last executing test programs: 7m18.406178106s ago: executing program 1 (id=3289): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 7m17.601450195s ago: executing program 1 (id=3291): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x3ffffddc, &(0x7f0000000180), 0x9, 0x5000004}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x62, &(0x7f0000000000)='/proc#N\x1a\xd4\xd8\x80\x00v4\x00\x00s/\x92ync_\x02le\xf44.\xa2\x88'}, 0x30) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) 7m17.561246787s ago: executing program 3 (id=3292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) 7m15.226914103s ago: executing program 3 (id=3295): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) setuid(0xee01) 7m14.123187142s ago: executing program 3 (id=3297): socket(0x10, 0x3, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x31, 0x36, 0x35, 0x66, 0x63, 0x66, 0x32, 0x31, 0x64, 0x36, 0x35, 0x0, 0x33, 0x63, 0x54, 0x65]}, &(0x7f00000001c0)={0x0, "1f0cf98dd570efe050958fcfda461a3bf431c7a2eb3f0263d6f561d739bf949851d90a931caa7668d33c868e445dd69c8424e0fe9d9f25ce2b8cb40d60392609", 0x21}, 0x48, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000340), &(0x7f0000000500)) keyctl$chown(0x4, r0, r1, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000040), 0x0) r5 = syz_open_dev$mouse(0x0, 0x0, 0x2042) write$qrtrtun(r5, &(0x7f0000000380)="3af94be9", 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@gettfilter={0x54, 0x2e, 0x600, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6, 0xb}, {0x0, 0xffff}, {0x6, 0x7}}, [{0x8, 0xb, 0x10}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x80000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000000)="dd6b7d0551e51b4240b9b113095ff696794006b305a637e6cc44ca448316a9e8d4f83e666acdb7b95e6cd7f2cea28cc1794a75eafdb2a73c", &(0x7f00000002c0)=""/134, &(0x7f0000000380)="52c30e592a5e72aad7e5244f72010b678324fe37bee1a07ec80986f34b1521f65048655b4942246f9fef8be1509dd950dc8f282d57a619694f31cba413c2f6589b79ea14ca73c84fda6c5eafbd68df244d2fc154e5ae0545a13582f93bc39acd3e0a0ae3c1072266ea7aa984ebb1dc562d931eaef58312fbea135953c964cee910966a5eb335a38f431566fe63ea1215aad4f9c184a47a6d91095d83b5ece0edde18ecdad303e5705d3fc7daa5a7e184c85278ae093e98e186c3c65a9a66553cb9d110422eadbae47e03", &(0x7f0000000480)="f3ebcfc40fee3e400c687427afbfa10c71f8789cf26a7ccc43e17eb80544f6e8c47e984533dfd3ce609f0991ee048a1f2038be4cc15f39120dd755ac2edee41f1b876628bcbfbe51a4511dc2740e6e70ae8390dcfd71dec8b4187caa12f46bef2faa69043297ff0998721c2d5a5f95f218f11be4f789e0f0e42b3ccf78b097d7fc678e156b344f528055f8f5d4bb007638f14ffaa3588595d9cb0d04d4d2cfbc5af9bbc600551d4a068476", 0x8, r5, 0x4}, 0x38) fsopen(&(0x7f0000000100)='jffs2\x00', 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0xc048aeca, &(0x7f0000000080)) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r11, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 7m14.002114997s ago: executing program 4 (id=3298): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1}) 7m13.996439724s ago: executing program 1 (id=3299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x7c3ec3) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) r8 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz1\x00', 0xd3}, 0x1, 0x200, 0x2, r8, 0x0, 0x3, 'syz1\x00', 0x0}) readv(r7, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) 7m13.852457551s ago: executing program 4 (id=3300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000002240)=""/13, 0xd}], 0x1, 0x3c, 0x3) 7m10.982232962s ago: executing program 4 (id=3302): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m10.021762783s ago: executing program 1 (id=3303): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0]) chdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) creat(&(0x7f0000000080)='./file0\x00', 0xa) capset(0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=rdma,port=']) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x2, 0x296a, 0xf7f, 0x3, 0x0, [{0x1, 0x27, 0x81, '\x00', 0x7f}, {0xfd, 0xc, 0x81, '\x00', 0xf1}, {0xe9, 0x4, 0x8, '\x00', 0x4}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0xc, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x0, '\x00', 0x3}, {0x1, 0x3, 0x42, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0xc, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0xff, '\x00', 0x8}, {0x6, 0x8, 0x4, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x2, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x1, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xf, '\x00', 0x4}, {0x7, 0x3e, 0x9, '\x00', 0x10}, {0x8, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0x8, 0x55, 0x9, 0xf7, 0x7}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 7m8.769482527s ago: executing program 1 (id=3304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '!{(&K#\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040050}, 0x10) 7m8.70370199s ago: executing program 4 (id=3305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000840)="a57c1c05a4c185589ce1e3548482e62e423ae1e369c6b7f82e6f077e29eb8505826798a301ddb0873231e87db3a05367a3fa3887be522aedc2f1e8a66f88b80897b1360c3dc991e6447f350cb8dc43916f4a14d4b7fbabb8e62825c97675a9ac8fbc3367ff64ed6e2f20ad4f8d82c1d4530480cea2e9bb32a53f4b99eba7fe392f39e7ea0c307849343f91b5c05753eeb9b13c66dd281fc98fc5454e6ffa4b92226012c189a1140faba94a7b16c06850caf143152b9998158693c8e3470ce8b59a41d5610f1781bdefaa5d31a76ad6bc79f8bb9ffea3e2403811a2a59ee76bdf99c05c9c4b06ff3cd722d52396a718969a2578267ecbd85f90e9c4f24020234c5526fd32e66d4eaff602d85b7b7061ebce29e1e7494dae4d06dc425ee4c436edc380feec435a10da6f31e5d2d7a8efb0c00689965de52ac6b6bf1ada84e31a0963540295e4cd8bc3bba3819e4a73c17eba25d8b2386fc8195e83554b88661a96387b12e2e45122b9196add513963867416f4c7017051ae3c6c54130169dafa2f56dbddf33cf2953bae398359e4d8a2759778f8e51a61d1497ead6753493604d2862dd92d216103cc9ab147b1d35d184394fd79336b00abd16642a993438f0cdfc0d2195ded230f3b8547140e4825f6a9bed88937bdc4e92c8541d8b451c7ab508ab6c637b6fecb7dd2a179385e1df721df83ee21e5a256bf7fe9dd6e241a059aac56777cac8ccaf4a35bfa35e77982d213a20e5e544565d7f1ef6b54e5c0bf37b55622427fe3f4384c2b0714d941ce3f6cf9586898077359fb669ec69302e31cdf4ab113df1142d64680c2355fa073a328055b25c4902f9ad75a0621854cc467fbd72a7d74bec865fa41d8dace6e945cd01a5e7ba89b49512821e8063dbe6808dbae97c8de21d9e16e54d2c7a1bd429e2a8e639c4566df572c97e0f3e19ce13927ce8536afac4715c8b4b91f2f8cc7741d9a029128cd19eaf5bf7abd267c0aa800c7657898596fdaf213923716056360e440a0bc46a855b47ad1e0ffb6465f26e3a5c39667350d1e6c17f6990ba5b66401c61ca45fd6c75b4218efe932aaaf1982f14478c2fab10268ca65f42e8d6bcf8cef6ba31544a150886b3f4241cf2e1c13e9041d75d50355824f2012bfbc7c393071f520e661232c4aefd0a6fb452168ffc895a36f98434a7bd08a356eac987e42587130deb771d2c00b73025683edc9c925384292123f269cafb68291e7379291dcbe73cb220bce413da0bc9e045b58ddce07a1d6b976b9820ef4c0ae2c6f290f6545f5ae09e78fa1882f56aabcc6a6f22d24476ad12a9bfbad352a66a31b9c5f0080bea577c5a6991eff4286492200f02f7ce7e24b863254d311b421adf0209cc8c9d5ca4695db2f0615fb121034b93bc133ddafdce404eefd2ac4d859bcf69fdb8addf7387e8bccd36a3fd010773c92dbf43d0563a3620c89c9c2474bee4317fb25b0786ecc1744125ea9833a6c2ba2a54c59c6258027989c7a87683879edf59c20c2e25f0289965a0372da6a0c06eff6a8ac1eb2def6cdc3272fc3f26600ebeeea7b46c657c233593fae4f734645d5bad41dbca9ac142dba405b7cd855016bd8838c88f8ea311508039c42501fede9b31f3d56bf5b58f949517afd6d43c85235379fa94912722021d487c292484e74c0782406f0e02e0f63bd8ff71e60eeab4d52e8d8996b01f602cebb772a0a1673897ef57c6ddcc0e771f8cdb11ba6f31b4faa25832c9dae543dd94e728ab6cccf3491a8f6a328043001ceb7b855ae5f489f5e78448f34109bcef00c61b993e4c424113a893f4e473f85f39acc988594d7946c1d0a1e4e98218747f03f51f3ef0b7c74be0ae748be2bd64a74aee79b506b426293011cd9fbf8789c30cec85e5c92b83387f8ef7e6ea18df40f1790ce0ecd0b9b0882e60d210fbcad5ada720ce9f23066ad75f7c8c08c984d6d3bbb43d235405de9625efa347f6dfd822babf568ea70f5f9628b4d6d81351ac358bf8a4f5edfd3059f7aeca548c9ef4cbf1fd54390e7d9a638ec938d43aa5642335b118ba6e5f057dc77c2a03983661412e4e72913e390e5fb18bf08b1ad8460a2afbd9bf231fc4918873b1efd872d97d10d7483c222f080defae620bc48fd887ae1b3c531142a3fb1de33c98c5f5779737efba18c6ce6c94a6e2a2fbed1f956af7c55f2e545e2b7b14ee5e7653fc87ae4ee9876c3547b4f699151a26b333b699d307290b7d4523e05a0c377c541d25c84e3a0d6129e201170e620c7f8233c75898bbffe371d962bc0767b4a420ccdc4208fcd61eac249a06c25481aabd97ff4a5c9b624e417e1df1b420f0dd2ea41d0a8a8e6e5788199240ee38592d1f9f565baa498ea050a32d7596515e4c885a8f42d65c67945068bf2b77e71b9696ff9b33f261fc0317b631f6d90afc7e78259a6b67aa0e6457a03ac00888bf05b7adee2ec67e55301977018dde649d511b549c7b0c19ca64f116f530973e035674f012b0415d5c6b8fac29ac9f06c064191d0c01ac3302785aa393030910d432d4aee4e97d46da7efdf55be63b67021318d8c7181ba92c97b633b5f258e0ecd585e0c79968ae2b4c56d79fe7c063fa6e04581aef354fd42c5487d49e22da4f37993f88bb23342e975711764a1a4f7bc96e92f9e2f1d70832349581f6a0ebebbd036a6995ca523a4f557e053bfbabd6aa1f3c9bf4698b8c1a059d6ebc763013be31c5ff0b843f85228db159b40e8de7e0a6d2ac32e19002aa338912ac7d8d3b672bc94c085fc749484e10e0dd8c5a0817617c9d4264c0f12f19728d91735503c6034f09461f94dd526a264660afabc0b5e58fc098de2d0d0c3f790d3a32a53cb0b2b78a2863b10fa8522170fcef51928ff579cc14ad95866ae92a0fa865d7eb0b197d3041b2b4ed60d760116a8f33147c6935e00337efd808a7fc451d622bf21ceb6ed2e203e5685fb78ac53e761ac0c5586f5de860a0da4d6b5ee57f86326fceedecdfc90a7192f57ef882e2815f73052d00c6c0aadd4ce555c3a61d2cbd3b58d9040df1a850f55c906000a6e50f523fa99b08b88f51be7f871a64ae4115d299edd5c67f0b8296f96f398db8b8adbc67cb679e4d3581a0bf048ed858161b0d7a147e3b44fed173848396352a1432215c23f80b54f525d5e56ce817a3321df4b5af60b6f9ddc70f42ad277431b27432227a205993d48dfc657c0c67349908c8d0553beb6ad25ccd5daf6ceea38b90f1b50b320a5084cb456011114ce8d40ae8298f80adce7699989e111b20d8b362565320a3e897fbc1294511122019e34e48dc2a4754b6819d1ff18fb97a13720f8d0d6177e9eefbde5a5966accb6c7c796145c57b1f9f35bd0c69e9950b8486569688dbe9fe8bfc0ce9fd99020b8c03558247a411fa4407754c4aeaa1a9d1842ec05431902c19aac4e8ab8056525987d1e4e81071246166aa9e1557270235024b73d6e1f8c50bcedfbeeb8133c7a082f7d545974412b171541907c08ac8e2a791d47c0d1e512d1bf713a81a059ce605ffef34c69d9dd5b73f753b537214135f18c813f24b55207559e114d00bd3ea71c62273f8692bddd359a08a16d5c075b280e97fb3017ecd0ae506f0e6c2096c20c7081d7e574a5a27ce03937101fed942ec1259962cc3128f67c8b2109ebc943db73859a239e9f83cc923837b5772dfc5b4042e5bead032d38e995f7a8cf3bcc8aeb03fc4eba05d900b86bc7ae7a9aabe0ef956bf818fbd24cc17e593f94d616c7151aff61c3bb140e97dc16daa6c9abf27d1fb7d94153223ef8df4372fbf1c0d763babc31482300f031490365584c86458a73d476e59951230f809743c969867721a51c3c1c1cf7d61c52de40426590ff5fd02566e14bd9ece497ecb66a7f5afe2eaad800b1ff97e1153b4181aac81f5683f98cfcf561d2765af0c45c810652921a2a5f9c8ca60b31c43504e5db49c882e3deddb96a6616f7418a518ff3de680cffb0dedee566d9e7e799a972bec2d9e52133c1589ac3f700da3707b98b520e73791b1ba5d16a0e98eaa65d994c06f086fe9a279fbcdbe86393e9f9fe29c1bd88e84695a4755b28fa0ec48bc69307f4dca63cb71cf4c2528e56b97cdc7d07db5a62888e76d4ff656cd6a2900b4d1f0d3b2c48243eeb427726a2e8ed38dc45fe8f7f3fc32d25a96df43e10dada133311b8a73ad23acf38e0e595c8b4cf1b1f141c5ae6ca8570d8f421eaae19e7fc12cef0dfaf64bb24dcdcc675f6e3fef8029be924da11450a21c22db09342075382c1460372c4dac24bace66ccd40a6a743453da505009f430bcc7c58af62347fd22b09d0894aebec489306207c494160e37846d73c531ee5827c5888bd93fd1d1d578554bf82c3f1b6254a22693902411e21d8d86e9c9a36f536ef53906f29fac0449bf5b940d1f7d9bfada938a61bd7f32352ad3d21ba5c9911826b3556560585e9cc1fe476ac90450a79691c30ac5c5513645d7d212bc1973e33c78dca9bc911359c7ffcea5aa8fcf6e1f7f8ac7bd491fa80c0c76bc3de6f0e095fda9e6466d8a03ed165fe713052e2578a35b9aa15e0bdfdbba3898d3fa93899505d762e6ac7ff04b1c6dee3814225b6a044eeadbe12d9e40bdf10277639ea74a28bd18ac7a3f51808dcb452992d60ba0df4053ef814592501c0a30cfec23bde2f6f3399f32d89d0b1797ce538952fdcfceff32c9d064a4cafecc56607e31eb058febc8ba6f1e3d816fda3346abe6f60ef7474fd7d771b86302cc033c388983a8563ebe4ca6075a5d1656a92fc086c91df17ecf0304c535fc55455cc77020a84e2ae1e8164a07606318bf68b207391530dbcc449346e91e97cfec35b126a2cf212138fee6e353a35981fd6bbeeb997196acf4755eed884afb89aa1bbc5b695e0875491f882c518f81be866279fc6d2a2f359d8c82624618984670973cd594df01b16fb4cb10abc643972c07d4f91378f53cd3af3364521628c3f3cb3e2e7aefb59304f3ccdcb4e062d301efc6aee608d5c8fc4adcfc5337458cc09d9fc06229ecae8ce19710acc0160d4fa7344dfa8d1a6e43e4fb80749e3b67cffecbe2db6198a16d6ef3e6cf729fb14a8ea42e4a994a63bfcb58e42db08b32742ad562ceb20f4327cc87f3fbe1ff8f407827f6f6e0408c60a9228109e1aaad205ae9dc885c440414c6cc25b5623e80f3f41140a082a012bf07e65dce64d4385a9dc0e9ccb1910a0bae2678cf3e6a8fec1b41238b54f5b4c15d00d900e13a334b90cb025a8eaa9d9f8411532737a69f86b999484633e192d7068eca618c6363ca2c3c1b1483ed749afdd4d0ff0816dfb149ab8d7d2b70c4bc258a1c56e1ae25a9e81148ec4ff1d1d6804056ce2a15f769ae5afd9c8a5f305ac24cdc74c0ecd98f4fc6b79f7bf67fbf32b866f0405d9563d3a2cde5dacd48492e3fa2f0888a5e9613a1c7d78f92f1d13a916b80bfba9955f812ee3e3575e79c49402185002090c3c1e242d584c2077c5c459835ae3e4677adbdbb7e7f914f97075dcd965c0df9c010545ba4d9e733b5ffdbfb1e04f9426b83d43cca482b3346ee9720da80610ae75462532bb6128beb7977049b5fc4ae6ba149a7dfdba8e859d375a821224126932853daa733bb34631e0308335e0790ec7b5151cb7880295ca298e699139cebec4e39b9e0846ed37afd40962ad49512dc8c236520555fb9c93e44bdff96d7f31562604e5cae5ca9b3a308ddcfb0739b8168c3baba72fcf647257dc8a1c9b3c01315f9b44b950fa84fe2fe9e6c067f634c093c23e1bea193fc31a4fe8f8886ce2c90b9479ce79c2cfd043eeb69342fb6567b1cc540ccbc6691149ee371b983be6484268ddde3d88adb5915f501f7d322708a60c84bbb4dbe425948a8cf8b3b0ee4176e2fd55b2e1e213e280a8dbc595da0f46e4ed8cf483b28a1805099496cb9412776afae62f988923ac566936a41ab898b82acfc6619c257345d94b5168238d941040869df1ec0a4d1d7718a10b1819ebb1f4abae7c01bdd959f0ce9ddfb27ebd647e9ae0f7c94e018d84e48c7a480d00d9eda4c90971ddb614b1efb0f0cffb09d65e016b16f6b67efb713fc5a16b41e5695fba352531e06b48c09cf09f3bf3c5c6b2e3965009c7a5888950048593a89ac6e4ff83d37e6aedead501acf7a498f781450a7cf234c91d112a40696684807c82e26731dbc5842772095dd0759d99e77b3f91542ae92f6d16b6d0d97a0ed6cbf81b3183d24334d18359ac5fec162623731f044422b0cf10ac048e91d10aed286e553fa92a3673c60d11883181aef7152cc35de6bb11965ba1d010053d2c2b15415a4e5244a85d1d26c5a66c40b057d7bce5821be6d962eaccc9342f35cf9e6870c8287fb1ea5d8029f7dcd981a71a1f316c424a22b860bb990ad11e31056bbb0130231d932c3738749a2deb9c28be54260ba805f2c72974265d66ecfbd7890fa3535bbcfa9b94eed87d8363d80b9ec72313d3f5e86c63c09ccbf67c69ae03a9dae2696b98e6d3f133f11b89d244588b3664ec45710a2d3ff64c824bfd246c5b2ed44a60788ec8ad68f023ade997daa78167ad4cfb77ffb5b54e04640a2eb3262227e6c1238e5b8649a0d26c157b4036673dd5827d564163ba691a135620d7bae6b13aef5d6274e96094fd17feb4d4f8bde724b86cfa06b7b4c3a5cb2ce616a8e180d028ac2422e04ad9eca94124746d7e1e398bdaf15eef7c76e4249e68b8fde340a037f7cbfff77559c1e7df2311144a6d1dda6094fe3f00d2d2a16e5bb660041ef836cdd54378c0a39e67eac618e226fc1652b61c50e48eded1d10555c0777ef5d20aa2183a6f4e72aece10886c9a502af14ca905e8b165f11f8f7cf2f74fbbcfc24ff7a645bcb06b69d52fe76b672875c36135e7e86075187e95d2e0443178da2ef6b74ec041f0e6fd731af92e42b9304060572e0dc31ea8b6c5192b7d43073b9dd27edbe34876513ea4a0fef37ad906be37caeb33e4109aa45800bd15061a66c0a800e8442b39bc1511b8ee185900f12e2d23267f8513a0fd639b7f3156db2418007ef12279c011941b68c6ce91e773d5fa11db9139961bb266b717ef6c88b0a10cce0fc2e14928d6d03bc58c2c1ce884c3e8c6dbabfb04ea92f1cd4c7f6a8a174811d35b0b51890453506570e3246104b4486330e449d1a8dc9415db593d754e5bfb133a76a9344a11815c2c7d5c0111b8e40503073882a1e49eaef1dc6278a9a237078512a941caa037961128bcfe19e5075761dfc6818a9ada9aa36d974b93578d6d1f5cfaa3031bbd90346a3d21e020bde0c3e79f56d2f84ba408d29514ed3afceb1ce541a20b8ed0b7f2a057da31853fe19b80136ccea852a3a8ce5d4272561d9edc67d52b23769c58484c6a07ab31b22d283a78bc0813362449462d4b52a6bbecd4e876374de7fb7627b2be887114777da6d7c8c5769f491cecf0b9ce34f8896d62dbd96987c7e2f74d56a95e321f6210737d4b633c2cf1128072de57d7e2255cb03b3ff81be947c5c609678e438342178b10cff655313a660d5263f48ab1d96b437bbd357ae90108825a777701294c5a03b6ed8e59e97a3a5a10befd380884e4fc7860f9698008afc33b4a80530937354685e57be339fbeef71546b534e7ba4ad0228265e97461f37dc969ae9d4973dd52ad3acc7409707e07b2600f2c8339f84f11594d25e280b73e59fc8761973fe59d81d660318880c707ae701a2a282b859e4ceb7c42fd8fbe0ad04420a4a83d05ff527f54c0f556e18ac12799fd6280736f1820752f230c646603776daba9d4c8b0f2912cfc671279ba2eee5b5befef5bc61d290769169d3d97c5f67705ffe4bd5272757dc18784f8fd67bd6a063208a63bad3a6074f41b0a6b80640c84fa08a5e2c4dc3d5cb768781ca12e7f8ec17464914b226311bef708f8f5c538ef9c8d6ba4da966f9c3201f0750b0a1883d0390f3c4cdfc35f95ae066776f843c121cf608ff87c4b8c5b4d542e2dc661c864dd9340970fe9cf339f6cd11b764b697c4beb2e1af32a427d893d4cba3eb809995dad54fce285ddf6669dfb64b471c811893c008793fa32c3917194a0d1a529989ec5f746c3a101691f91efc3ac890031808d6465ce75171d97332ba21bd77732155d62faf5836f7e868b4bc8e308b9bb42435a0e6ff36d7ac71536fc1864a8a894f1aef1959dbacc1f051a12091fe09ad18bdbda8af7afbcb9460cf40869ce239ec024289d99f45de0cd44686e689cb96030e1b4694374ab19655099cbb6b340e7dc8e58fb2a25572e8f2bda2a9f94063f1b3c591198035bdae3f9b2c3fa317809ef467d431d367f294e471f6a3c38e6e0ac8d87af1cef50a72f7945cdcf25e77d7f9ccff19834d321135e95bb0ae40a7c69a30f8e641a099aadbe341000fc43e88e66ec506d1443860c97c3323fe156f36064418a3c6e5730c0adb962ed7a4df586b46081fd7b3a7254adde2025af61cde44bddc1a6dafd5716a73679e071ba7c50afe6cbb8e9791015fc9550b920eb0f680a9dc6698cdffc8e3eacd8108bf2b39255b35c94d5ee32056e328379fbe88d31738551c7253b9326b38a2d33470c206fd7c657ccf53f7ac3165115ac110c299d13a47c5e8f4b3e6b8e6b026ccb1c2ccf4902299866800f7f68c707775f880997cf1f85f79137d1e8be1936868f8361053866607baea19971a9f029c9fa15365b61bcfb04a5bb7727b60489706f408d1c59c8e824110a5a13afdd5251ca2e8c5f44780d4e4f9d4c3db58c154acb586e0db5c6739f22121293a2846dff9c8aae8c69fc5beca01534fb17a1dcb60f1b662fac4405e9d11c5e9737a5fd230e49ad857e30ab0e59c98ea081743fe8898df40e7c5ac790d97a6928311e81e25dbca6ab6aa2110d3673b65cd03b4d5a527d996364ec22a460f37cf8f2f21da121152eb41ae9ad8e58675fc7a640d7ad1199ad84773626533044cc83ea5f142d65c79984d5a63c6eea8d72a56532298cde26698b970828ebdc15d68a337274bc270e6086ddb9f597132e96457c802caf1ff379b78865bc40c3b03debfbc7391720600e3cdfc35e0f3767e7a666b159f8ec98d65a83ff56f0628589bc90256d252acf716fd0c20b5ccf2a70abac7b930592b10b1bb83fa232a67d2c7718e02ba9500b73ab66c65e77fbfdf60b45667f9f78a679f50aac1a926cc9647c1b81de149cf0c7f3b65c61f53a784bd7dd0574220a8cc94a5470c8e0e27bdded363d7e24f305f6981d0abfe29a7427285d421e7e25464b0d97ba102651bc7f4d1f027b2fb046defea5ef2890fb90b32ab255df98ee179be3149be729c8cabb0da5c665870fdf7ef86239dc0150875b74b9634085e7e118496ba05e26e8faa26f3bb6eb4a78ee8e73285d72b5cbd9a314360c8200aedba0b63a3a4ecb854534047800fa2797ac25ec3cda2ce27b57d7f07628fb812340d0e6033690534eb12bfdf87b5e6a041536e9ffff5de53ca1f0182892913842579ebb71fa5b71dddfaad873b3f3f28d9b49db3a3d36346a7766ea914e66bb2db211ac11c7410c18956f9ffb6f2f79b5af02dab106b1bf4ee3f11a81a4f24d542a0c21bb9e807300958cfbb52f573f5197eb0dc362be187d2eb992794b88497c6113ab5e91aae1f4ad07caaccb42bb08d3d2b40af2a7b03b86b897effcb88b4a17758a43aad8f9ad5a28ebcfaf78ede19c9c1a13c0aa40f2576b3d81e5afee1404edfa5229cab67bb9af8d923a469e418e8d83ec7cae959a9e5672aa88103ec81252f3604b01d2a848d1960754ada315dd8fba9fe8c8a632e50cda4450ae0cc144319c22632d5d2748dac14f8a556049bdc5a58d40a57ae0c157903021073d916ea0cdf127eb3afa132c248a9c4eb947a3de7c7466916ea0732427599f6313e60752d140f77efae5a76262b2cb66871b3ceef06f6fd67974ff3cd55154681b128b0a86d907f71445d79f8140eeca1d1dc699dce4c7fb509e704038774834e9f15cb2a44c66956496aaa6d172a5f5d955f00d7a71bd09a6dfeab84d302c6aba6281c8dd612485137a9f02d319ce10557b120a2ce6a49f1372f93205f044d28379abe7f18bdca18cbbcf44a17aff09a2f40a9c0b05110c652aa2e20ccfb1b96ce48c9b243efca3ff5219eb767426b8c184a610f7e289dbfd635c7284ece6ec9cbab0c1a45686119070edf2b2a0a9d7bdeb3f3c94d6ff647de482bc9425900f3d4262073045ec668d74823092471c6b802b20e2c92b64dcb6139e2862310c9cfd94e75918b6c23117b4d4779d2754c7fbbf0cf48fac6dd9f952bc98d98aae4c89c7ec22f227ffc3252b9ffd3450b0bf6c304974098637ec33b536f0c814d1270d74bb810ad63f38d82f4848b3ec6a3bc2843a38ede2839affdcfd953820d960228b669c1e41b3c9213b4e8ab4bc5fa51f6a645c7ae412e4d4f76cba84780c1b657f8734c6cb67189fa8fef4e7344784231a65b8aa5349f41fba7462beed0349860408b5fb9daff30012326c8ed8116cc140b741a517e6adde860ab1db722db103d8fa3153a2bb8388588b47423364d4ce3957cbd46500c603e7dc2a73985098ebc1d93a8fbea0b5df37940f4ecf6b2e51cbd0e5f3adf481012ccbf5db1b585a33927e1342142d3685fee5352fb7dfb0b1db23a2f8007f6864fcc1aebcedd660883ff1a917f2d9ca00412d7de763e00e96478d92b032cd7aa3e783302e5558ed50dbd11666317171e747e15b7a64638b6fb05238f57068aed94b5470a253507d21cad70c78e5607d7fa73f5f480386607c5e79570c8e182d3e217823db09247bb8ab74eb3682db2629ab97eefa734229392b1863188dc6b7b60fe9376b2f69307580cc0a0510e8ae8ac96146d564e2dc9e76118227b8a656d3ebca7f9dba42cccf430994a2ca9dfa287e89decaa983822c15e32717f842cef6818a91388606e74e79204956b1068c82d32c7ea573a2f28df65ee440a1ca05df8219a1deff88d713de66f423f050f3d31a18426a01d419dfdaa375f6ccf02b9ae1716a2115a37c6b629cc8f97f120fd951ee744f65c4934cc87c867f165657af83fec1a278731d51f84ebed89c995bee261715784ac1d81970bd9b42ca0e2885866f448c8700611f57096aefb7a27f62adc3f197f61a4b3d2ebe66b8e6be5ad03b3f18eaf650102869816b7f0c523e58de1fac738bc891ac011f7d716e6f0fdc5f9c5f02cc9b509df5ad223a58c69fe7ff589c24d66b2cb5afb8baec88aae88a875e9a67aec50567041330c4db82c79221757f3cfc60623633a08379b4ae71f194390d56d6c5e801b449aaf27f11e177f47671c67f0a2a02b432cb9c9fa52547f735ea6ca8bc28f695ac5a81f095cb1711efa879ef6c4a17ca1f0c0c0a9d2f7adecbf3b597b3d7f2da0bf618b14f78832529b39e86ea71b5c32d712dfa4616f7b57c620c9ffeb05525030b441fcb368f44924c900ea7c4e921dd416bcc1d9a88ba1cf331d0a5f56a9783ffaf6f0193276bbc9efb6b37b23c43f9026b6e20067b245b7fdf6e56a38b2fd7d65992b1bf9bfdb9277bca04e758b5fb319e4c86f525db0f4d02cb78196c7d1886afe3", 0x2000, &(0x7f0000007080)={&(0x7f00000000c0)={0x50, 0x0, 0xffffffffffffff14, {0x7, 0x2b, 0x4, 0x8000, 0x892f, 0x138, 0x10, 0x2, 0x0, 0x0, 0x80, 0x1}}, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x3ff, {0x80000000}}, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0x0, 0xf, {0x7}}, 0x0, &(0x7f0000000440)={0x60, 0xfffffffffffffffe, 0x2, {{0x7, 0x200, 0x7, 0xffffffff, 0xe036, 0x80000000, 0x80000001, 0x9}}}, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000daffffff0300000000000b00000000"], &(0x7f0000000540)={0x20, 0x0, 0x2, {0x0, 0x7}}, 0x0, 0x0, &(0x7f00000006c0)={0x30, 0x0, 0x7ff, [{0x2, 0x6, 0x4, 0x7, 'GPL\x00'}]}, 0x0, 0x0, &(0x7f0000006ec0)={0x20, 0x0, 0x1, {0x6, 0x4, 0x7, 0x9357fac}}, 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 7m6.959013269s ago: executing program 4 (id=3306): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) setuid(0xee01) 7m6.80716293s ago: executing program 3 (id=3307): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0]) chdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) creat(&(0x7f0000000080)='./file0\x00', 0xa) capset(0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=rdma,port=']) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000200)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x2, 0x296a, 0xf7f, 0x3, 0x0, [{0x1, 0x27, 0x81, '\x00', 0x7f}, {0xfd, 0xc, 0x81, '\x00', 0xf1}, {0xe9, 0x4, 0x8, '\x00', 0x4}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0xc, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x0, '\x00', 0x3}, {0x1, 0x3, 0x42, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0xc, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0xff, '\x00', 0x8}, {0x6, 0x8, 0x4, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x2, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x1, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xf, '\x00', 0x4}, {0x7, 0x3e, 0x9, '\x00', 0x10}, {0x8, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0x8, 0x55, 0x9, 0xf7, 0x7}}) 7m5.844387924s ago: executing program 1 (id=3308): socket(0x1d, 0x2, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x121100, 0x2, 0x20}, 0x18) fchmodat(r2, &(0x7f0000000180)='./file0\x00', 0x5e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r6 = dup(0xffffffffffffffff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, 0x0) close(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) 7m4.810864225s ago: executing program 3 (id=3310): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket(0x10, 0x3, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a40000000060a8bae00000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/528]) 7m3.523690092s ago: executing program 3 (id=3311): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r1, r1, 0x0, 0x200000) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x1020, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r5, @ANYRES16=r4, @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@md0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc00, 0x100) 6m59.251207789s ago: executing program 4 (id=3313): io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) 6m50.145880745s ago: executing program 32 (id=3308): socket(0x1d, 0x2, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x121100, 0x2, 0x20}, 0x18) fchmodat(r2, &(0x7f0000000180)='./file0\x00', 0x5e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r6 = dup(0xffffffffffffffff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, 0x0) close(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) 6m48.220915577s ago: executing program 33 (id=3311): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r1, r1, 0x0, 0x200000) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x1020, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r5, @ANYRES16=r4, @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@md0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc00, 0x100) 6m41.712746779s ago: executing program 34 (id=3313): io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) 2m49.437055s ago: executing program 0 (id=3874): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f00000004c0)=0x7, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 2m47.899506635s ago: executing program 0 (id=3877): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f00000004c0)=0x7, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000400)=0x1000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r5 = userfaultfd(0x801) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af04, &(0x7f0000000200)={0x1}) 2m46.116040498s ago: executing program 7 (id=3882): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) r4 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2m45.219430552s ago: executing program 7 (id=3883): socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) epoll_create(0x6) semtimedop(0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) 2m44.970008718s ago: executing program 0 (id=3884): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}}, 0x20}, 0x1, 0x0, 0x0, 0x24008044}, 0x4044814) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m43.75164505s ago: executing program 0 (id=3886): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECUREBITS(0x1c, 0x14) setuid(0xee01) 2m43.671114142s ago: executing program 7 (id=3888): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) 2m41.697832032s ago: executing program 7 (id=3893): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 2m37.690065913s ago: executing program 0 (id=3900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000840)="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", 0x2000, &(0x7f0000007080)={&(0x7f00000000c0)={0x50, 0x0, 0xffffffffffffff14, {0x7, 0x2b, 0x4, 0x8000, 0x892f, 0x138, 0x10, 0x2, 0x0, 0x0, 0x80, 0x1}}, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x3ff, {0x80000000}}, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0x0, 0xf, {0x7}}, 0x0, &(0x7f0000000440)={0x60, 0xfffffffffffffffe, 0x2, {{0x7, 0x200, 0x7, 0xffffffff, 0xe036, 0x80000000, 0x80000001, 0x9}}}, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000daffffff0300000000000b00000000"], &(0x7f0000000540)={0x20, 0x0, 0x2, {0x0, 0x7}}, 0x0, 0x0, &(0x7f00000006c0)={0x30, 0x0, 0x7ff, [{0x2, 0x6, 0x4, 0x7, 'GPL\x00'}]}, 0x0, 0x0, &(0x7f0000006ec0)={0x20, 0x0, 0x1, {0x6, 0x4, 0x7, 0x9357fac}}, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m37.660525474s ago: executing program 7 (id=3901): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}, 0x0, 0x0, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000880) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) 2m35.780487865s ago: executing program 0 (id=3903): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m35.747236702s ago: executing program 7 (id=3904): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m20.667968598s ago: executing program 35 (id=3903): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m20.611471484s ago: executing program 36 (id=3904): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 46.224328681s ago: executing program 2 (id=4171): r0 = socket(0x1d, 0x2, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x121100, 0x2, 0x20}, 0x18) fchmodat(r3, &(0x7f0000000180)='./file0\x00', 0x5e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) close(r5) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 43.121408674s ago: executing program 5 (id=4178): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) setuid(0xee01) 41.973695345s ago: executing program 5 (id=4180): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) 40.467632733s ago: executing program 5 (id=4181): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$inet(r3, 0x0, 0x0, 0x4000810, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 39.608204781s ago: executing program 2 (id=4183): add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) 35.305668879s ago: executing program 2 (id=4187): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d0006"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0xf, 0x9, "689459dca03a79f681"}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xc20, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1}, 0x0}) 32.795680495s ago: executing program 8 (id=4191): r0 = socket$inet6(0xa, 0x3, 0x6) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800f5ff}}], 0x62, 0x6000000000000000) 30.891795309s ago: executing program 2 (id=4194): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000840)="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", 0x2000, &(0x7f0000007080)={&(0x7f00000000c0)={0x50, 0x0, 0xffffffffffffff14, {0x7, 0x2b, 0x4, 0x8000, 0x892f, 0x138, 0x10, 0x2, 0x0, 0x0, 0x80, 0x1}}, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x3ff, {0x80000000}}, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0x0, 0xf, {0x7}}, 0x0, &(0x7f0000000440)={0x60, 0xfffffffffffffffe, 0x2, {{0x7, 0x200, 0x7, 0xffffffff, 0xe036, 0x80000000, 0x80000001, 0x9}}}, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000daffffff0300000000000b00000000"], &(0x7f0000000540)={0x20, 0x0, 0x2, {0x0, 0x7}}, 0x0, 0x0, &(0x7f00000006c0)={0x30, 0x0, 0x7ff, [{0x2, 0x6, 0x4, 0x7, 'GPL\x00'}]}, 0x0, 0x0, &(0x7f0000006ec0)={0x20, 0x0, 0x1, {0x6, 0x4, 0x7, 0x9357fac}}, 0x0}) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 30.89152419s ago: executing program 6 (id=4195): sysfs$2(0x2, 0x19f, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xfebd, 0x10, 0x3, 0x2, 0x0, r3}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200800400000000, 0x4, 0x344}, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 30.223256017s ago: executing program 5 (id=4196): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000900)={0x0, 0x8, 0x2, "2402"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 30.183752126s ago: executing program 6 (id=4197): mq_open(&(0x7f00000002c0)='*#&\x00', 0x40, 0x20, &(0x7f0000000300)={0x2, 0x5, 0xffffffffffffffff, 0xe}) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44024}], 0x1, 0x0) 29.875975306s ago: executing program 8 (id=4198): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0xfffffffd, 0x2, {0x1, 0x3, 0x8, 0x0, 0x8}, 0x3}) tkill(r0, 0x7) 29.354977829s ago: executing program 9 (id=4199): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 28.155561759s ago: executing program 9 (id=4200): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/4096, 0x1000, 0x201, 0x2c}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 28.061255088s ago: executing program 8 (id=4201): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000080)={0x0, r8, r7}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a40000000060a8bae00000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="1907000000000000030000000000000003000000f8ffffff09000000000000000a00000000000000807900000000000009000000000000000000000000000000000000000000000004200000000000000000000000000000ff0700000000000007000000000000000b00000000000000000000000000000000000000000000000b0600000000000000000000000000008300000000000000325e0a00000000000f0000000000000000000093f900000000000000000000000a00000000000000000000000000000085000000000000000400000000000000000000000000000000000000000000008c3100000000000000000000000000001000000020000000010000000000000006000000000000000000f3ff000000000000000000000000001800000000000000000000000000000900000000000000000000000000000007000000000000000000000000000000000000000000f10002000000000000000000000000000000010001000000000001000000000000000200000000000000000000000000000000000000000000008001000000000000000000000000000007000000000000000080000000000000ffffffffffffffff0000000000000000000000000000000080000000000000000000000000000000ffff00000000000080000000000000000b0000000000000000000000000000000000000000000000800800"/528]) 24.525535284s ago: executing program 5 (id=4202): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setuid(0xee01) 24.225766265s ago: executing program 6 (id=4203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 24.151917407s ago: executing program 9 (id=4204): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d0006090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0xf, 0x9, "689459dca03a79f681"}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xc20, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1}, 0x0}) 23.484598829s ago: executing program 5 (id=4205): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000f0601010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001806) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[], 0x20}}, 0x800) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23.378965985s ago: executing program 2 (id=4206): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 23.143544234s ago: executing program 8 (id=4207): sysfs$2(0x2, 0x19f, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xfebd, 0x10, 0x3, 0x2, 0x0, r3}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200800400000000, 0x4, 0x344}, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 22.834245308s ago: executing program 6 (id=4208): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x28, 0x2}, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0xfffffffa, [{0x3, 0x1, 0x8001}, {0x6, 0x3, 0x7}, {0xb, 0x3, 0x72f0}]}, @func_proto, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000000)=""/42, 0x74, 0x2a, 0x1, 0x6}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f00008a0000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f00006f1000/0x3000)=nil, &(0x7f00005da000/0x3000)=nil, &(0x7f0000b43000/0x4000)=nil, &(0x7f0000581000/0x2000)=nil, &(0x7f00001d1000/0x4000)=nil, &(0x7f00007e6000/0x3000)=nil, &(0x7f00006a0000/0x4000)=nil, &(0x7f00006bd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r6}, 0x68) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r9, r8, 0x7}, 0x10) socketpair(0x18, 0xa, 0x2, &(0x7f00000003c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 20.470723253s ago: executing program 8 (id=4209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fd, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/4096, 0x1000, 0x201, 0x2c}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20.289809615s ago: executing program 6 (id=4210): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) 20.159158264s ago: executing program 9 (id=4211): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x3ffffddc, &(0x7f0000000180), 0x9, 0x5000004}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x62, &(0x7f0000000000)='/proc#N\x1a\xd4\xd8\x80\x00v4\x00\x00s/\x92ync_\x02le\xf44.\xa2\x88'}, 0x30) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) 15.321012416s ago: executing program 8 (id=4212): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/igmp\x00') pread64(r1, &(0x7f00000001c0)=""/179, 0xfffffde2, 0x3c) 14.889175759s ago: executing program 9 (id=4213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) inotify_init() r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 12.243279534s ago: executing program 9 (id=4214): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x40, 0x0, 0xfffffd8b) 12.064437732s ago: executing program 6 (id=4215): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setuid(0xee01) 10.008730076s ago: executing program 2 (id=4216): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setuid(0xee01) 0s ago: executing program 37 (id=4205): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000f0601010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001806) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[], 0x20}}, 0x800) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) kernel console output (not intermixed with test programs): 034.595510][ T4452] erspan0 (unregistering): left promiscuous mode [ 1034.614697][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1034.640501][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.845142][T15359] Bluetooth: hci1: command tx timeout [ 1034.884558][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 1034.896700][ T10] usbtmc 3-1:16.0: can't read capabilities [ 1035.493678][T17801] usb usb8: usbfs: process 17801 (syz.4.3226) did not claim interface 0 before use [ 1035.569523][ T24] usb 3-1: USB disconnect, device number 31 [ 1035.581194][ T4452] bond0 (unregistering): Released all slaves [ 1035.686855][ T4452] tipc: Left network mode [ 1035.691677][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.707195][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.750339][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.761166][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.770128][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.779674][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.802084][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.852166][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.872756][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1035.898917][T17713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.924644][T17713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.021776][T17713] team0: Port device team_slave_0 added [ 1036.151298][T17713] team0: Port device team_slave_1 added [ 1036.622527][T17713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.648747][T17713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.678832][T17713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.995593][T15359] Bluetooth: hci1: command tx timeout [ 1037.003210][T17713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.015408][T17713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.041352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1037.121326][T17713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.554831][ T4452] batadv_slave_1: left promiscuous mode [ 1038.565519][ T4452] hsr_slave_0: left promiscuous mode [ 1038.596886][ T4452] hsr_slave_1: left promiscuous mode [ 1038.649188][ T4452] veth1_macvtap: left promiscuous mode [ 1038.672983][ T4452] veth0_macvtap: left promiscuous mode [ 1038.685735][ T4452] veth1_vlan: left promiscuous mode [ 1038.691521][ T4452] veth0_vlan: left promiscuous mode [ 1038.698114][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1038.813806][T17843] __nla_validate_parse: 46 callbacks suppressed [ 1038.813838][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1039.757258][T17844] usb usb8: usbfs: process 17844 (syz.1.3241) did not claim interface 0 before use [ 1039.883819][ T10] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1039.894277][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1039.907099][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.932200][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1039.941719][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.953899][ T10] usb 3-1: Product: syz [ 1039.958074][ T10] usb 3-1: Manufacturer: syz [ 1039.984993][ T10] usb 3-1: SerialNumber: syz [ 1040.008085][ T10] usb 3-1: config 0 descriptor?? [ 1040.087587][T17851] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1040.502509][ T10] usb 3-1: USB disconnect, device number 32 [ 1040.555680][T17597] udevd[17597]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.875780][T17713] hsr_slave_0: entered promiscuous mode [ 1042.882713][T17713] hsr_slave_1: entered promiscuous mode [ 1042.894191][T17713] debugfs: 'hsr0' already exists in 'hsr' [ 1042.899971][T17713] Cannot create hsr debugfs directory [ 1046.348303][ T4452] IPVS: stop unused estimator thread 0... [ 1046.836676][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1047.889675][T17713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1047.901440][T17713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1047.911985][T17713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1047.923221][T17713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1049.794582][T17713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.850226][ T30] audit: type=1400 audit(1757858923.234:1650): avc: denied { write } for pid=17939 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1050.033605][T17713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.055989][T17009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.063111][T17009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.077484][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.084602][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.303467][ T5917] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1050.431762][T17713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.456365][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1050.472656][ T5917] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1050.482821][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.494613][ T5917] usb 5-1: Product: syz [ 1050.504270][ T5917] usb 5-1: Manufacturer: syz [ 1050.520761][ T5917] usb 5-1: SerialNumber: syz [ 1050.532873][T17713] veth0_vlan: entered promiscuous mode [ 1050.540323][ T5917] usb 5-1: config 0 descriptor?? [ 1050.594587][T17713] veth1_vlan: entered promiscuous mode [ 1050.619923][ T5917] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1050.652955][T17713] veth0_macvtap: entered promiscuous mode [ 1050.701182][T17713] veth1_macvtap: entered promiscuous mode [ 1050.726474][T17685] udevd[17685]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.782073][T17713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.832922][T17713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.845126][ T992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.892440][ T992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.921094][ T30] audit: type=1400 audit(1757858924.844:1651): avc: denied { execmem } for pid=17959 comm="syz.0.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1050.943045][ T992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.297913][T17965] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1051.304453][T17965] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1051.312314][T17965] vhci_hcd vhci_hcd.0: Device attached [ 1051.719161][ T30] audit: type=1400 audit(1757858925.314:1652): avc: denied { create } for pid=17959 comm="syz.0.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1052.360949][ T30] audit: type=1400 audit(1757858925.324:1653): avc: denied { setopt } for pid=17959 comm="syz.0.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1052.381733][ T30] audit: type=1400 audit(1757858925.324:1654): avc: denied { write } for pid=17959 comm="syz.0.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1052.402483][ T30] audit: type=1400 audit(1757858925.324:1655): avc: denied { nlmsg_write } for pid=17959 comm="syz.0.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1052.435842][T17966] vhci_hcd: connection closed [ 1052.475849][ T8344] vhci_hcd: stop threads [ 1052.491399][ T8344] vhci_hcd: release socket [ 1052.497839][ T8344] vhci_hcd: disconnect device [ 1052.537654][ T1111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.143488][ T5917] usb 5-1: USB disconnect, device number 37 [ 1053.219809][ T8344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.238464][ T8344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.357368][ T8344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.366369][ T8344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.995366][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.721043][ T30] audit: type=1400 audit(1757858928.634:1656): avc: denied { mounton } for pid=17713 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1060.267221][ T5852] syz_tun (unregistering): left allmulticast mode [ 1060.279410][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1060.385351][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1060.421057][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1060.454012][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1060.461622][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1060.938753][ T5852] syz_tun (unregistering): left promiscuous mode [ 1061.421414][T18046] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1063.243963][ T5854] Bluetooth: hci2: command tx timeout [ 1063.880948][ T8344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.911470][T18053] usb usb8: usbfs: process 18053 (syz.3.3297) did not claim interface 0 before use [ 1065.929474][ T5854] Bluetooth: hci2: command tx timeout [ 1065.955959][ T8344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.062804][ T8344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.977702][ T5854] Bluetooth: hci2: command tx timeout [ 1068.220499][T18031] chnl_net:caif_netlink_parms(): no params data found [ 1069.832273][ T8344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.983400][ T3420] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1070.090406][ T5854] Bluetooth: hci2: command tx timeout [ 1070.493846][ T3420] usb 1-1: Using ep0 maxpacket: 8 [ 1070.517761][ T3420] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1070.576461][ T3420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.199241][ T3420] usb 1-1: Product: syz [ 1071.279961][ T3420] usb 1-1: Manufacturer: syz [ 1071.318217][ T3420] usb 1-1: SerialNumber: syz [ 1071.512151][ T3420] usb 1-1: config 0 descriptor?? [ 1071.849926][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.144002][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.463985][ T3420] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1072.833524][T18031] bridge_slave_0: entered allmulticast mode [ 1075.212771][T18031] bridge_slave_0: entered promiscuous mode [ 1075.715594][ T3420] usb write operation failed. (-71) [ 1075.915357][ T3420] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1075.983463][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.998905][ T3420] dvbdev: DVB: registering new adapter (Terratec H7) [ 1079.253879][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.261142][T18031] bridge_slave_1: entered allmulticast mode [ 1079.331628][ T3420] usb 1-1: media controller created [ 1079.559003][ T3420] usb read operation failed. (-71) [ 1079.575619][T18031] bridge_slave_1: entered promiscuous mode [ 1079.585963][ T3420] usb write operation failed. (-71) [ 1079.609430][ T3420] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1079.642218][ T3420] usb 1-1: USB disconnect, device number 18 [ 1079.867301][T18093] bridge_slave_0: left allmulticast mode [ 1079.872977][T18093] bridge_slave_0: left promiscuous mode [ 1079.878800][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.904841][T18093] bridge_slave_1: left allmulticast mode [ 1079.910550][T18093] bridge_slave_1: left promiscuous mode [ 1079.916369][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.947829][T18093] bond0: (slave bond_slave_0): Releasing backup interface [ 1080.005295][T18093] bond0: (slave bond_slave_1): Releasing backup interface [ 1090.280985][T15359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1090.293175][T15359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1090.310442][T15359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1090.746622][T15359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1090.758296][T15359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1091.799778][ C0] sched: DL replenish lagged too much [ 1093.523984][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1093.545776][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1093.557180][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1093.565542][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1093.584295][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1095.015117][T15359] Bluetooth: hci3: command tx timeout [ 1095.714362][ T5845] Bluetooth: hci6: command tx timeout [ 1097.823453][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 1097.843318][ T5845] Bluetooth: hci3: command tx timeout [ 1097.848792][ T5845] Bluetooth: hci6: command tx timeout [ 1098.373592][T18093] team0: Port device team_slave_0 removed [ 1099.747000][T18134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1099.756132][T18134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1099.772010][T18134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1099.893866][T18134] Bluetooth: hci6: command tx timeout [ 1099.899335][T18134] Bluetooth: hci3: command tx timeout [ 1099.944234][T18134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1099.951872][T18134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.963946][ T5854] Bluetooth: hci3: command tx timeout [ 1101.969499][ T5854] Bluetooth: hci6: command tx timeout [ 1102.055974][ T5854] Bluetooth: hci0: command tx timeout [ 1104.492572][ T5854] Bluetooth: hci0: command tx timeout [ 1106.523372][ T5854] Bluetooth: hci0: command tx timeout [ 1107.215224][T18093] team0: Port device team_slave_1 removed [ 1107.276188][T18093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.305288][T18093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.426031][T18093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1107.453345][T18093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.535221][ T5854] Bluetooth: hci0: command tx timeout [ 1112.898542][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.983910][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.154226][T18031] team0: Port device team_slave_0 added [ 1114.056491][ T8344] dvmrp8 (unregistering): left allmulticast mode [ 1114.861695][ T8344] bond0 (unregistering): Released all slaves [ 1114.879826][T18031] team0: Port device team_slave_1 added [ 1115.032151][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.039666][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.072254][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.100927][ T8344] tipc: Disabling bearer [ 1115.113881][ T8344] tipc: Left network mode [ 1115.130254][T18031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.151308][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.183784][T18031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.407271][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.048579][T18031] hsr_slave_0: entered promiscuous mode [ 1116.066092][T18031] hsr_slave_1: entered promiscuous mode [ 1116.086555][T18031] debugfs: 'hsr0' already exists in 'hsr' [ 1116.092300][T18031] Cannot create hsr debugfs directory [ 1117.099951][T18178] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1117.106465][T18178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1117.120076][T18178] vhci_hcd vhci_hcd.0: Device attached [ 1118.500259][T18179] vhci_hcd: connection closed [ 1118.550184][ T8344] batadv_slave_1: left promiscuous mode [ 1118.570378][ T49] vhci_hcd: stop threads [ 1118.595648][ T49] vhci_hcd: release socket [ 1118.633402][ T49] vhci_hcd: disconnect device [ 1118.713358][ T8344] hsr_slave_0: left promiscuous mode [ 1118.734186][ T8344] hsr_slave_1: left promiscuous mode [ 1119.019559][ T8344] veth1_macvtap: left promiscuous mode [ 1119.061519][ T8344] veth0_macvtap: left promiscuous mode [ 1119.351847][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1119.364483][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1119.374532][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1119.482152][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1119.495286][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.643406][ T5854] Bluetooth: hci1: command tx timeout [ 1123.723919][ T5854] Bluetooth: hci1: command tx timeout [ 1124.553086][T18119] chnl_net:caif_netlink_parms(): no params data found [ 1126.703355][ T5854] Bluetooth: hci1: command tx timeout [ 1127.390997][T18140] chnl_net:caif_netlink_parms(): no params data found [ 1127.471253][T18125] chnl_net:caif_netlink_parms(): no params data found [ 1127.940633][T18119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.952546][T18119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.962205][T18119] bridge_slave_0: entered allmulticast mode [ 1127.982497][T18119] bridge_slave_0: entered promiscuous mode [ 1128.123006][T18125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.133644][T18125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.141531][T18125] bridge_slave_0: entered allmulticast mode [ 1128.153855][T18125] bridge_slave_0: entered promiscuous mode [ 1128.161043][T18119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.175074][T18119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.182336][T18119] bridge_slave_1: entered allmulticast mode [ 1128.195773][T18119] bridge_slave_1: entered promiscuous mode [ 1128.258153][T18125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.278277][T18125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.288781][T18125] bridge_slave_1: entered allmulticast mode [ 1128.301955][T18125] bridge_slave_1: entered promiscuous mode [ 1128.337708][T18119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.350553][T18140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.361048][T18140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.371021][T18140] bridge_slave_0: entered allmulticast mode [ 1128.380510][T18140] bridge_slave_0: entered promiscuous mode [ 1128.426194][T18119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.453206][T18140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.464733][T18140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.471991][T18140] bridge_slave_1: entered allmulticast mode [ 1128.486752][T18140] bridge_slave_1: entered promiscuous mode [ 1128.647206][T18125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.689930][T18119] team0: Port device team_slave_0 added [ 1128.746218][T18140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.764533][ T5854] Bluetooth: hci1: command tx timeout [ 1129.392827][T18125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.475767][T18119] team0: Port device team_slave_1 added [ 1129.501639][T18140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.580898][ T8344] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.661741][T18140] team0: Port device team_slave_0 added [ 1129.668700][T18125] team0: Port device team_slave_0 added [ 1129.687156][T18119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.695101][T18119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.724492][T18119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.736688][T18140] team0: Port device team_slave_1 added [ 1129.758739][T18125] team0: Port device team_slave_1 added [ 1129.772808][T18119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.780374][T18119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.806596][T18119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.837126][ T8344] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.876057][T18140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.883021][T18140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.912060][T18140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.927045][T18140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.934124][T18140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.960299][T18140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.974051][T18190] chnl_net:caif_netlink_parms(): no params data found [ 1129.983987][T18125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.990951][T18125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.016947][T18125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.028782][T18125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.037036][T18125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.063150][T18125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.084723][ T8344] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.132751][T18119] hsr_slave_0: entered promiscuous mode [ 1130.139030][T18119] hsr_slave_1: entered promiscuous mode [ 1130.145412][T18119] debugfs: 'hsr0' already exists in 'hsr' [ 1130.151189][T18119] Cannot create hsr debugfs directory [ 1130.207310][ T8344] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.233940][T18140] hsr_slave_0: entered promiscuous mode [ 1130.240006][T18140] hsr_slave_1: entered promiscuous mode [ 1130.249786][T18140] debugfs: 'hsr0' already exists in 'hsr' [ 1130.255640][T18140] Cannot create hsr debugfs directory [ 1130.279126][T18125] hsr_slave_0: entered promiscuous mode [ 1130.285793][T18125] hsr_slave_1: entered promiscuous mode [ 1130.291698][T18125] debugfs: 'hsr0' already exists in 'hsr' [ 1130.297818][T18125] Cannot create hsr debugfs directory [ 1130.492686][T18190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.502169][T18190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.515889][T18190] bridge_slave_0: entered allmulticast mode [ 1130.528147][T18190] bridge_slave_0: entered promiscuous mode [ 1130.536213][T18190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.547936][T18190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.555201][T18190] bridge_slave_1: entered allmulticast mode [ 1130.562543][T18190] bridge_slave_1: entered promiscuous mode [ 1131.160326][T18190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.314089][ T8344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.349042][T18190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.440198][ T8344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.456604][T18190] team0: Port device team_slave_0 added [ 1131.469561][T18190] team0: Port device team_slave_1 added [ 1131.545740][T18125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1131.584873][ T8344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.619525][T18190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.626707][T18190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.656277][T18190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.667504][T18125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1132.161127][T18125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1132.190508][ T8344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.206139][T18190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.213101][T18190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1132.240699][T18190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.259309][T18125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1132.340827][T18119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1132.371738][T18119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1132.382326][T18119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1132.422518][T18190] hsr_slave_0: entered promiscuous mode [ 1132.428840][T18190] hsr_slave_1: entered promiscuous mode [ 1132.436504][T18190] debugfs: 'hsr0' already exists in 'hsr' [ 1132.442234][T18190] Cannot create hsr debugfs directory [ 1132.460627][T18119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1132.590399][T18250] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1133.111433][ T8344] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.157039][T18140] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1133.183131][T18140] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1133.205176][ T8344] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.226127][T18140] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1133.239320][T18140] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1133.301245][ T8344] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.458274][T18140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.480163][T18140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.540689][ T8344] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.717282][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.724447][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.835093][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.842232][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.899723][T18125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.989464][T18125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.002333][T18119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.029539][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.036705][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.086970][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.094128][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.115699][T18119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.148596][T17009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.155715][T17009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.255711][T18125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1134.272276][T18125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1134.321597][T17009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.328839][T17009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.884943][ T8344] bridge_slave_1: left allmulticast mode [ 1134.890640][ T8344] bridge_slave_1: left promiscuous mode [ 1135.263430][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.283715][ T8344] bridge_slave_0: left allmulticast mode [ 1135.291130][ T8344] bridge_slave_0: left promiscuous mode [ 1135.297200][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.954898][ T8344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.967752][ T8344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.978544][ T8344] bond0 (unregistering): Released all slaves [ 1136.216703][ T8344] bond0 (unregistering): Released all slaves [ 1136.448510][ T8344] bond0 (unregistering): Released all slaves [ 1136.659645][ T8344] bond0 (unregistering): Released all slaves [ 1136.808705][T18119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1136.929267][T18190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1136.960020][T18190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1137.168430][T18190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1137.192394][T18190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1137.260969][T18140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.641100][T18125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.742348][T18119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.956785][T18190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.064575][T18190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.149923][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.157071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.214693][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.221821][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.337756][T18125] veth0_vlan: entered promiscuous mode [ 1138.348271][T18125] veth1_vlan: entered promiscuous mode [ 1138.379585][T18125] veth0_macvtap: entered promiscuous mode [ 1138.391546][T18125] veth1_macvtap: entered promiscuous mode [ 1138.407801][T18125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.418499][T18125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.429688][T18140] veth0_vlan: entered promiscuous mode [ 1138.459735][ T8344] hsr_slave_0: left promiscuous mode [ 1138.469882][ T8344] hsr_slave_1: left promiscuous mode [ 1138.476203][ T8344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.484253][ T8344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.495167][ T8344] hsr_slave_0: left promiscuous mode [ 1138.500823][ T8344] hsr_slave_1: left promiscuous mode [ 1138.509394][ T8344] hsr_slave_0: left promiscuous mode [ 1138.515424][ T8344] hsr_slave_1: left promiscuous mode [ 1138.525465][ T8344] hsr_slave_0: left promiscuous mode [ 1138.531294][ T8344] hsr_slave_1: left promiscuous mode [ 1138.589668][ T8344] veth1_macvtap: left promiscuous mode [ 1138.599513][ T8344] veth0_macvtap: left promiscuous mode [ 1138.611550][ T8344] veth1_vlan: left promiscuous mode [ 1138.619571][ T8344] veth0_vlan: left promiscuous mode [ 1138.628852][ T8344] veth1_macvtap: left promiscuous mode [ 1138.637185][ T8344] veth0_macvtap: left promiscuous mode [ 1138.646653][ T8344] veth1_vlan: left promiscuous mode [ 1138.651969][ T8344] veth0_vlan: left promiscuous mode [ 1138.665982][ T8344] veth1_macvtap: left promiscuous mode [ 1138.672233][ T8344] veth0_macvtap: left promiscuous mode [ 1138.685564][ T8344] veth1_vlan: left promiscuous mode [ 1138.690862][ T8344] veth0_vlan: left promiscuous mode [ 1139.160241][ T8344] team0 (unregistering): Port device team_slave_1 removed [ 1139.188933][ T8344] team0 (unregistering): Port device team_slave_0 removed [ 1141.645751][T16309] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1141.818799][T16309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1141.828559][T16309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 14129, setting to 64 [ 1141.841436][T16309] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1141.851007][T16309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.859807][T16309] usb 1-1: Product: syz [ 1141.864042][T16309] usb 1-1: Manufacturer: syz [ 1141.868635][T16309] usb 1-1: SerialNumber: syz [ 1141.893920][T16309] usb 1-1: config 0 descriptor?? [ 1141.902366][T16309] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 30, bLength 9, bSynchAddress 37 [ 1142.168928][T16309] usb 1-1: USB disconnect, device number 19 [ 1142.200576][T18229] udevd[18229]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.442321][ T4452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.469788][T18140] veth1_vlan: entered promiscuous mode [ 1142.477830][ T4452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.486935][ T4452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.509765][ T4452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.635788][T18140] veth0_macvtap: entered promiscuous mode [ 1142.675813][T18119] veth0_vlan: entered promiscuous mode [ 1142.700415][T18140] veth1_macvtap: entered promiscuous mode [ 1142.747365][T18119] veth1_vlan: entered promiscuous mode [ 1142.774266][ T4452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.782109][ T4452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.811506][T18140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.869023][T18140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.988329][T18340] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1142.996003][T18340] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1143.003758][T18340] vhci_hcd vhci_hcd.0: Device attached [ 1143.252777][ T1111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.283610][T16310] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 1143.369122][ T1111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.422277][T18119] veth0_macvtap: entered promiscuous mode [ 1143.497480][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.510170][ T1111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.537231][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.553598][ T1111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.744964][T18341] vhci_hcd: connection reset by peer [ 1143.817924][T18119] veth1_macvtap: entered promiscuous mode [ 1143.849925][ T12] vhci_hcd: stop threads [ 1143.900326][ T12] vhci_hcd: release socket [ 1143.962810][ T12] vhci_hcd: disconnect device [ 1144.346835][T18119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.586726][T18119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.149152][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.296645][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.369608][T18190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.397339][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.417351][ T8353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.491209][ T8353] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.502843][ T8353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.608664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.666530][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.699592][T18190] veth0_vlan: entered promiscuous mode [ 1146.270537][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.272438][T18190] veth1_vlan: entered promiscuous mode [ 1146.289189][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.492415][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.769737][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.135276][T18190] veth0_macvtap: entered promiscuous mode [ 1147.248949][ T30] audit: type=1400 audit(1757859021.174:1657): avc: denied { module_load } for pid=18365 comm="syz.6.3354" path="/sys/kernel/notes" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1147.492032][T18190] veth1_macvtap: entered promiscuous mode [ 1148.039177][T18190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.091873][T18190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.264299][ T8322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.273124][ T8322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.344173][T18134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1148.428613][ T8322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.628274][ T8322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.787194][T18134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1148.811318][T18134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1148.819062][T18134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1148.826603][T18134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1148.864375][T16310] vhci_hcd: vhci_device speed not set [ 1151.060754][T18134] Bluetooth: hci2: command tx timeout [ 1152.265850][ T992] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.415420][ T8353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.433953][ T8353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.501004][ T992] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.535644][ T8344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.546207][ T8344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.571927][ T992] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.093124][T18134] Bluetooth: hci2: command tx timeout [ 1153.788344][ T992] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.634311][T18440] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1154.644471][T18440] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1154.654125][T18440] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1155.303380][T18134] Bluetooth: hci2: command tx timeout [ 1155.426484][T18377] chnl_net:caif_netlink_parms(): no params data found [ 1155.699092][T18457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.702680][T18464] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1156.709201][T18464] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1156.716909][T18464] vhci_hcd vhci_hcd.0: Device attached [ 1156.730405][T18467] vhci_hcd: connection closed [ 1156.732814][ T4452] vhci_hcd: stop threads [ 1156.762846][ T4452] vhci_hcd: release socket [ 1156.778748][ T4452] vhci_hcd: disconnect device [ 1156.832130][ T992] bridge_slave_1: left allmulticast mode [ 1156.864701][ T992] bridge_slave_1: left promiscuous mode [ 1156.889811][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.923708][ T992] bridge_slave_0: left allmulticast mode [ 1156.929383][ T992] bridge_slave_0: left promiscuous mode [ 1156.942710][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.466288][T18134] Bluetooth: hci2: command tx timeout [ 1158.351680][T18491] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1158.878902][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.891154][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.902404][ T992] bond0 (unregistering): Released all slaves [ 1158.980121][T18377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.989186][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.996431][T18377] bridge_slave_0: entered allmulticast mode [ 1159.018538][T18377] bridge_slave_0: entered promiscuous mode [ 1159.096903][T18377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.142189][T18377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.153418][T18377] bridge_slave_1: entered allmulticast mode [ 1159.304028][T18377] bridge_slave_1: entered promiscuous mode [ 1159.686470][T18513] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1160.211814][T18377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.228624][T18377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.322460][T18377] team0: Port device team_slave_0 added [ 1160.344649][T18377] team0: Port device team_slave_1 added [ 1160.350580][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.360049][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.419775][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.440544][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.458692][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.495428][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.511123][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.539121][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.550353][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.562060][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1160.582807][ T992] hsr_slave_0: left promiscuous mode [ 1160.597639][ T992] hsr_slave_1: left promiscuous mode [ 1160.611059][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.628966][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.654100][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.665726][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.841478][ T992] veth1_macvtap: left promiscuous mode [ 1160.867594][ T992] veth0_macvtap: left promiscuous mode [ 1160.883499][ T992] veth1_vlan: left promiscuous mode [ 1160.899725][ T992] veth0_vlan: left promiscuous mode [ 1161.166059][T18541] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1161.172589][T18541] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1161.180586][T18541] vhci_hcd vhci_hcd.0: Device attached [ 1161.493960][T15415] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 1161.972024][T18543] vhci_hcd: connection reset by peer [ 1162.044891][ T1111] vhci_hcd: stop threads [ 1162.094865][ T1111] vhci_hcd: release socket [ 1162.155373][ T1111] vhci_hcd: disconnect device [ 1164.515661][ T992] team0 (unregistering): Port device team_slave_1 removed [ 1164.605997][ T992] team0 (unregistering): Port device team_slave_0 removed [ 1165.444963][T18553] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1165.454657][T18553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1165.464389][T18553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1165.617550][T18567] bridge_slave_0: left allmulticast mode [ 1165.658322][T18567] bridge_slave_0: left promiscuous mode [ 1165.666465][T18567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.794297][T18567] bridge_slave_1: left allmulticast mode [ 1165.813322][T18567] bridge_slave_1: left promiscuous mode [ 1165.822246][T18567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.839928][T18567] bond0: (slave bond_slave_0): Releasing backup interface [ 1165.855829][T18567] bond0: (slave bond_slave_1): Releasing backup interface [ 1166.299763][T18567] team0: Port device team_slave_0 removed [ 1166.349547][T18567] team0: Port device team_slave_1 removed [ 1166.362771][T18567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.370387][T18567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.378746][T18567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.387405][T18567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.823386][T15415] vhci_hcd: vhci_device speed not set [ 1166.841148][T18377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.860350][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.893831][T18377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.313141][T18377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.361002][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.461594][T18377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.843013][T18377] hsr_slave_0: entered promiscuous mode [ 1167.889464][T18377] hsr_slave_1: entered promiscuous mode [ 1170.086282][T18377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1170.182739][T18377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1170.208972][T18377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1170.350035][T18377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1171.578708][T18377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.743582][T18377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.252934][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.253021][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.257488][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.257570][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.311067][T18377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1172.925550][T18377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.175259][T18675] overlay: Unknown parameter '/' [ 1174.228157][T18675] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1174.586021][T18377] veth0_vlan: entered promiscuous mode [ 1174.600282][T18377] veth1_vlan: entered promiscuous mode [ 1174.654974][T18377] veth0_macvtap: entered promiscuous mode [ 1174.663747][T18377] veth1_macvtap: entered promiscuous mode [ 1174.688301][T18377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.711018][T18377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.002329][ T1111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.078221][ T30] audit: type=1400 audit(1757859048.984:1658): avc: denied { bind } for pid=18681 comm="syz.0.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1175.130917][ T1111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.158402][ T1111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.181760][ T1111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.435787][ T8344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.659743][ T8344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.030558][ T8344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.304439][ T8344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.320395][T18694] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1176.327949][T18694] PKCS7: Only support pkcs7_signedData type [ 1176.893040][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.373936][T15415] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1178.551126][T15415] usb 1-1: Using ep0 maxpacket: 32 [ 1178.559977][T15415] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.583344][T16309] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1178.585336][T15415] usb 1-1: config 0 has no interfaces? [ 1178.629411][T15415] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1178.651054][T15415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.720256][T15415] usb 1-1: Product: syz [ 1178.731453][T15415] usb 1-1: Manufacturer: syz [ 1178.742057][T15415] usb 1-1: SerialNumber: syz [ 1178.925828][T15415] usb 1-1: config 0 descriptor?? [ 1179.019484][T16309] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1179.036121][T18720] overlay: Unknown parameter '/' [ 1179.042032][T16309] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.097580][T18720] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1179.465235][T16309] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1179.599188][T16309] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1179.607581][T16309] usb 7-1: Manufacturer: syz [ 1179.631135][T16309] usb 7-1: config 0 descriptor?? [ 1180.025877][T16309] rc_core: IR keymap rc-hauppauge not found [ 1180.607193][T16309] Registered IR keymap rc-empty [ 1180.627086][T16309] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1180.659476][T16309] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input89 [ 1180.691225][T18732] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1180.697772][T18732] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1180.705698][T18732] vhci_hcd vhci_hcd.0: Device attached [ 1181.346619][T18733] vhci_hcd: connection closed [ 1181.378916][T16309] usb 7-1: USB disconnect, device number 2 [ 1181.481131][ T992] vhci_hcd: stop threads [ 1181.485766][ T5843] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 1181.498775][T18146] usb 1-1: USB disconnect, device number 20 [ 1181.521362][ T992] vhci_hcd: release socket [ 1181.550278][ T992] vhci_hcd: disconnect device [ 1184.288528][T18146] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1186.035902][T18146] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1186.143350][T18146] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1186.186213][T18146] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1186.213309][T18146] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.241857][T18146] usb 7-1: Product: syz [ 1186.251967][T18146] usb 7-1: Manufacturer: syz [ 1186.272086][T18146] usb 7-1: SerialNumber: syz [ 1186.673551][ T5843] vhci_hcd: vhci_device speed not set [ 1187.288628][T18146] usb 7-1: config 0 descriptor?? [ 1187.302882][T18146] usb 7-1: can't set config #0, error -71 [ 1187.310900][T18146] usb 7-1: USB disconnect, device number 3 [ 1188.441535][T16309] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1188.692822][T16309] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1188.936231][T16309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.949621][T18818] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1188.963197][T18818] PKCS7: Only support pkcs7_signedData type [ 1188.976689][T16309] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1188.989945][T16309] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1188.999060][T16309] usb 1-1: Manufacturer: syz [ 1189.008945][T16309] usb 1-1: config 0 descriptor?? [ 1189.653329][T16309] rc_core: IR keymap rc-hauppauge not found [ 1189.677077][T16309] Registered IR keymap rc-empty [ 1189.689300][T16309] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1189.710441][T16309] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input90 [ 1190.001572][T18832] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1190.558983][T18146] usb 1-1: USB disconnect, device number 21 [ 1193.887403][T18846] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1193.893923][T18846] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1193.903598][T18846] vhci_hcd vhci_hcd.0: Device attached [ 1195.154084][T18847] vhci_hcd: connection closed [ 1195.178944][T18493] vhci_hcd: stop threads [ 1195.206650][T18493] vhci_hcd: release socket [ 1195.726114][T18493] vhci_hcd: disconnect device [ 1195.783317][T18146] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1195.790838][T18146] usb 43-1: enqueue for inactive port 0 [ 1195.914789][T18146] vhci_hcd: vhci_device speed not set [ 1196.881199][T18871] ieee802154 phy1 wpan1: encryption failed: -22 [ 1197.213471][ T30] audit: type=1400 audit(1757859070.804:1659): avc: denied { write } for pid=18870 comm="syz.6.3487" path="socket:[63470]" dev="sockfs" ino=63470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1199.543431][ T5843] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1199.693278][ T5843] usb 8-1: Using ep0 maxpacket: 32 [ 1199.991990][T18903] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1199.998546][T18903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1200.006837][T18903] vhci_hcd vhci_hcd.0: Device attached [ 1200.323678][T18146] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 1200.532574][ T5843] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1200.796880][ T5843] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1200.806058][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.814157][ T5843] usb 8-1: Product: syz [ 1200.818401][ T5843] usb 8-1: Manufacturer: syz [ 1200.820836][T18904] vhci_hcd: connection reset by peer [ 1200.822986][ T5843] usb 8-1: SerialNumber: syz [ 1200.826520][ T5843] usb 8-1: config 0 descriptor?? [ 1200.890768][ T8344] vhci_hcd: stop threads [ 1200.899548][ T8344] vhci_hcd: release socket [ 1200.907983][ T8344] vhci_hcd: disconnect device [ 1202.412615][T18920] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1202.686236][T16309] usb 8-1: USB disconnect, device number 2 [ 1202.784417][T18925] ieee802154 phy1 wpan1: encryption failed: -22 [ 1203.183561][T15415] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1203.317969][T18937] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1203.326054][T18937] PKCS7: Only support pkcs7_signedData type [ 1203.792556][T15415] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1203.819987][T15415] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1203.852735][T15415] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1203.862222][T15415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.874148][T15415] usb 7-1: Product: syz [ 1203.884860][T15415] usb 7-1: Manufacturer: syz [ 1203.903624][T15415] usb 7-1: SerialNumber: syz [ 1203.931870][T15415] usb 7-1: config 0 descriptor?? [ 1203.955486][T15415] iguanair 7-1:0.0: probe with driver iguanair failed with error -12 [ 1204.306812][T16309] usb 7-1: USB disconnect, device number 4 [ 1205.621633][T18968] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1205.685572][T18146] vhci_hcd: vhci_device speed not set [ 1208.847307][T18997] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1208.853931][T18997] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1208.861986][T18997] vhci_hcd vhci_hcd.0: Device attached [ 1209.868554][T18998] vhci_hcd: connection closed [ 1209.879839][T18493] vhci_hcd: stop threads [ 1209.927716][T18493] vhci_hcd: release socket [ 1209.932187][T18493] vhci_hcd: disconnect device [ 1210.998484][ T5994] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1211.178347][T19023] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1211.197338][T19023] PKCS7: Only support pkcs7_signedData type [ 1211.270581][ T5994] usb 3-1: Using ep0 maxpacket: 32 [ 1211.461479][ T5994] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1212.242507][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.313288][ T5994] usb 3-1: Product: syz [ 1212.334499][ T5994] usb 3-1: Manufacturer: syz [ 1212.402149][ T5994] usb 3-1: SerialNumber: syz [ 1212.421133][ T5994] usb 3-1: config 0 descriptor?? [ 1212.454505][ T5994] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1213.193927][T18146] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1213.443615][T18146] usb 1-1: Using ep0 maxpacket: 32 [ 1213.466859][T18146] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1213.478295][T18146] usb 1-1: config 0 has no interface number 0 [ 1213.539628][T18146] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1213.558558][T18146] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1213.577971][T18146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.586612][T18146] usb 1-1: Product: syz [ 1213.590891][T18146] usb 1-1: Manufacturer: syz [ 1213.601425][T18146] usb 1-1: SerialNumber: syz [ 1213.646043][T18146] usb 1-1: config 0 descriptor?? [ 1213.662387][T18146] smsc75xx v1.0.0 [ 1214.181543][ T5994] gspca_topro: reg_r err -32 [ 1214.187704][ T5994] gspca_topro: Sensor soi763a [ 1214.960804][T18146] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1214.974722][ T5994] usb 3-1: USB disconnect, device number 33 [ 1215.007398][T18146] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1215.360115][T18146] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1215.426177][T18146] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1215.445866][T18146] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1215.477643][T18146] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1215.516536][T18146] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1215.810261][T19086] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1217.371689][ T5843] usb 1-1: USB disconnect, device number 22 [ 1218.803311][T16310] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1219.033304][T16310] usb 3-1: Using ep0 maxpacket: 32 [ 1219.052925][T16310] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1219.063370][T16310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.071932][T16310] usb 3-1: Product: syz [ 1219.078390][T16310] usb 3-1: Manufacturer: syz [ 1219.963329][ T5854] Bluetooth: hci6: command 0x0406 tx timeout [ 1220.395714][T16310] usb 3-1: SerialNumber: syz [ 1220.404211][T16310] usb 3-1: config 0 descriptor?? [ 1220.422410][T16310] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1222.625240][T16310] gspca_topro: reg_w err -110 [ 1222.683567][T16310] gspca_topro: Sensor soi763a [ 1223.836721][T19169] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1223.843190][T19169] PKCS7: Only support pkcs7_signedData type [ 1223.846982][T18146] usb 3-1: USB disconnect, device number 34 [ 1225.102083][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 1225.320001][T19188] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1225.328274][T19188] PKCS7: Only support pkcs7_signedData type [ 1226.258306][T19208] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1226.264829][T19208] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1226.281456][T19208] vhci_hcd vhci_hcd.0: Device attached [ 1226.556434][ T5843] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 1226.589097][T18373] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1227.275601][T19209] vhci_hcd: connection closed [ 1227.310517][ T4452] vhci_hcd: stop threads [ 1227.666586][ T4452] vhci_hcd: release socket [ 1227.671133][ T4452] vhci_hcd: disconnect device [ 1227.676980][T18373] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1227.704002][T18373] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.729342][T18373] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.929558][ T30] audit: type=1400 audit(1757859101.814:1660): avc: denied { bind } for pid=19218 comm="syz.0.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1229.074138][T19222] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1229.080680][T19222] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1229.091396][T19223] vhci_hcd: connection closed [ 1229.091410][T19226] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1229.102244][T19222] vhci_hcd vhci_hcd.0: Device attached [ 1229.109547][ T992] vhci_hcd: stop threads [ 1229.114688][T18373] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1229.142744][ T992] vhci_hcd: release socket [ 1229.200681][ T992] vhci_hcd: disconnect device [ 1229.267186][T19232] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1229.273701][T19232] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1229.282114][T19232] vhci_hcd vhci_hcd.0: Device attached [ 1229.510590][T18373] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1230.254893][T18373] usb 6-1: Manufacturer: syz [ 1230.261556][T18373] usb 6-1: config 0 descriptor?? [ 1230.268367][T18373] usb 6-1: can't set config #0, error -71 [ 1230.275516][T18373] usb 6-1: USB disconnect, device number 2 [ 1230.294599][T19233] vhci_hcd: connection closed [ 1230.344478][T15415] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 1230.376515][ T4452] vhci_hcd: stop threads [ 1230.400813][ T4452] vhci_hcd: release socket [ 1230.439747][ T4452] vhci_hcd: disconnect device [ 1231.283302][T15415] usb 47-1: enqueue for inactive port 0 [ 1231.383410][T15415] vhci_hcd: vhci_device speed not set [ 1231.707325][T18373] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1231.874363][T18373] usb 1-1: device descriptor read/64, error -71 [ 1232.191164][T19260] Bluetooth: MGMT ver 1.23 [ 1232.539657][T18373] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1232.613384][ T5843] vhci_hcd: vhci_device speed not set [ 1232.683581][T18373] usb 1-1: device descriptor read/64, error -71 [ 1232.862328][T18373] usb usb1-port1: attempt power cycle [ 1233.293696][T19274] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1233.300240][T19274] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1233.308002][T19274] vhci_hcd vhci_hcd.0: Device attached [ 1234.223288][T18373] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1234.237670][T19275] vhci_hcd: connection closed [ 1234.274590][ T8344] vhci_hcd: stop threads [ 1234.293895][ T8344] vhci_hcd: release socket [ 1234.303276][ T8344] vhci_hcd: disconnect device [ 1234.341852][T16310] vhci_hcd: vhci_device speed not set [ 1234.353462][T18373] usb 1-1: device descriptor read/8, error -71 [ 1235.459966][T19291] program syz.2.3601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1235.733300][T18146] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1236.639159][T19301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19301 comm=syz.7.3607 [ 1236.674533][T18146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.686755][T18146] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1236.762484][T18146] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1236.778221][T18146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.816161][T18146] usb 3-1: Product: syz [ 1236.820494][T18146] usb 3-1: Manufacturer: syz [ 1236.828330][T18146] usb 3-1: SerialNumber: syz [ 1236.843045][T19304] __nla_validate_parse: 44 callbacks suppressed [ 1236.843080][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3605'. [ 1236.859230][T18146] usb 3-1: config 0 descriptor?? [ 1236.889989][T19308] tipc: Started in network mode [ 1236.966623][T19313] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1236.975929][T19313] PKCS7: Only support pkcs7_signedData type [ 1237.004130][T19308] tipc: Node identity da9afdec049d, cluster identity 4711 [ 1237.012039][T19308] tipc: Enabled bearer , priority 0 [ 1237.117858][T18146] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1237.203516][T19311] syzkaller0: entered promiscuous mode [ 1237.209064][T19311] syzkaller0: entered allmulticast mode [ 1237.237721][T18255] udevd[18255]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1237.340490][T19320] tipc: Resetting bearer [ 1237.413522][T19306] tipc: Resetting bearer [ 1237.474948][T19306] tipc: Disabling bearer [ 1237.984191][ T5994] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1238.200267][ T5994] usb 6-1: device descriptor read/64, error -71 [ 1238.302585][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.533380][ T5994] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1238.917950][ T5994] usb 6-1: device descriptor read/64, error -71 [ 1239.064295][ T5994] usb usb6-port1: attempt power cycle [ 1240.293636][T18146] usb 3-1: USB disconnect, device number 35 [ 1242.179105][T19372] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3625'. [ 1242.188263][T19372] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3625'. [ 1242.469894][T19374] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3626'. [ 1244.724824][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3632'. [ 1244.736903][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3632'. [ 1245.495664][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 1246.213492][T18373] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1246.354220][T19416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1246.363349][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1246.393434][T18373] usb 8-1: Using ep0 maxpacket: 16 [ 1246.476059][T18373] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1246.489304][T18373] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1246.643390][T18373] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1246.721752][T18373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.732467][T19420] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1246.738975][T19420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1246.758152][T18373] usb 8-1: Product: syz [ 1246.762389][T18373] usb 8-1: Manufacturer: syz [ 1246.768117][T18373] usb 8-1: SerialNumber: syz [ 1246.783188][T19420] vhci_hcd vhci_hcd.0: Device attached [ 1246.819596][T18373] usb 8-1: config 0 descriptor?? [ 1247.000572][T18373] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1247.053364][T18146] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 1247.439860][T18373] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1247.482353][T19421] vhci_hcd: connection reset by peer [ 1247.500959][ T8322] vhci_hcd: stop threads [ 1247.551422][ T8322] vhci_hcd: release socket [ 1247.578039][ T8322] vhci_hcd: disconnect device [ 1247.944010][T18373] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1247.976335][T18373] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1247.993434][T18373] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1248.002986][T18373] em28xx 8-1:0.0: No AC97 audio processor [ 1248.041597][T18373] usb 8-1: USB disconnect, device number 3 [ 1248.256107][T18373] em28xx 8-1:0.0: Disconnecting em28xx [ 1248.318729][T18373] em28xx 8-1:0.0: Freeing device [ 1248.447481][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1248.459799][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1250.173766][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1250.208849][T19464] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1250.215362][T19464] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1250.223200][T19464] vhci_hcd vhci_hcd.0: Device attached [ 1250.384491][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1250.729524][ T9] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1250.991648][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.076347][ T9] usb 8-1: Product: syz [ 1251.106868][T19465] vhci_hcd: connection closed [ 1251.140778][ T9] usb 8-1: Manufacturer: syz [ 1251.162777][ T8322] vhci_hcd: stop threads [ 1251.200857][ T8322] vhci_hcd: release socket [ 1251.603133][ T8322] vhci_hcd: disconnect device [ 1251.608198][ T9] usb 8-1: SerialNumber: syz [ 1251.637773][ T9] usb 8-1: config 0 descriptor?? [ 1251.799169][T19476] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1251.805711][T19476] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1251.813697][T19476] vhci_hcd vhci_hcd.0: Device attached [ 1252.073460][T15415] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 1252.213299][T18267] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1252.267920][ T9] usb 8-1: USB disconnect, device number 4 [ 1252.283648][T18146] vhci_hcd: vhci_device speed not set [ 1252.707688][T19477] vhci_hcd: connection reset by peer [ 1252.827543][ T12] vhci_hcd: stop threads [ 1252.879814][ T12] vhci_hcd: release socket [ 1252.922143][ T12] vhci_hcd: disconnect device [ 1253.323394][T18267] usb 6-1: device descriptor read/64, error -71 [ 1253.554986][T19492] tipc: Enabled bearer , priority 0 [ 1253.571750][T19492] syzkaller0: entered promiscuous mode [ 1253.577636][T19492] syzkaller0: entered allmulticast mode [ 1253.645952][T19493] input: syz0 as /devices/virtual/input/input92 [ 1253.699137][T19494] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3659'. [ 1253.793345][T19492] tipc: Resetting bearer [ 1254.013954][T19490] tipc: Resetting bearer [ 1254.042844][T19490] tipc: Disabling bearer [ 1254.063833][T18267] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1254.213743][T18267] usb 6-1: device descriptor read/64, error -71 [ 1254.323450][T18267] usb usb6-port1: attempt power cycle [ 1254.804321][T18267] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1255.249766][T18267] usb 6-1: device not accepting address 8, error -71 [ 1256.279419][T19532] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3671'. [ 1257.062797][T19533] bridge_slave_0: left allmulticast mode [ 1257.068658][T19533] bridge_slave_0: left promiscuous mode [ 1257.075844][T19533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.316658][T15415] vhci_hcd: vhci_device speed not set [ 1257.987100][T19533] bridge_slave_1: left allmulticast mode [ 1257.993051][T19533] bridge_slave_1: left promiscuous mode [ 1257.998878][T19533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.023973][T19533] bond0: (slave bond_slave_0): Releasing backup interface [ 1258.056398][T19533] bond0: (slave bond_slave_1): Releasing backup interface [ 1258.095003][T19533] team0: Port device team_slave_0 removed [ 1258.170412][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1258.231068][T19543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1258.626575][T19533] team0: Port device team_slave_1 removed [ 1258.651737][T19533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.659529][T19533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.677532][T19533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.703986][T19533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.918078][T19555] input: syz0 as /devices/virtual/input/input93 [ 1259.970989][T19556] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3676'. [ 1260.378811][T19537] kvm: kvm [19536]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xcc [ 1260.453281][T15415] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1260.657656][T19537] kvm: kvm [19536]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000015 [ 1260.667355][T19564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3677'. [ 1261.423937][T15415] usb 1-1: device descriptor read/64, error -71 [ 1262.185654][T15415] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1262.663286][T15415] usb 1-1: device descriptor read/64, error -71 [ 1262.680926][T19587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3685'. [ 1262.700186][T19587] netlink: 'syz.7.3685': attribute type 7 has an invalid length. [ 1262.723279][T19587] netlink: 'syz.7.3685': attribute type 8 has an invalid length. [ 1262.735997][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3685'. [ 1262.784026][T15415] usb usb1-port1: attempt power cycle [ 1263.766834][T19600] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 1263.813344][T19600] PKCS7: Only support pkcs7_signedData type [ 1263.843391][T15415] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1264.865356][T15415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1265.109216][T15415] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1265.123277][T15415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.132072][T15415] usb 1-1: Product: syz [ 1265.143275][T15415] usb 1-1: Manufacturer: syz [ 1265.147882][T15415] usb 1-1: SerialNumber: syz [ 1265.154633][T15415] usb 1-1: config 0 descriptor?? [ 1265.569414][T19616] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3693'. [ 1265.954288][T18267] usb 1-1: USB disconnect, device number 29 [ 1266.624214][T19627] bridge_slave_0: left allmulticast mode [ 1266.630146][T19627] bridge_slave_0: left promiscuous mode [ 1266.637363][T19627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.474347][T19627] bridge_slave_1: left allmulticast mode [ 1267.482072][T19627] bridge_slave_1: left promiscuous mode [ 1267.500512][T19627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.706111][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1267.726916][T19627] bond0: (slave bond_slave_0): Releasing backup interface [ 1267.743536][T19633] netlink: 'syz.2.3699': attribute type 7 has an invalid length. [ 1267.756129][T19633] netlink: 'syz.2.3699': attribute type 8 has an invalid length. [ 1267.765414][T19627] bond0: (slave bond_slave_1): Releasing backup interface [ 1267.844198][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1267.878436][T19627] team0: Port device team_slave_0 removed [ 1267.890081][T19627] team0: Port device team_slave_1 removed [ 1267.903318][T16310] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1267.914090][T19627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.940587][T19627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.959840][T19627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.977093][T19627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.046634][T16310] usb 1-1: device descriptor read/64, error -71 [ 1268.739756][T16310] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1269.090449][T16310] usb 1-1: device descriptor read/64, error -71 [ 1269.111195][T19641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3701'. [ 1269.233746][T16310] usb usb1-port1: attempt power cycle [ 1269.833457][T16310] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1269.975590][T16310] usb 1-1: device descriptor read/8, error -71 [ 1270.445103][T16310] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1270.473869][T16310] usb 1-1: device descriptor read/8, error -71 [ 1270.575334][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 1270.586672][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3705'. [ 1270.651260][T16310] usb usb1-port1: unable to enumerate USB device [ 1271.086352][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 1271.979255][T19681] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3707'. [ 1272.689944][T19688] input: syz0 as /devices/virtual/input/input94 [ 1272.709310][T19688] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3710'. [ 1272.733412][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1273.437937][ T30] audit: type=1400 audit(1757859147.354:1661): avc: denied { write } for pid=19690 comm="syz.7.3713" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1273.561302][ T30] audit: type=1400 audit(1757859147.384:1662): avc: denied { ioctl } for pid=19690 comm="syz.7.3713" path="/dev/sg0" dev="devtmpfs" ino=743 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1273.624564][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1274.073415][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.232818][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1274.423810][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1274.431811][ T10] usb 3-1: Manufacturer: syz [ 1274.503006][ T10] usb 3-1: config 0 descriptor?? [ 1274.608893][ T10] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1275.284537][T19702] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3715'. [ 1275.378699][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1275.634583][ T10] usb 1-1: config 0 has no interfaces? [ 1275.640937][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1275.656938][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1275.667898][ T10] usb 1-1: Manufacturer: syz [ 1275.681273][ T10] usb 1-1: config 0 descriptor?? [ 1276.421041][ T10] usb 3-1: USB disconnect, device number 36 [ 1277.150563][T19738] input: syz0 as /devices/virtual/input/input95 [ 1277.202990][T19739] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3724'. [ 1277.641405][T16310] usb 1-1: USB disconnect, device number 34 [ 1280.157345][T19763] tipc: Enabled bearer , priority 0 [ 1280.166289][T19763] syzkaller0: entered promiscuous mode [ 1280.171821][T19763] syzkaller0: entered allmulticast mode [ 1280.313861][T18267] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1280.497279][T19770] tipc: Resetting bearer [ 1280.653749][T18267] usb 7-1: Using ep0 maxpacket: 16 [ 1280.661150][T18267] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1280.674140][T18267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1280.822851][T18267] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1280.833423][T18267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.833592][T19760] tipc: Resetting bearer [ 1280.841404][T18267] usb 7-1: Product: syz [ 1280.841419][T18267] usb 7-1: Manufacturer: syz [ 1280.841433][T18267] usb 7-1: SerialNumber: syz [ 1280.887312][T18267] usb 7-1: config 0 descriptor?? [ 1280.908804][T18267] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1280.935001][T18267] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1281.050336][T19760] tipc: Disabling bearer [ 1282.188454][T19788] input: syz0 as /devices/virtual/input/input96 [ 1282.206628][T19788] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1282.537898][T18267] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1282.557704][T18267] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1282.603333][T16310] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1282.700589][T18267] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1282.707634][T18267] em28xx 7-1:0.0: No AC97 audio processor [ 1282.717039][T18267] usb 7-1: USB disconnect, device number 5 [ 1282.726536][T18267] em28xx 7-1:0.0: Disconnecting em28xx [ 1282.735556][T18267] em28xx 7-1:0.0: Freeing device [ 1282.865282][T16310] usb 8-1: config 0 has no interfaces? [ 1282.871749][T16310] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1282.882952][T16310] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1282.891667][T16310] usb 8-1: Manufacturer: syz [ 1282.937574][T16310] usb 8-1: config 0 descriptor?? [ 1285.222159][T18267] usb 8-1: USB disconnect, device number 5 [ 1286.589150][T19843] input: syz0 as /devices/virtual/input/input97 [ 1286.642863][T19844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1287.386876][T19850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3756'. [ 1288.597645][T19873] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1288.604182][T19873] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1288.614340][T19873] vhci_hcd vhci_hcd.0: Device attached [ 1289.198904][T19874] vhci_hcd: connection closed [ 1289.201670][ T4452] vhci_hcd: stop threads [ 1289.205229][T19867] kvm: kvm [19861]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 1289.206763][ T4452] vhci_hcd: release socket [ 1289.226051][T19867] kvm: kvm [19861]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1289.237051][ T4452] vhci_hcd: disconnect device [ 1289.254956][ T10] vhci_hcd: vhci_device speed not set [ 1289.283825][T19867] kvm: kvm [19861]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1289.956279][T19892] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3766'. [ 1291.251466][T19896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1291.932725][T19908] fuse: Bad value for 'fd' [ 1294.758288][T19935] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3779'. [ 1295.511113][T19944] fuse: Bad value for 'fd' [ 1296.368007][T19965] binder_alloc: 19964: binder_alloc_buf, no vma [ 1297.992626][T19981] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3794'. [ 1299.231882][T19993] 9pnet_fd: Insufficient options for proto=fd [ 1299.816565][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.012437][T19996] binder_alloc: 19995: binder_alloc_buf, no vma [ 1301.248280][T20013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1301.843709][T20030] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1303.275908][T18373] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1303.824821][T18373] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1303.924738][T18373] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.985514][T18373] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1304.008627][T18373] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1304.026887][T18373] usb 8-1: Manufacturer: syz [ 1304.033137][T20057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3816'. [ 1304.046839][T18373] usb 8-1: config 0 descriptor?? [ 1304.074988][T18373] igorplugusb 8-1:0.0: incorrect number of endpoints [ 1305.892334][T20082] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3822'. [ 1306.426080][T18146] usb 8-1: USB disconnect, device number 6 [ 1306.667443][T20086] 9pnet_fd: Insufficient options for proto=fd [ 1310.207517][T20108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3828'. [ 1310.219832][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3828'. [ 1311.754918][T20119] tipc: Started in network mode [ 1311.759980][T20119] tipc: Node identity 2261314a84bf, cluster identity 4711 [ 1311.769619][T20119] tipc: Enabled bearer , priority 0 [ 1311.792420][T20119] syzkaller0: entered promiscuous mode [ 1311.838501][T20119] syzkaller0: entered allmulticast mode [ 1312.772273][T20118] tipc: Resetting bearer [ 1312.831060][T20118] tipc: Disabling bearer [ 1316.069826][T20163] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3843'. [ 1318.780793][T20187] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1319.114830][ T30] audit: type=1400 audit(1757859193.034:1663): avc: denied { write } for pid=20189 comm="syz.2.3853" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1329.054970][ T30] audit: type=1400 audit(1757859202.944:1664): avc: denied { create } for pid=20284 comm="syz.2.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1329.223343][ T30] audit: type=1400 audit(1757859203.044:1665): avc: denied { read } for pid=20284 comm="syz.2.3879" path="socket:[69430]" dev="sockfs" ino=69430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1333.463276][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1333.563571][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1333.673357][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1333.690087][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1333.708755][ T9] usb 7-1: config 0 has no interface number 0 [ 1333.724779][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1333.739529][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1333.795019][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1334.371715][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.381948][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.392311][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1334.405509][ T9] usb 7-1: Product: syz [ 1334.420918][ T9] usb 7-1: Manufacturer: syz [ 1334.448176][ T9] usb 7-1: SerialNumber: syz [ 1334.457578][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1334.508056][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1334.516960][ T9] usb 7-1: config 0 descriptor?? [ 1334.526675][ T9] smsc75xx v1.0.0 [ 1334.531591][ T10] usb 3-1: Manufacturer: syz [ 1334.542344][ T10] usb 3-1: config 0 descriptor?? [ 1334.562883][ T10] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1336.029954][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1336.073370][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1336.084008][T18373] usb 3-1: USB disconnect, device number 37 [ 1337.373648][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1337.385015][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1337.395760][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1337.406084][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1337.415836][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1337.463044][ T9] usb 7-1: USB disconnect, device number 6 [ 1338.509100][ T30] audit: type=1400 audit(1757859212.434:1666): avc: denied { getopt } for pid=20352 comm="syz.7.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1345.614451][T20412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1345.626322][T20412] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1347.753270][T18146] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1347.974410][T18146] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1347.993343][T18146] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.034157][T18146] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1348.043636][T18146] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1348.051624][T18146] usb 7-1: Manufacturer: syz [ 1348.215615][T18146] usb 7-1: config 0 descriptor?? [ 1348.225410][T18146] igorplugusb 7-1:0.0: incorrect number of endpoints [ 1348.573283][T18146] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1348.733309][T18146] usb 6-1: device descriptor read/64, error -71 [ 1349.004748][T18146] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1349.163398][T18146] usb 6-1: device descriptor read/64, error -71 [ 1349.281009][T18146] usb usb6-port1: attempt power cycle [ 1349.673348][T18146] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1349.724665][T18146] usb 6-1: device descriptor read/8, error -71 [ 1350.002402][T18146] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1350.023898][T18146] usb 6-1: device descriptor read/8, error -71 [ 1350.098518][ T9] usb 7-1: USB disconnect, device number 7 [ 1350.269150][T18146] usb usb6-port1: unable to enumerate USB device [ 1352.164510][T20464] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1352.176597][T20464] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1353.421178][T20474] usb usb8: usbfs: process 20474 (syz.2.3932) did not claim interface 0 before use [ 1355.817881][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1355.826238][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1355.835515][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1355.861811][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1355.880027][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1356.418439][T20515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1356.429965][T20515] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1357.156624][T20370] Set syz1 is full, maxelem 65536 reached [ 1357.231362][T20365] Set syz1 is full, maxelem 65536 reached [ 1357.253603][T18134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1357.262420][T18134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1357.275914][T18134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1357.296069][T18134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1357.304046][T18134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1357.443064][ T30] audit: type=1400 audit(1757859231.294:1667): avc: denied { append } for pid=20520 comm="syz.2.3943" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1357.487326][T20504] chnl_net:caif_netlink_parms(): no params data found [ 1357.973477][ T5854] Bluetooth: hci3: command tx timeout [ 1358.160603][T20521] chnl_net:caif_netlink_parms(): no params data found [ 1358.500192][T20542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3947'. [ 1359.068247][ T1111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.225401][T20504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.232503][T20504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.261676][T20504] bridge_slave_0: entered allmulticast mode [ 1359.301051][T20504] bridge_slave_0: entered promiscuous mode [ 1359.473736][ T5854] Bluetooth: hci5: command tx timeout [ 1359.527780][ T1111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.569367][T20504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.604483][T20504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.611611][T20504] bridge_slave_1: entered allmulticast mode [ 1359.629134][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1359.638204][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1359.657156][T20504] bridge_slave_1: entered promiscuous mode [ 1359.673604][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1359.683493][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1359.780877][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1359.791721][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1359.947519][ T1111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.043416][ T5854] Bluetooth: hci3: command tx timeout [ 1360.717814][ T1111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.830074][T20504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.882415][T20521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.913876][T20521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.982688][T20521] bridge_slave_0: entered allmulticast mode [ 1361.104826][T20521] bridge_slave_0: entered promiscuous mode [ 1361.120490][T20504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.131629][T20521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.144819][T20521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.152703][T20521] bridge_slave_1: entered allmulticast mode [ 1361.171884][T20521] bridge_slave_1: entered promiscuous mode [ 1361.203802][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.484681][ T5854] Bluetooth: hci5: command tx timeout [ 1361.647061][T20504] team0: Port device team_slave_0 added [ 1361.664274][T20521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.682074][T20504] team0: Port device team_slave_1 added [ 1361.790998][T20521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.239600][ T5854] Bluetooth: hci3: command tx timeout [ 1362.497822][T20504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.511090][T20504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.609949][T20504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.670647][T20504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.678374][T20504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.709348][T20504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.781294][T20521] team0: Port device team_slave_0 added [ 1363.290321][T20521] team0: Port device team_slave_1 added [ 1363.410869][T20599] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3960'. [ 1363.652545][ T5854] Bluetooth: hci5: command tx timeout [ 1363.878485][T20606] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1363.884994][T20606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1363.892841][T20606] vhci_hcd vhci_hcd.0: Device attached [ 1364.186195][ T10] usb 37-1: new high-speed USB device number 10 using vhci_hcd [ 1364.284305][ T5854] Bluetooth: hci3: command tx timeout [ 1365.137966][T20607] vhci_hcd: connection reset by peer [ 1365.201496][T13524] vhci_hcd: stop threads [ 1365.227594][T13524] vhci_hcd: release socket [ 1365.232215][T13524] vhci_hcd: disconnect device [ 1365.758201][ T5854] Bluetooth: hci5: command tx timeout [ 1365.764729][ T1111] bond0 (unregistering): Released all slaves [ 1366.212439][T20504] hsr_slave_0: entered promiscuous mode [ 1366.257070][T20504] hsr_slave_1: entered promiscuous mode [ 1366.293479][T20504] debugfs: 'hsr0' already exists in 'hsr' [ 1366.299491][T20504] Cannot create hsr debugfs directory [ 1366.482576][ T1111] tipc: Left network mode [ 1366.483024][T20521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.524338][T20521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.613223][T20521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.634965][T20521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.641916][T20521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.793221][T20521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.383346][ T10] vhci_hcd: vhci_device speed not set [ 1370.761267][T20521] hsr_slave_0: entered promiscuous mode [ 1370.784268][T20521] hsr_slave_1: entered promiscuous mode [ 1370.790544][T20521] debugfs: 'hsr0' already exists in 'hsr' [ 1370.796401][T20521] Cannot create hsr debugfs directory [ 1370.947233][ T1111] hsr_slave_0: left promiscuous mode [ 1370.963577][ T1111] hsr_slave_1: left promiscuous mode [ 1371.008615][ T1111] veth1_macvtap: left promiscuous mode [ 1371.023487][ T1111] veth0_macvtap: left promiscuous mode [ 1371.058843][ T1111] veth1_vlan: left promiscuous mode [ 1371.077780][ T1111] veth0_vlan: left promiscuous mode [ 1371.116363][T20643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3971'. [ 1373.115493][T20605] Set syz1 is full, maxelem 65536 reached [ 1374.422591][T20504] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1374.461364][T20504] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1374.634721][T20504] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1374.733334][T20504] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1375.476224][T20521] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1375.511867][T20521] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1375.590556][T20521] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1375.623052][T20521] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1375.809022][T20504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.263500][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3983'. [ 1377.269317][T20504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.272404][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3983'. [ 1377.387583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.394722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.429363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.436509][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.542990][T20521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.939715][T20521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.987739][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.994826][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.032995][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.040089][ T8322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.183129][ T1111] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.355545][ T1111] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.735641][ T1111] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.769849][T20504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.900753][ T1111] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.042933][T20521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.283029][ T1111] bridge_slave_1: left allmulticast mode [ 1382.062687][ T1111] bridge_slave_1: left promiscuous mode [ 1382.167526][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.179236][ T1111] bridge_slave_0: left allmulticast mode [ 1382.187164][ T1111] bridge_slave_0: left promiscuous mode [ 1382.192877][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.239355][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.257924][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.267487][ T1111] bond0 (unregistering): Released all slaves [ 1384.435797][T20504] veth0_vlan: entered promiscuous mode [ 1384.515812][T20504] veth1_vlan: entered promiscuous mode [ 1384.545197][ T1111] tipc: Left network mode [ 1384.733389][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1385.156047][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1385.515767][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1385.561301][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.607249][ T9] usb 7-1: Product: syz [ 1385.637382][ T9] usb 7-1: Manufacturer: syz [ 1385.684789][ T9] usb 7-1: SerialNumber: syz [ 1385.768157][ T9] usb 7-1: config 0 descriptor?? [ 1385.800004][T20504] veth0_macvtap: entered promiscuous mode [ 1385.861570][T20504] veth1_macvtap: entered promiscuous mode [ 1385.909877][ T1111] hsr_slave_0: left promiscuous mode [ 1385.919920][ T1111] hsr_slave_1: left promiscuous mode [ 1385.932072][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.940459][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.953520][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.975328][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.993271][ T9] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1386.012383][ T1111] veth1_macvtap: left promiscuous mode [ 1386.030310][ T1111] veth0_macvtap: left promiscuous mode [ 1386.040074][ T1111] veth1_vlan: left promiscuous mode [ 1386.046327][ T1111] veth0_vlan: left promiscuous mode [ 1387.182414][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 1387.220496][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 1387.915373][T20521] veth0_vlan: entered promiscuous mode [ 1387.952301][T20504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.970569][T20521] veth1_vlan: entered promiscuous mode [ 1387.976526][ T9] usb write operation failed. (-71) [ 1387.984814][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1388.002198][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 1388.018283][ T9] usb 7-1: media controller created [ 1388.026086][T20504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.035007][ T9] usb read operation failed. (-71) [ 1388.053248][ T9] usb write operation failed. (-71) [ 1388.067262][ T992] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.076470][ T992] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.102978][ T9] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1388.119656][T18253] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.150700][T18253] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.163043][ T9] usb 7-1: USB disconnect, device number 8 [ 1388.546961][T20521] veth0_macvtap: entered promiscuous mode [ 1389.231738][T20521] veth1_macvtap: entered promiscuous mode [ 1389.825772][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.860970][ T8322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.862236][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.882308][T20521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.899098][ T8322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.922554][T20521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.948338][ T8322] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.967405][ T8347] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.053248][ T8347] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.163799][ T8347] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.209218][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.252367][T13524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.259744][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.446277][T13524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.149953][T20849] usb usb8: usbfs: process 20849 (syz.2.4019) did not claim interface 0 before use [ 1395.780267][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4029'. [ 1395.794968][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4029'. [ 1396.185519][T20890] syzkaller0: entered promiscuous mode [ 1396.298350][T20890] syzkaller0: entered allmulticast mode [ 1399.596742][T20933] 9pnet_fd: Insufficient options for proto=fd [ 1400.811773][T20943] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1400.818313][T20943] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1400.826250][T20943] vhci_hcd vhci_hcd.0: Device attached [ 1401.743466][T20944] vhci_hcd: connection closed [ 1401.841797][ T12] vhci_hcd: stop threads [ 1401.862585][ T12] vhci_hcd: release socket [ 1401.895348][ T12] vhci_hcd: disconnect device [ 1401.933340][ T10] vhci_hcd: vhci_device speed not set [ 1405.063383][T18373] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1405.304505][T18373] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1405.319398][T18373] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.332610][T18373] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1405.343441][T18373] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1405.356006][T18373] usb 10-1: Manufacturer: syz [ 1405.406686][T18373] usb 10-1: config 0 descriptor?? [ 1405.482938][T20986] usb usb8: usbfs: process 20986 (syz.2.4057) did not claim interface 0 before use [ 1405.583342][T18373] rc_core: IR keymap rc-hauppauge not found [ 1405.589286][T18373] Registered IR keymap rc-empty [ 1405.599405][T18373] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1405.660396][T18373] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input98 [ 1405.840970][ C1] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1406.286667][ T5994] usb 10-1: USB disconnect, device number 2 [ 1410.186059][T18373] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1410.374932][T18373] usb 10-1: Using ep0 maxpacket: 32 [ 1410.382229][T18373] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1410.443997][T18373] usb 10-1: config 0 has no interface number 0 [ 1410.450321][T18373] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1410.503472][T21038] usb usb8: usbfs: process 21038 (syz.6.4070) did not claim interface 0 before use [ 1410.540978][T18373] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1410.570511][T18373] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.593187][T18373] usb 10-1: Product: syz [ 1410.616955][T18373] usb 10-1: Manufacturer: syz [ 1410.639641][T18373] usb 10-1: SerialNumber: syz [ 1410.681918][T18373] usb 10-1: config 0 descriptor?? [ 1410.705413][T18373] smsc75xx v1.0.0 [ 1411.880671][T18373] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1412.701054][T18373] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1412.712214][T18373] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1412.721991][T18373] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1412.732374][T18373] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1412.742255][T18373] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1412.760492][T18373] usb 10-1: USB disconnect, device number 3 [ 1414.463244][T18373] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1414.799827][ T30] audit: type=1400 audit(1757859288.614:1668): avc: denied { write } for pid=21078 comm="syz.2.4083" path="socket:[73637]" dev="sockfs" ino=73637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1415.105649][T18373] usb 6-1: device descriptor read/64, error -71 [ 1415.164526][T21085] usb usb8: usbfs: process 21085 (syz.9.4084) did not claim interface 0 before use [ 1415.364679][T18373] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1415.762380][T18373] usb 6-1: device descriptor read/64, error -71 [ 1415.884206][T18373] usb usb6-port1: attempt power cycle [ 1416.285752][T18373] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1416.325219][T18373] usb 6-1: device descriptor read/8, error -71 [ 1417.054901][T18373] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1417.106122][T18373] usb 6-1: device descriptor read/8, error -71 [ 1417.272270][T18373] usb usb6-port1: unable to enumerate USB device [ 1419.597970][T21132] usb usb8: usbfs: process 21132 (syz.6.4098) did not claim interface 0 before use [ 1420.934408][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4109'. [ 1420.944143][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4109'. [ 1422.797082][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.879513][T21204] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1425.886050][T21204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1425.943806][T21204] vhci_hcd vhci_hcd.0: Device attached [ 1426.594394][ T9] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1426.617727][T21205] vhci_hcd: connection reset by peer [ 1426.636894][ T49] vhci_hcd: stop threads [ 1426.645006][ T49] vhci_hcd: release socket [ 1426.653710][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1426.663389][ T49] vhci_hcd: disconnect device [ 1426.813492][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1426.874953][ T10] usb 7-1: config 0 has no interfaces? [ 1426.907885][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1426.920634][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.931199][ T10] usb 7-1: Product: syz [ 1426.936660][ T10] usb 7-1: Manufacturer: syz [ 1426.941606][ T10] usb 7-1: SerialNumber: syz [ 1426.954455][ T10] usb 7-1: config 0 descriptor?? [ 1429.763560][ T5994] usb 7-1: USB disconnect, device number 9 [ 1433.153390][ T9] vhci_hcd: vhci_device speed not set [ 1436.528292][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1436.773337][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1437.114905][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1437.283831][ T24] usb 3-1: config 0 has no interface number 0 [ 1437.291913][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1437.840892][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1437.862446][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.884047][ T30] audit: type=1400 audit(1757859311.814:1669): avc: denied { map } for pid=21294 comm="syz.9.4146" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1437.962337][ T24] usb 3-1: Product: syz [ 1437.983257][ T24] usb 3-1: Manufacturer: syz [ 1437.987874][ T24] usb 3-1: SerialNumber: syz [ 1437.994841][ T24] usb 3-1: config 0 descriptor?? [ 1438.001615][T21304] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4149'. [ 1438.006139][ T24] smsc75xx v1.0.0 [ 1439.101471][T21318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4152'. [ 1439.112849][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4152'. [ 1440.149244][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1440.173511][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1440.538162][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1440.670620][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1440.718118][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1440.769960][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1440.827022][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1440.869099][ T24] usb 3-1: USB disconnect, device number 38 [ 1443.542291][T21359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1443.796396][ T30] audit: type=1400 audit(1757859317.724:1670): avc: denied { write } for pid=21361 comm="syz.6.4164" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1443.817177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.951925][ T30] audit: type=1400 audit(1757859317.724:1671): avc: denied { open } for pid=21361 comm="syz.6.4164" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1445.359755][ T30] audit: type=1400 audit(1757859318.724:1672): avc: denied { read append } for pid=21361 comm="syz.6.4164" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1445.381059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.493933][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4166'. [ 1445.515661][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4166'. [ 1446.185856][ T30] audit: type=1800 audit(1757859319.904:1673): pid=21362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4164" name="/" dev="9p" ino=2 res=0 errno=0 [ 1447.045897][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1447.278227][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1447.499757][ T24] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1447.667504][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.676719][ T24] usb 7-1: config 0 has no interface number 0 [ 1448.692675][ T24] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1448.847326][ T24] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1448.962969][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1449.022609][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.066236][ T24] usb 7-1: Product: syz [ 1449.072647][ T24] usb 7-1: Manufacturer: syz [ 1449.091658][ T24] usb 7-1: SerialNumber: syz [ 1449.128640][ T24] usb 7-1: config 0 descriptor?? [ 1449.158635][ T24] smsc75xx v1.0.0 [ 1449.166657][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1449.189204][ T24] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1452.442820][ T9] usb 7-1: USB disconnect, device number 10 [ 1454.073314][T18146] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1454.983940][T18146] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1454.995515][T18146] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.215957][T18146] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1455.454154][T18146] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1455.486162][T18146] usb 10-1: Manufacturer: syz [ 1455.506498][T18146] usb 10-1: config 0 descriptor?? [ 1457.418535][T18146] rc_core: IR keymap rc-hauppauge not found [ 1457.446816][T18146] Registered IR keymap rc-empty [ 1460.705722][T18146] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1460.742352][T18146] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input99 [ 1460.858627][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4185'. [ 1460.885816][T21450] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4185'. [ 1461.028924][T18146] usb 10-1: USB disconnect, device number 4 [ 1461.094253][ T5843] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1461.573265][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 1461.580154][ T5843] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1461.590978][ T5843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.601939][ T5843] usb 3-1: config 0 has no interface number 0 [ 1461.634409][ T5843] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1461.986734][ T5843] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1462.007269][ T5843] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1462.031655][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.487652][ T5843] usb 3-1: Product: syz [ 1462.491843][ T5843] usb 3-1: Manufacturer: syz [ 1462.533940][ T5843] usb 3-1: SerialNumber: syz [ 1462.588410][ T5843] usb 3-1: config 0 descriptor?? [ 1462.657318][ T5843] smsc75xx v1.0.0 [ 1462.798905][ T5843] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1462.831702][ T5843] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1464.128806][T18146] usb 3-1: USB disconnect, device number 39 [ 1465.387001][ T5843] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1465.918307][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 1465.940457][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.199128][ T5843] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1467.083217][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.161810][ T5843] usb 6-1: Product: syz [ 1467.239641][ T5843] usb 6-1: Manufacturer: syz [ 1470.333221][ T5843] usb 6-1: SerialNumber: syz [ 1470.632495][ T5843] usb 6-1: config 0 descriptor?? [ 1470.694074][T21499] binder: 21497:21499 ioctl c0306201 0 returned -14 [ 1470.709681][ T5843] usb 6-1: can't set config #0, error -71 [ 1470.752748][ T5843] usb 6-1: USB disconnect, device number 18 [ 1471.878783][ T30] audit: type=1400 audit(1757859345.804:1674): avc: denied { create } for pid=21513 comm="syz.2.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1471.913991][T21514] lo speed is unknown, defaulting to 1000 [ 1471.932399][T21514] lo speed is unknown, defaulting to 1000 [ 1471.942841][T21512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4205'. [ 1471.953708][ T5843] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1471.967158][ T30] audit: type=1400 audit(1757859345.834:1675): avc: denied { write } for pid=21513 comm="syz.2.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1471.994517][T21514] lo speed is unknown, defaulting to 1000 [ 1472.017003][T21514] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1472.075896][T21514] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1472.323386][ T5843] usb 10-1: Using ep0 maxpacket: 32 [ 1472.366187][ T5843] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1472.420177][ T5843] usb 10-1: config 0 has no interface number 0 [ 1472.485396][ T5843] usb 10-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1472.509764][ T5843] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1472.737902][ T5843] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1473.473982][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.792821][ T5843] usb 10-1: Product: syz [ 1474.933430][ T5843] usb 10-1: Manufacturer: syz [ 1475.533218][ T5843] usb 10-1: SerialNumber: syz [ 1479.276516][ T5843] usb 10-1: config 0 descriptor?? [ 1479.463515][ T5843] usb 10-1: can't set config #0, error -71 [ 1479.478372][ T5843] usb 10-1: USB disconnect, device number 5 [ 1479.551736][T21514] lo speed is unknown, defaulting to 1000 [ 1479.958119][T21514] lo speed is unknown, defaulting to 1000 [ 1479.986722][T21514] lo speed is unknown, defaulting to 1000 [ 1479.996393][T21514] lo speed is unknown, defaulting to 1000 [ 1481.313750][T21534] Bluetooth: hci3: command 0x0406 tx timeout [ 1481.324714][T21534] Bluetooth: hci5: command 0x0406 tx timeout [ 1481.345274][T21514] lo speed is unknown, defaulting to 1000 [ 1484.344017][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.667408][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.875811][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.323513][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1700.885567][ T31] INFO: task kworker/1:1:43 blocked for more than 145 seconds. [ 1700.898720][ T31] Not tainted syzkaller #0 [ 1702.356370][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1702.573862][ T31] task:kworker/1:1 state:D stack:22104 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1702.816634][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 1702.823770][ T31] Call Trace: [ 1702.827046][ T31] [ 1702.829985][ T31] __schedule+0x1190/0x5de0 [ 1702.834529][ T31] ? find_held_lock+0x2b/0x80 [ 1702.839213][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1702.845091][ T31] ? __pfx___schedule+0x10/0x10 [ 1702.849950][ T31] ? find_held_lock+0x2b/0x80 [ 1702.854670][ T31] ? schedule+0x2d7/0x3a0 [ 1702.859001][ T31] ? reg_check_chans_work+0x10d/0x1180 [ 1702.864502][ T31] schedule+0xe7/0x3a0 [ 1702.868574][ T31] schedule_preempt_disabled+0x13/0x30 [ 1702.874059][ T31] __mutex_lock+0x81b/0x1060 [ 1702.878653][ T31] ? reg_check_chans_work+0x10d/0x1180 [ 1702.929248][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1703.013188][ T31] ? __mod_timer+0x8ed/0xd30 [ 1703.017819][ T31] ? rcu_is_watching+0x12/0xc0 [ 1703.022603][ T31] ? reg_check_chans_work+0x10d/0x1180 [ 1703.153198][ T31] reg_check_chans_work+0x10d/0x1180 [ 1703.158542][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1703.283134][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1703.288808][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1703.415495][ T31] ? rcu_is_watching+0x12/0xc0 [ 1703.420304][ T31] process_one_work+0x9cc/0x1b70 [ 1703.523147][ T31] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 1703.529697][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1703.633151][ T31] ? assign_work+0x1a0/0x250 [ 1703.637784][ T31] worker_thread+0x6c8/0xf10 [ 1703.642389][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1703.804761][ T31] kthread+0x3c2/0x780 [ 1703.808875][ T31] ? __pfx_kthread+0x10/0x10 [ 1703.893104][ T31] ? rcu_is_watching+0x12/0xc0 [ 1703.897920][ T31] ? __pfx_kthread+0x10/0x10 [ 1703.902507][ T31] ret_from_fork+0x56a/0x730 [ 1704.033096][ T31] ? __pfx_kthread+0x10/0x10 [ 1704.037738][ T31] ret_from_fork_asm+0x1a/0x30 [ 1704.042521][ T31] [ 1704.153362][ T31] [ 1704.153362][ T31] Showing all locks held in the system: [ 1704.265850][ T31] 4 locks held by kworker/u8:0/12: [ 1704.270992][ T31] 1 lock held by khungtaskd/31: SYZFAIL: failed to send rpc fd=3 want=776 sent=0 n=-1 (errno 32: Broken pipe) [ 1704.585075][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1704.743577][ T31] 4 locks held by kworker/1:1/43: [ 1704.748629][ T31] #0: ffff88801b87a148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1704.895590][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1704.934507][ T31] #2: ffff8880319c8a28 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb7/0x1870 [ 1704.992286][ T31] #3: ffff8880b853a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1705.048702][ T31] 2 locks held by klogd/5208: [ 1705.083162][ T31] 2 locks held by udevd/5219: [ 1705.087861][ T31] 2 locks held by getty/5606: [ 1705.092526][ T31] #0: ffff88814dc3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1705.167152][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1705.223098][ T31] 1 lock held by sshd-session/5831: [ 1705.228462][ T31] 3 locks held by kworker/0:6/5917: [ 1705.303157][ T31] 3 locks held by kworker/0:7/5994: [ 1705.308385][ T31] 1 lock held by syz-executor/18116: [ 1705.352880][ T31] 1 lock held by syz-executor/18125: [ 1705.367343][ T31] #0: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1705.413223][ T31] 1 lock held by syz-executor/18377: [ 1705.418534][ T31] #0: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1705.493260][ T31] 1 lock held by syz-executor/20521: [ 1705.498579][ T31] #0: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1705.543143][ T31] 8 locks held by syz-executor/21560: [ 1705.573100][ T31] [ 1705.575453][ T31] ============================================= [ 1705.575453][ T31] [ 1705.659614][ T31] NMI backtrace for cpu 0 [ 1705.659632][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1705.659649][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1705.659657][ T31] Call Trace: [ 1705.659662][ T31] [ 1705.659668][ T31] dump_stack_lvl+0x116/0x1f0 [ 1705.659691][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1705.659704][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1705.659721][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1705.659743][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1705.659759][ T31] watchdog+0xf0e/0x1260 [ 1705.659780][ T31] ? __pfx_watchdog+0x10/0x10 [ 1705.659795][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1705.659816][ T31] ? __kthread_parkme+0x19e/0x250 [ 1705.659841][ T31] ? __pfx_watchdog+0x10/0x10 [ 1705.659859][ T31] kthread+0x3c2/0x780 [ 1705.659876][ T31] ? __pfx_kthread+0x10/0x10 [ 1705.659893][ T31] ? rcu_is_watching+0x12/0xc0 [ 1705.659912][ T31] ? __pfx_kthread+0x10/0x10 [ 1705.659928][ T31] ret_from_fork+0x56a/0x730 [ 1705.659942][ T31] ? __pfx_kthread+0x10/0x10 [ 1705.659956][ T31] ret_from_fork_asm+0x1a/0x30 [ 1705.659988][ T31] [ 1705.659995][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1705.781773][ C1] NMI backtrace for cpu 1 [ 1705.781787][ C1] CPU: 1 UID: 0 PID: 20504 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1705.781804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1705.781811][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1705.781835][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 5b 5f 94 f5 cc [ 1705.781848][ C1] RSP: 0018:ffffc9000e3278c8 EFLAGS: 00000246 [ 1705.781860][ C1] RAX: 0000000000000001 RBX: ffffc9000e327ce8 RCX: ffffffff91480901 [ 1705.781869][ C1] RDX: ffffc9000e327cf0 RSI: 0000000000000001 RDI: ffffc9000e327950 [ 1705.781877][ C1] RBP: 0000000000000001 R08: ffffffff914809f4 R09: 0000000000000000 [ 1705.781885][ C1] R10: 0000000000000000 R11: 000000000000bb9f R12: ffffc9000e327990 [ 1705.781894][ C1] R13: ffffc9000e327940 R14: ffffc9000e327ce8 R15: ffffc9000e327974 [ 1705.781903][ C1] FS: 0000000000000000(0000) GS:ffff8881247b4000(0000) knlGS:0000000000000000 [ 1705.781916][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1705.781925][ C1] CR2: 00007f3f89708740 CR3: 000000000e380000 CR4: 00000000003526f0 [ 1705.781934][ C1] Call Trace: [ 1705.781939][ C1] [ 1705.781943][ C1] unwind_next_frame+0x3de/0x20a0 [ 1705.781960][ C1] ? kcov_close+0x34/0x60 [ 1705.781974][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1705.781992][ C1] arch_stack_walk+0x94/0x100 [ 1705.782008][ C1] ? __fput+0x402/0xb70 [ 1705.782026][ C1] stack_trace_save+0x8e/0xc0 [ 1705.782042][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1705.782059][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1705.782079][ C1] save_stack+0x160/0x1f0 [ 1705.782091][ C1] ? __pfx_save_stack+0x10/0x10 [ 1705.782101][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 1705.782119][ C1] ? vfree+0x1fd/0xb50 [ 1705.782135][ C1] ? kcov_close+0x34/0x60 [ 1705.782151][ C1] ? page_ext_put+0x3e/0xd0 [ 1705.782164][ C1] __reset_page_owner+0x84/0x1a0 [ 1705.782177][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 1705.782197][ C1] vfree+0x1fd/0xb50 [ 1705.782212][ C1] ? find_held_lock+0x2b/0x80 [ 1705.782228][ C1] ? rcu_is_watching+0x12/0xc0 [ 1705.782243][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1705.782258][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1705.782271][ C1] kcov_close+0x34/0x60 [ 1705.782283][ C1] __fput+0x402/0xb70 [ 1705.782299][ C1] ? cleanup_mnt+0x26b/0x450 [ 1705.782312][ C1] task_work_run+0x150/0x240 [ 1705.782326][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1705.782339][ C1] ? switch_task_namespaces+0xeb/0x100 [ 1705.782359][ C1] do_exit+0x86f/0x2bf0 [ 1705.782383][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1705.782396][ C1] ? __pfx_do_exit+0x10/0x10 [ 1705.782414][ C1] ? rcu_is_watching+0x12/0xc0 [ 1705.782430][ C1] do_group_exit+0xd3/0x2a0 [ 1705.782448][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1705.782466][ C1] x64_sys_call+0x14fa/0x1720 [ 1705.782481][ C1] do_syscall_64+0xcd/0x4e0 [ 1705.782498][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.782510][ C1] RIP: 0033:0x7fd239b8eba9 [ 1705.782520][ C1] Code: Unable to access opcode bytes at 0x7fd239b8eb7f. [ 1705.782526][ C1] RSP: 002b:00007ffe72109498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1705.782538][ C1] RAX: ffffffffffffffda RBX: 00007fd239c13653 RCX: 00007fd239b8eba9 [ 1705.782546][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1705.782553][ C1] RBP: 00007fd239c13665 R08: 00007ffe72107237 R09: 000000000000002d [ 1705.782562][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1705.782570][ C1] R13: 000000000000002d R14: 000000000016ba4d R15: 00007ffe72109640 [ 1705.782583][ C1] [ 1706.526917][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1706.533794][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1706.542901][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1706.552950][ T31] Call Trace: [ 1706.556222][ T31] [ 1706.559146][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1706.563734][ T31] vpanic+0x6e8/0x7a0 [ 1706.567722][ T31] ? __pfx_vpanic+0x10/0x10 [ 1706.572227][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1706.578121][ T31] panic+0xca/0xd0 [ 1706.581832][ T31] ? __pfx_panic+0x10/0x10 [ 1706.586240][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1706.591613][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1706.597762][ T31] ? watchdog+0xd78/0x1260 [ 1706.602172][ T31] ? watchdog+0xd6b/0x1260 [ 1706.606585][ T31] watchdog+0xd89/0x1260 [ 1706.610824][ T31] ? __pfx_watchdog+0x10/0x10 [ 1706.615491][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1706.620687][ T31] ? __kthread_parkme+0x19e/0x250 [ 1706.625710][ T31] ? __pfx_watchdog+0x10/0x10 [ 1706.630382][ T31] kthread+0x3c2/0x780 [ 1706.634447][ T31] ? __pfx_kthread+0x10/0x10 [ 1706.639030][ T31] ? rcu_is_watching+0x12/0xc0 [ 1706.643792][ T31] ? __pfx_kthread+0x10/0x10 [ 1706.648376][ T31] ret_from_fork+0x56a/0x730 [ 1706.652957][ T31] ? __pfx_kthread+0x10/0x10 [ 1706.657540][ T31] ret_from_fork_asm+0x1a/0x30 [ 1706.662315][ T31] [ 1706.665535][ T31] Kernel Offset: disabled [ 1706.669840][ T31] Rebooting in 86400 seconds..