30] audit: type=1326 audit(2000000032.748:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 833.481113][ T30] audit: type=1326 audit(2000000032.748:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.6.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f358038df90 code=0x7ffc0000 [ 833.945972][T16913] ALSA: mixer_oss: invalid OSS volume '' [ 834.134371][ T5855] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 834.282964][ T10] usb 10-1: USB disconnect, device number 12 [ 834.328973][ T5855] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 834.349075][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 834.381050][ T5855] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 834.390198][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.398356][ T5855] usb 9-1: Product: syz [ 834.402680][ T5855] usb 9-1: Manufacturer: syz [ 834.407291][ T5855] usb 9-1: SerialNumber: syz [ 834.415053][ T5855] usb 9-1: config 0 descriptor?? [ 834.493192][ T5807] pegasus 8-1:0.0: probe with driver pegasus failed with error -121 [ 834.663031][ T30] audit: type=1326 audit(2000000034.067:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.6.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 835.187954][ T8242] gretap0: left allmulticast mode [ 835.198036][ T8242] gretap0: left promiscuous mode [ 835.208999][ T8242] bridge0: port 3(gretap0) entered disabled state [ 835.227117][ T8242] bridge_slave_1: left allmulticast mode [ 835.233342][ T8242] bridge_slave_1: left promiscuous mode [ 835.289060][ T5855] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 835.397868][T16925] ALSA: mixer_oss: invalid OSS volume '' [ 835.543948][ T5855] usb 10-1: device descriptor read/64, error -71 [ 835.544942][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.620943][ T8242] bridge_slave_0: left allmulticast mode [ 835.626629][ T8242] bridge_slave_0: left promiscuous mode [ 835.632628][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.823146][ T5855] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 835.860014][ T5862] usb 9-1: USB disconnect, device number 8 [ 835.962117][ T5855] usb 10-1: device descriptor read/64, error -71 [ 836.081750][ T5855] usb usb10-port1: attempt power cycle [ 836.118619][ T8242] bond1 (unregistering): Released all slaves [ 836.130023][ T8242] bond0 (unregistering): (slave lo): Releasing backup interface [ 836.139552][ T8242] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 836.151513][ T8242] bond0 (unregistering): Released all slaves [ 836.164839][ T10] lo speed is unknown, defaulting to 1000 [ 836.170901][ T10] syz2: Port: 1 Link DOWN [ 836.177415][ T5910] lo speed is unknown, defaulting to 1000 [ 836.211064][T16932] FAULT_INJECTION: forcing a failure. [ 836.211064][T16932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.225068][T16932] CPU: 1 UID: 0 PID: 16932 Comm: syz.6.2924 Not tainted syzkaller #0 PREEMPT(full) [ 836.225093][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.225104][T16932] Call Trace: [ 836.225110][T16932] [ 836.225118][T16932] dump_stack_lvl+0x16c/0x1f0 [ 836.225140][T16932] should_fail_ex+0x512/0x640 [ 836.225165][T16932] _copy_from_user+0x2e/0xd0 [ 836.225193][T16932] copy_msghdr_from_user+0x98/0x160 [ 836.225218][T16932] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 836.225254][T16932] ___sys_sendmsg+0xfe/0x1d0 [ 836.225279][T16932] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.225302][T16932] ? __lock_acquire+0x622/0x1c90 [ 836.225350][T16932] __sys_sendmsg+0x16d/0x220 [ 836.225375][T16932] ? __pfx___sys_sendmsg+0x10/0x10 [ 836.225408][T16932] ? fput+0x9b/0xd0 [ 836.225435][T16932] do_syscall_64+0xcd/0xfa0 [ 836.225455][T16932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.225473][T16932] RIP: 0033:0x7f358038f749 [ 836.225488][T16932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.225504][T16932] RSP: 002b:00007f358121e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.225521][T16932] RAX: ffffffffffffffda RBX: 00007f35805e5fa0 RCX: 00007f358038f749 [ 836.225532][T16932] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 836.225542][T16932] RBP: 00007f358121e090 R08: 0000000000000000 R09: 0000000000000000 [ 836.225553][T16932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.225563][T16932] R13: 00007f35805e6038 R14: 00007f35805e5fa0 R15: 00007ffd24c761c8 [ 836.225588][T16932] [ 836.393131][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.412973][ T8242] tipc: Disabling bearer [ 836.427402][ T8242] tipc: Left network mode [ 836.464726][ T5855] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 836.486676][ T5855] usb 10-1: device descriptor read/8, error -71 [ 837.084647][ T5855] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 837.353019][ T5855] usb 10-1: device descriptor read/8, error -71 [ 837.402272][T12878] Bluetooth: hci2: command 0x0406 tx timeout [ 837.452639][ T8242] hsr_slave_0: left promiscuous mode [ 837.458306][ T5862] usb 8-1: USB disconnect, device number 14 [ 837.475739][ T8242] hsr_slave_1: left promiscuous mode [ 837.505056][ T5855] usb usb10-port1: unable to enumerate USB device [ 837.506482][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.572949][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.613232][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.632952][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.687307][ T8242] veth1_macvtap: left promiscuous mode [ 837.692801][ T8242] veth0_macvtap: left promiscuous mode [ 837.992453][ T8242] team0 (unregistering): Port device team_slave_1 removed [ 838.041741][ T8242] team0 (unregistering): Port device team_slave_0 removed [ 838.071476][T16948] fuse: Bad value for 'fd' [ 838.391401][ T5911] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 838.564396][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 838.577548][ T5911] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 838.634928][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 838.652697][ T5911] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 838.662602][ T5911] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 838.680527][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.701497][ T5911] usb 8-1: config 0 descriptor?? [ 838.774357][T16961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16961 comm=syz.6.2931 [ 839.081174][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 839.081186][ T30] audit: type=1400 audit(2000000038.192:2047): avc: denied { create } for pid=16942 comm="syz.7.2927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 839.110109][ T30] audit: type=1400 audit(2000000038.229:2048): avc: denied { create } for pid=16942 comm="syz.7.2927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 839.134862][ T30] audit: type=1400 audit(2000000038.248:2049): avc: denied { create } for pid=16942 comm="syz.7.2927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=smc_socket permissive=1 [ 839.157458][ T30] audit: type=1400 audit(2000000038.267:2050): avc: denied { create } for pid=16942 comm="syz.7.2927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 839.178659][ T5855] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 839.344914][ T5855] usb 7-1: config 4 has an invalid interface number: 156 but max is 0 [ 839.353456][ T5855] usb 7-1: config 4 has no interface number 0 [ 839.361388][ T5855] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 839.371480][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.380434][ T5855] usb 7-1: Product: syz [ 839.384907][ T5855] usb 7-1: Manufacturer: syz [ 839.389724][ T5855] usb 7-1: SerialNumber: syz [ 839.405241][ T5855] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 839.418426][ T5855] usb 7-1: setting power ON [ 839.429814][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 839.440879][ T8242] IPVS: stop unused estimator thread 0... [ 839.450527][ T5855] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 839.483380][ T5855] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 839.500991][ T5855] dvb_usb_cxusb 7-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 839.678304][ T5855] usb 7-1: USB disconnect, device number 26 [ 840.675520][ T30] audit: type=1400 audit(2000000039.679:2051): avc: denied { setopt } for pid=16970 comm="syz.8.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 840.772096][ T8242] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.136460][ T5807] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 841.274636][ T8242] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.296753][ T5807] usb 7-1: Using ep0 maxpacket: 16 [ 841.303843][ T5807] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 841.315041][ T5807] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 841.327925][ T5911] hdpvr 8-1:0.0: unexpected answer of status request, len -71 [ 841.328404][ T5807] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8256, setting to 1024 [ 841.341017][ T5911] hdpvr 8-1:0.0: device init failed [ 841.354191][ T5911] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 841.355903][ T5807] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 841.371693][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.373099][ T5911] usb 8-1: USB disconnect, device number 15 [ 841.379735][ T5807] usb 7-1: Product: syz [ 841.399089][ T5807] usb 7-1: Manufacturer: syz [ 841.403862][ T5807] usb 7-1: SerialNumber: syz [ 841.448298][ T8242] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.506330][T16981] Bluetooth: MGMT ver 1.23 [ 841.549050][ T8242] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.669562][T16972] xfrm0 speed is unknown, defaulting to 1000 [ 842.271963][ T8242] bridge_slave_1: left allmulticast mode [ 842.277702][ T8242] bridge_slave_1: left promiscuous mode [ 842.284838][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.293593][ T8242] bridge_slave_0: left allmulticast mode [ 842.299282][ T8242] bridge_slave_0: left promiscuous mode [ 842.305594][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.620968][ T8242] bond1 (unregistering): (slave gre1): Releasing backup interface [ 842.629660][ T8242] gre1 (unregistering): left promiscuous mode [ 842.877606][ T8242] bond0 (unregistering): left promiscuous mode [ 842.884008][ T8242] bond_slave_0: left promiscuous mode [ 842.890073][ T8242] bond_slave_1: left promiscuous mode [ 842.895590][ T8242] mac80211_hwsim hwsim16 wlan1: left promiscuous mode [ 842.904954][ T8242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.915638][ T8242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.928946][ T8242] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 842.938199][ T8242] bond0 (unregistering): Released all slaves [ 843.045786][ T8242] bond1 (unregistering): Released all slaves [ 843.071501][T16992] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2940'. [ 843.153191][ T8242] tipc: Disabling bearer [ 843.161405][ T8242] tipc: Left network mode [ 843.190598][ T8242] IPVS: stopping backup sync thread 15225 ... [ 843.803563][ T5807] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 843.840029][ T5807] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 843.868399][ T5807] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 844.135241][ T5807] usb 7-1: USB disconnect, device number 27 [ 844.521629][ T8242] batadv0: left promiscuous mode [ 844.553286][ T8242] hsr_slave_0: left promiscuous mode [ 844.562136][ T8242] hsr_slave_1: left promiscuous mode [ 844.568708][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.577322][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.585463][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.593042][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.604033][ T8242] batman_adv: batadv0: Interface deactivated: macsec1 [ 844.611316][ T8242] batman_adv: batadv0: Removing interface: macsec1 [ 844.629114][ T8242] batadv_slave_0: left promiscuous mode [ 844.635312][ T8242] veth1_macvtap: left promiscuous mode [ 844.640823][ T8242] veth0_macvtap: left promiscuous mode [ 844.646875][ T8242] veth1_vlan: left promiscuous mode [ 844.652279][ T8242] veth0_vlan: left promiscuous mode [ 844.734100][ T8242] team0 (unregistering): Port device batadv2 removed [ 845.696955][ T8242] team0 (unregistering): Port device team_slave_1 removed [ 845.742377][ T8242] team0 (unregistering): Port device team_slave_0 removed [ 846.568630][T12878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 846.579584][T12878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 846.587838][T12878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 846.596087][T12878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 846.603719][T12878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 846.812165][ T10] usb 4-1: USB disconnect, device number 42 [ 846.963151][T17011] team0: Device gtp0 is of different type [ 847.020059][T17023] xfrm0 speed is unknown, defaulting to 1000 [ 847.216494][T17023] chnl_net:caif_netlink_parms(): no params data found [ 847.267144][T17023] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.276518][T17023] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.284145][T17023] bridge_slave_0: entered allmulticast mode [ 847.290840][T17023] bridge_slave_0: entered promiscuous mode [ 847.298670][T17023] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.305946][T17023] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.313077][T17023] bridge_slave_1: entered allmulticast mode [ 847.322849][T17023] bridge_slave_1: entered promiscuous mode [ 847.410104][T17023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.422590][T17023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.605249][T17023] team0: Port device team_slave_0 added [ 847.613797][T17023] team0: Port device team_slave_1 added [ 848.636967][T17023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.646859][T17023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.674235][T17023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.679107][ T30] audit: type=1326 audit(2000000047.172:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17046 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 848.709444][ T30] audit: type=1326 audit(2000000047.172:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17046 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 848.741161][ T30] audit: type=1326 audit(2000000047.200:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17046 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 849.083050][ T5134] Bluetooth: hci3: command tx timeout [ 849.098751][T17023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.106378][T17023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.107758][ T30] audit: type=1326 audit(2000000047.564:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17046 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 849.133452][T17023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.157097][ T30] audit: type=1326 audit(2000000047.564:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17046 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 849.191422][ T30] audit: type=1326 audit(2000000047.639:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17046 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 849.227089][ T30] audit: type=1326 audit(2000000047.639:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17046 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 849.231502][T17023] hsr_slave_0: entered promiscuous mode [ 849.257424][T17023] hsr_slave_1: entered promiscuous mode [ 849.265611][T17023] debugfs: 'hsr0' already exists in 'hsr' [ 849.271389][T17023] Cannot create hsr debugfs directory [ 849.368165][ T5912] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 849.409261][ T8242] IPVS: stop unused estimator thread 0... [ 849.440301][ T30] audit: type=1326 audit(2000000047.808:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17046 comm="syz.9.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f98f638f749 code=0x7ffc0000 [ 849.560637][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 849.566344][ T5912] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 849.576590][ T5912] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.589445][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.604545][ T5912] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.615881][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.632665][ T5912] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.643558][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.657628][ T5912] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.667843][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.681853][ T5912] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.692079][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.707742][ T5912] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.720158][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.734945][ T5912] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.749636][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.764051][ T5912] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.774940][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.788071][ T5912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 849.797547][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.808287][ T5912] usbtmc 7-1:16.0: bulk endpoints not found [ 850.654452][T17023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 850.665487][T17023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 850.691781][T17023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 850.702430][T17023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 850.862620][T17023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.882290][T17023] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.893743][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.900936][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.919421][T17094] SELinux: Context * is not valid (left unmapped). [ 850.932022][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.939132][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.989277][T17023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 851.180759][T17023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.249803][ T5134] Bluetooth: hci3: command tx timeout [ 851.464445][T17023] veth0_vlan: entered promiscuous mode [ 851.477858][T17023] veth1_vlan: entered promiscuous mode [ 851.521270][T17023] veth0_macvtap: entered promiscuous mode [ 851.533080][T17023] veth1_macvtap: entered promiscuous mode [ 851.556236][T17023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.574336][T17023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.590560][ T3011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.622083][ T3011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.635486][ T3011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.654832][ T3011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.769789][ T10] usb 7-1: USB disconnect, device number 28 [ 851.848458][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.868048][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.886376][T17137] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2959'. [ 851.908033][ T8242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.920239][ T8242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.473469][ T5134] Bluetooth: hci3: command tx timeout [ 853.784633][T17172] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 853.894145][ T5960] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 854.484288][ T5960] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 854.497249][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.516160][ T5960] usb 9-1: Product: syz [ 854.520630][ T5960] usb 9-1: Manufacturer: syz [ 854.525826][ T5960] usb 9-1: SerialNumber: syz [ 854.539382][ T5960] usb 9-1: config 0 descriptor?? [ 854.550508][ T5960] hub 9-1:0.0: bad descriptor, ignoring hub [ 854.557216][ T5960] hub 9-1:0.0: probe with driver hub failed with error -5 [ 854.783392][ T5960] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 854.841308][ T5960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 854.852606][ T5960] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 854.861840][ T5960] usb 9-1: media controller created [ 854.881155][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 855.000962][ T5960] DVB: Unable to find symbol dib7000p_attach() [ 855.012917][ T5960] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 855.070665][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2967'. [ 855.087617][ T5960] rc_core: IR keymap rc-dib0700-rc5 not found [ 855.093766][ T5960] Registered IR keymap rc-empty [ 855.100149][ T5960] dvb-usb: could not initialize remote control. [ 855.106710][ T5960] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 855.128725][ T5960] usb 9-1: USB disconnect, device number 9 [ 855.546290][ T5960] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 855.697087][ T5134] Bluetooth: hci3: command tx timeout [ 855.783299][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 855.958903][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 855.964621][ T10] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 855.973716][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 855.984314][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.998951][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 856.027665][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.049466][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 856.060494][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.076123][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 856.089841][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.104055][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 856.114524][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.129407][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 856.143090][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.171634][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 856.192191][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.211021][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 856.221579][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.238635][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 856.250176][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.265975][ T10] usbtmc 7-1:16.0: bulk endpoints not found [ 858.195738][ T5855] usb 7-1: USB disconnect, device number 29 [ 858.273526][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 858.466294][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 858.637863][ T10] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 858.646107][ T10] usb 9-1: config 0 has no interface number 0 [ 858.660349][ T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 858.670450][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.678553][ T10] usb 9-1: Product: syz [ 858.683231][ T10] usb 9-1: Manufacturer: syz [ 858.688097][ T10] usb 9-1: SerialNumber: syz [ 858.696206][ T10] usb 9-1: config 0 descriptor?? [ 858.704069][ T10] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 858.824095][ T30] audit: type=1326 audit(2000000056.666:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17298 comm="syz.9.2976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98f638f749 code=0x0 [ 858.970827][T17288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.152495][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 859.205292][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 859.228098][T17288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.347115][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 859.355298][ T10] usb 9-1: USB disconnect, device number 10 [ 859.364973][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 859.377517][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 859.389237][ T10] quatech2 9-1:0.51: device disconnected [ 859.416726][ T30] audit: type=1326 audit(2000000057.218:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 859.441775][ T30] audit: type=1326 audit(2000000057.246:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 859.466094][ T30] audit: type=1326 audit(2000000057.264:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 859.490716][ T30] audit: type=1326 audit(2000000057.293:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 859.528892][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2970'. [ 859.547220][ T30] audit: type=1326 audit(2000000057.293:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9fd8df90 code=0x7ffc0000 [ 859.595367][ T30] audit: type=1326 audit(2000000057.311:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 859.638716][ T30] audit: type=1326 audit(2000000057.321:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 859.675359][ T30] audit: type=1326 audit(2000000057.330:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 859.784420][ T30] audit: type=1326 audit(2000000057.330:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.7.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9fd8f749 code=0x7ffc0000 [ 861.514592][T17343] netlink: zone id is out of range [ 861.519709][T17343] netlink: zone id is out of range [ 861.524828][T17343] netlink: zone id is out of range [ 861.529938][T17343] netlink: zone id is out of range [ 861.535049][T17343] netlink: zone id is out of range [ 861.540135][T17343] netlink: zone id is out of range [ 861.545251][T17343] netlink: zone id is out of range [ 861.550360][T17343] netlink: zone id is out of range [ 861.555482][T17343] netlink: zone id is out of range [ 861.560596][T17343] netlink: zone id is out of range [ 862.163575][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2983'. [ 863.592051][ T5862] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 863.952656][ T5862] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 863.973281][ T5862] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 863.990924][ T5862] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 864.001018][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.009894][ T5862] usb 10-1: Product: syz [ 864.015157][ T5862] usb 10-1: Manufacturer: syz [ 864.019895][ T5862] usb 10-1: SerialNumber: syz [ 864.028858][ T5862] usb 10-1: config 0 descriptor?? [ 864.046149][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2992'. [ 865.155089][T17379] ALSA: mixer_oss: invalid OSS volume '' [ 865.669548][ T5862] usb 10-1: USB disconnect, device number 17 [ 865.761646][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 865.762659][ T30] audit: type=1326 audit(2000000063.158:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 865.820282][ T30] audit: type=1326 audit(2000000063.158:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 865.869916][ T30] audit: type=1326 audit(2000000063.158:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 865.898050][ T30] audit: type=1326 audit(2000000063.158:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 865.922214][ T30] audit: type=1326 audit(2000000063.158:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 865.946170][ T30] audit: type=1326 audit(2000000063.158:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f358038df90 code=0x7ffc0000 [ 865.971509][ T30] audit: type=1326 audit(2000000063.158:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 865.996299][ T30] audit: type=1326 audit(2000000063.158:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 866.025526][ T30] audit: type=1326 audit(2000000063.158:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 866.051997][ T30] audit: type=1326 audit(2000000063.158:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.6.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358038f749 code=0x7ffc0000 [ 867.412883][T17420] Bluetooth: MGMT ver 1.23 [ 868.206075][T17433] x_tables: duplicate underflow at hook 3 [ 868.810933][T17431] syz.8.3007 (17431) used obsolete PPPIOCDETACH ioctl [ 869.616262][T17445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44310 sclass=netlink_route_socket pid=17445 comm=syz.6.3011 [ 870.899849][T17451] binder: 17449:17451 ioctl c0306201 200000000080 returned -14 [ 871.200723][T17457] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3013'. [ 871.282727][ T5960] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 871.365203][T17132] IPVS: starting estimator thread 0... [ 871.428336][ T5960] usb 7-1: device descriptor read/64, error -71 [ 871.519686][T17459] IPVS: using max 80 ests per chain, 192000 per kthread [ 871.591057][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3016'. [ 871.690803][ T5960] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 871.816483][T17471] 9pnet: Could not find request transport: 0xffffffffffffffff [ 871.850534][ T5960] usb 7-1: device descriptor read/64, error -71 [ 871.969101][ T5960] usb usb7-port1: attempt power cycle [ 872.737803][ T5960] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 872.759783][ T5960] usb 7-1: device descriptor read/8, error -71 [ 872.786401][T17486] net_ratelimit: 7 callbacks suppressed [ 872.786419][T17486] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 872.800645][T17486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.802623][T17489] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 873.015854][ T5960] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 873.037614][ T5960] usb 7-1: device descriptor read/8, error -71 [ 873.090982][T17494] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 873.165747][ T5960] usb usb7-port1: unable to enumerate USB device [ 873.488701][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.495088][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.518350][ T5960] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 873.769193][ T5960] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 873.781323][ T5960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 873.793972][ T5960] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 873.803438][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.811781][ T5960] usb 10-1: Product: syz [ 873.816027][ T5960] usb 10-1: Manufacturer: syz [ 873.820742][ T5960] usb 10-1: SerialNumber: syz [ 873.835383][ T5960] usb 10-1: config 0 descriptor?? [ 874.939595][T17512] ALSA: mixer_oss: invalid OSS volume '' [ 875.298090][ T5960] usb 10-1: USB disconnect, device number 18 [ 877.130141][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 877.140089][ T30] audit: type=1400 audit(2000000073.671:2167): avc: denied { getopt } for pid=17543 comm="syz.9.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 877.221637][ T5862] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 877.390070][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 877.403400][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.420293][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 877.433862][ T5862] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 877.449015][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.459558][ T5862] usb 7-1: config 0 descriptor?? [ 877.621827][T17558] netlink: 13 bytes leftover after parsing attributes in process `syz.7.3040'. [ 877.667845][ T30] audit: type=1400 audit(2000000074.289:2168): avc: denied { map } for pid=17553 comm="syz.7.3040" path="socket:[68527]" dev="sockfs" ino=68527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 877.914588][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 877.922432][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 877.930155][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 877.938489][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 878.332177][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 878.341751][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 878.349515][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 878.357566][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 878.366094][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 878.374105][ T5862] hid-multitouch 0003:0457:07DA.003C: unknown main item tag 0x0 [ 878.386062][ T5862] hid-multitouch 0003:0457:07DA.003C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 878.776931][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'. [ 878.916371][T17571] netlink: 'syz.9.3044': attribute type 10 has an invalid length. [ 879.335434][T17571] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 879.457808][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3047'. [ 880.181922][ T10] usb 7-1: USB disconnect, device number 34 [ 880.403503][T17566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.183611][ T5134] Bluetooth: hci6: command 0x0405 tx timeout [ 881.521477][T17132] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 882.084988][T17132] usb 8-1: Using ep0 maxpacket: 16 [ 882.091789][T17132] usb 8-1: unable to get BOS descriptor or descriptor too short [ 882.101643][T17132] usb 8-1: config 15 has an invalid interface number: 174 but max is 1 [ 882.109944][T17132] usb 8-1: config 15 has an invalid interface number: 5 but max is 1 [ 882.118509][T17132] usb 8-1: config 15 has no interface number 0 [ 882.127392][T17132] usb 8-1: config 15 has no interface number 1 [ 882.133667][T17132] usb 8-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.143794][T17132] usb 8-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 882.153946][T17132] usb 8-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 882.165050][T17132] usb 8-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 882.176119][T17132] usb 8-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 882.187393][T17132] usb 8-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 882.199580][T17132] usb 8-1: config 15 interface 174 has no altsetting 0 [ 882.206782][T17132] usb 8-1: config 15 interface 5 has no altsetting 0 [ 882.216816][T17132] usb 8-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 882.226003][T17132] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.234252][T17132] usb 8-1: Product: syz [ 882.238490][T17132] usb 8-1: Manufacturer: syz [ 882.243090][T17132] usb 8-1: SerialNumber: syz [ 882.800795][T17132] sierra 8-1:15.174: Sierra USB modem converter detected [ 882.810282][T17132] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 882.822090][T17132] usb 8-1: Sierra USB modem converter now attached to ttyUSB1 [ 882.836178][T17132] sierra 8-1:15.5: Sierra USB modem converter detected [ 882.851393][T17132] usb 8-1: Sierra USB modem converter now attached to ttyUSB2 [ 882.862636][T17132] usb 8-1: USB disconnect, device number 16 [ 882.874185][T17132] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 882.885143][T17132] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 882.894623][T17132] sierra 8-1:15.174: device disconnected [ 882.902648][T17132] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 882.912291][T17132] sierra 8-1:15.5: device disconnected [ 883.852800][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3056'. [ 884.374202][T17614] TCP: TCP_TX_DELAY enabled [ 884.860657][ T30] audit: type=1326 audit(2000000081.014:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.3062" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f045ef8f749 code=0x0 [ 885.450266][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3058'. [ 885.737664][T17132] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 885.931475][T17132] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 885.942446][T17132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 885.953867][T17132] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 885.969386][T17132] usb 7-1: language id specifier not provided by device, defaulting to English [ 885.984164][T17132] usb 7-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 885.993297][T17132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.337490][ T5807] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 886.460510][T17132] usb 7-1: Manufacturer: ‰ [ 886.465072][T17132] usb 7-1: SerialNumber: syz [ 886.471361][T17132] usb 7-1: config 0 descriptor?? [ 886.478153][T17132] em28xx 7-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 886.487459][T17132] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 886.530429][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 886.546247][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.557383][ T5807] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 886.577801][ T5807] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 886.587422][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.600239][ T5807] usb 8-1: config 0 descriptor?? [ 887.264684][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3058'. [ 887.382026][ T5807] hid_parser_main: 17 callbacks suppressed [ 887.388239][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.400687][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.414093][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.488615][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.503699][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.511586][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.519551][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.527457][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.536617][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.545090][ T5807] hid-multitouch 0003:0457:07DA.003D: unknown main item tag 0x0 [ 887.554423][ T5807] hid-multitouch 0003:0457:07DA.003D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.7-1/input0 [ 887.681731][T17132] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 887.692235][T17132] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 887.699700][T17132] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 887.708151][T17132] em28xx 7-1:0.0: No AC97 audio processor [ 887.737710][T17647] netlink: 'syz.9.3065': attribute type 10 has an invalid length. [ 888.496614][T17640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.502991][ T5862] usb 7-1: USB disconnect, device number 35 [ 888.516296][ T5862] em28xx 7-1:0.0: Disconnecting em28xx [ 888.523274][ T5862] em28xx 7-1:0.0: Freeing device [ 889.277356][ T5807] usb 8-1: USB disconnect, device number 17 [ 889.446948][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3071'. [ 892.321375][T17697] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 892.648528][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3084'. [ 893.082100][T17132] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 893.268816][T17132] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 893.284153][T17132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 893.312021][T17132] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 893.321463][T17132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.366463][T17132] usb 5-1: Product: syz [ 893.371440][T17132] usb 5-1: Manufacturer: syz [ 893.376061][T17132] usb 5-1: SerialNumber: syz [ 893.382141][T17132] usb 5-1: config 0 descriptor?? [ 894.156625][T17721] openvswitch: netlink: Missing valid actions attribute. [ 894.164121][T17721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.460394][T17724] openvswitch: netlink: Missing valid actions attribute. [ 894.469136][T17724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.736248][T17725] ALSA: mixer_oss: invalid OSS volume '' [ 895.131269][ T5807] usb 5-1: USB disconnect, device number 11 [ 897.005889][ T3093] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 897.155288][ T5807] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 897.198027][ T3093] usb 9-1: Using ep0 maxpacket: 8 [ 897.391387][ T3093] usb 9-1: config 0 has an invalid interface number: 246 but max is 0 [ 897.399611][ T3093] usb 9-1: config 0 has no interface number 0 [ 897.409314][ T3093] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 897.418608][ T3093] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.426735][ T3093] usb 9-1: Product: syz [ 897.431126][ T3093] usb 9-1: Manufacturer: syz [ 897.436048][ T3093] usb 9-1: SerialNumber: syz [ 897.441872][ T3093] usb 9-1: config 0 descriptor?? [ 897.454763][ T5960] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 897.529344][ T5807] usb 7-1: device descriptor read/64, error -71 [ 897.552313][ T3093] msi2500 9-1:0.246: Registered as swradio24 [ 897.558610][ T3093] msi2500 9-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 897.628544][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 897.640535][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 897.654500][ T5960] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 897.663710][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.672154][ T5960] usb 5-1: Product: syz [ 897.676381][ T5960] usb 5-1: Manufacturer: syz [ 897.677757][ T3093] usb 9-1: USB disconnect, device number 11 [ 897.681413][ T5960] usb 5-1: SerialNumber: syz [ 897.747704][ T5960] usb 5-1: config 0 descriptor?? [ 897.785893][ T5807] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 897.794307][T17765] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3100'. [ 897.925977][ T5807] usb 7-1: device descriptor read/64, error -71 [ 898.110696][ T5807] usb usb7-port1: attempt power cycle [ 898.427367][T17132] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 898.617516][T17132] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 898.697352][ T5807] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 898.705007][T17132] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.705035][T17132] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 898.728109][T17132] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 898.741226][T17132] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.742829][ T5807] usb 7-1: device descriptor read/8, error -71 [ 898.784077][T17779] ALSA: mixer_oss: invalid OSS volume '' [ 898.919911][T17132] usb 8-1: config 0 descriptor?? [ 899.025462][ T5911] usb 5-1: USB disconnect, device number 12 [ 899.062030][ T5807] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 899.093073][ T5807] usb 7-1: device descriptor read/8, error -71 [ 899.203612][ T30] audit: type=1326 audit(2000000094.437:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.8.3104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f045ef8f749 code=0x0 [ 899.210725][ T5807] usb usb7-port1: unable to enumerate USB device [ 899.329816][T17776] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 899.376749][T17132] hid_parser_main: 17 callbacks suppressed [ 899.376770][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.393694][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.403162][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.413289][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.421852][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.430426][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.458165][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.467466][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.475275][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.483116][T17132] hid-multitouch 0003:0457:07DA.003E: unknown main item tag 0x0 [ 899.493481][T17132] hid-multitouch 0003:0457:07DA.003E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.7-1/input0 [ 899.763659][ T5807] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 900.539016][ T5807] usb 10-1: config 0 has an invalid interface number: 113 but max is 0 [ 900.547773][ T5807] usb 10-1: config 0 has no interface number 0 [ 900.554509][ T5807] usb 10-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 900.567618][ T5807] usb 10-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 43115, setting to 64 [ 900.579573][ T5807] usb 10-1: config 0 interface 113 has no altsetting 0 [ 900.588935][ T5807] usb 10-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 900.598523][ T5807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.606641][ T5807] usb 10-1: Product: syz [ 900.612327][ T5807] usb 10-1: Manufacturer: syz [ 900.617331][ T5807] usb 10-1: SerialNumber: syz [ 900.707467][ T5807] usb 10-1: config 0 descriptor?? [ 900.713730][T17792] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 900.725986][ C1] usb 10-1: NFC: Urb failure (status -71) [ 900.732816][ C1] usb 10-1: NFC: Urb failure (status -71) [ 900.777495][ T5807] usb 10-1: NFC: Unable to get FW version [ 900.785275][ T5807] pn533_usb 10-1:0.113: probe with driver pn533_usb failed with error -71 [ 900.798685][T17801] netlink: 'syz.4.3109': attribute type 1 has an invalid length. [ 901.219641][ T5912] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 901.385066][ T3093] usb 10-1: USB disconnect, device number 19 [ 901.411738][ T5912] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 901.424789][ T5912] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 61128, setting to 64 [ 901.439065][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 901.440433][ T5807] usb 8-1: USB disconnect, device number 18 [ 901.449617][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.462586][ T5912] usb 5-1: Product: syz [ 901.467486][ T5912] usb 5-1: Manufacturer: syz [ 901.472595][ T5912] usb 5-1: SerialNumber: syz [ 901.481504][ T5912] cdc_ncm 5-1:1.0: skipping garbage [ 901.604804][T17810] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 901.694475][T17801] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 902.053478][ T5807] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 902.809486][ T5807] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 902.826350][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.834612][ T5807] usb 8-1: Product: syz [ 902.838778][ T5807] usb 8-1: Manufacturer: syz [ 902.843766][ T5807] usb 8-1: SerialNumber: syz [ 902.854531][ T5807] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 902.866438][ T5912] cdc_ncm 5-1:1.0: bind() failure [ 902.873488][ T5912] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 902.880545][ T5912] cdc_ncm 5-1:1.1: bind() failure [ 902.889910][ T5912] usb 5-1: USB disconnect, device number 13 [ 902.912422][ T5862] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 903.322479][T17833] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 903.347181][T17833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.360710][ T5862] usb 8-1: Service connection timeout for: 256 [ 904.367107][ T5862] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 904.621189][ T5862] ath9k_htc: Failed to initialize the device [ 904.690929][ T5862] usb 8-1: ath9k_htc: USB layer deinitialized [ 904.848274][ T5912] usb 8-1: USB disconnect, device number 19 [ 905.451360][ T5912] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 905.576360][T17849] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3121'. [ 905.648625][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.659790][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.669988][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 905.683387][ T5912] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 905.692733][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.703204][ T5912] usb 7-1: config 0 descriptor?? [ 905.817008][ T30] audit: type=1400 audit(2000000100.620:2171): avc: denied { audit_read } for pid=17851 comm="syz.9.3122" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 905.817171][T17853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=256 sclass=netlink_audit_socket pid=17853 comm=syz.9.3122 [ 905.995220][T17854] binder: BINDER_SET_CONTEXT_MGR already set [ 906.020825][T17854] binder: 17851:17854 ioctl 4018620d 2000000002c0 returned -16 [ 906.139236][T17859] IPVS: length: 196 != 20937965592 [ 906.152503][T17859] SELinux: ebitmap: start bit 0 comes after start bit 33563136 [ 906.160627][T17859] SELinux: failed to load policy [ 906.185143][ T5912] hid_parser_main: 17 callbacks suppressed [ 906.185163][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.198993][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.206922][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.215858][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.227509][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.235240][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.243751][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.251411][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.259305][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.267067][ T5912] hid-multitouch 0003:0457:07DA.003F: unknown main item tag 0x0 [ 906.276793][ T5912] hid-multitouch 0003:0457:07DA.003F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 907.418302][ T5912] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 907.781713][ T5912] usb 8-1: device descriptor read/64, error -71 [ 907.861872][T17879] netlink: 'syz.4.3131': attribute type 10 has an invalid length. [ 907.887099][T17877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.905861][T17879] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 907.987038][T17878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.019932][ T5911] usb 7-1: USB disconnect, device number 40 [ 908.040611][ T5912] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 908.189063][ T5912] usb 8-1: device descriptor read/64, error -71 [ 908.698163][ T5912] usb usb8-port1: attempt power cycle [ 908.859322][T17903] CIFS: VFS: Malformed UNC in devname [ 909.029427][ T5862] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 909.075199][ T5912] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 909.097045][ T5912] usb 8-1: device descriptor read/8, error -71 [ 909.353368][ T5912] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 909.599820][ T5912] usb 8-1: device descriptor read/8, error -71 [ 909.631158][ T5862] usb 7-1: device descriptor read/64, error -71 [ 909.941980][ T5862] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 910.021906][ T5912] usb usb8-port1: unable to enumerate USB device [ 910.091046][ T5862] usb 7-1: device descriptor read/64, error -71 [ 910.209538][ T5862] usb usb7-port1: attempt power cycle [ 910.573892][ T5862] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 910.594317][ T5862] usb 7-1: device descriptor read/8, error -71 [ 910.924646][ T5862] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 910.946731][ T5862] usb 7-1: device descriptor read/8, error -71 [ 911.086502][ T5862] usb usb7-port1: unable to enumerate USB device [ 911.514235][ T5862] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 911.707041][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 911.719172][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.729431][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 911.742785][ T5862] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 911.752243][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.762707][ T5862] usb 5-1: config 0 descriptor?? [ 912.368184][ T3093] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 912.377027][ T5862] hid_parser_main: 17 callbacks suppressed [ 912.404308][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.414529][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.423936][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.432193][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.440000][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.447960][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.455845][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.463642][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.472141][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.480484][ T5862] hid-multitouch 0003:0457:07DA.0040: unknown main item tag 0x0 [ 912.490711][ T5862] hid-multitouch 0003:0457:07DA.0040: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 912.551390][ T3093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 912.562630][ T3093] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.572552][ T3093] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 912.585529][ T3093] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 912.594860][ T3093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.605089][ T3093] usb 7-1: config 0 descriptor?? [ 912.793529][T17952] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 912.957308][ T30] audit: type=1400 audit(2000000107.299:2172): avc: denied { create } for pid=17951 comm="syz.9.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 912.979392][ T30] audit: type=1400 audit(2000000107.299:2173): avc: denied { connect } for pid=17951 comm="syz.9.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 913.002573][ T30] audit: type=1400 audit(2000000107.299:2174): avc: denied { write } for pid=17951 comm="syz.9.3149" lport=60274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 913.074790][ T3093] hid-multitouch 0003:0457:07DA.0041: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 914.050431][T17968] openvswitch: netlink: Missing valid actions attribute. [ 914.058543][T17968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.800370][ T42] usb 5-1: USB disconnect, device number 14 [ 914.890051][ T5911] usb 7-1: USB disconnect, device number 45 [ 915.050802][ T3093] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 915.118385][ T5912] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 915.297246][ T5912] usb 9-1: device descriptor read/64, error -71 [ 915.931664][ T5911] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 916.066847][ T5912] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 916.130965][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 916.140041][ T5911] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 916.149228][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.157427][ T5911] usb 7-1: Product: syz [ 916.161568][ T5911] usb 7-1: Manufacturer: syz [ 916.166654][ T5911] usb 7-1: SerialNumber: syz [ 916.172601][ T5911] usb 7-1: config 0 descriptor?? [ 916.181256][ T5911] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 916.248582][ T5912] usb 9-1: device descriptor read/64, error -71 [ 916.377182][ T5912] usb usb9-port1: attempt power cycle [ 916.760061][ T5911] gspca_sonixj: reg_w1 err -110 [ 916.768454][ T5911] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 917.050402][ T5912] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 917.075310][ T5912] usb 9-1: device descriptor read/8, error -71 [ 917.328756][ T5912] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 917.358832][ T5912] usb 9-1: device descriptor read/8, error -71 [ 917.487834][ T5912] usb usb9-port1: unable to enumerate USB device [ 917.843347][ T5912] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 918.007663][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 918.039082][ T5912] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 918.051111][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.077242][ T5912] usb 5-1: Product: syz [ 918.089199][ T5912] usb 5-1: Manufacturer: syz [ 918.109782][T18014] openvswitch: netlink: Missing valid actions attribute. [ 918.117347][T18014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.126449][ T5912] usb 5-1: SerialNumber: syz [ 918.230996][ T5912] usb 5-1: config 0 descriptor?? [ 918.238677][ T5912] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 918.793658][ T5912] gspca_sonixj: reg_w1 err -110 [ 918.799288][ T5912] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 919.171656][ T3093] hid_parser_main: 45 callbacks suppressed [ 919.171674][ T3093] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 919.186096][ T3093] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 919.647989][T12878] Bluetooth: hci2: unexpected event for opcode 0x041b [ 920.216659][ T42] usb 7-1: USB disconnect, device number 46 [ 920.240829][T18041] netlink: 'syz.7.3172': attribute type 1 has an invalid length. [ 920.258703][T18041] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3172'. [ 920.268020][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3172'. [ 920.882756][ T5912] usb 5-1: USB disconnect, device number 15 [ 920.910537][T18046] vlan0: entered promiscuous mode [ 920.915573][T18046] macvtap0: entered promiscuous mode [ 921.011226][T18041] bridge0: port 3(macsec0) entered blocking state [ 921.023339][T18041] bridge0: port 3(macsec0) entered disabled state [ 921.044716][T18041] macsec0: entered allmulticast mode [ 921.051567][T18041] veth1_macvtap: entered allmulticast mode [ 921.065616][T18041] macsec0: entered promiscuous mode [ 921.072347][T18041] bridge0: port 3(macsec0) entered blocking state [ 921.078878][T18041] bridge0: port 3(macsec0) entered forwarding state [ 921.251769][ T5911] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 921.390852][ T5911] usb 7-1: device descriptor read/64, error -71 [ 921.647346][ T5911] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 921.809869][ T5911] usb 7-1: device descriptor read/64, error -71 [ 922.268240][ T5911] usb usb7-port1: attempt power cycle [ 922.659399][ T5911] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 922.743741][ T5911] usb 7-1: device descriptor read/8, error -71 [ 923.605407][ T5911] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 923.636460][ T5911] usb 7-1: device descriptor read/8, error -71 [ 923.764293][ T5911] usb usb7-port1: unable to enumerate USB device [ 923.872431][T18093] binder: 18085:18093 ioctl 4018620d 0 returned -22 [ 924.025451][T18095] binder: 18085:18095 ioctl c0306201 0 returned -14 [ 925.523760][ T42] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 925.891899][ T5911] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 926.122473][ T42] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 926.203858][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 926.703451][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.894752][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 926.907743][ T5911] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 926.916784][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.067013][ T5911] usb 5-1: config 0 descriptor?? [ 927.531990][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.539826][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.547745][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.555946][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.564058][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.571918][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.579747][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.588427][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.596317][ T5911] hid-multitouch 0003:0457:07DA.0045: unknown main item tag 0x0 [ 927.605485][ T5911] hid-multitouch 0003:0457:07DA.0045: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 927.689950][T18134] netlink: 175504 bytes leftover after parsing attributes in process `syz.6.3198'. [ 928.938217][ T42] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 929.200788][ T3093] usb 5-1: USB disconnect, device number 16 [ 929.301979][ T5862] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 929.309643][ T42] usb 10-1: device descriptor read/64, error -71 [ 929.474525][ T5862] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 929.486137][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 929.499388][ T5862] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 929.508814][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.517255][ T5862] usb 8-1: Product: syz [ 929.521463][ T5862] usb 8-1: Manufacturer: syz [ 929.526036][ T5862] usb 8-1: SerialNumber: syz [ 929.532351][ T5862] usb 8-1: config 0 descriptor?? [ 929.579832][ T42] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 929.593995][T18157] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 929.718781][ T42] usb 10-1: device descriptor read/64, error -71 [ 929.836574][ T42] usb usb10-port1: attempt power cycle [ 929.932749][ T5912] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 930.296754][ T42] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 930.319330][ T42] usb 10-1: device descriptor read/8, error -71 [ 930.380388][ T5912] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 930.391027][ T5912] usb 9-1: config 1 has no interface number 0 [ 930.397393][ T5912] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 930.415526][ T5912] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 930.424609][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.432584][ T5912] usb 9-1: Product: syz [ 930.436755][ T5912] usb 9-1: Manufacturer: syz [ 930.441340][ T5912] usb 9-1: SerialNumber: syz [ 930.463258][T18160] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 930.477211][T18145] ALSA: mixer_oss: invalid OSS volume '' [ 930.485992][ T5912] usb 9-1: Error in usbnet_get_endpoints (-22) [ 930.496023][ T5912] usb 8-1: USB disconnect, device number 24 [ 930.564310][ T5807] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 930.574032][ T42] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 930.664092][ T42] usb 10-1: device descriptor read/8, error -71 [ 930.791098][ T42] usb usb10-port1: unable to enumerate USB device [ 931.043616][T18160] xfrm0 speed is unknown, defaulting to 1000 [ 931.274913][ T30] audit: type=1400 audit(2000000124.436:2175): avc: denied { ioctl } for pid=18158 comm="syz.8.3207" path="socket:[71989]" dev="sockfs" ino=71989 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 931.357100][ T30] audit: type=1400 audit(2000000124.510:2176): avc: denied { lock } for pid=18168 comm="syz.4.3210" path="socket:[71991]" dev="sockfs" ino=71991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 931.920198][ T42] usb 9-1: USB disconnect, device number 16 [ 931.944618][T18186] netlink: 'syz.9.3214': attribute type 10 has an invalid length. [ 931.959404][T18185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.307855][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 932.364055][ T30] audit: type=1400 audit(2000000125.455:2177): avc: denied { execute } for pid=18192 comm="syz.6.3217" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 932.387437][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.042461][ T5807] hid_parser_main: 19 callbacks suppressed [ 933.042480][ T5807] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 933.057715][ T5807] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 933.930452][ T5807] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 933.957081][ T5807] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 934.019001][T18213] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3222'. [ 934.457250][T18223] trusted_key: encrypted_key: insufficient parameters specified [ 934.468189][T18223] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3226'. [ 936.634745][T18255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 937.017278][T18264] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 937.036355][T18264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.694353][ T5807] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 937.995078][ T5807] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 938.007027][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 938.020445][ T5807] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 938.031186][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.039473][ T5807] usb 5-1: Product: syz [ 938.043739][ T5807] usb 5-1: Manufacturer: syz [ 938.053841][ T5807] usb 5-1: SerialNumber: syz [ 938.077258][ T5807] usb 5-1: config 0 descriptor?? [ 938.431594][ T5862] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 938.523478][ T30] audit: type=1400 audit(2000000131.217:2178): avc: denied { getopt } for pid=18289 comm="syz.6.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 938.694509][ T5862] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 938.705997][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 938.726195][ T5862] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 938.735336][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.743382][ T5862] usb 9-1: Product: syz [ 939.171396][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.222798][ T42] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 939.230453][ T5862] usb 9-1: Manufacturer: syz [ 939.235158][ T5862] usb 9-1: SerialNumber: syz [ 939.241801][ T5862] usb 9-1: config 0 descriptor?? [ 939.247150][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.343477][T18296] ALSA: mixer_oss: invalid OSS volume '' [ 939.618492][ T42] usb 8-1: device descriptor read/64, error -71 [ 939.746749][ T5911] usb 5-1: USB disconnect, device number 17 [ 940.098233][ T42] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 940.238434][ T42] usb 8-1: device descriptor read/64, error -71 [ 940.357327][ T42] usb usb8-port1: attempt power cycle [ 940.528691][T18277] ALSA: mixer_oss: invalid OSS volume '' [ 940.535452][ T5862] usb 9-1: USB disconnect, device number 17 [ 940.741315][T18315] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 940.748974][T18315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.794244][ T42] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 940.835422][ T42] usb 8-1: device descriptor read/8, error -71 [ 941.201270][ T42] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 941.240118][ T5862] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 941.249199][ T5862] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 941.424954][ T42] usb 8-1: device not accepting address 28, error -71 [ 941.432154][ T42] usb usb8-port1: unable to enumerate USB device [ 943.049608][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3261'. [ 943.059350][ T30] audit: type=1326 audit(2000000135.455:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045ef8f749 code=0x7ffc0000 [ 943.094097][ T30] audit: type=1326 audit(2000000135.492:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045ef8f749 code=0x7ffc0000 [ 943.119045][ T30] audit: type=1326 audit(2000000135.492:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f045ef8f749 code=0x7ffc0000 [ 943.143691][ T30] audit: type=1326 audit(2000000135.492:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045ef8f749 code=0x7ffc0000 [ 943.167771][ T30] audit: type=1326 audit(2000000135.492:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045ef8f749 code=0x7ffc0000 [ 943.192341][ T30] audit: type=1326 audit(2000000135.492:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f045ef8f749 code=0x7ffc0000 [ 943.221011][ T30] audit: type=1326 audit(2000000135.492:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045ef8f749 code=0x7ffc0000 [ 943.245150][ T30] audit: type=1326 audit(2000000135.492:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045ef8f749 code=0x7ffc0000 [ 943.277758][ T30] audit: type=1326 audit(2000000135.492:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.8.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f045ef8df90 code=0x7ffc0000 [ 943.557720][ T5862] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 944.255928][ T5862] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 944.904792][T18373] openvswitch: netlink: Missing valid actions attribute. [ 944.912178][T18373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.308910][ T5807] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 945.317446][ T5807] hid-generic 0000:0000:0000.004B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 945.410578][ T5862] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 945.420645][ T3093] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 945.784371][ T5862] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 945.795978][ T5862] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.809637][ T3093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 945.820722][ T5862] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 945.833895][ T3093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.843890][ T5862] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 945.892985][ T3093] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 945.914022][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.923360][ T3093] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 945.963739][ T3093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.972185][ T5862] usb 10-1: config 0 descriptor?? [ 945.981312][ T3093] usb 5-1: config 0 descriptor?? [ 946.062803][T18384] netlink: 'syz.8.3269': attribute type 1 has an invalid length. [ 946.120111][T18384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.875270][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.890957][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.902301][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.910072][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.917791][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.925982][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.933789][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.941583][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.949460][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.957550][ T5862] hid-multitouch 0003:0457:07DA.004C: unknown main item tag 0x0 [ 946.980515][ T5862] hid-multitouch 0003:0457:07DA.004C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.9-1/input0 [ 947.008383][T18394] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 947.019415][T18394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.085872][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 947.085888][ T30] audit: type=1800 audit(2000000139.224:2208): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3272" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=72428 res=0 errno=0 [ 947.121283][ C1] vkms_vblank_simulate: vblank timer overrun [ 947.132448][ T30] audit: type=1800 audit(2000000139.224:2209): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3272" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=72428 res=0 errno=0 [ 947.966093][ T5911] usb 10-1: USB disconnect, device number 24 [ 947.991389][ T3093] usbhid 5-1:0.0: can't add hid device: -71 [ 947.997449][ T3093] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 948.007656][ T3093] usb 5-1: USB disconnect, device number 18 [ 979.708170][ T5134] Bluetooth: hci3: command 0x0406 tx timeout [ 990.484408][ T31] INFO: task syz.3.2908:16851 blocked for more than 143 seconds. [ 990.492173][ T31] Not tainted syzkaller #0 [ 990.499301][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 990.508250][ T31] task:syz.3.2908 state:D stack:28072 pid:16851 tgid:16850 ppid:5806 task_flags:0x400140 flags:0x00080002 [ 990.520297][ T31] Call Trace: [ 990.523567][ T31] [ 990.526482][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 990.531075][ T31] ? check_path.constprop.0+0x24/0x50 [ 990.536670][ T31] ? __lock_acquire+0x622/0x1c90 [ 990.548310][ T31] ? __pfx___schedule+0x10/0x10 [ 990.553201][ T31] ? find_held_lock+0x2b/0x80 [ 990.557875][ T31] ? schedule+0x2d7/0x3a0 [ 990.562300][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 990.568061][ T31] schedule+0xe7/0x3a0 [ 990.598306][ T31] schedule_preempt_disabled+0x13/0x30 [ 990.608362][ T31] __mutex_lock+0x818/0x1060 [ 990.623140][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 990.628820][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 990.644798][ T31] ? __nla_validate_parse+0x600/0x2880 [ 990.650301][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 990.657118][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 990.662761][ T31] nfsd_nl_version_set_doit+0xc4/0x7a0 [ 990.668469][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 990.674548][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 990.682216][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 990.692985][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 990.698724][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 990.704803][ T31] ? bpf_lsm_capable+0x9/0x10 [ 990.727926][ T31] ? security_capable+0x7e/0x260 [ 990.733119][ T31] genl_rcv_msg+0x55c/0x800 [ 990.737639][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.743698][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 990.751507][ T31] netlink_rcv_skb+0x158/0x420 [ 990.756286][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.761314][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 990.766985][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 990.772881][ T31] genl_rcv+0x28/0x40 [ 990.781180][ T31] netlink_unicast+0x5aa/0x870 [ 990.786129][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 990.791558][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 990.796544][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.801855][ T31] ____sys_sendmsg+0xa98/0xc70 [ 990.806747][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 990.812209][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.817506][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 990.822880][ T31] ? try_to_wake_up+0xa67/0x1870 [ 990.827973][ T31] ___sys_sendmsg+0x134/0x1d0 [ 990.832648][ T31] ? find_held_lock+0x2b/0x80 [ 990.837604][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.842787][ T31] ? __lock_acquire+0x622/0x1c90 [ 990.847887][ T31] __sys_sendmsg+0x16d/0x220 [ 990.852484][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 990.857592][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 990.862568][ T31] do_syscall_64+0xcd/0xfa0 [ 990.867058][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.873125][ T31] RIP: 0033:0x7f7ce258f749 [ 990.877587][ T31] RSP: 002b:00007f7ce3375038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.886037][ T31] RAX: ffffffffffffffda RBX: 00007f7ce27e5fa0 RCX: 00007f7ce258f749 [ 990.894110][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 990.902102][ T31] RBP: 00007f7ce2613f91 R08: 0000000000000000 R09: 0000000000000000 [ 990.910156][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.918251][ T31] R13: 00007f7ce27e6038 R14: 00007f7ce27e5fa0 R15: 00007ffe700efa18 [ 990.926290][ T31] [ 990.929336][ T31] [ 990.929336][ T31] Showing all locks held in the system: [ 990.937104][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 990.942378][ T31] 1 lock held by khungtaskd/31: [ 990.947232][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 990.957230][ T31] 2 locks held by getty/5571: [ 990.961901][ T31] #0: ffff88814e1350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 990.971944][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 990.982102][ T31] 2 locks held by syz.1.2193/14209: [ 990.988074][ T31] #0: ffffffff9018b9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.996262][ T31] #1: ffffffff8e7ee2a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 991.006954][ T31] 2 locks held by syz.3.2908/16851: [ 991.012310][ T31] #0: ffffffff9018b9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 991.020624][ T31] #1: ffffffff8e7ee2a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 991.030603][ T31] 1 lock held by syz-executor/17023: [ 991.035868][ T31] #0: ffffffff8e3cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 991.046008][ T31] [ 991.049897][ T31] ============================================= [ 991.049897][ T31] [ 991.061435][ T31] NMI backtrace for cpu 0 [ 991.061452][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 991.061472][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 991.061483][ T31] Call Trace: [ 991.061490][ T31] [ 991.061498][ T31] dump_stack_lvl+0x116/0x1f0 [ 991.061521][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 991.061538][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 991.061562][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 991.061588][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 991.061611][ T31] watchdog+0xf3f/0x1170 [ 991.061636][ T31] ? rcu_is_watching+0x12/0xc0 [ 991.061658][ T31] ? __pfx_watchdog+0x10/0x10 [ 991.061676][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 991.061692][ T31] ? __kthread_parkme+0x19e/0x250 [ 991.061717][ T31] ? __pfx_watchdog+0x10/0x10 [ 991.061736][ T31] kthread+0x3c5/0x780 [ 991.061753][ T31] ? __pfx_kthread+0x10/0x10 [ 991.061770][ T31] ? rcu_is_watching+0x12/0xc0 [ 991.061791][ T31] ? __pfx_kthread+0x10/0x10 [ 991.061808][ T31] ret_from_fork+0x675/0x7d0 [ 991.061821][ T31] ? __pfx_kthread+0x10/0x10 [ 991.061837][ T31] ret_from_fork_asm+0x1a/0x30 [ 991.061873][ T31] [ 991.061879][ T31] Sending NMI from CPU 0 to CPUs 1: [ 991.193306][ C1] NMI backtrace for cpu 1 [ 991.193322][ C1] CPU: 1 UID: 0 PID: 16218 Comm: syz.6.2725 Not tainted syzkaller #0 PREEMPT(full) [ 991.193339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 991.193348][ C1] RIP: 0010:write_comp_data+0x42/0x90 [ 991.193368][ C1] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 7c 16 00 00 85 c0 74 4f 8b 82 58 16 00 00 <83> f8 03 75 44 48 8b 82 60 16 00 00 8b 92 5c 16 00 00 48 8b 38 48 [ 991.193382][ C1] RSP: 0018:ffffc9001488f8b8 EFLAGS: 00000246 [ 991.193395][ C1] RAX: 0000000000000000 RBX: 000000000002a35f RCX: ffffffff82311b28 [ 991.193404][ C1] RDX: ffff888032692480 RSI: 0000000000000000 RDI: 0000000000000005 [ 991.193413][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 991.193422][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801bb80000 [ 991.193430][ C1] R13: ffff88823ffef400 R14: 0000000000000000 R15: 00000000012401e5 [ 991.193440][ C1] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 991.193454][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 991.193470][ C1] CR2: 0000557305c57ad8 CR3: 000000000e182000 CR4: 00000000003526f0 [ 991.193479][ C1] Call Trace: [ 991.193484][ C1] [ 991.193489][ C1] lookup_page_ext+0x118/0x1d0 [ 991.193511][ C1] __update_page_owner_free_handle.constprop.0+0xaa/0x4a0 [ 991.193529][ C1] __reset_page_owner+0x93/0x1a0 [ 991.193543][ C1] __free_frozen_pages+0x7df/0x1160 [ 991.193561][ C1] ? ___free_pages+0xcd/0x220 [ 991.193578][ C1] vfree+0x1fd/0xb50 [ 991.193593][ C1] ? find_held_lock+0x2b/0x80 [ 991.193612][ C1] ? rcu_is_watching+0x12/0xc0 [ 991.193628][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 991.193650][ C1] ? __pfx_kcov_close+0x10/0x10 [ 991.193666][ C1] kcov_close+0x34/0x60 [ 991.193681][ C1] __fput+0x402/0xb70 [ 991.193698][ C1] ? cleanup_mnt+0x26b/0x450 [ 991.193712][ C1] task_work_run+0x150/0x240 [ 991.193727][ C1] ? __pfx_task_work_run+0x10/0x10 [ 991.193744][ C1] do_exit+0x86f/0x2bf0 [ 991.193766][ C1] ? __pfx_do_exit+0x10/0x10 [ 991.193784][ C1] ? cgroup_update_frozen_flag+0x107/0x210 [ 991.193799][ C1] ? find_held_lock+0x2b/0x80 [ 991.193817][ C1] do_group_exit+0xd3/0x2a0 [ 991.193837][ C1] get_signal+0x2671/0x26d0 [ 991.193855][ C1] ? hrtimer_nanosleep+0x187/0x380 [ 991.193874][ C1] ? __pfx_get_signal+0x10/0x10 [ 991.193891][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 991.193907][ C1] arch_do_signal_or_restart+0x8f/0x7c0 [ 991.193925][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 991.193944][ C1] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 991.193963][ C1] exit_to_user_mode_loop+0x85/0x130 [ 991.193979][ C1] do_syscall_64+0x426/0xfa0 [ 991.193994][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.194008][ C1] RIP: 0033:0x7f35803c2005 [ 991.194018][ C1] Code: Unable to access opcode bytes at 0x7f35803c1fdb. [ 991.194024][ C1] RSP: 002b:00007f358121df80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 991.194037][ C1] RAX: fffffffffffffdfc RBX: 00007f35805e5fa0 RCX: 00007f35803c2005 [ 991.194046][ C1] RDX: 00007f358121dfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 991.194054][ C1] RBP: 00007f3580413f91 R08: 0000000000000000 R09: 0000000000000000 [ 991.194062][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 991.194070][ C1] R13: 00007f35805e6038 R14: 00007f35805e5fa0 R15: 00007ffd24c761c8 [ 991.194085][ C1] [ 991.975702][T15522] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.061412][T15522] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.159347][T15522] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.236649][T15522] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.323474][T15522] macsec0: left allmulticast mode [ 992.328502][T15522] veth1_macvtap: left allmulticast mode [ 992.334364][T15522] macsec0: left promiscuous mode [ 992.339470][T15522] bridge0: port 3(macsec0) entered disabled state [ 992.347257][T15522] bridge_slave_1: left allmulticast mode [ 992.352872][T15522] bridge_slave_1: left promiscuous mode [ 992.358580][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.367121][T15522] bridge_slave_0: left allmulticast mode [ 992.372748][T15522] bridge_slave_0: left promiscuous mode [ 992.378780][T15522] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.629269][T15522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.639773][T15522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.650799][T15522] bond0 (unregistering): (slave team0): Releasing backup interface [ 992.660531][T15522] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 992.672947][T15522] bond0 (unregistering): Released all slaves [ 992.955792][T15522] hsr_slave_0: left promiscuous mode [ 992.961491][T15522] hsr_slave_1: left promiscuous mode [ 992.970364][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.978067][T15522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.985665][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.993089][T15522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.008146][T15522] batadv_slave_0: left promiscuous mode [ 993.014913][T15522] veth1_macvtap: left promiscuous mode [ 993.020511][T15522] veth0_macvtap: left promiscuous mode [ 993.265457][T15522] team0 (unregistering): Port device team_slave_1 removed [ 993.298412][T15522] team0 (unregistering): Port device team_slave_0 removed [ 993.826611][T15522] IPVS: stop unused estimator thread 0... [ 993.901514][T15522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.965868][T15522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.003758][T15522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.065105][T15522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.186382][T15522] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.264038][T15522] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.326012][T15522] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.402750][T15522] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.492135][T15522] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.503403][T15522] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.513897][T15522] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 994.583187][T15522] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.593561][T15522] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.603958][T15522] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 994.663693][T15522] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.674135][T15522] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.684706][T15522] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 994.738788][T15522] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.750384][T15522] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.760827][T15522] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 994.861453][T15522] bridge_slave_1: left allmulticast mode [ 994.867093][T15522] bridge_slave_1: left promiscuous mode [ 994.873022][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.881556][T15522] bridge_slave_0: left allmulticast mode [ 994.887174][T15522] bridge_slave_0: left promiscuous mode [ 994.893208][T15522] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.902761][T15522] bridge_slave_1: left allmulticast mode [ 994.908380][T15522] bridge_slave_1: left promiscuous mode [ 994.914482][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.924314][T15522] bridge_slave_0: left allmulticast mode [ 994.930003][T15522] bridge_slave_0: left promiscuous mode [ 994.936392][T15522] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.948352][T15522] bridge_slave_1: left allmulticast mode [ 994.954130][T15522] bridge_slave_1: left promiscuous mode [ 994.959802][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.968148][T15522] bridge_slave_0: left allmulticast mode [ 994.973778][T15522] bridge_slave_0: left promiscuous mode [ 994.979698][T15522] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.292627][T15522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.302741][T15522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.312915][T15522] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 995.323727][T15522] bond0 (unregistering): Released all slaves [ 995.376866][ T60] smc: removing ib device syz1 [ 995.522776][T15522] bond2 (unregistering): (slave bridge1): Releasing active interface [ 995.540246][T15522] bridge1 (unregistering): left promiscuous mode [ 995.546955][T15522] bridge1 (unregistering): left allmulticast mode [ 995.745864][T15522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.758596][T15522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.792114][T15522] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 995.824463][T15522] bond0 (unregistering): Released all slaves [ 996.017319][T15522] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 996.046466][T15522] dummy0: left promiscuous mode [ 996.052178][T15522] dummy0: left allmulticast mode [ 996.065060][T15522] bond1 (unregistering): Released all slaves [ 996.118333][T15522] bond2 (unregistering): Released all slaves [ 996.401164][T15522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.411515][T15522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.422029][T15522] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 996.432710][T15522] bond0 (unregistering): Released all slaves [ 996.517783][T15522] bond1 (unregistering): Released all slaves [ 996.527796][ T42] xfrm0 speed is unknown, defaulting to 1000 [ 996.533786][ T42] syz1: Port: 1 Link DOWN [ 996.671723][T15522] IPVS: stopping master sync thread 16556 ... [ 997.191042][T15522] hsr_slave_0: left promiscuous mode [ 997.196820][T15522] hsr_slave_1: left promiscuous mode [ 997.202818][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.212406][T15522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.220436][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.227794][T15522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.238933][T15522] hsr_slave_0: left promiscuous mode [ 997.244935][T15522] hsr_slave_1: left promiscuous mode [ 997.250594][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.258003][T15522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.265714][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.273458][T15522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.283134][T15522] hsr_slave_0: left promiscuous mode [ 997.289059][T15522] hsr_slave_1: left promiscuous mode [ 997.295042][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.302391][T15522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.310040][T15522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.317457][T15522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.352434][T15522] veth1_macvtap: left promiscuous mode [ 997.358000][T15522] veth0_macvtap: left promiscuous mode [ 997.363619][T15522] veth1_vlan: left promiscuous mode [ 997.368938][T15522] veth0_vlan: left promiscuous mode [ 997.374855][T15522] veth1_macvtap: left promiscuous mode [ 997.380721][T15522] veth0_macvtap: left promiscuous mode [ 997.386224][T15522] veth1_vlan: left promiscuous mode [ 997.391690][T15522] veth0_vlan: left promiscuous mode [ 997.397609][T15522] veth1_macvtap: left promiscuous mode [ 997.403210][T15522] veth0_macvtap: left promiscuous mode [ 997.408742][T15522] veth1_vlan: left promiscuous mode [ 997.414318][T15522] veth0_vlan: left promiscuous mode [ 997.794999][T15522] team0 (unregistering): Port device team_slave_1 removed [ 997.830981][T15522] team0 (unregistering): Port device team_slave_0 removed [ 998.354285][T15522] team0 (unregistering): Port device team_slave_1 removed [ 998.389204][T15522] team0 (unregistering): Port device team_slave_0 removed [ 998.913738][T15522] team0 (unregistering): Port device team_slave_1 removed [ 998.945019][T15522] team0 (unregistering): Port device team_slave_0 removed [ 999.948139][T15522] IPVS: stop unused estimator thread 0...