last executing test programs: 50.143280724s ago: executing program 2 (id=973): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0xfffffffe, 0x2, 0x9, 0x8ee, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000000000000000000000000000000000009500000000000000080000000000000040bc4789aa14b77f4b0c9282a7bae9942c485ebac9cee6888b3e49b872ba833c41eefcd79155efbc6cd2f49ed7e0080cec952c6dcff792ec23840713"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)=0x28084) 48.936694396s ago: executing program 2 (id=974): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updsa={0x154, 0x1a, 0x1, 0xffffffff, 0x0, {{@in6=@dev, @in=@remote}, {@in6=@loopback, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ctr-serpent-avx2\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) r9 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 47.661619232s ago: executing program 2 (id=978): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x805, 0x8a) 47.378295368s ago: executing program 2 (id=982): inotify_init() r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, 0x0, 0x0}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ef000/0x4000)=nil, 0x4000, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002d00)={'wlan0\x00'}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) shutdown(r7, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) listen(r0, 0x0) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000600)={0x35}, 0x10) write(r8, &(0x7f0000000040), 0x0) socket(0x10, 0x80002, 0x0) 10.542471616s ago: executing program 3 (id=1068): socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000084"], 0x30}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000000)) wait4(0x0, &(0x7f0000000040), 0x40000000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0b07f4020000000000000b001b00fd8bad1a8ea8e196ca3a867cb5d3355ec947b88b6061e1512bd703a504c912e9b2e9c5807725a8364860a2aa311be6b2913ee7f1295613fffea47be97949cacf3a057ad7393cfce4e6087bb1a8a21876f8a055401a65770a8f8bf419270577020a7098351a61cd6b0e2e9a857eedfa5ddbe06268c241a98617b0e5ad50c3c0fa8e8a74a115e5448f0f02bbda2c7dd5486a952e048619db540884fb6b20"], 0x14}}, 0x0) r2 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000180)=""/10, &(0x7f00000001c0)=0xa) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r11) sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r12, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 9.742299892s ago: executing program 4 (id=1070): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x400) fanotify_mark(r1, 0x455, 0x40000000, r0, 0x0) 9.305044042s ago: executing program 4 (id=1073): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, 0x0) 8.92594826s ago: executing program 4 (id=1075): statx(0xffffffffffffffff, &(0x7f00000004c0)='.\x00', 0x0, 0x0, 0x0) io_uring_setup(0x400497e, &(0x7f00000001c0)={0x0, 0x800003, 0x10}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket(0x0, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$inet(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) r4 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000180)) shmctl$IPC_RMID(r4, 0x0) r7 = socket$inet6(0xa, 0x0, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x4000000, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) open$dir(0x0, 0x4bac42, 0x0) 6.71616255s ago: executing program 0 (id=1077): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f00000004c0)=""/102400, &(0x7f0000000000)=0x19000) 6.59770427s ago: executing program 0 (id=1078): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000580), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}, [@jmp={0x6}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) r2 = dup(r1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000500)="90", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x929}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) 6.528846478s ago: executing program 3 (id=1079): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 6.498936675s ago: executing program 4 (id=1080): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) 6.200971408s ago: executing program 4 (id=1082): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) pipe2$9p(0x0, 0x0) set_mempolicy(0xc002, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000000000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x44}}, 0x0) sendto$netrom(r1, 0x0, 0x11000, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x24, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) 5.985911239s ago: executing program 3 (id=1083): socket(0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000440)={0x0, 0x1, 0x6, @remote}, 0x10) r5 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/111, 0x6f}], 0x1, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002180)={0x2020}, 0x2020) close_range(r3, 0xffffffffffffffff, 0x0) 5.047695277s ago: executing program 1 (id=1084): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, &(0x7f0000000080), &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000340)=""/233}, 0x90) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x11, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000040)={{0x80}, 'port0\x00', 0xe3, 0x1b0407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) read(r6, &(0x7f0000000280)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.66628247s ago: executing program 0 (id=1085): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a00)=@delchain={0x428, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xf}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x384, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa68c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x358, 0x6, [@m_ife={0x1b0, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x141, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x178, 0x5, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x9, 0x0, 0x49ef, 0x3}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2d}, 0xff0000ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7, 0x8, 0x2, 0x400}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x6, 0x7}, @empty, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x9337, 0x3, 0x1, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xff, 0x3, 0x6, 0xfff}, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0xffffffffffffffff, 0x1, 0xfffff801}, @empty, @rand_addr=0x64010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0xa, 0x4, 0x7, 0x8}, @rand_addr=0x64010100, @empty, 0xff000000}}]}, {0x38, 0x6, "e2883ae87628213290090c46b292c413a043be8ba770cca01fa20097bd83cfc23612ac5340e4298ab5302946d49634d3b4030ae1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x428}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groupwid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020004000000dda300001000000400000095001300"/48], &(0x7f0000000540)='syzkaller\x00', 0x7f, 0x91, &(0x7f0000000880)=""/145, 0x41100, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r0, 0x1], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@map=0x1, 0x6, 0x0, 0xc, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000780)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r4, r8, 0x54, 0x4, 0x0, @prog_fd=r9, r10}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r11, 0x0, 0x1000002, 0x0) r12 = socket(0x10, 0x803, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x14c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.747193156s ago: executing program 1 (id=1086): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 3.215597783s ago: executing program 1 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480), 0x24, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0305602, &(0x7f0000000880)={0x1, 0x10}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) r7 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.151908232s ago: executing program 3 (id=1088): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3, 0x0, 0x0, 0xfffffdef}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 2.79353675s ago: executing program 3 (id=1089): setreuid(0x0, 0xee00) socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800600050000000000fbe541957abb72b4"], 0x3c}}, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x80fe, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) 2.447049253s ago: executing program 0 (id=1090): timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80, 0x30, 0x101, 0x410, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = getpgrp(r1) prctl$PR_SET_PTRACER(0x59616d61, r2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{}, {}, 0x0, 0x7}) 2.255089704s ago: executing program 2 (id=1005): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000240)={r1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.729398542s ago: executing program 4 (id=1091): io_setup(0x0, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000000)) syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @input_terminal={0xc}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "4336d88b1a56"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2, "f6f81132fff8"}, @as_header={0x7, 0x24, 0x1, 0xfe}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc4c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x808, 0x8}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000810000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b59500000000002e34000a000000", @ANYBLOB="14000100fc00000000000000000000000000000014000200fe8000000000000000000000000000aa"], 0x48}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x78, 0x1f}}]}, 0x40}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r2}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102020000402505a1a440000102030109028100020100f01f0904000001020d00000624060001c605240001000d240f0102000000010002008106241a040002088f904ea70940000c241b01a70100003709001f0424e9070724141f00ff7f052401010409058103002fab4a804c6793d500020d00000904010102020d0000090582020002c10903090503020004010240"], &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x2, 0xa, 0x8, 0xfc}, 0x45, &(0x7f00000001c0)={0x5, 0xf, 0x45, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x6c, 0xffff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "e1c12e4953e95652f92ea7ad11fd5ac3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf2, 0x0, 0x0, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c2084e74e011acafa7d2bd01f325e399"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x7e, &(0x7f0000000300)=@string={0x7e, 0x3, "da582397830a80cba3c89b977de5fee09051f100d9c51117c655ee802f8fa44e30ee334e5bf7bd98bb276b034d390cb115b6457a2648e18a418a0a2324f428a58fbe177719341c215efdf84e407e3fc092c7e2cd1cb86cbf9cd2b1cbb1f835d52b8752e1b37be11932884c869e9274c2c13e27b32611188987477ca2"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x81a}}, {0x6b, &(0x7f0000000480)=@string={0x6b, 0x3, "bec9a58fdb60d5936738d0a5f6bf3fc759a41ada184f4982ff7ff293bb6418994d3d6a049d358287dfa137fa7b1c154e3a4d5b280ebfc8e838cc3ccecc28f8e0912ba02ada0f43d9475584cd72f2938e59d395a7cf93764fb241de1accbfc00b59d917076499a94cec"}}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 1.447889766s ago: executing program 3 (id=1092): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0xffffffffffffff92, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1414, 0x1}, 0x10}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newchain={0x84, 0x64, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {0xfff2, 0x2}, {0xa, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x251}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @broadcast}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff000000}, @TCA_FLOWER_KEY_IP_PROTO={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x5d}]}}]}, 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0, 0xd000}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x4000000) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f00000001c0)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000340)={0x48}) r10 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r10}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1.409334479s ago: executing program 0 (id=1093): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100), 0x4) 1.238959031s ago: executing program 2 (id=1094): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7f, 0x7, 0x45, 0x0, 0x9, 0x7, 0x0, 0x5, 0x4, 0xba, 0x0, 0x0, 0x1}) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000001c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x3, &(0x7f0000000380), 0x10}, 0x90) r6 = memfd_create(&(0x7f0000000ac0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0xe) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d070905"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xf, 0x80010, r4, 0x0) fallocate(r6, 0x0, 0x0, 0x400) 1.213839483s ago: executing program 1 (id=1095): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x10) 758.381118ms ago: executing program 1 (id=1096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='erofs_lookup\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r3, 0x0, 0x6, 0x0) r6 = dup3(r2, r3, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r6, 0x4, 0x7c00) dup3(r5, r3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000020acb"], 0x14}}, 0x4008000) r7 = memfd_create(&(0x7f0000000300)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xc2\x91\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xf3\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\xb7\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) write(r7, &(0x7f0000002140)='ic', 0x2) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000032240)=""/102393, 0x18ff9) 88.135488ms ago: executing program 1 (id=1097): r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000002700)={0x1, 0x0, {0x4b5e, 0x2, 0x301b, 0x1, 0x5, 0x700}}) 0s ago: executing program 0 (id=1098): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@end, @noop, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@private}, {@private}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr=0x64010102, @multicast1]}]}}}}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x8000, 0x0, 0x0, 0x3cf7, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x68, 0x0, 0x40, 0x0, 0x0, @remote, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x6, [{@remote, 0x9}, {@private=0xa010101, 0x7fff}, {@broadcast}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x8, [{@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0xd3}]}, @ra={0x94, 0x4}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1b, r0, 0x1, 0x5}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x50323234}}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23be2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000100)={r8, 0x400000, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000180)={r9, 0x3, r7, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) kernel console output (not intermixed with test programs): ice team_slave_1 removed [ 299.833993][ T3968] team0 (unregistering): Port device team_slave_0 removed [ 300.293117][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.300337][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.361547][ T6958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.372045][ T6958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.481048][ T6958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.493046][ T6958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.610521][ T6958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.630542][ T6958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.770843][ T6958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.817320][ T6958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.957789][ T6943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.996978][ T6958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.030760][ T6767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.081935][ T6943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.102455][ T6958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 305.179390][ T6943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.316706][ T6943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.424844][ T6767] veth0_vlan: entered promiscuous mode [ 305.508182][ T6767] veth1_vlan: entered promiscuous mode [ 305.624192][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.720413][ T6943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 305.744075][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.751477][ T6943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 305.762359][ T6943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.778038][ T6767] veth0_macvtap: entered promiscuous mode [ 305.794920][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.802130][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.817334][ T6943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.841032][ T6767] veth1_macvtap: entered promiscuous mode [ 305.853594][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.860815][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.929376][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.942743][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.953805][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.965850][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.976514][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.987243][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.997175][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.009264][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.020747][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.039235][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.054301][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.064795][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.077308][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.087147][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.097875][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.107752][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.122250][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.133749][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.166942][ T6767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.181057][ T6767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.189900][ T6767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.200102][ T6767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.461670][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.480522][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.532785][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.594277][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.599766][ T6943] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.616967][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.642586][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.649930][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.682473][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.689698][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.833201][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 306.833220][ T29] audit: type=1400 audit(1723449508.735:551): avc: denied { unlink } for pid=7091 comm="syz.1.513" name="#1" dev="tmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 306.896331][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.227295][ T7101] netlink: 199356 bytes leftover after parsing attributes in process `syz.0.505'. [ 307.243156][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 307.283846][ T6958] veth0_vlan: entered promiscuous mode [ 307.439349][ T6958] veth1_vlan: entered promiscuous mode [ 308.506169][ T7105] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 308.716440][ T6958] veth0_macvtap: entered promiscuous mode [ 309.051509][ T6958] veth1_macvtap: entered promiscuous mode [ 309.176073][ T5276] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 309.181284][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.194223][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.238728][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.250862][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.283621][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.295586][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.315333][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.325806][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.343892][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.354771][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.368833][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.379032][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 309.399510][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.407030][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 309.432324][ T5276] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 309.458645][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.486052][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.525158][ T5276] usb 1-1: config 0 descriptor?? [ 309.534076][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.546952][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.560253][ T5276] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 309.601372][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.611669][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.625187][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.638601][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.654714][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.670002][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.685420][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.703724][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.736287][ T29] audit: type=1400 audit(1723449511.635:552): avc: denied { unlink } for pid=7116 comm="syz.4.508" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 309.779940][ T6958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.799314][ T6958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.809214][ T6958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.823708][ T6958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.138194][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.409837][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.935739][ T54] Bluetooth: hci6: Invalid handle: 0x656e > 0x0eff [ 311.079192][ T6943] veth0_vlan: entered promiscuous mode [ 311.149105][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.170102][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.192936][ T6943] veth1_vlan: entered promiscuous mode [ 311.362806][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.380395][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.411329][ T6943] veth0_macvtap: entered promiscuous mode [ 311.438359][ T6943] veth1_macvtap: entered promiscuous mode [ 311.551027][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.610947][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.621687][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.632720][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.644746][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.656168][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.668862][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.680971][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.715525][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.758253][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.790528][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.812313][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.858145][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.919602][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.962639][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.001065][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.054438][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.120505][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.166137][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.217359][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.228587][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.238964][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.251275][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.267991][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.284059][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.302993][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.339123][ T6943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.355256][ T6943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.425446][ T6943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.434883][ T5325] usb 1-1: USB disconnect, device number 5 [ 312.436198][ T6943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.440863][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 312.948497][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.011202][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 313.716350][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.721393][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 313.765170][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 313.830313][ T46] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=7c.b1 [ 313.857164][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.871380][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.878833][ T46] usb 2-1: Product: syz [ 313.883655][ T46] usb 2-1: Manufacturer: syz [ 313.888372][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.912184][ T46] usb 2-1: SerialNumber: syz [ 313.942406][ T46] usb 2-1: config 0 descriptor?? [ 313.962443][ T46] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 314.043880][ T7143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.519'. [ 314.174826][ T7145] Bluetooth: MGMT ver 1.23 [ 314.246891][ T5325] usb 2-1: USB disconnect, device number 10 [ 314.576136][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.522'. [ 315.885800][ T29] audit: type=1400 audit(1723449517.795:553): avc: denied { ioctl } for pid=7164 comm="syz.0.524" path="socket:[16417]" dev="sockfs" ino=16417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 316.910337][ T7181] loop0: detected capacity change from 0 to 16384 [ 316.923865][ T7181] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 317.670256][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.676680][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.786692][ T7187] netlink: 68 bytes leftover after parsing attributes in process `syz.3.533'. [ 317.812288][ T7187] netlink: 48 bytes leftover after parsing attributes in process `syz.3.533'. [ 317.958651][ T7194] vivid-003: disconnect [ 318.024550][ T7191] vivid-003: reconnect [ 318.202143][ T29] audit: type=1400 audit(1723449520.095:554): avc: denied { setcurrent } for pid=7196 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 319.358066][ T7212] loop0: detected capacity change from 0 to 16384 [ 319.371759][ T7212] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.047127][ T29] audit: type=1400 audit(1723449523.955:555): avc: denied { read } for pid=7206 comm="syz.0.541" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 322.047192][ T29] audit: type=1400 audit(1723449523.955:556): avc: denied { open } for pid=7206 comm="syz.0.541" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 322.420519][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 322.714856][ T5223] Bluetooth: hci7: Malformed LE Event: 0x1d [ 323.218622][ T7234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.279357][ T7234] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 323.494210][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.510967][ T7234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.549620][ T7234] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 323.604359][ T7234] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 323.632469][ T7234] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 323.682066][ T7234] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 323.695193][ T7234] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 323.718668][ T7234] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 323.735130][ T7234] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 327.261492][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 328.020472][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050cdd800: rx timeout, send abort [ 328.530143][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050cdd800: abort rx timeout. Force session deactivation [ 328.921858][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.932648][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.942494][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.950989][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.959352][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.967973][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.047555][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.090864][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.109281][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.157749][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.167108][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.195866][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.384618][ T7257] veth0_vlan: entered allmulticast mode [ 329.728093][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.419145][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.426404][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.904011][ T7283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.409209][ T54] Bluetooth: hci0: command tx timeout [ 331.785875][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.955525][ T29] audit: type=1400 audit(1723449533.855:557): avc: denied { read } for pid=7289 comm="syz.1.561" path="socket:[16714]" dev="sockfs" ino=16714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 332.249626][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.461189][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.585218][ T5325] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 332.585288][ T5272] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 332.780794][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.795326][ T5325] usb 1-1: Using ep0 maxpacket: 8 [ 332.808268][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.858885][ T29] audit: type=1400 audit(1723449534.735:558): avc: denied { module_request } for pid=7260 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 332.859578][ T5325] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 332.907791][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.960320][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.982691][ T7260] chnl_net:caif_netlink_parms(): no params data found [ 332.995611][ T5325] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 333.039767][ T5325] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.071364][ T5325] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 333.089427][ T5272] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.100334][ T5325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.126535][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.163501][ T5272] usb 4-1: config 0 descriptor?? [ 333.179129][ T5325] usb 1-1: config 0 descriptor?? [ 333.496344][ T54] Bluetooth: hci0: command tx timeout [ 333.601769][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.615395][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.648353][ T7260] bridge_slave_0: entered allmulticast mode [ 333.677327][ T7260] bridge_slave_0: entered promiscuous mode [ 333.726080][ T5272] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 333.757799][ T35] bridge_slave_1: left allmulticast mode [ 333.763481][ T35] bridge_slave_1: left promiscuous mode [ 333.815076][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.849278][ T5272] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 333.899029][ T35] bridge_slave_0: left allmulticast mode [ 333.945214][ T35] bridge_slave_0: left promiscuous mode [ 333.964991][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.022599][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.053490][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.078017][ T35] bond0 (unregistering): Released all slaves [ 335.099658][ T5276] usb 1-1: USB disconnect, device number 6 [ 335.110124][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.120116][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.127840][ T7260] bridge_slave_1: entered allmulticast mode [ 335.144423][ T7260] bridge_slave_1: entered promiscuous mode [ 335.578819][ T54] Bluetooth: hci0: command tx timeout [ 337.608521][ T5325] usb 4-1: USB disconnect, device number 6 [ 337.655952][ T54] Bluetooth: hci0: command tx timeout [ 338.795045][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 339.038034][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.269118][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.650814][ T7260] team0: Port device team_slave_0 added [ 339.708642][ T7260] team0: Port device team_slave_1 added [ 339.947728][ T35] hsr_slave_0: left promiscuous mode [ 340.039241][ T29] audit: type=1400 audit(1723449541.945:559): avc: denied { getopt } for pid=7352 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.079459][ T35] hsr_slave_1: left promiscuous mode [ 340.198194][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.217474][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.289986][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.341882][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.418528][ T7358] input: syz1 as /devices/virtual/input/input15 [ 340.504687][ T35] veth1_macvtap: left promiscuous mode [ 340.517208][ T35] veth0_macvtap: left promiscuous mode [ 340.537186][ T35] veth1_vlan: left promiscuous mode [ 340.564244][ T35] veth0_vlan: left promiscuous mode [ 342.145312][ T29] audit: type=1400 audit(1723449544.035:560): avc: denied { bind } for pid=7365 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 342.609242][ T35] team0 (unregistering): Port device team_slave_1 removed [ 342.681417][ T35] team0 (unregistering): Port device team_slave_0 removed [ 343.504344][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.535000][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.608594][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.839944][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.973847][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.170575][ T29] audit: type=1400 audit(1723449546.075:561): avc: denied { read } for pid=7371 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.199436][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.838383][ T7260] hsr_slave_0: entered promiscuous mode [ 344.876772][ T7260] hsr_slave_1: entered promiscuous mode [ 344.900549][ T7260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.997933][ T7260] Cannot create hsr debugfs directory [ 345.685138][ T5272] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 345.860254][ T7400] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 346.216168][ T5272] usb 4-1: Using ep0 maxpacket: 8 [ 346.293041][ T5272] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 346.329266][ T5272] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 346.396204][ T5272] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.454721][ T5272] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 346.539579][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.648363][ T5272] usb 4-1: config 0 descriptor?? [ 347.883978][ T5272] usb 4-1: USB disconnect, device number 7 [ 348.181883][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.582'. [ 351.099542][ T29] audit: type=1400 audit(1723449553.005:562): avc: denied { create } for pid=7456 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 351.158956][ T7260] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.210171][ T7260] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.248295][ T7260] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.364995][ T7260] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.798369][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.128399][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.056240][ T7260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.066794][ T7260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.215571][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.222685][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.312747][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.319997][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.642972][ T29] audit: type=1400 audit(1723449555.545:563): avc: denied { map } for pid=7491 comm="syz.0.602" path="socket:[18053]" dev="sockfs" ino=18053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 353.953719][ T7260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.139361][ T7260] veth0_vlan: entered promiscuous mode [ 354.184847][ T7260] veth1_vlan: entered promiscuous mode [ 354.281851][ T7260] veth0_macvtap: entered promiscuous mode [ 354.307544][ T7260] veth1_macvtap: entered promiscuous mode [ 354.378543][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.402445][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.412845][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.432359][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.442815][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.454261][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.476786][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.495727][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.506523][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.518172][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.535120][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.555239][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.568078][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.643245][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.708457][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.726412][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.738754][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.751541][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.762482][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.772928][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.790275][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.181768][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.286041][ T7530] netlink: 244 bytes leftover after parsing attributes in process `syz.4.606'. [ 355.335788][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.365304][ T7260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.433033][ T7260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.464695][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.565177][ T7260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.607227][ T7260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.645676][ T7260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.685117][ T7260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.728495][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 355.935835][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 355.961430][ T46] usb 2-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 355.983292][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.015576][ T46] usb 2-1: Product: syz [ 356.025251][ T46] usb 2-1: Manufacturer: syz [ 356.040509][ T46] usb 2-1: SerialNumber: syz [ 356.067797][ T46] usb 2-1: config 0 descriptor?? [ 356.101237][ T46] usb-storage 2-1:0.0: USB Mass Storage device detected [ 356.662205][ T46] usb 2-1: USB disconnect, device number 11 [ 357.747522][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.810342][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.924274][ T3968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.975598][ T3968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.093103][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 358.238399][ T29] audit: type=1400 audit(1723449560.135:564): avc: denied { read } for pid=7576 comm="syz.1.613" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 358.424180][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.614'. [ 361.385251][ T7610] team0: Port device virt_wifi0 added [ 361.855727][ T5318] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 362.145145][ T5318] usb 3-1: Using ep0 maxpacket: 8 [ 362.187309][ T5318] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 362.196429][ T5318] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 362.215860][ T5318] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.225452][ T5318] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 362.234626][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.265971][ T5318] usb 3-1: config 0 descriptor?? [ 362.305536][ T5272] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 362.525156][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 362.609996][ T5272] usb 4-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 362.655419][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.714645][ T5272] usb 4-1: Product: syz [ 362.726294][ T5272] usb 4-1: Manufacturer: syz [ 362.745078][ T5272] usb 4-1: SerialNumber: syz [ 362.826413][ T5272] usb 4-1: config 0 descriptor?? [ 362.861568][ T5272] usb-storage 4-1:0.0: USB Mass Storage device detected [ 363.730046][ T5318] usb 4-1: USB disconnect, device number 8 [ 363.994002][ T7657] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 364.501664][ T5272] usb 3-1: USB disconnect, device number 13 [ 371.125266][ T29] audit: type=1326 audit(1723449573.025:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 371.244176][ T29] audit: type=1326 audit(1723449573.065:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 371.267423][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.347635][ T29] audit: type=1326 audit(1723449573.095:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 371.370849][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.657144][ T29] audit: type=1326 audit(1723449573.125:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 371.853874][ T29] audit: type=1326 audit(1723449573.125:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.2.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 372.302038][ T7715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.985188][ T5325] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 373.805079][ T5325] usb 2-1: Using ep0 maxpacket: 8 [ 373.831796][ T5325] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 373.856101][ T5325] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 373.934440][ T5325] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.010074][ T5325] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 374.048293][ T5325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.084051][ T5325] usb 2-1: config 0 descriptor?? [ 374.095241][ T5276] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 374.285280][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 374.295827][ T5276] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 374.345081][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.375165][ T5276] usb 3-1: Product: syz [ 374.392133][ T5276] usb 3-1: Manufacturer: syz [ 374.414531][ T5276] usb 3-1: SerialNumber: syz [ 374.484351][ T5276] usb 3-1: config 0 descriptor?? [ 377.705591][ T5276] snd-usb-6fire 3-1:0.0: unable to receive device firmware state. [ 377.758986][ T5276] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -110 [ 377.785304][ T5272] usb 2-1: USB disconnect, device number 12 [ 378.090223][ T29] audit: type=1400 audit(1723449579.995:570): avc: denied { setopt } for pid=7742 comm="syz.4.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 378.824455][ T5272] usb 3-1: USB disconnect, device number 14 [ 379.127726][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.134559][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.464481][ T29] audit: type=1400 audit(1723449581.365:571): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 381.255726][ T7776] ebt_limit: overflow, try lower: 570423552/2483027968 [ 382.132281][ T29] audit: type=1326 audit(1723449583.585:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.2.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x0 [ 382.260504][ T29] audit: type=1400 audit(1723449584.125:573): avc: denied { read } for pid=7779 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.300197][ T7786] tipc: Started in network mode [ 382.314474][ T7786] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 382.348332][ T7786] tipc: Enabled bearer , priority 0 [ 383.472399][ T3955] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.571015][ T5325] tipc: Node number set to 8432298 [ 384.394596][ T5272] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 384.595246][ T5272] usb 2-1: Using ep0 maxpacket: 8 [ 384.609029][ T5272] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 384.934872][ T5272] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 385.153954][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 36, changing to 9 [ 385.374178][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 50274, setting to 1024 [ 385.386935][ T5272] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.295264][ T29] audit: type=1326 audit(1723449587.495:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 386.580368][ T5272] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 386.585358][ T7808] block nbd3: shutting down sockets [ 386.595242][ T5318] IPVS: starting estimator thread 0... [ 386.648511][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.673597][ T29] audit: type=1326 audit(1723449587.495:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 386.697235][ T7817] IPVS: using max 31 ests per chain, 74400 per kthread [ 386.737714][ T29] audit: type=1326 audit(1723449587.505:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 386.757046][ T5272] usb 2-1: config 0 descriptor?? [ 386.803748][ T5272] usb 2-1: can't set config #0, error -71 [ 386.816686][ T29] audit: type=1326 audit(1723449587.505:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 386.954343][ T29] audit: type=1326 audit(1723449587.505:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 386.985547][ T29] audit: type=1326 audit(1723449587.515:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 386.997006][ T5272] usb 2-1: USB disconnect, device number 13 [ 388.035957][ T29] audit: type=1326 audit(1723449587.515:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 388.175795][ T29] audit: type=1326 audit(1723449587.515:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 388.253717][ T7828] raw_sendmsg: syz.3.676 forgot to set AF_INET. Fix it! [ 388.275213][ T29] audit: type=1326 audit(1723449587.525:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 388.499296][ T7835] syz.2.673: attempt to access beyond end of device [ 388.499296][ T7835] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 388.512320][ T7835] MINIX-fs: unable to read superblock [ 388.595404][ T29] audit: type=1326 audit(1723449587.525:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 390.489969][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 390.705314][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 390.723294][ T46] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 390.765181][ T46] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 390.825113][ T46] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 390.867303][ T46] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 390.982747][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 391.010313][ T46] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 391.040160][ T46] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 391.064913][ T46] usb 3-1: Product: syz [ 391.102098][ T46] usb 3-1: Manufacturer: syz [ 391.135135][ T46] usb 3-1: SerialNumber: syz [ 391.157430][ T46] usb 3-1: config 0 descriptor?? [ 391.193821][ T46] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 391.228312][ T7875] overlay: Bad value for 'redirect_dir' [ 391.248315][ T46] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 391.975103][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 391.975123][ T29] audit: type=1400 audit(1723449593.865:605): avc: denied { read } for pid=7891 comm="syz.4.695" laddr=::1 lport=20000 faddr=::1 fport=45958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 392.083251][ T7893] syz.0.694: attempt to access beyond end of device [ 392.083251][ T7893] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 392.083330][ T7893] MINIX-fs: unable to read superblock [ 392.375284][ T29] audit: type=1326 audit(1723449594.255:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.1.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x0 [ 392.386965][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.850986][ T7900] pimreg: entered allmulticast mode [ 394.103819][ T29] audit: type=1326 audit(1723449594.545:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7857 comm="syz.2.681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x0 [ 394.283577][ T29] audit: type=1400 audit(1723449595.205:608): avc: denied { map } for pid=7857 comm="syz.2.681" path="/dev/usbmon0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 394.464084][ T46] usb 3-1: USB disconnect, device number 15 [ 394.484258][ T46] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 398.317549][ T5276] IPVS: starting estimator thread 0... [ 398.437541][ T7926] IPVS: using max 31 ests per chain, 74400 per kthread [ 403.435531][ T7950] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 403.446451][ T7950] netlink: 'syz.2.709': attribute type 2 has an invalid length. [ 403.458921][ T7950] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 403.681246][ T29] audit: type=1326 audit(1723449605.585:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b3bb779f9 code=0x0 [ 404.568293][ T29] audit: type=1326 audit(1723449606.475:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x7fc00000 [ 404.664485][ T29] audit: type=1326 audit(1723449606.505:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8a867779f9 code=0x7fc00000 [ 404.762624][ T7968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.714'. [ 405.695107][ T29] audit: type=1326 audit(1723449607.595:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x7fc00000 [ 406.000045][ T7966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.042531][ T7969] netlink: 2300 bytes leftover after parsing attributes in process `syz.4.715'. [ 408.420063][ T7989] usb usb8: usbfs: process 7989 (syz.3.721) did not claim interface 0 before use [ 410.136886][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.726'. [ 413.630636][ T8025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.981421][ T8040] nbd: nbd1 already in use [ 415.043722][ T8049] netlink: 'syz.0.739': attribute type 21 has an invalid length. [ 415.051916][ T8049] netlink: 160 bytes leftover after parsing attributes in process `syz.0.739'. [ 421.084842][ T8093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.927701][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 422.513692][ T8106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.309233][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 423.349232][ T9] usb 5-1: config 0 has no interfaces? [ 423.370223][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 423.402989][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 423.422833][ T9] usb 5-1: Manufacturer: syz [ 423.442368][ T9] usb 5-1: config 0 descriptor?? [ 424.335739][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.375949][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.403767][ T8121] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 424.445675][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.486660][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.551387][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.578953][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.680645][ T9] usb 5-1: USB disconnect, device number 13 [ 424.951462][ T8132] hfsplus: unable to find HFS+ superblock [ 425.802078][ T29] audit: type=1400 audit(1723449627.705:613): avc: denied { read } for pid=8142 comm="syz.4.769" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 426.611972][ T29] audit: type=1400 audit(1723449628.485:614): avc: denied { open } for pid=8142 comm="syz.4.769" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 426.662792][ T8144] libceph: resolve '. [ 426.662792][ T8144] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 426.662792][ T8144] ' (ret=-3): failed [ 427.130146][ T29] audit: type=1400 audit(1723449629.035:615): avc: denied { append } for pid=8151 comm="syz.2.771" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 427.166122][ T8160] Bluetooth: MGMT ver 1.23 [ 427.368802][ T8160] tipc: Started in network mode [ 427.373678][ T8160] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 427.997547][ T8160] tipc: Enabled bearer , priority 10 [ 428.526996][ T29] audit: type=1400 audit(1723449630.435:616): avc: denied { getopt } for pid=8166 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 428.621320][ T8165] capability: warning: `syz.3.774' uses 32-bit capabilities (legacy support in use) [ 429.008606][ T5325] tipc: Node number set to 10005162 [ 429.025681][ T8173] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 429.181917][ T8153] syz.2.771 (8153): drop_caches: 2 [ 429.236047][ T5275] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 429.455105][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 429.463375][ T5275] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 429.481260][ T5275] usb 2-1: config 0 has no interface number 0 [ 429.502816][ T5275] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.540256][ T5275] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 429.584904][ T5275] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 429.653856][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 429.667416][ T5275] usb 2-1: Product: syz [ 429.672883][ T5275] usb 2-1: SerialNumber: syz [ 429.713955][ T5275] usb 2-1: config 0 descriptor?? [ 429.779548][ T5275] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 429.816831][ T5275] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 429.945486][ T5325] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 430.759389][ T5325] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 430.773037][ T5325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.782524][ T5325] usb 4-1: Product: syz [ 430.804082][ T5325] usb 4-1: Manufacturer: syz [ 430.811609][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.812348][ T9] usb 2-1: USB disconnect, device number 14 [ 430.818893][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 430.835107][ T5325] usb 4-1: SerialNumber: syz [ 430.844722][ T5325] usb 4-1: config 0 descriptor?? [ 430.918509][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 431.692665][ T5325] usb 4-1: Firmware version (0.0) predates our first public release. [ 431.705125][ T5325] usb 4-1: Please update to version 0.2 or newer [ 431.786322][ T5325] usb 4-1: USB disconnect, device number 9 [ 432.165419][ T5276] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 432.361685][ T5276] usb 5-1: Using ep0 maxpacket: 8 [ 432.381849][ T5276] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.425405][ T5276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 432.452802][ T5276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 432.464721][ T5276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 432.540344][ T5276] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 432.644463][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.652594][ T5276] hub 5-1:1.0: bad descriptor, ignoring hub [ 432.652629][ T5276] hub 5-1:1.0: probe with driver hub failed with error -5 [ 432.653235][ T5276] cdc_wdm 5-1:1.0: skipping garbage [ 432.653256][ T5276] cdc_wdm 5-1:1.0: skipping garbage [ 432.676818][ T5276] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 432.676845][ T5276] cdc_wdm 5-1:1.0: Unknown control protocol [ 432.931922][ T8217] lo: entered allmulticast mode [ 432.972111][ T29] audit: type=1400 audit(1723449634.875:617): avc: denied { accept } for pid=8213 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.094185][ T29] audit: type=1400 audit(1723449634.895:618): avc: denied { write } for pid=8219 comm="syz.0.792" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 433.116863][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.455324][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.513591][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.566444][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 433.578244][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.690819][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.761422][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.831939][ T29] audit: type=1400 audit(1723449635.725:619): avc: denied { create } for pid=8228 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 433.865727][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.955284][ T29] audit: type=1400 audit(1723449635.865:620): avc: denied { setopt } for pid=8228 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 434.117086][ T29] audit: type=1400 audit(1723449636.025:621): avc: denied { map } for pid=8235 comm="syz.0.796" path="socket:[20437]" dev="sockfs" ino=20437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 434.202146][ T8237] sp0: Synchronizing with TNC [ 434.457022][ T8235] [U] è [ 434.599339][ T8227] overlay: Bad value for 'redirect_dir' [ 435.677609][ T5310] usb 5-1: USB disconnect, device number 14 [ 435.832286][ T8255] netlink: 'syz.4.801': attribute type 29 has an invalid length. [ 435.840763][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 437.275079][ T8269] nbd0: detected capacity change from 0 to 22 [ 437.351750][ T8265] block nbd0: shutting down sockets [ 437.384554][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.394295][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 437.413607][ T29] audit: type=1400 audit(1723449639.305:622): avc: denied { write } for pid=8268 comm="syz.2.805" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 437.436144][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.748490][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.758442][ T58] Buffer I/O error on dev nbd0, logical block 0, async page read [ 437.769085][ T8271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.793094][ T8271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 438.046805][ T8279] netlink: 100 bytes leftover after parsing attributes in process `syz.1.807'. [ 438.583677][ T8271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.968820][ T8271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 439.048740][ T8271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.108341][ T8271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 439.127830][ T8271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.144948][ T8271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 439.158296][ T8271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.158337][ T8271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 439.158434][ T8271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.158467][ T8271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 439.158495][ T8271] ldm_validate_partition_table(): Disk read failed. [ 439.158666][ T8271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.158699][ T8271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 439.158795][ T8271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.158827][ T8271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 439.159007][ T8271] Dev nbd0: unable to read RDB block 0 [ 439.159257][ T8271] nbd0: unable to read partition table [ 439.159558][ T8271] nbd0: partition table beyond EOD, truncated [ 439.194480][ T8035] ldm_validate_partition_table(): Disk read failed. [ 439.194804][ T8035] Dev nbd0: unable to read RDB block 0 [ 439.197303][ T8035] nbd0: unable to read partition table [ 439.197587][ T8035] nbd0: partition table beyond EOD, truncated [ 439.202059][ T8035] ldm_validate_partition_table(): Disk read failed. [ 439.202427][ T8035] Dev nbd0: unable to read RDB block 0 [ 439.202665][ T8035] nbd0: unable to read partition table [ 439.202948][ T8035] nbd0: partition table beyond EOD, truncated [ 439.355723][ T5276] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 439.535357][ T5276] usb 3-1: Using ep0 maxpacket: 8 [ 439.537526][ T5276] usb 3-1: too many endpoints for config 11 interface 0 altsetting 0: 202, using maximum allowed: 30 [ 439.537583][ T5276] usb 3-1: config 11 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 202 [ 439.540594][ T5276] usb 3-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=91.94 [ 439.540632][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.540660][ T5276] usb 3-1: Product: syz [ 439.540682][ T5276] usb 3-1: Manufacturer: syz [ 439.540703][ T5276] usb 3-1: SerialNumber: syz [ 439.713232][ T5276] usb 3-1: bad CDC descriptors [ 439.721184][ T29] audit: type=1400 audit(1723449641.625:623): avc: denied { connect } for pid=8287 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 440.135827][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.530573][ T29] audit: type=1400 audit(1723449641.845:624): avc: denied { read } for pid=8287 comm="syz.3.809" laddr=fe80::985a:48ff:fee7:a48a lport=5 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 441.017424][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.039534][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.113744][ T5310] usb 3-1: USB disconnect, device number 16 [ 441.258088][ T29] audit: type=1400 audit(1723449643.165:625): avc: denied { listen } for pid=8301 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 441.361772][ T29] audit: type=1400 audit(1723449643.195:626): avc: denied { accept } for pid=8301 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 441.851881][ T29] audit: type=1326 audit(1723449643.495:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 441.852131][ T29] audit: type=1326 audit(1723449643.495:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 441.852333][ T29] audit: type=1326 audit(1723449643.505:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 441.852536][ T29] audit: type=1326 audit(1723449643.505:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 441.852742][ T29] audit: type=1326 audit(1723449643.505:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 441.852940][ T29] audit: type=1326 audit(1723449643.505:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f34fed779f9 code=0x7ffc0000 [ 443.460239][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.436116][ T8328] netlink: 644 bytes leftover after parsing attributes in process `syz.2.828'. [ 445.446314][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 445.446326][ T29] audit: type=1400 audit(1723449647.345:758): avc: denied { write } for pid=8319 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 445.472498][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.514165][ T8327] sg_write: data in/out 2011/17 bytes for SCSI command 0x0-- guessing data in; [ 445.514165][ T8327] program syz.0.820 not setting count and/or reply_len properly [ 447.110069][ T5310] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 447.961154][ T5310] usb 2-1: Using ep0 maxpacket: 16 [ 447.962681][ T8350] netlink: 60 bytes leftover after parsing attributes in process `syz.4.825'. [ 447.983038][ T5310] usb 2-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 7.00 [ 448.001333][ T8350] unsupported nlmsg_type 40 [ 448.025048][ T5310] usb 2-1: New USB device strings: Mfr=51, Product=2, SerialNumber=3 [ 448.037278][ T8351] xt_CT: No such helper "pptp" [ 448.046000][ T5310] usb 2-1: Product: syz [ 448.050202][ T5310] usb 2-1: Manufacturer: syz [ 448.073017][ T5310] usb 2-1: SerialNumber: syz [ 448.096219][ T5310] usb 2-1: config 0 descriptor?? [ 448.117943][ T5310] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 448.143622][ T5310] usb 2-1: Detected FT2232H [ 448.426046][ T8358] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 448.438600][ T8358] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.830'. [ 448.443870][ T5310] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 448.459395][ T8358] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 449.193950][ T5310] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 449.276954][ T5310] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 449.316876][ T29] audit: type=1400 audit(1723449651.205:759): avc: denied { write } for pid=8357 comm="syz.4.830" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 449.402422][ T5310] usb 2-1: USB disconnect, device number 15 [ 449.404837][ T29] audit: type=1400 audit(1723449651.305:760): avc: denied { read write } for pid=8357 comm="syz.4.830" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 449.470122][ T5310] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 449.497453][ T29] audit: type=1400 audit(1723449651.305:761): avc: denied { open } for pid=8357 comm="syz.4.830" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 449.564884][ T5310] ftdi_sio 2-1:0.0: device disconnected [ 449.629038][ T29] audit: type=1400 audit(1723449651.535:762): avc: denied { listen } for pid=8369 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.738685][ T29] audit: type=1400 audit(1723449651.555:763): avc: denied { accept } for pid=8369 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 451.929181][ T29] audit: type=1326 audit(1723449653.835:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.4.839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b3bb779f9 code=0x0 [ 452.072225][ T8390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.855149][ T5223] Bluetooth: hci0: command 0x0406 tx timeout [ 453.626940][ T29] audit: type=1400 audit(1723449655.515:765): avc: denied { bind } for pid=8401 comm="syz.3.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 453.714473][ T29] audit: type=1400 audit(1723449655.595:766): avc: denied { ioctl } for pid=8405 comm="syz.4.845" path="/dev/ptp0" dev="devtmpfs" ino=1075 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 453.752646][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.149234][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.468217][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.710843][ T29] audit: type=1400 audit(1723449656.615:767): avc: denied { mounton } for pid=8427 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 454.748443][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.761089][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.772347][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.789541][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.817167][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.831822][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.840822][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 456.504196][ T29] audit: type=1400 audit(1723449658.405:768): avc: denied { create } for pid=8442 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 456.569776][ T8444] netlink: 'syz.3.860': attribute type 29 has an invalid length. [ 456.596197][ T8438] Illegal XDP return value 4294967262 on prog (id 179) dev N/A, expect packet loss! [ 456.606404][ T29] audit: type=1400 audit(1723449658.405:769): avc: denied { ioctl } for pid=8442 comm="syz.3.860" path="socket:[21931]" dev="sockfs" ino=21931 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 456.698433][ T62] bridge_slave_1: left allmulticast mode [ 456.718273][ T62] bridge_slave_1: left promiscuous mode [ 456.755027][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.793767][ T62] bridge_slave_0: left allmulticast mode [ 456.819026][ T62] bridge_slave_0: left promiscuous mode [ 456.849014][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.945333][ T5223] Bluetooth: hci0: command tx timeout [ 458.267264][ T8460] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8460 comm=syz.1.864 [ 458.311434][ T29] audit: type=1400 audit(1723449660.205:770): avc: denied { read } for pid=8457 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 458.414275][ T46] kernel write not supported for file /dsp (pid: 46 comm: kworker/1:1) [ 458.725214][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.740416][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.759529][ T62] bond0 (unregistering): Released all slaves [ 458.879538][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 459.032146][ T5223] Bluetooth: hci0: command tx timeout [ 459.360352][ T8475] nbd3: detected capacity change from 0 to 6 [ 459.428740][ T29] audit: type=1400 audit(1723449661.325:771): avc: denied { shutdown } for pid=8465 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 461.205704][ T54] Bluetooth: hci0: command tx timeout [ 461.808529][ T8472] block nbd3: shutting down sockets [ 461.852263][ C0] blk_print_req_error: 40 callbacks suppressed [ 461.852290][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.867766][ C0] buffer_io_error: 40 callbacks suppressed [ 461.867788][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 461.890125][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.912656][ T8475] pim6reg1: entered allmulticast mode [ 461.922469][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 461.962814][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.008798][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.096969][ T8500] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 462.102175][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.119175][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.127450][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.140641][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.150331][ T8076] ldm_validate_partition_table(): Disk read failed. [ 462.157732][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.200960][ T62] hsr_slave_0: left promiscuous mode [ 462.210953][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.239316][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.257250][ T62] hsr_slave_1: left promiscuous mode [ 462.269993][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.278922][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.304615][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.312731][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.335273][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.343284][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.364891][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.372897][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.392909][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.417905][ T8076] Dev nbd3: unable to read RDB block 0 [ 462.436996][ T8076] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.464883][ T62] veth1_macvtap: left promiscuous mode [ 462.475399][ T8076] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.495557][ T8076] nbd3: unable to read partition table [ 462.502710][ T8076] nbd3: partition table beyond EOD, truncated [ 462.509033][ T5310] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 462.517074][ T62] veth0_macvtap: left promiscuous mode [ 462.522793][ T62] veth1_vlan: left promiscuous mode [ 462.549895][ T62] veth0_vlan: left promiscuous mode [ 462.576309][ T8076] ldm_validate_partition_table(): Disk read failed. [ 462.585276][ T8076] Dev nbd3: unable to read RDB block 0 [ 462.591011][ T8076] nbd3: unable to read partition table [ 462.617005][ T8076] nbd3: partition table beyond EOD, truncated [ 462.624721][ T8481] ldm_validate_partition_table(): Disk read failed. [ 462.645937][ T8481] Dev nbd3: unable to read RDB block 0 [ 462.651782][ T8481] nbd3: unable to read partition table [ 462.671883][ T8481] nbd3: partition table beyond EOD, truncated [ 462.716545][ T5310] usb 5-1: Using ep0 maxpacket: 32 [ 462.725758][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.743004][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.765588][ T5310] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 462.774674][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.828606][ T5310] usb 5-1: config 0 descriptor?? [ 462.856193][ T5225] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 462.901654][ T62] pimreg (unregistering): left allmulticast mode [ 463.048447][ T5225] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 463.067797][ T5225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.091056][ T5225] usb 1-1: config 0 descriptor?? [ 463.255502][ T5223] Bluetooth: hci0: command tx timeout [ 463.309432][ T5310] hid-u2fzero 0003:10C4:8ACF.0006: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 463.353864][ T5310] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero LED initialised [ 463.362129][ T5310] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero RNG initialised [ 463.559490][ T62] team0 (unregistering): Port device team_slave_1 removed [ 463.629544][ T5326] usb 5-1: USB disconnect, device number 15 [ 463.692581][ T62] team0 (unregistering): Port device team_slave_0 removed [ 464.392231][ T5225] pegasus 1-1:0.0: can't reset MAC [ 464.465346][ T5225] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 464.750681][ T5225] usb 1-1: USB disconnect, device number 7 [ 465.159223][ T8521] netlink: 'syz.4.879': attribute type 5 has an invalid length. [ 465.394873][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 466.142276][ T29] audit: type=1400 audit(1723449667.585:772): avc: denied { getopt } for pid=8529 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 466.483290][ T29] audit: type=1400 audit(1723449668.375:773): avc: denied { write } for pid=8528 comm="syz.0.880" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 466.560110][ T62] IPVS: stop unused estimator thread 0... [ 466.562427][ T8530] random: crng reseeded on system resumption [ 467.015608][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.041753][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.075432][ T8427] bridge_slave_0: entered allmulticast mode [ 467.091826][ T8427] bridge_slave_0: entered promiscuous mode [ 467.136072][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.156189][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.332330][ T8427] bridge_slave_1: entered allmulticast mode [ 467.453001][ T8427] bridge_slave_1: entered promiscuous mode [ 469.281975][ T8572] netlink: 'syz.0.890': attribute type 16 has an invalid length. [ 469.339531][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.876327][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.217713][ T8427] team0: Port device team_slave_0 added [ 470.263804][ T8427] team0: Port device team_slave_1 added [ 470.784084][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.817212][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.895267][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.920133][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.955634][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.022078][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.321819][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.893'. [ 471.372048][ T29] audit: type=1400 audit(1723449673.225:774): avc: denied { read } for pid=8592 comm="syz.4.893" dev="sockfs" ino=22232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 471.896864][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.392882][ T8427] hsr_slave_0: entered promiscuous mode [ 472.477920][ T8427] hsr_slave_1: entered promiscuous mode [ 472.535498][ T8427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.543104][ T8427] Cannot create hsr debugfs directory [ 473.036280][ T29] audit: type=1400 audit(1723449674.945:775): avc: denied { getopt } for pid=8611 comm="syz.4.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 474.010571][ T29] audit: type=1400 audit(1723449675.835:776): avc: denied { getopt } for pid=8611 comm="syz.4.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 475.749493][ T8638] syz.4.902: attempt to access beyond end of device [ 475.749493][ T8638] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 475.825566][ T8638] befs: (nbd4): unable to read superblock [ 476.512536][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 479.280269][ T8427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 479.405442][ T8427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 479.569621][ T8427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 480.322397][ T8427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 480.696274][ T5272] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 481.074477][ T5272] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e [ 481.107279][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.466584][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.333827][ T8695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.366741][ T29] audit: type=1400 audit(1723449684.255:777): avc: denied { connect } for pid=8694 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 482.375529][ T5272] usb 1-1: Product: syz [ 482.540146][ T29] audit: type=1400 audit(1723449684.315:778): avc: denied { write } for pid=8694 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 482.555065][ T5272] usb 1-1: Manufacturer: syz [ 482.589115][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.623359][ T5272] usb 1-1: SerialNumber: syz [ 482.662331][ T5272] usb 1-1: config 0 descriptor?? [ 482.670174][ T3955] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.677386][ T3955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.759362][ T3955] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.766519][ T3955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.784040][ T5272] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 483.242851][ T29] audit: type=1326 audit(1723449685.145:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3bb779f9 code=0x7ffc0000 [ 483.316924][ T5276] usb 1-1: USB disconnect, device number 8 [ 483.357831][ T29] audit: type=1326 audit(1723449685.155:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3bb779f9 code=0x7ffc0000 [ 483.450842][ T29] audit: type=1326 audit(1723449685.155:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f0b3bb779f9 code=0x7ffc0000 [ 483.490735][ T29] audit: type=1326 audit(1723449685.155:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3bb779f9 code=0x7ffc0000 [ 483.562397][ T29] audit: type=1326 audit(1723449685.155:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3bb779f9 code=0x7ffc0000 [ 483.966204][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.168738][ T8427] veth0_vlan: entered promiscuous mode [ 484.195790][ T29] audit: type=1400 audit(1723449686.095:784): avc: denied { relabelfrom } for pid=8727 comm="syz.4.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 484.269685][ T8427] veth1_vlan: entered promiscuous mode [ 484.291861][ T29] audit: type=1400 audit(1723449686.095:785): avc: denied { relabelto } for pid=8727 comm="syz.4.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 484.487773][ T8427] veth0_macvtap: entered promiscuous mode [ 484.651734][ T8427] veth1_macvtap: entered promiscuous mode [ 485.432591][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.470839][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.512617][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.525566][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.544857][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.608416][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.640524][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.681901][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.741692][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.815111][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.829333][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.915557][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.090685][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.242254][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.280554][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.301917][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.353345][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.410840][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.447205][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.501882][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.556739][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.617395][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.679237][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.762113][ T8776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.765231][ T5272] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 486.784914][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.848594][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.893856][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.996986][ T8427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.008262][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.029303][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.045676][ T8427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.054888][ T5272] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 487.084250][ T8427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.093349][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.109134][ T8427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.139429][ T5272] usb 4-1: config 0 descriptor?? [ 487.380161][ T8784] binder: BINDER_SET_CONTEXT_MGR already set [ 487.390615][ T8784] binder: 8781:8784 ioctl 4018620d 20000100 returned -16 [ 487.447112][ T8784] binder: BINDER_SET_CONTEXT_MGR already set [ 487.465237][ T8784] binder: 8781:8784 ioctl 4018620d 20000040 returned -16 [ 487.570392][ T3714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.635443][ T3714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.821956][ T3955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.862020][ T3955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.021226][ T5272] hid (null): bogus close delimiter [ 488.475389][ T5272] usb 4-1: string descriptor 0 read error: -22 [ 489.529106][ T8800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 489.542217][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'. [ 489.628086][ T8800] bond1: entered allmulticast mode [ 489.633818][ T8800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.265353][ T5272] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 491.305104][ T5272] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 491.313226][ T5272] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 491.407242][ T5272] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 491.414883][ T5272] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 491.521838][ T5272] usb 4-1: USB disconnect, device number 10 [ 491.662165][ T8826] input: syz0 as /devices/virtual/input/input17 [ 491.686131][ T29] audit: type=1326 audit(1723449693.595:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5d779f9 code=0x7fc00000 [ 491.865104][ T29] audit: type=1326 audit(1723449693.725:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f56b5d779f9 code=0x7fc00000 [ 492.247954][ T29] audit: type=1326 audit(1723449694.155:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5d779f9 code=0x7fc00000 [ 492.289647][ T5326] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 492.475560][ T8830] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 492.535845][ T5326] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 492.558207][ T29] audit: type=1400 audit(1723449694.465:789): avc: denied { relabelto } for pid=8825 comm="syz.3.940" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modules_object_t:s0" [ 492.593152][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.651193][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.692119][ T5326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 492.765095][ T5326] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 492.828357][ T29] audit: type=1400 audit(1723449694.615:790): avc: denied { associate } for pid=8825 comm="syz.3.940" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_object_t:s0" [ 492.868548][ T5326] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 492.895193][ T5326] usb 1-1: Manufacturer: syz [ 493.283988][ T5326] usb 1-1: config 0 descriptor?? [ 493.910391][ T5326] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 494.073445][ T5326] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 494.106303][ T5326] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 495.417874][ T5275] usb 1-1: USB disconnect, device number 9 [ 496.271239][ T5326] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 496.513763][ T8885] ======================================================= [ 496.513763][ T8885] WARNING: The mand mount option has been deprecated and [ 496.513763][ T8885] and is ignored by this kernel. Remove the mand [ 496.513763][ T8885] option from the mount to silence this warning. [ 496.513763][ T8885] ======================================================= [ 497.038048][ T8898] netlink: 100 bytes leftover after parsing attributes in process `syz.4.952'. [ 497.078245][ T5326] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 497.078604][ T5326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.080233][ T5326] usb 4-1: Product: syz [ 497.083299][ T5326] usb 4-1: Manufacturer: syz [ 497.084333][ T5326] usb 4-1: SerialNumber: syz [ 497.196401][ T5326] usb 4-1: config 0 descriptor?? [ 497.515335][ T5223] Bluetooth: hci2: urb ffff88801f793000 submission failed (2) [ 497.529374][ T5326] usb 4-1: USB disconnect, device number 11 [ 497.542132][ T8895] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 498.106265][ T29] audit: type=1400 audit(1723449700.005:791): avc: denied { setopt } for pid=8914 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 501.776060][ T5225] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 501.982371][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.989048][ T5225] usb 3-1: Using ep0 maxpacket: 8 [ 502.001054][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.056280][ T5225] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 502.096135][ T5225] usb 3-1: config 179 has no interface number 0 [ 502.105098][ T5225] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 502.117349][ T5225] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 502.130512][ T5225] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 502.194699][ T5225] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 502.243527][ T5225] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 502.291875][ T5225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.332385][ T8954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.566506][ T5225] usb 3-1: USB disconnect, device number 17 [ 503.932212][ T8993] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 503.940254][ T8993] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.971'. [ 503.949515][ T8993] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 504.402543][ T29] audit: type=1400 audit(1723449706.305:792): avc: denied { getopt } for pid=8994 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 507.230754][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 508.612266][ T9041] lo speed is unknown, defaulting to 1000 [ 508.733956][ T9041] lo speed is unknown, defaulting to 1000 [ 508.744326][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.985'. [ 508.753688][ T5225] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 508.779172][ T9041] lo speed is unknown, defaulting to 1000 [ 509.068190][ T5225] usb 1-1: Using ep0 maxpacket: 16 [ 509.077591][ T5275] lo speed is unknown, defaulting to 1000 [ 509.087684][ T9041] infiniband syz1: set active [ 509.095441][ T5225] usb 1-1: config 0 has no interfaces? [ 509.106162][ T5225] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 509.128646][ T9041] infiniband syz1: added lo [ 509.147960][ T9041] syz1: rxe_create_cq: returned err = -12 [ 509.158634][ T9041] infiniband syz1: Couldn't create ib_mad CQ [ 509.168564][ T9041] infiniband syz1: Couldn't open port 1 [ 509.214510][ T5225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.247732][ T5225] usb 1-1: Product: syz [ 509.272210][ T5225] usb 1-1: Manufacturer: syz [ 509.282866][ T5225] usb 1-1: SerialNumber: syz [ 509.326428][ T5225] usb 1-1: config 0 descriptor?? [ 509.365290][ T9048] netlink: 2300 bytes leftover after parsing attributes in process `syz.3.986'. [ 509.445706][ T9041] RDS/IB: syz1: added [ 509.450454][ T9041] smc: adding ib device syz1 with port count 1 [ 509.475763][ T9041] smc: ib device syz1 port 1 has pnetid [ 509.494164][ T5225] lo speed is unknown, defaulting to 1000 [ 509.541611][ T9041] lo speed is unknown, defaulting to 1000 [ 510.861456][ T5275] usb 1-1: USB disconnect, device number 10 [ 510.919487][ T9061] gfs2: gfs2 mount does not exist [ 511.202564][ T9041] lo speed is unknown, defaulting to 1000 [ 511.356292][ T9064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.796031][ T9041] lo speed is unknown, defaulting to 1000 [ 513.465071][ T5275] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 514.227127][ T5275] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 514.269991][ T5275] usb 4-1: config 0 has no interface number 0 [ 514.322145][ T5275] usb 4-1: config 0 interface 122 has no altsetting 0 [ 514.456586][ T5275] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 514.495119][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.503169][ T5275] usb 4-1: Product: syz [ 514.544736][ T29] audit: type=1400 audit(1723449716.445:793): avc: denied { connect } for pid=9076 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 514.644898][ T5275] usb 4-1: Manufacturer: syz [ 514.649572][ T5275] usb 4-1: SerialNumber: syz [ 514.666020][ T5275] usb 4-1: config 0 descriptor?? [ 514.812741][ T9041] lo speed is unknown, defaulting to 1000 [ 515.125709][ T5326] usb 4-1: USB disconnect, device number 12 [ 515.166462][ T5326] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 515.443288][ T9041] lo speed is unknown, defaulting to 1000 [ 515.897263][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.999'. [ 516.437257][ T9041] lo speed is unknown, defaulting to 1000 [ 517.040187][ T9041] lo speed is unknown, defaulting to 1000 [ 518.699981][ T9041] lo speed is unknown, defaulting to 1000 [ 519.285097][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.329374][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.341163][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.350543][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.365089][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 519.372515][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.472379][ T9041] lo speed is unknown, defaulting to 1000 [ 521.723447][ T5235] Bluetooth: hci2: command tx timeout [ 522.216190][ T9141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 522.275382][ T5276] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 522.618563][ T5276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.724095][ T5276] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 522.785001][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.968526][ T5276] usb 1-1: config 0 descriptor?? [ 523.012470][ T5276] pwc: Askey VC010 type 2 USB webcam detected. [ 523.375590][ T5276] pwc: send_video_command error -71 [ 523.388192][ T5276] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 523.418303][ T5276] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 523.473646][ T5276] usb 1-1: USB disconnect, device number 11 [ 523.736661][ T5235] Bluetooth: hci2: command tx timeout [ 524.593340][ T7691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.684796][ T9123] chnl_net:caif_netlink_parms(): no params data found [ 524.881303][ T7691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.975424][ T5326] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 525.167319][ T7691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.925100][ T5235] Bluetooth: hci2: command tx timeout [ 526.085902][ T5326] usb 1-1: device descriptor read/all, error -71 [ 526.168552][ T7691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.227783][ T9186] sctp: [Deprecated]: syz.1.1021 (pid 9186) Use of int in maxseg socket option. [ 526.227783][ T9186] Use struct sctp_assoc_value instead [ 526.452294][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.484055][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.514809][ T9123] bridge_slave_0: entered allmulticast mode [ 526.527468][ T9123] bridge_slave_0: entered promiscuous mode [ 526.545330][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.317117][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.326766][ T9123] bridge_slave_1: entered allmulticast mode [ 527.336989][ T9123] bridge_slave_1: entered promiscuous mode [ 527.506929][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.566671][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.609940][ T9190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.849464][ T7691] bridge_slave_1: left allmulticast mode [ 527.864318][ T7691] bridge_slave_1: left promiscuous mode [ 527.873228][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.992299][ T5235] Bluetooth: hci2: command tx timeout [ 528.866336][ T7691] bridge_slave_0: left allmulticast mode [ 528.872032][ T7691] bridge_slave_0: left promiscuous mode [ 528.918648][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.199005][ T7691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.214074][ T7691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.229083][ T7691] bond0 (unregistering): Released all slaves [ 530.442794][ T9210] team_slave_0: entered promiscuous mode [ 530.448613][ T9210] team_slave_1: entered promiscuous mode [ 530.474386][ T9123] team0: Port device team_slave_0 added [ 530.491995][ T9123] team0: Port device team_slave_1 added [ 530.685398][ T46] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 530.895087][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 530.936147][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.944837][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.953152][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.979628][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.991260][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 530.992166][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.000874][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.033546][ T46] usb 5-1: config 0 descriptor?? [ 531.041526][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.071512][ T46] hub 5-1:0.0: USB hub found [ 531.103234][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.126417][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.318665][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.349671][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.386307][ T46] hub 5-1:0.0: 1 port detected [ 531.425146][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.463149][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.002900][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.197010][ T9123] hsr_slave_0: entered promiscuous mode [ 532.263788][ T9123] hsr_slave_1: entered promiscuous mode [ 532.352672][ T9123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.394988][ T9123] Cannot create hsr debugfs directory [ 532.432722][ T46] hub 5-1:0.0: activate --> -90 [ 532.477263][ T7691] hsr_slave_0: left promiscuous mode [ 532.483257][ T7691] hsr_slave_1: left promiscuous mode [ 532.490838][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.525061][ T7691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.572479][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.607533][ T7691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.779342][ T7691] veth1_macvtap: left promiscuous mode [ 532.795477][ T7691] veth0_macvtap: left promiscuous mode [ 532.803981][ T7691] veth1_vlan: left promiscuous mode [ 532.827890][ T7691] veth0_vlan: left promiscuous mode [ 533.017690][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.050176][ T5326] usb 5-1: USB disconnect, device number 16 [ 533.057232][ T46] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 533.063153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.075112][ T46] usb 5-1-port1: attempt power cycle [ 533.303869][ T7691] infiniband syz1: set down [ 533.976207][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.037680][ T5310] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 534.067049][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.131783][ T9274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 534.226590][ T5310] usb 5-1: Using ep0 maxpacket: 16 [ 534.234053][ T5310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.245346][ T5310] usb 5-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 534.270245][ T5310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 534.303927][ T5310] usb 5-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 534.332462][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.341058][ T5310] usb 5-1: Product: syz [ 534.345815][ T5310] usb 5-1: Manufacturer: syz [ 534.350755][ T5310] usb 5-1: SerialNumber: syz [ 534.376090][ T5310] usb 5-1: config 0 descriptor?? [ 534.392188][ T5310] sierra 5-1:0.0: Sierra USB modem converter detected [ 534.611731][ T7691] team0 (unregistering): Port device team_slave_1 removed [ 534.752585][ T7691] team0 (unregistering): Port device team_slave_0 removed [ 534.997276][ T5310] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 535.042298][ T5310] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 535.067822][ T5310] usb 5-1: USB disconnect, device number 21 [ 535.125702][ T5310] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 535.177194][ T5310] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 535.200371][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.202073][ T5310] sierra 5-1:0.0: device disconnected [ 535.862892][ T35] smc: removing ib device syz1 [ 535.926787][ T5275] lo speed is unknown, defaulting to 1000 [ 535.926825][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 536.215612][ T9280] unknown channel width for channel at 909000KHz? [ 536.222720][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.245106][ T9280] unknown channel width for channel at 909000KHz? [ 537.196912][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.601551][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.610968][ T9301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.071290][ T9285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.496539][ T29] audit: type=1400 audit(1723449740.395:794): avc: denied { accept } for pid=9303 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 538.644542][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.920647][ T29] audit: type=1400 audit(1723449740.825:795): avc: denied { setattr } for pid=9315 comm="syz.0.1055" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 539.695750][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.034827][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 540.215804][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.723075][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.021385][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.485769][ T5275] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 541.721190][ T5275] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.765175][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.800008][ T5275] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 541.811131][ T5275] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 541.829329][ T5275] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.844138][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 541.856125][ T5275] usb 4-1: SerialNumber: syz [ 541.912942][ T5275] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 542.456648][ T5272] usb 4-1: USB disconnect, device number 13 [ 542.766896][ T9362] evm: overlay not supported [ 542.841560][ T9123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 542.858366][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.043102][ T9123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.260542][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.302965][ T9123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.914576][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.926960][ T9123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 544.504642][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 544.600917][ T9389] 8021q: adding VLAN 0 to HW filter on device team1 [ 544.628310][ T9389] bond0: (slave team1): Enslaving as an active interface with an up link [ 544.729707][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.861313][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 544.912115][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.937776][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.955303][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.964473][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.004087][ T29] audit: type=1400 audit(1723449746.905:796): avc: denied { watch_mount } for pid=9396 comm="syz.4.1070" path="/226" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 545.030507][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 545.052021][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.059256][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.132767][ T9400] netlink: 'syz.0.1071': attribute type 21 has an invalid length. [ 545.148971][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 545.168500][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.175782][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.276719][ T9381] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 545.331518][ T29] audit: type=1326 audit(1723449747.225:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 545.456537][ T29] audit: type=1326 audit(1723449747.235:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 545.468309][ T9381] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 545.547976][ T29] audit: type=1326 audit(1723449747.305:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 545.665279][ T29] audit: type=1326 audit(1723449747.305:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 545.727864][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 545.827853][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 545.864032][ T29] audit: type=1326 audit(1723449747.305:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 546.000554][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.009143][ T29] audit: type=1326 audit(1723449747.325:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 546.035108][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 546.044046][ T29] audit: type=1326 audit(1723449747.325:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 546.113526][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 546.229841][ T29] audit: type=1326 audit(1723449747.345:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 546.261435][ T29] audit: type=1326 audit(1723449747.345:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a867779f9 code=0x7ffc0000 [ 546.298247][ T3968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.308277][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.321868][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 546.330725][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.368320][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 546.469915][ T9404] netlink: 'syz.1.1072': attribute type 10 has an invalid length. [ 547.147374][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 547.654879][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.733309][ T9381] ip6gretap0 speed is unknown, defaulting to 1000 [ 548.061874][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.328480][ T9123] veth0_vlan: entered promiscuous mode [ 548.363813][ T9446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1079'. [ 548.452140][ T9123] veth1_vlan: entered promiscuous mode [ 548.593259][ T9123] veth0_macvtap: entered promiscuous mode [ 548.675193][ T9123] veth1_macvtap: entered promiscuous mode [ 548.708355][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.771192][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.842741][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.878722][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.933115][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.002016][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.055363][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.086479][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.135974][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.187821][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.225188][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.315459][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.345439][ T5225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.349204][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.417279][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.572934][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.615500][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.822064][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.857289][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.816689][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.825404][ T7690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.851074][ T5225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.860236][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.868391][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.879047][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.896155][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.935089][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.976244][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.011038][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.042978][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.086746][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.135814][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.170218][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.217061][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.264390][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.331172][ T9123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.347900][ T9123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.394562][ T9123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.416801][ T3968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.427876][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.465020][ T9123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.877875][ T7690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.935880][ T7690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.066863][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.091267][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.602854][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 552.602900][ T29] audit: type=1400 audit(1723449754.505:836): avc: denied { write } for pid=9503 comm="syz.0.1090" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 553.525541][ T5275] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 553.741500][ T5275] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 553.774190][ T5275] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 553.799471][ T5275] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 553.838713][ T5275] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.865498][ T5318] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 553.883771][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.936495][ T5275] usb 5-1: Product: syz [ 553.952133][ T5275] usb 5-1: Manufacturer: syz [ 553.964488][ T5275] usb 5-1: SerialNumber: syz [ 554.020172][ T9521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.110656][ T5318] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 554.122570][ T5318] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.200131][ T5318] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.270889][ T5318] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 554.321790][ T5318] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.340106][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.353980][ T5318] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.409293][ T5318] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 554.420522][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.457649][ T9] net_ratelimit: 14 callbacks suppressed [ 554.457669][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.481456][ T5318] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.600532][ T5318] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.609536][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 554.717291][ T5318] usb 3-1: string descriptor 0 read error: -22 [ 554.723728][ T5318] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 554.784515][ T9539] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1091'. [ 554.830253][ T5318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.897954][ T5318] adutux 3-1:168.0: interrupt endpoints not found [ 555.252520][ T5325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.428245][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.434605][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.255917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.364891][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 660.371898][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8035/1:b..l P3968/1:b..l [ 660.381793][ C0] rcu: (detected by 0, t=10502 jiffies, g=44501, q=477 ncpus=2) [ 660.389531][ C0] task:kworker/u8:10 state:R running task stack:23536 pid:3968 tgid:3968 ppid:2 flags:0x00004000 [ 660.402888][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 660.410763][ C0] Call Trace: [ 660.414061][ C0] [ 660.417005][ C0] __schedule+0xe37/0x5490 [ 660.421448][ C0] ? __pfx_mark_lock+0x10/0x10 [ 660.426240][ C0] ? __pfx_mark_lock+0x10/0x10 [ 660.431068][ C0] ? batadv_tvlv_container_ogm_append+0x1b5/0x510 [ 660.437504][ C0] ? batadv_iv_ogm_schedule_buff+0x1199/0x1500 [ 660.443694][ C0] ? __pfx___schedule+0x10/0x10 [ 660.448572][ C0] ? hlock_class+0x4e/0x130 [ 660.453108][ C0] ? mark_held_locks+0x9f/0xe0 [ 660.457913][ C0] preempt_schedule_irq+0x51/0x90 [ 660.462991][ C0] irqentry_exit+0x36/0x90 [ 660.467443][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.473461][ C0] RIP: 0010:lock_acquire+0x21b/0x560 [ 660.478779][ C0] Code: df 48 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 a8 00 00 00 65 48 2b 04 25 28 00 00 00 0f 85 e0 02 00 00 <48> 81 c4 b0 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc [ 660.498408][ C0] RSP: 0018:ffffc9000c1a7a70 EFLAGS: 00000246 [ 660.504491][ C0] RAX: 0000000000000000 RBX: fffff52001834f50 RCX: 0000000000000001 [ 660.512481][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cc7e0 RDI: ffffffff8bb08ec0 [ 660.520482][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c5ad8 [ 660.528479][ C0] R10: ffffffff9462d6c7 R11: 0000000000000000 R12: 0000000000000000 [ 660.536478][ C0] R13: 0000000000000000 R14: ffffffff8ddb5ce0 R15: 0000000000000000 [ 660.544582][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 660.549644][ C0] ? batadv_iv_ogm_schedule_buff+0x75c/0x1500 [ 660.555753][ C0] ? __pfx_lock_release+0x10/0x10 [ 660.560801][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 660.566119][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 660.571351][ C0] ? batadv_tvlv_container_ogm_append+0x3c5/0x510 [ 660.577792][ C0] ? batadv_tvlv_container_ogm_append+0x3c5/0x510 [ 660.584235][ C0] batadv_iv_ogm_schedule_buff+0x5ac/0x1500 [ 660.590163][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500 [ 660.596269][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 660.602634][ C0] ? batadv_send_skb_packet+0x56e/0x6b0 [ 660.608202][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 660.615265][ C0] process_one_work+0x9c5/0x1b40 [ 660.620239][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 660.627822][ C0] ? __pfx_process_one_work+0x10/0x10 [ 660.633221][ C0] ? assign_work+0x1a0/0x250 [ 660.637834][ C0] worker_thread+0x6c8/0xf20 [ 660.642457][ C0] ? __kthread_parkme+0x148/0x220 [ 660.647515][ C0] ? __pfx_worker_thread+0x10/0x10 [ 660.652658][ C0] kthread+0x2c1/0x3a0 [ 660.656743][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.661963][ C0] ? __pfx_kthread+0x10/0x10 [ 660.666572][ C0] ret_from_fork+0x45/0x80 [ 660.671017][ C0] ? __pfx_kthread+0x10/0x10 [ 660.675622][ C0] ret_from_fork_asm+0x1a/0x30 [ 660.680419][ C0] [ 660.683450][ C0] task:udevd state:R running task stack:25600 pid:8035 tgid:8035 ppid:4670 flags:0x00004002 [ 660.695204][ C0] Call Trace: [ 660.698489][ C0] [ 660.701431][ C0] __schedule+0xe37/0x5490 [ 660.705869][ C0] ? finish_task_switch.isra.0+0x212/0xcc0 [ 660.711708][ C0] ? __print_lock_name+0x1f0/0x260 [ 660.716858][ C0] ? __pfx___schedule+0x10/0x10 [ 660.721735][ C0] preempt_schedule_irq+0x51/0x90 [ 660.726791][ C0] irqentry_exit+0x36/0x90 [ 660.731237][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 660.736727][ C0] RIP: 0010:preempt_count_add+0x1a/0x150 [ 660.742382][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c0 20 c1 f0 94 55 48 ba 00 00 00 00 00 fc ff df 48 89 c1 53 <83> e0 07 89 fb 48 c1 e9 03 83 c0 03 65 01 3d 8b 31 a9 7e 0f b6 14 [ 660.762019][ C0] RSP: 0000:ffffc900032ff6f8 EFLAGS: 00000246 [ 660.768109][ C0] RAX: ffffffff94f0c120 RBX: 1ffff9200065fee2 RCX: ffffffff94f0c120 [ 660.776101][ C0] RDX: dffffc0000000000 RSI: ffffffff88f8ccff RDI: 0000000000000001 [ 660.784088][ C0] RBP: ffff888028a40000 R08: 0000000000000001 R09: 0000000000000000 [ 660.792076][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028a40440 [ 660.800066][ C0] R13: ffff888028a40430 R14: 0000000000000000 R15: 0000000000000000 [ 660.808052][ C0] ? sk_filter_trim_cap+0x45f/0xac0 [ 660.813295][ C0] migrate_enable+0xce/0x260 [ 660.817910][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 660.823133][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 660.828369][ C0] sk_filter_trim_cap+0x464/0xac0 [ 660.833431][ C0] ? __asan_memcpy+0x3c/0x60 [ 660.838043][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 660.843707][ C0] ? __skb_clone+0x570/0x760 [ 660.848319][ C0] netlink_broadcast_filtered+0x635/0xf10 [ 660.854071][ C0] ? selinux_netlink_send+0x2ba/0x570 [ 660.859474][ C0] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 660.865741][ C0] ? __pfx_selinux_netlink_send+0x10/0x10 [ 660.871494][ C0] netlink_sendmsg+0xa06/0xd70 [ 660.876294][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.881608][ C0] ? ____sys_sendmsg+0x7fe/0xc90 [ 660.886571][ C0] ? ____sys_sendmsg+0x606/0xc90 [ 660.891534][ C0] ____sys_sendmsg+0xab5/0xc90 [ 660.896330][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 660.901811][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.907118][ C0] ? __schedule+0xe3f/0x5490 [ 660.911739][ C0] ___sys_sendmsg+0x135/0x1e0 [ 660.916438][ C0] ? __pfx___schedule+0x10/0x10 [ 660.921309][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.926529][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 660.931756][ C0] ? __fget_light+0x173/0x210 [ 660.936470][ C0] __sys_sendmsg+0x117/0x1f0 [ 660.941085][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 660.946217][ C0] ? __rseq_handle_notify_resume+0x663/0x1090 [ 660.952325][ C0] do_syscall_64+0xcd/0x250 [ 660.956859][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.962785][ C0] RIP: 0033:0x7f1cc036da4b [ 660.967222][ C0] RSP: 002b:00007ffe1d589e68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.975658][ C0] RAX: ffffffffffffffda RBX: 00005594b192ee20 RCX: 00007f1cc036da4b [ 660.983646][ C0] RDX: 0000000000000000 RSI: 00007ffe1d589e78 RDI: 000000000000000c [ 660.991634][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 660.999618][ C0] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 661.007608][ C0] R13: 0000000000000170 R14: 0000000000000000 R15: 00005594b19102c0 [ 661.015599][ C0] [ 661.018637][ C0] rcu: rcu_preempt kthread starved for 10524 jiffies! g44501 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 661.029857][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 661.039838][ C0] rcu: RCU grace-period kthread stack dump: [ 661.045730][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 661.057491][ C0] Call Trace: [ 661.060777][ C0] [ 661.063719][ C0] __schedule+0xe37/0x5490 [ 661.068164][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 661.073389][ C0] ? __pfx___schedule+0x10/0x10 [ 661.078262][ C0] ? schedule+0x298/0x350 [ 661.082614][ C0] ? __pfx_lock_release+0x10/0x10 [ 661.087662][ C0] ? __pfx___mod_timer+0x10/0x10 [ 661.092631][ C0] ? lock_acquire+0x1b1/0x560 [ 661.097332][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 661.102815][ C0] schedule+0xe7/0x350 [ 661.106904][ C0] schedule_timeout+0x136/0x2a0 [ 661.111773][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 661.117164][ C0] ? __pfx_process_timeout+0x10/0x10 [ 661.122465][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 661.128302][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 661.133788][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 661.138577][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 661.143882][ C0] ? rcu_gp_init+0xc82/0x1630 [ 661.148575][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 661.153796][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 661.159628][ C0] rcu_gp_kthread+0x271/0x380 [ 661.164327][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 661.169563][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.174793][ C0] ? __kthread_parkme+0x148/0x220 [ 661.179856][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 661.185089][ C0] kthread+0x2c1/0x3a0 [ 661.189183][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.194405][ C0] ? __pfx_kthread+0x10/0x10 [ 661.199018][ C0] ret_from_fork+0x45/0x80 [ 661.203468][ C0] ? __pfx_kthread+0x10/0x10 [ 661.208069][ C0] ret_from_fork_asm+0x1a/0x30 [ 661.212868][ C0] [ 661.215898][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 661.222240][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc3-syzkaller #0 [ 661.230848][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 661.240920][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 661.246235][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 18 a7 f1 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d c8 c3 a9 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 661.265873][ C0] RSP: 0018:ffffffff8da07d70 EFLAGS: 00000246 [ 661.271963][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b121709 [ 661.279952][ C0] RDX: 0000000000000001 RSI: ffff888019e9c800 RDI: ffff888019e9c864 [ 661.287941][ C0] RBP: ffff888019e9c864 R08: 0000000000000001 R09: ffffed1017246fd9 [ 661.295929][ C0] R10: ffff8880b9237ecb R11: 0000000000000000 R12: ffff88801bfb1800 [ 661.303911][ C0] R13: ffffffff8e951c20 R14: 0000000000000000 R15: 0000000000000000 [ 661.311896][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 661.320845][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.327535][ C0] CR2: 0000001b321e3ff8 CR3: 000000002c758000 CR4: 00000000003506f0 [ 661.335526][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 661.343595][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 661.351579][ C0] Call Trace: [ 661.354866][ C0] [ 661.357722][ C0] ? show_regs+0x8c/0xa0 [ 661.362018][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 661.368376][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 661.373604][ C0] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 661.379094][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 661.384750][ C0] ? __asan_memcpy+0x3c/0x60 [ 661.389355][ C0] ? __asan_memcpy+0x3c/0x60 [ 661.393963][ C0] ? update_process_times+0x175/0x220 [ 661.399359][ C0] ? __pfx_update_process_times+0x10/0x10 [ 661.405103][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 661.410592][ C0] ? update_wall_time+0x1c/0x40 [ 661.415462][ C0] ? tick_nohz_handler+0x376/0x530 [ 661.420604][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 661.426095][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 661.431499][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 661.437246][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 661.443339][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 661.448480][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 661.454739][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 661.460583][ C0] [ 661.463524][ C0] [ 661.466466][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.472652][ C0] ? ct_kernel_exit+0x139/0x190 [ 661.477529][ C0] ? acpi_safe_halt+0x1a/0x20 [ 661.482247][ C0] acpi_idle_enter+0xc5/0x160 [ 661.486963][ C0] cpuidle_enter_state+0x85/0x500 [ 661.492017][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 661.497867][ C0] cpuidle_enter+0x4e/0xa0 [ 661.502314][ C0] do_idle+0x313/0x3f0 [ 661.506413][ C0] ? __pfx_do_idle+0x10/0x10 [ 661.511031][ C0] cpu_startup_entry+0x4f/0x60 [ 661.515824][ C0] rest_init+0x16b/0x2b0 [ 661.520098][ C0] ? acpi_subsystem_init+0x133/0x180 [ 661.525406][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 661.530972][ C0] start_kernel+0x3df/0x4c0 [ 661.535498][ C0] x86_64_start_reservations+0x18/0x30 [ 661.540976][ C0] x86_64_start_kernel+0xb2/0xc0 [ 661.545937][ C0] common_startup_64+0x13e/0x148 [ 661.550898][ C0] [ 663.655666][ T5223] Bluetooth: hci2: command 0x0406 tx timeout