last executing test programs: 18.830506361s ago: executing program 4 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 17.675103525s ago: executing program 4 (id=109): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e000000000001090224000100000000090400000203000200092100000001220200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) 13.55178705s ago: executing program 4 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x514}, 0x1, 0x0, 0x0, 0x4048001}, 0x4000041) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000000020000000000000000000000000000100001800c0002800500010000000000060000000000000014000300fc00000000000000000000000000000014"], 0x58}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffe, 0x34324152, 0x0, 0xb, [{}, {}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=ANY=[@ANYRES32=r1, @ANYBLOB="2c07a0532d189fa1f228b0ce4d8e581f973c4497d7e93eebf64c36b90ab3eca812a540067ad87e1037fbaaa8768938f1e2db58de47f849ea7303fa31d43650396395aac4b3a2380467bf9025de42918ed9673832c9825d25800b20f1f1767e33bb9501ea74543e2898444983775d5ae303ecaf8018e6d20d059ae565ba21bd5104c86fc44756f5ee3697b603176d9d2dde54454b6a643fb1c12cf30593009d4ba22ffef5f19ab65cff7cf7daf7e29a8106f59326477e39b7c91c4c05049fb8c8"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x24048040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = memfd_secret(0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r7, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000300)={{}, "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"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r8, r4, 0x2e, 0x4608, @void}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306033f0000000000000000000000000500010007000000c666da571ed82388d717bf3bc8143704a79159e8196f92b505a2021875d50f9e6d337d71d3ce601973d42e4779048132b8856186886ea30254c646088efe3179fd03"], 0x1c}}, 0x0) 13.431897043s ago: executing program 2 (id=119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) shutdown(r4, 0x1) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="042c11f8c900ffffffffffff020a06050074000251e1d248667eaef391a78520d338c312fffe4dc03cdcd98cd4d10192f4537389db8604444308a495f3f3b460fa6ecebc2693eaf2df7377a8f67c7cfdb39a8cd0c4622fbfcd8866528602ba8119c138765c"], 0x14) bind$alg(r5, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) epoll_create(0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 12.616098311s ago: executing program 4 (id=120): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a32000000000c00078008000840000000b10500050002000000050001000600000011000300686173683a69702c706f727400000000ef95f444c8b10f5605b1bb30c46b3837d32533a08e21653a9f2ffafc2597943af6d2042237edd8174f1fcd1129ad4d9bacc94c01e7fb80bab0c774a59f953784f1c0b4ca8f53bbd475d59ec959fbc6ce9063efb097e8766d77010278ee60df283b2f9aac0aab09301bfed5e53555c0b549672721436c83e461e535944060aefd97e631259b730f484ef6acbf"], 0x58}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf3, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000005c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000700)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0x0, 0x3}, {0xfff1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[], 0x14}, 0x8, 0x3000000000002}, 0x0) 9.390416778s ago: executing program 0 (id=126): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ib_mad_recv_done_handler\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) 9.321905434s ago: executing program 0 (id=127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x4000000, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x3, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 9.163075053s ago: executing program 2 (id=128): io_setup(0x7f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x15, 0x2, {0x2, 0xd8fbea1b473eafb6}}, &(0x7f0000000040)={0x0, 0x3, 0x84, @string={0x84, 0x3, "e9013c948575716da3bf13da2cb179e04e83fd2ce41453c79da38f1c83e2ed00631f25eeb912dcc7cc03a3a65e58f55ecb17eb1266f7d8cd27c516c7076648554dd32edcd0e6438b8670644bcefdc4c0900da121cdb300cfae54da1c8da5fb056d68309276513dff83d8b94142f1915ed4d91f6bbd3f2d9fdac34323613fc184a297"}}, &(0x7f0000000100)={0x0, 0xf, 0x72, {0x5, 0xf, 0x72, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1ff, 0xf000, 0x9, [0x0, 0xc0f0, 0xaf, 0x3f00, 0x30, 0x0]}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0xc, 0xff0f, 0xfce4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ffddd2da30c9468d6f2dc67fb0cebaf3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x4, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x9, 0xff0f, 0x8, [0x3f00, 0x0, 0xff00]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x9, 0x5}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x60, 0xfe, 0x0, "f61f9b5e", "98d16f22"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x0, 0x51, 0x7, 0x12, 0x0, 0x4}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000280)={0x0, 0x5, 0x2c, "88d275029e0cb89f49786741372b0e5809cd00def5ca042f69c0cefe9e55dd478f8799894792b7d3076621ef"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xc4}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x40, 0x20, [0xf]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x400}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "d9b4"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "2f89"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xe2}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x82}}) 8.096800578s ago: executing program 0 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.010358478s ago: executing program 0 (id=131): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffe) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') lseek(r6, 0x2000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB='`\x000'], 0x7c}}, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r11, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r11, 0x5418, &(0x7f0000000140)=0xfffffdfb) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) 7.931935825s ago: executing program 3 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000040)=0x100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000003000000ff0000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r8, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000001c0)=0x9, 0x4) ioctl$FITHAW(r9, 0xc0045878) 7.663863064s ago: executing program 1 (id=133): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000300)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) utime(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x1, 0x2}) write$binfmt_elf64(r1, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x28, 0x8, 0x0, 0x5, 0x0, 0x3e, 0xf, 0x20b, 0x40, 0x343, 0x2, 0x2, 0x38, 0x1, 0x1, 0x8, 0x2}, [{0x0, 0x5, 0xffffffffffffffff, 0x9, 0x1, 0xd329686, 0xfffffffffffffffa, 0x8}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xcc, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 6.747340765s ago: executing program 3 (id=134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44065}, 0x40010) 6.684055219s ago: executing program 1 (id=135): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() modify_ldt$write(0x1, 0x0, 0x0) fsopen(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000d0429bd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="10000000000000001c0012800b00010062726964676500000c000280060027000500000011cbb2888afd365c2ad8519a72c0b42f007a4c55e96c2d3b629410c6dc6b4200548eb8c449075b8318c485ad09cb3fa94f68f773337aecdda0a61cf7478b617bb9a576841506192bb3fb1100abda16066a7868f4a1c5ccd8ada01f364218e8a5dcde083522e7a7bcb0c5ef437b6b507de0836c13f12c5a84342729d42d703b0ccef187a03c8711bde7469d75e136f75da46658b439a8383a90e9bf5655ced4ec1e9be409df27decb8c52bac1"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.650504148s ago: executing program 3 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x50}}, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x2, 0x0, 0x0}}, 0x10) close_range(r4, r5, 0x0) syz_emit_ethernet(0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000180c200000008004d090096006500000602907800000000ac1e0101891729ac1414aaac1414aa64010100e0000002ac1414bb07948f5c8c3f55b27378149c322976f18bdef82b32cc6daec1a588dcbe4304000000d99b82bd9166316f67b8ef5c451f3af6c04482293bccd0b4b300877be7aed8c6f58db79fee38dfb8a5e005d87001bc3566c01ba0878dc1dce8b02cd27ae49e8a98"], 0x0) socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x3, 0x3}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001100010100000000fcdbdf2500000000", @ANYRES32, @ANYBLOB="895003000000000008001c00", @ANYRESDEC=r6, @ANYBLOB='\b'], 0x30}, 0x1, 0x0, 0x0, 0xc0d5}, 0x0) accept4(r7, 0x0, 0x0, 0x0) 5.524357212s ago: executing program 3 (id=137): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ib_mad_recv_done_handler\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) 5.503390197s ago: executing program 2 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xfffffeea, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x7, 0xb, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) mknod(0x0, 0x1, 0x74) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_submit(0x0, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r6, r2, 0x0) 5.478392562s ago: executing program 1 (id=139): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r0 = socket(0x28, 0x5, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0xc, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d9", &(0x7f0000000040)=""/24, 0x6414}, 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setrlimit(0xf, &(0x7f0000000140)={0x6, 0x81}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syslog(0x2, &(0x7f0000000c00)=""/60, 0x3c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x5f, 0xb8, 0xe5, 0x20, 0xccd, 0x80, 0x4a83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0xaa, 0xd8, 0x23}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xa4, 0x6a, 0xf}}]}}]}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xf0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 5.151395758s ago: executing program 2 (id=140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x4000000, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x3, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 4.921367075s ago: executing program 3 (id=141): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', 0xfffffffffffffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x3, &(0x7f0000000580)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x6) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, 0x0, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) syz_emit_ethernet(0x1a, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0x40046f41, 0x20000502) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 4.058353207s ago: executing program 2 (id=142): mknod(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r5, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x2, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2.652013417s ago: executing program 4 (id=143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x3, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.25803847s ago: executing program 1 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x2, 0x3}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x80000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (fail_nth: 4) 2.006320107s ago: executing program 2 (id=145): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.003803378s ago: executing program 3 (id=146): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f12f0d4071040403dfe400000001"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x7) read$dsp(r2, &(0x7f00000027c0)=""/4128, 0xea71ecc02a1f0807) write$dsp(r2, &(0x7f0000000440)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3661d4219c826cb4ad96a0abd6dab1bb23dbb77eda0bf4a0e4222369d5301d1b21fc6dadf4402e7ff25dd388b2b92d9ec7d7e30328e10f5ad922c76c43c598cb0681a2d22dc965cb4822caf67749fe351bcf953ad721747eda1019b", 0x7b) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r3) read$msr(r3, &(0x7f00000001c0)=""/82, 0x52) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000280)={0x2, {0x8, 0x5, 0x40, 0x3}, {0x1, 0x332, 0x4f78, 0x6}, {0x3}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010001000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb0001000000"], 0x24}}, 0x4044000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) r8 = syz_io_uring_setup(0x24f9, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x20045e9, 0x0, 0x10, 0x0, 0x0) r11 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x1, 0x2, {0x3, 0x3, 0x2}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.479950505s ago: executing program 0 (id=147): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) write$binfmt_misc(r4, &(0x7f00000000c0), 0xfdef) splice(r1, 0x0, r4, 0x0, 0x80, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004480)="b9c26168d753599e11c910d43bfb11c3f029c92f600145162f146948ff83649e20214d4f493d4878d43a0850a7a52157c2850bf22cf7ac86506c76d2b6e68b3a92418afc0e8d751c0847e2ab29567bc9ac154e9129c2f8f6ecdf3b1e01d4153c3d6ddd081d2f52da81f741c393f576537555e77e32c01d4c24ed95acc2a91344a5ac71a9b538a73a8b539054fd78477ffcc092b9565149571839141d559775bb730e45bda25239a212fdb05e0a289a37d09aa97c1b2d0e7beeba532fff5b3fd8ea38779140788d19da2e73fb9735b93b04fbfd71d528faf16fb3e44f68ecfa66ecc0b1bf206081c85d35966722e50189af5bf5764757809fe5b0f71fcd3ef0682c18407b30fdba9cc7738eaf8384c299ac1601174371400692ef393dab5605c076c5f8f63be1728e5097a7a7c4500f5e7d695456ca7d199e2452dfea678eb8ed5d5338c204a45ce552cd1c784caf99394b626b182c517647ac66678ac18f8eaf717833cd03172a13bdd72ae1adfd8bef7de1b014f0ff561cbcea00cbf128c0708499849adafd365f5449ccac4813bd4245e73be52c03042d05774702172ab7be4b5d02a58139b0940f74e461291eb660c97116046fc6f37626d8c074ac496b5fb7411f185ed5f3628cba30ea5001eafdd777c90fad6523ff3e351bceb2e632f05bc3e047ca08033d25570a8f6126564687f08b2b163da584f72527b36d889f832d08cc372dbd28e4ac5d01f928b3ecc4f8c70ad8d8740b8946f970bc1d0d55cfae389f9042a4f3154fd04b27d933cd99ead2249b50c4cb24e8669a01f80f04a56fa4cfbedd22e85e6ab5303b199a9c11226ce652bc6b8a0c100ae2bcc5dcda53fcadcb426c85ef8811bd3aa386d2527fd93aa794ce482e5928261f2a64119c7c10cb31fa5138772a57c43ba871137f82f58f8cb091868487cbca1c8393d44d5083cfe34a73a1200c75e822705892f363d399ee2b677a309d734b93e5353e5bf3cda67a3434c1a1756e689b546a229ce1b49ec051d87b21174f2267f39363468fa948207f4755a0af52cf8a1846f9662eb1ee7d369913601b7739745f26d6e2c955ccad2e7d50dfb782a78332dc07c0701dd784e7653c39169fff8c0154678bd6fc6f594a51658de6b7baf407f2d6485acaaba974b83c9562c83420b313d49aba5a9b9245fbd18d28597ecdbce6f998b301641a17155dc2ce0e62d4fd7a0a02c82a62e816507708527f9fb965418775876afdc50fb3ac8c82784afae6f98b92c944d130e37541d77ef0cfcee47a74701ae66421fc776bd79c7c36afa2362901ddd62e519055ee6cd654e84268322c0e99b3efe8109ceae8cd73dd72e300e74164db0766f143928eed749e2c40e2912dd9d57ebb6a348bde5d606e338c7d2a92207b39399a4f0fda75601cceb00651a68b76e52ecd834c82a5269ad1a242fdb8b18cb393ff7049a86f905b9a9e7edc37ab3b6cd11df571c7068f431c2f7b486777b23cf0e3bd589ec6d0cfeadc023f64634ec67e07b07565cc1bd288a6ee24c7a41eabf3747cbb7abbbad3c381da6a1b21abe5c6a882a155844d81323a45867dc6bbce9c48d53d426f2b105bfcb166cefa90343bc08b5b004f4bf05bd773975624bf098e07b3a7c1db53c372d41ac7257c9b696c80a74165bfe48bd0c6f37e1ae0beb523ff1f5fc94152ad71c93cd33b234abc800efcdffb7ce037a407440c800a467e3154968b72fa8aae80f8b653661a9e839c353a72ebb61393c991527f0d3ea406780da2acb635229c16a49ffdad88b007e9cb20d396a63f7c9f618454a2295b5a30a1eea359f88d490b2a3436608c4a7adffa7aa0e61cbb2340d0dcdad00552b5a006de96e7356f2b98865218291b16728ec95ede6feee838c27e4049cf0eab6f46c65c5024b89ba6ebcfa0545378929be28d88dcd7f1f42e33ea58bc3370ee591344f96259d82cd1b30e4205f69a9d40b601840e54e16eb711b0643c3dcb6ae97f8d261842b80a3ff84eadbbf121d0697d4744490a8a0f737786a8b4817f172eae68523569bf3db248b7c08b321b45d8cd385de22ed8a327abebd33f9c658632d2d18505317b1b9a9ce68eba93ea080b8ee400220dea4584947984491cabeccf66127611f0dc85e2784305c399f4a3c602f0787a49326bd23e4dcea0db83b601983fb98daaeb8f82e5d28e92ed5519436bcc8cd770ccd5002d0b12769a3c93b16c238d088d5bbbe86423610ab3a6840d1fd591bdf348a3a2b715b1e539a5544f0dddd83954d00ab6e8c9cfe6d446f4d9bcc912dff54b526d482ecc5805df2c259b52d6314c684c8fcdb2c790686edcc07608b5c068e91b48002f57a97ca8d78d23735a23d425b1599314f0c99f8c91e8f02f028be55e8b92e6e67375600fccc3ddfa02be04c45dd3f451f0c3d62d65ded63109a7b9b7406fed8d3e3d52eee9e120a276a05159e8ff235c52a23a2d9ac1f35d2d86557d6b7771107de5df52f49612418cc2fe60adb758ae40aac5b81559500e53dcd0d56856a86bc21fa357aac6c5215042bb9be0dc9b7a210ac4253f3710951fb5098b2233892ade0f9d33d44a980157fed2fb7a55f9e35f789139c02fe7a69578bea1ef8479b7a26f4957acfd1ac28147f215e4ba4757125e6de9ac3e1a2db16edf944daa186d1d72102fa1247bab6d6bd783945d977d642de5505a0c2015f2bd4d078c8c5faa8c9895bb247dc6559f9cf5d814b3cf534781c5931b66568252c911bc5d74d7d35dc0d84bfbd7af4c7f264380047661873bc6eef2abae5165d7daaff9f390bd4d0e2333c5867822d093627fe688f47e309235d8ef2ea0e3a5b0ca81c011fab088998f6da416194e19766f3f5fbc64c61fcb6e06afbb72dd578a964d0dd4243d0063c22adde6c4c1a243bc9c0d88b00e69f7f43be83077ff23037e1a5fc28bc86fbabd6f4a571209969b51302526bf1a18e472faa53f622f992465e9177f0fce7d2c7c247e0927415eb78655448367c77e7b3b63ec1dafed933cca7a5de7220716f8ede224eb457ed4bb5c596f16337da7000bc729730cf00783de38ac84c169a9f3ff6a7801c630ad1d801808f0f1afc1b43f3e1ac84352571292e5997bcbc9803881261ae228432fbba69a1c73463da7ba3206cc24b8a0c12b757196ed4ca52e42fb88c04284dd77921085fc81d790fc4b9b2e8923d5d90fddb07d52133dc885f03219a50fa152391bfe8d064850a55ccdcaf2a34b39942c7ed373996ce0158f5aaae1c9762ec439ef8fbbbdf5ca4afd73dd7d753d4ca749e225ca511976c354d8035fe6e71a11f4ea0a0b4a70361cf0ce9b9d97cf97fdc4c5ee3c52a4bb5b22c696ced8be0e28f23539d75935943a885cbd9b2cd2899e1f920eb3e3d13dd5f8665a3a839d2920bc13215bfbda9d89c4e87ca3a05d5cb69d3e9c730b0e480655d9b2017da5c82285382aa8e96dc526dc21088d69a85130fd97eb17e306d49f04a8c953c223dcdfa56ad259fd56f59e9b3be8c78cb35b19ca61a7f0a0630e2d02f805f385c90a5cc5910128395bf4e5e42cce87e86acf1c7332b68d4b52207485d45f4ffedc6b569fa3f916d4d46507d9424da6f1796c612a8417d63c53c877e9ddd141532a8600831e2982c4ff43bbc4884e3b9f168552f8ff7508dd8d892dcae3fbd1fba5d0817f3911c5adf6ca414515e9fd0f6e80aa06000000000000005c508b0064b79a060473816019a92e52a9309abb0cd921d052d01bfd98fc7951d795e46ea996ca7ed908c385b206d5bbf05728e503f257e78f066a34649175eebaea0e3bbdb942ceb0427efea3a532adef6c58c2cffbd24546034151ea47244c7c20a56f54e8248c94eab49b0577429f196290eb5bd81bcac1ca5618d7d21152f80a521b4433b366e1f3d5b4e0a8e6ec65af7cc75c2ebd09c63d93c758e67974feed1cc037aa1f0e5b8efbfae0a365b3591e4f2b187e14ec7cb986215a038f0ba1f6b593e498339e67f6a9cf77fe7f3de87fcb1ee7820ac7a79e377084ec9567fdc0110e7e23f4fde408847289b51e8578651284f5d07fe05f30b663d8ebbe4f31772e8f0db0c1b9c67e26086cab0a437326422e4b9d4cc684d8e71acdfabebeac531163323b9d5bc0e18bd9f2634676c5b4135aabf63d1460fed2149f28ca2a94f3b70ecd1e044cd29a12b5a49bae66bd5588a60a54b706949f7ed0a25e015474863b3180de23c57a7fda9b877e81aca83abbd242de87431fa29d976c434c3b05749d148984f8d7dde32552f2755cd63a74adf278a0ea50a57d66e1c328ae3bc618b0fa6d25514342f1e67c341e0d5596067a856888da1da646a6df00b5426a5b2372124ef55dba574f1384774fa22b478abd41473fb2fd000fe64933852b8236ee7350e8f1decf59a8c770cc78d17a94cc48fa794e40672f9b96d0c5aa2aa45ad8b5106160261f8359468b373df298917e1e1f087911eb3ede54635c3522f32045689659d29ecfe5ae5aab1a10b58346fa8fb07ab88d955a35e969677b90115ac1860e007c78bd4d71c4800b69690f3f7df1c67d4ec884e5d3be6c1a8c400ab64856ec5da45bbb7916ff9879d1b0aa840f42480aa1af7695967c739800d059428ca865680c5d604be2284f9e42ff3c922e5aa007e16b88de48178ae4676416c049af6aacbb6f9a93237c0986f5d69ea81fda80f5406b97468443d0c3596a89763c76cf6e8d156f075ae1ab5643555cccec0fcdeb69bf1f84ad67eb5688a19a3599a50175faa594f1d5c4c7f219729031b3b5d07fa6fba50dec701f5745edd067b08c7fa4985d9bf62b9677732a5d84c3aa04ce8f764ca3d9097aa18fc749948e471202b83b1879e1e7adcb61db720a73eb634f186499456e1c1fde97af78b34457090ed46eb5719edea8731f850109776d457bdf805cd8ed04d49c6bc9b99a866d0cfe773e088f020bdb2a1724cfb431f877a18aa96bdf936031cc92388f5dfe96737583a7fc6f57216f6fd6df77950d56e7545ca620bd5f1ef7c778686c9330493c27be0b2d3d23f0febc2592ce216c49efb9bf63c1043912f31e68874a4b24e4505a5e1905e5162120ca4f450613c3310eb8aef5d03412a5f24eeea37e5ad169009852e4419c02aa005a60b35fdc0ee38b1ea25f4b4b1157b687f0a05538a8e2ad23f5d0e93d96f368a43e649b83d7e235f5087eb603e29c0a962cb694b9a735bc52c3ed31a4f2ec8df2f031f2901e4b8959426b391989c831e0508c5da9f8e63b4c40f633f2ed358deb57692a0c7f8c51825c14d6e50d34af6d1d4a2a5be22c7da7db069fe031348f0cda5e624a19a58d15788929466d566e37603918eff9998fd0732879518eee0c4bdd48bcd6588d46ed2d103d56a5418bd7eb67f0d2569464e7d0d5636e2f249f0230e277ab112110ba76878f1211e15c1848669d846ac2364c5e1a1f3b1a39aa6df01932cf5a672d5afc0e8f9b7b9394b8cb1f9e49a06c9777c50b551c173af59090eddf11882b090779bd6d1fe41935e4c1c5ca2025bd4d38d912fade6e8e613d7dc73ffe578362a26361672fc1d9c42cfea9ee11c04db1a3821deebd5dc34761da811360a5b603a8bc820cb6525ad8e47b92cb2829c34dfe54e8ff2aee4d9023fac31c8f5caeb6bbf23b9c41df5d55e431443a91bd0c0cf61bb9b0cc10a3ab22977bceed06e6fa0d1d28a979e9acd51ed323f2f0912ca7465190020b2e1b21d013d3448cdb5de8a7340d6ee76eaecda4fa56fb002e629c1a5be282db354db5aa5dec70673f9c0f44672dae517204c00bcce97dfe191e2088f87e16911eed0b743d181bce7de164c0f6cafab39c4b053da580763065cddcb002f87de7bceb026b9742b5ac9f87c0f41de6c9b53a0f016df8fc81105bc553c713a6fb9010e2d65b768fe6376914760d9b9b1634f062adcac5c81263e2a7ddc1bc69467e51e1a4137105bcb243cf065f98535200634f11360459dce4caa64f558cfe1f0e6052b43898da6fda0bb5e2f05e9f331182a5d580c44ffbc57109d1ac8cdb79323548029348ccc81174f2021474d1bc92681b3ad8d92c347623c339bdfa4fcc9c65779ec650c6b4103c1b85eab28ba98cd460fc725c717c3d7217a9299e68005b1dfb9a240e25637b8c80e5f82f32c79010e4bad2f487485293bd43eb4a070ddf8501119b692e3496a3a733981122c584e88d256cae550714680cb2d8e96f1b89a1a896e3856156cfbeabba0ac13f4f222848c2edd287150b40046e91ca8154f9d9d911324f70a892316c7fc94fa3b90d716dfb1fc2141450fa9f61d427bad6306e9bcf9de3f7976ccb1001d9cf4b04c211e69a6f33104e5c1edb47cb6bee6f6a3a58e0a224e36a650fd4aec813f91e0328963676fd62fa949758edbb02597ea29fe4e35247034e5248d4ac350ef30b3b0cfa74013d37dd885f25968432638f1a56b07c145aed8dda2c266bf64006051ff73d5b19591ceeded48a19dad2b2b598d96484f6357900d8eb29d29b653aaadfb972dfcb6848b72087987600b2dffed833bc07524dc3754e388eca6114f480f78b5a20e4bf5b1fc6c34bee8529142ef4a0095d383ff2e1e27150b3e6e557578a376f4c9139806184315ac616ed441b8570ddf220da43ee54a85048d5be78d2c7fd9ae4dd1ccd6ec2b052f478486535d7fa7de13837dde391325e60579f226e727b73d8741d5a27fc3aa8c003d24d32c1ae145131b2e8bcede3decf65b234a4aa793cc6d99ea5f4c62a639cc16f0f892ee6fef2ad06e49963a90e668957188d6f044caea81b5a6731f92695689e54725c1db10de606f9e9215865852fd78563f26968e7806d37d157807c7bf7f45f146671ab76f3f3c8f6f993b77a787a05c3383eaee54846303e72e2bdd65e76de6de027bb062898315a2b1389adebd26f7267f36d94e17e82399811724cc5b0e191e56e2a2171ab736c5be14835a010d3a002549c7cb9a9bb3054fa1a79524fe6b37485d1935ab69dfbee041653f548b5d42b6a2ab0e7a722958212ec3c93ddcc5757c80e354e0c5163126ae4ea069b0eea1d641fe9908d3ef14b9de4374ac7baab0f1b11575dd6732ae5a7f5b2824322705b09710224b8c7f4fdf2526f99e6062d7e838b6f164947382533aa2ceb64291cfa9be21db4c11a3593030be28d432d49fb0ad4ea929fb2c63241fb0065b4a2178442b72140f6545507fc9f30f01d47f09e4b4a0a0b64d89ce12b2e458ff112633dfca7227456ed5d8d5281727dd1f8a8631c21012c4c948387468ef2e45282197ada9cbc435f76b9b950a90ee04e6189c8176f82efce0b5c66bf7c688cccb6008823ca437a8d995141e5fb230852c56b7a67d992b232aa941c7eccb6de8dfac56ce7659dfca36dbd83877a1705d5478d08e7727dfeaa1c71ce11dd4e50875dc3e3b2e9f3f4aa2b18265d5869131bca028a27c25828836f21639b51cb1da11e45e27f68a291de37f85b406e0b9fc75ea8e039fc91dd67a71c9c4d3a282e11b8cd2b1968698ce3b809e877282375519a0016777d1a5492a4ac67f2646381afb19fc46fe34807edc6ae01db02ffd3b2e763c59994e8d329b34239e6cb04e225c2f16adb1123a9b1589fc744c8efb49e7a414a3bef552859f051079bb80ac9955f67acb0cbc91c86b4c67daedcf79139c4de362be782c23d4997121ed5d8e566b254f330fef0ef26a063dce23b745cece11c71349abe36438392e5f85f749d0e16fea9294c22d9e2711d76d9552b2dbdfadaed27ed8e352dfd98d00c3465e97448ae81757c53fb80e4b582405da2ff311943320dd35a9e681786f96f93f879e6bccc5726a37b02e4b3c41b7e15a41a035492cab412c2592eda26fc72936354549b89130beae339fffd2a2f8889ce05fa6910963a4eb775dd47cb73cd622ebf833bb76536610da89384ef4a4c29ae2a3c5bc1bbd6c7411f7b17ac56f68d8543f622436d379bb8a19b1db0348c5665eae9524075f54a276df0e97ed27271b354ddbb75dd2c59a316438e8354127e464ef7de5b72809a5e69ce4de70778ae41ac34504921ee4c287817935193b14ec6f62d56519f3d3a0954c8c3818e0b27ca656f4f1e1919560e1424a111e5676bdc4595b6791acb2a786e6e66f96405cc397dafd775b489e431eeace7b6e97a1a15b34afe10c5f0f76b2206dc4a74ffa9ea6fb532a166fd514ee738ba586cf5939b4b3f52363330b956aeac78cf42e834f43114c9c07930510f66c6eb5dad768999399be2a4718588e88e5671cc3b0cd6da5662be4dc3802d4361a1f56d29cc36764a8985c6df278e899018b5e78b9c17474f48813d412379581f567372edc4022d4ca19e027c69c8782048b8b9fe6fb48477a3b77e5ade5fd60a26fad2f5fa96e604efded1ed5a46ae35bbeff676b87500f60097a3cb55c9a24b307d4ec20a7882f4939716e2b5d620522b59cc375fb531ebb81ec02cb061e4bbac688bc556fbdc69e0b19959086e7f670475a8ac9d723572a5fd632ae69447ff2234e3a740fd5e73428d0ea09c0ca76e3743f9d4bf53007b659ff141c4e0e792c26ab92daf7405d650d2a4d501bc87916bcaa051cc6930a9613dfc608052923920c9eea9981362b12ceeb7e867bf873d645fbc69e1dc720e814a6319edd88369720bf40d98afd50c6fa5f15b96daccac7828efddbcc5b05c0655dded83a3916d44dcd166a040324aa4db4cf154e6d286f97c6fe581285781e82bb10e674c01781e73e742873db97fe1b44eb8a895d4b451f16e9f5829556a40a644084e68ee41b9ab3a42a067a03d51c252799296e81d62dcd3454f8fbb7816d6054d7e6e77bb6fdc8d588ec5a01b3ef993b677d8ced4a52a3afd370a50ba24558ec6b3ac85c3f688c9bb2be4c02c510070e3c444fe164d093b5c5682a992c48baefcedc584be0288d7aa2385492dd1b73e2e7cce35b05643f8c4547ad975266eebbd2c10d1ab327cb007bca9afc65fdb58c78bf8c1009f1a2ef476d1901188a1a341cd99ad33241a483784f78fbd0d920f541158fb8a46bd80f3b6821e8b3e110ceeace4c20466d194e5715810efaf3d890da7d9523de6131fba9b9572461365547d43634c9972562ae66e1b61f3648c9c379650db57eaeaaef31962941b3d2f77cee6ecf676a9bf1b3ad6ce73def006856c97d8f906f7a136d659e7b6e8be8f0375f2eab63f90d5ca97477cdb5d1719536e16f78ec07329dafc0d123d43d2bc5371154ee3f5cf772035941e0e3f98f643e90c61e141b3ecff82312bdac1c4f5ccc5ad67902e939ccb45d4d9763d2ada6e64d20d17b017cec037605571024c92e3ef8f6089e118e1094fbf31e3ba26c0c7f42cac78d521db284d79f21b55c4c3063e5cd2f8e33582c26ef1d444d39f97423f4d7408e5771eef088a8572f55cfed3d334f9ebbdf4ffea2f68bc596e5de3e70dab34762dcf0622604ea102722cac9d09603a127307d4bdb7cdfd479e35cb4dbc3ccaa0b0f82fc00cc2e02ae33dc7a6891019b94d63def846a3ef6e03c12f8a0ea9b3986f9e999dd8ff862b7a34cdf4080f28463de3c907d7168b325bc30b81575bc570afbc00ba4bbf9ffec388c927baba176fac335a6c623ac6921ff82174fc06ea0234e73d17785ee9884fe5dcfe9251fba39beced2fa0e9d1682c83166e5e5c9684f30a67e11bd490518c132f28ecd24ac8878ca4274efd0071affcdf485ac85e352e0c53df415a0feb0710b4867ba0b26f6e5eeb9654323a1f6d5634a7cb835ae945ed71de19f09a66085f4e932f04d1320a6e4fc9138ed3b343ac9b2c50a169aa4101edc43eaa41317fdc48a0131e7ce0a9a97f0ede09fe67624e85732802213bb18d35c833895e0fd040d90c1b56eafdc5cb41664403529e37754c1bb7e20ba4ff0ae3d2aec9c27aad14cd1e37f36bb7ff40327e0e301075dab7beda9be262662c510283a26c89d246c01888c4bba85ee306e6e62966219262502400bd0a966f5a97e14e85c4cee2d04e6fef5ae9fd60acf40278ee46d2c879556b48966a4b029b3d23c38987a0ba27bb878c614812d615c8d4fe2998b0ed69a6679d3ee3600b3cb066a135613a44436b4f515ea8ab5404a62c89735f694e83fd539e92dc82f3225b5e6dc87f0dfbe36222fa543213887de2b9b6b3f267d890e3cdb2653c1b824ad92e872969ffd6ffd6908bbcb02b4bc3220a3d836f8dfb573fa43ccdbf96520184d2cd88d125532c2554c3d0fbfb05703450a4ba07cd31ae678218598f5ed075e3bb4af0ca7548fb35492050b1cdc899fff4133a6b2331d890fbdbc96c699987056393ccb03382a28655c83ad5f4d56e010eba50a0b42708110ed5c58f5c585712c7f2a90a9004cf29f6ae10d7c4e3d2388f28f27433d2a4ffd97d980d816dff4592da7874724cfc46497458beb188e56444fbda15b9fb7d333ddfe726b9c292168320bec896747532ce215856530d3e961cc8dcfcf4593d65e04c5749abe03b41bda5e85ce8b83460fbe5ef8d7f1de00f8afe579ae8397ff9d18056ebb70693e4c3d58b4343f4ebbf0cba84b005a20fef017d842adaafd2de1feb531be6595717014b97935b940b0cc520dd7f2f05b0ec1b27ffc2f093a960cc1f472be441f2e1126995556dd690fcfab21d2bc2693ec4acced8c47db9f4966299c2ba5c0ec986c333bd7c9ca30d20310ff9454d12430714419dcb1795d027fa7ecb5c10a563a3ca4143afaf8468e11d292bb08d212499780cf5fba8c77a1c45ae901b7cc3eeb50a3ef2b4efe0e7721d117104c580ad31c3a00b88ea4c04ba21e556ba25dedae8e7e76763e7ffbc96bc019a90859cc979fdad86e05af9c49a328b2ceec6ada420e5a28dabdec4a8ac543b3555a957d43dbaabecba24610ea0a892503b901a5a03d31386f85410f4078633c969c1cccf68e3ed6d3c30ac9a535c4b9ee5bb4153759036dfbf6f1e1b212f7d93fe6feaff84a074ab00e2de915faa58fc5f7351600f5ae3a60dbed3f6cb5b21515bb46123ac98c55bfc2dfdba5eaf60ef39ad0c426d4bd637d89a7c8f85221f4aed051f30d4c446a34a77f4e3b25dfecf90974f9715d49c12c21f44bb25ebcb7ac66180d9b348844911e15debebfa76b88a810204dfe368d66a43a4fdc33d955f5de415c2e3c944aa16e5c771e24de67dda9d4d8610c490503e0b8dd35a835cba4a9093e0e9a238881c8bf010ca6b8290f6e8dcaf906ba6b716e42a22ba484363f0d298e63449d717c07d83c3812aed49b7c2a89c661732205e0721a75814015002c4757f9ffeae283ff4d24331e66d5a822c54e35388a1b503b0a6df6875b5a2f2f3fad8703e6d32d319ac83fb6e87c63fdeaa2cbd2a88d194b8173e8d459ae67c7c5361eb0db27d8f463ecdc74cb10c08624846e78123099ff119bcc7193410f4dcbcfb43ebd00111876c5bae70753a30475d3632205cdafede8300a8d23a7efe95483cb23cd45e0256c8a4874433f75f085461ec1dddd9b6e8725ae59d17a17bf3c0c6b1adbb2c5324383b5f5dff4fbc6cad9c851786c146b9f3e8a2f2472ccaede0549a52615b68d3dcb5ced84eb8caf0f337aa2be6e737a0f4d22ef397321e180c00", 0x2000, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) write$binfmt_misc(r2, &(0x7f0000002400)="23d8d8a9dc017802ca2558fdb4e3bac10f9abe52b684a150703df3577dbb4e61d1220fcd9e8428b31032c249d41bf55e1c63d9d5e1868ab9", 0x38) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) 1.247102275s ago: executing program 1 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r6, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x2, 0x0, 0x0}}, 0x10) close_range(r5, r6, 0x0) syz_emit_ethernet(0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000180c200000008004d090096006500000602907800000000ac1e0101891729ac1414aaac1414aa64010100e0000002ac1414bb07948f5c8c3f55b27378149c322976f18bdef82b32cc6daec1a588dcbe4304000000d99b82bd9166316f67b8ef5c451f3af6c04482293bccd0b4b300877be7aed8c6f58db79fee38dfb8a5e005d87001bc3566c01ba0878dc1dce8b02cd27ae49e8a98"], 0x0) socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x3, 0x3}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001100010100000000fcdbdf2500000000", @ANYRES32, @ANYBLOB="895003000000000008001c00", @ANYRESDEC=r7, @ANYBLOB='\b'], 0x30}, 0x1, 0x0, 0x0, 0xc0d5}, 0x0) accept4(r8, 0x0, 0x0, 0x0) 894.429375ms ago: executing program 4 (id=149): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) io_uring_setup(0x2c4b, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x0, 0x1b1}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000e40)={'ip_vti0\x00', &(0x7f0000000dc0)={'tunl0\x00', 0x0, 0x8, 0x700, 0x80, 0x3, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, {[@rr={0x7, 0x17, 0xe1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @multicast1, @private=0xa010101]}, @generic={0x83, 0x4, "bb16"}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x6, 0x6, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x66, 0x7, 0x6, 0x29, 0x0, @multicast1, @private=0xa010102}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000f40)={@private1, 0x0}, &(0x7f0000000f80)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000019c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="b1090000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7001028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000034000400060008240600000010000618000000007f000506030000000600f7090800000007001f00020000000900f41007000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000f00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400010100000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400a0a7000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004009000000008000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffffff7f08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f486173685f737461747300000000000000000000000000000000130000050003000b00000008000400560d0000080007000000684a1ab32ac47787cd4c64957b00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600cba913665adeb7324712185ac5aafcda68583d2ff3103a87b1b03dc20f137051a3ae209f66898a704f15d601ca451e1ae27344bc97c62305fa1022360a9bc4fb0fde53e9ea850210bed73ba5ace5c0e40469eb6463801fc0378f874199050000006e7235687f85077dae87be46d701ef04c03a44fd0df67c77bc947cb1990aa9b124e0b146f855ae3998848dbb4848986bf0e1d4657dfb0e4020b58410be3ce4c87eef5114a32ae69c7e", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000010008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040071f20607fffffffffe000a02010000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008d02000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="000102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400faffffff08000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=r10, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="3c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040000f0600008000600", @ANYRES32=r13, @ANYRES64=r3, @ANYRES32=r14, @ANYBLOB], 0x9d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 139.705432ms ago: executing program 1 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r4, 0xd2a6a000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x518, 0x9, 0x7}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "032f7dc5eac2b744", "4314d052de8102f8c130b8e9b7a9709b49e129e9f31784f87762a357b23e1551", "c985764a", "b168717019bf73c2"}, 0x38) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x64, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000001}, 0x10) 0s ago: executing program 0 (id=151): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setrlimit(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010400000000000000000100000008000a40000000000900000000000000000000000900010073797a3000000000080005400000002514000980100002800c0001800800014000000cc9140000001000010000000000000000000000000a"], 0x78}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 51.545228][ T29] audit: type=1400 audit(1733639778.809:88): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.550302][ T5800] cgroup: Unknown subsys name 'net' [ 51.568027][ T29] audit: type=1400 audit(1733639778.809:89): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.595435][ T29] audit: type=1400 audit(1733639778.839:90): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.737548][ T5800] cgroup: Unknown subsys name 'cpuset' [ 51.745239][ T5800] cgroup: Unknown subsys name 'rlimit' [ 51.890890][ T29] audit: type=1400 audit(1733639779.149:91): avc: denied { setattr } for pid=5800 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.922737][ T29] audit: type=1400 audit(1733639779.149:92): avc: denied { create } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.946405][ T29] audit: type=1400 audit(1733639779.149:93): avc: denied { write } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.968523][ T29] audit: type=1400 audit(1733639779.149:94): avc: denied { read } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.988973][ T29] audit: type=1400 audit(1733639779.159:95): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.992688][ T5803] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 52.014032][ T29] audit: type=1400 audit(1733639779.159:96): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.046203][ T29] audit: type=1400 audit(1733639779.199:97): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.960542][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.892412][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.914588][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.934536][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.964186][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.971709][ T5813] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.979080][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.034430][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.043591][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.051781][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.060350][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.068470][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.084562][ T5819] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.124075][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.141289][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.154277][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.164152][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.165403][ T5128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.178907][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.187263][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.194851][ T5128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.202195][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.216867][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.224452][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.231719][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.243516][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.262943][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.272440][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.280649][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.288475][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.296022][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.454972][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 55.617467][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 55.683078][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.690521][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.698093][ T5811] bridge_slave_0: entered allmulticast mode [ 55.704771][ T5811] bridge_slave_0: entered promiscuous mode [ 55.739540][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.746955][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.757000][ T5811] bridge_slave_1: entered allmulticast mode [ 55.764841][ T5811] bridge_slave_1: entered promiscuous mode [ 55.789652][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 55.832479][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 55.847952][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 55.866152][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.876952][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.956684][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.963772][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.971878][ T5820] bridge_slave_0: entered allmulticast mode [ 55.979630][ T5820] bridge_slave_0: entered promiscuous mode [ 56.005570][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.012696][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.020162][ T5820] bridge_slave_1: entered allmulticast mode [ 56.027101][ T5820] bridge_slave_1: entered promiscuous mode [ 56.036774][ T5811] team0: Port device team_slave_0 added [ 56.088458][ T5811] team0: Port device team_slave_1 added [ 56.107232][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.115152][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.122282][ T5826] bridge_slave_0: entered allmulticast mode [ 56.131967][ T5826] bridge_slave_0: entered promiscuous mode [ 56.139974][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.147233][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.154468][ T5814] bridge_slave_0: entered allmulticast mode [ 56.160952][ T5814] bridge_slave_0: entered promiscuous mode [ 56.169474][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.186804][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.193779][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.219931][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.231628][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.239188][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.246513][ T5815] bridge_slave_0: entered allmulticast mode [ 56.252980][ T5815] bridge_slave_0: entered promiscuous mode [ 56.259911][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.267102][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.274433][ T5826] bridge_slave_1: entered allmulticast mode [ 56.280940][ T5826] bridge_slave_1: entered promiscuous mode [ 56.287562][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.294840][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.301957][ T5814] bridge_slave_1: entered allmulticast mode [ 56.308824][ T5814] bridge_slave_1: entered promiscuous mode [ 56.316359][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.332810][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.339886][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.366111][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.377285][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.384585][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.391738][ T5815] bridge_slave_1: entered allmulticast mode [ 56.398843][ T5815] bridge_slave_1: entered promiscuous mode [ 56.448841][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.459996][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.474413][ T5820] team0: Port device team_slave_0 added [ 56.481699][ T5820] team0: Port device team_slave_1 added [ 56.499845][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.510439][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.548069][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.561960][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.584981][ T5826] team0: Port device team_slave_0 added [ 56.614891][ T5826] team0: Port device team_slave_1 added [ 56.622952][ T5814] team0: Port device team_slave_0 added [ 56.632921][ T5811] hsr_slave_0: entered promiscuous mode [ 56.639502][ T5811] hsr_slave_1: entered promiscuous mode [ 56.651976][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.659486][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.685643][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.717668][ T5814] team0: Port device team_slave_1 added [ 56.727846][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.735291][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.761626][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.775629][ T5815] team0: Port device team_slave_0 added [ 56.782983][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.790055][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.816215][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.845414][ T5815] team0: Port device team_slave_1 added [ 56.852020][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.859335][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.885728][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.929955][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.937254][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.963495][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.976893][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.983856][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.005084][ T54] Bluetooth: hci0: command tx timeout [ 57.010646][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.036744][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.043704][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.069997][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.096864][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.103853][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.130793][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.157126][ T5820] hsr_slave_0: entered promiscuous mode [ 57.163580][ T5820] hsr_slave_1: entered promiscuous mode [ 57.170052][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.177842][ T54] Bluetooth: hci1: command tx timeout [ 57.183361][ T5820] Cannot create hsr debugfs directory [ 57.203121][ T5826] hsr_slave_0: entered promiscuous mode [ 57.209946][ T5826] hsr_slave_1: entered promiscuous mode [ 57.216341][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.223908][ T5826] Cannot create hsr debugfs directory [ 57.250694][ T5814] hsr_slave_0: entered promiscuous mode [ 57.257241][ T5814] hsr_slave_1: entered promiscuous mode [ 57.263177][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.270856][ T5814] Cannot create hsr debugfs directory [ 57.324249][ T5818] Bluetooth: hci2: command tx timeout [ 57.330052][ T5818] Bluetooth: hci3: command tx timeout [ 57.336426][ T54] Bluetooth: hci4: command tx timeout [ 57.373351][ T5815] hsr_slave_0: entered promiscuous mode [ 57.380187][ T5815] hsr_slave_1: entered promiscuous mode [ 57.388922][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.396680][ T5815] Cannot create hsr debugfs directory [ 57.553075][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.564662][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.610799][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.619285][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.704198][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.718319][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.728241][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.739581][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.800711][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.810579][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.834253][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.843905][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.890615][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.903610][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.913068][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.936016][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.994045][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.056270][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.067489][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.079247][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.090783][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.103277][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.120918][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.128298][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.139533][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.180499][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.187610][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.220925][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.242073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.249313][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.267186][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.274325][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.287837][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.303331][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.355946][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.372361][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.390153][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 58.390169][ T29] audit: type=1400 audit(1733639785.649:111): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.416761][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.434214][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.475754][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.482850][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.503099][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.510297][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.545241][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.552378][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.577561][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.584703][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.637600][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.702224][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.775339][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.793748][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.811362][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.818560][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.834352][ T5811] veth0_vlan: entered promiscuous mode [ 58.849592][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.856730][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.885260][ T5811] veth1_vlan: entered promiscuous mode [ 58.916213][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.979120][ T5811] veth0_macvtap: entered promiscuous mode [ 58.988609][ T5811] veth1_macvtap: entered promiscuous mode [ 59.003490][ T5814] veth0_vlan: entered promiscuous mode [ 59.025098][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.061823][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.076867][ T5814] veth1_vlan: entered promiscuous mode [ 59.084911][ T54] Bluetooth: hci0: command tx timeout [ 59.105118][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.153074][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.165174][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.175773][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.184779][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.203054][ T5820] veth0_vlan: entered promiscuous mode [ 59.211107][ T5815] veth0_vlan: entered promiscuous mode [ 59.222744][ T5820] veth1_vlan: entered promiscuous mode [ 59.242650][ T5814] veth0_macvtap: entered promiscuous mode [ 59.248889][ T54] Bluetooth: hci1: command tx timeout [ 59.276221][ T5814] veth1_macvtap: entered promiscuous mode [ 59.283705][ T5815] veth1_vlan: entered promiscuous mode [ 59.332774][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.341451][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.353500][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.366955][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.388938][ T5820] veth0_macvtap: entered promiscuous mode [ 59.401299][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.413190][ T54] Bluetooth: hci4: command tx timeout [ 59.416976][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.420065][ T54] Bluetooth: hci3: command tx timeout [ 59.433994][ T5818] Bluetooth: hci2: command tx timeout [ 59.435277][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.458011][ T5820] veth1_macvtap: entered promiscuous mode [ 59.475324][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.485246][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.494105][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.502809][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.531269][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.546447][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.558604][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.571736][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.582735][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.605195][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.605983][ T5815] veth0_macvtap: entered promiscuous mode [ 59.613150][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.657163][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.670023][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.681801][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.693170][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.704944][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.720974][ T5815] veth1_macvtap: entered promiscuous mode [ 59.737689][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.746765][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.756129][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.765559][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.787596][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.796057][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.807692][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.819465][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.829682][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.843517][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.853536][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.864178][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.874802][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.895158][ T29] audit: type=1400 audit(1733639787.159:112): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.YXrjZe/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.919679][ T29] audit: type=1400 audit(1733639787.159:113): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.942794][ T29] audit: type=1400 audit(1733639787.159:114): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.YXrjZe/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.973780][ T29] audit: type=1400 audit(1733639787.159:115): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.996712][ T29] audit: type=1400 audit(1733639787.159:116): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.YXrjZe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.030784][ T29] audit: type=1400 audit(1733639787.159:117): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.YXrjZe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.063144][ T29] audit: type=1400 audit(1733639787.159:118): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.066816][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.082976][ T29] audit: type=1400 audit(1733639787.189:119): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.120523][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.120545][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.120555][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.120569][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.120578][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.120591][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.121344][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.131195][ T29] audit: type=1400 audit(1733639787.189:120): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.236305][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.249764][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.259402][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.268744][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.314810][ T5826] veth0_vlan: entered promiscuous mode [ 60.325162][ T5826] veth1_vlan: entered promiscuous mode [ 60.351718][ T5826] veth0_macvtap: entered promiscuous mode [ 60.379302][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.387563][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.399917][ T5826] veth1_macvtap: entered promiscuous mode [ 60.461368][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.475515][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.483365][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.497866][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.512098][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.525354][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.535809][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.546859][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.557896][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.590278][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.609245][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.618146][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.619500][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.636794][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.638408][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.646642][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.646658][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.646670][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.854806][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.926492][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.988311][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.066252][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.193541][ T54] Bluetooth: hci0: command tx timeout [ 61.197379][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.215540][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.227874][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.236755][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.303202][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.324267][ T54] Bluetooth: hci1: command tx timeout [ 61.372503][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.395472][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.443689][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.485218][ T54] Bluetooth: hci3: command tx timeout [ 61.490761][ T5813] Bluetooth: hci2: command tx timeout [ 61.496488][ T5813] Bluetooth: hci4: command tx timeout [ 61.532885][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.541060][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.602241][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.605646][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 61.619168][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.644344][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 61.745029][ T5904] fuse: Bad value for 'fd' [ 61.762629][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.770725][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.213857][ T5922] befs: (nbd1): No write support. Marking filesystem read-only [ 62.223782][ T5922] syz.1.9: attempt to access beyond end of device [ 62.223782][ T5922] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 62.327768][ T5861] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.972903][ T5928] netlink: 228 bytes leftover after parsing attributes in process `syz.1.14'. [ 63.081780][ T5861] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 63.092989][ T5861] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 63.258537][ T5818] Bluetooth: hci0: command tx timeout [ 63.371670][ T5861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 63.381994][ T5861] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 63.393344][ T5861] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 63.414139][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 63.428405][ T29] audit: type=1400 audit(1733639790.649:160): avc: denied { create } for pid=5930 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.455532][ T5818] Bluetooth: hci1: command tx timeout [ 63.648090][ T5818] Bluetooth: hci3: command tx timeout [ 63.654125][ T5818] Bluetooth: hci4: command tx timeout [ 64.017810][ T5818] Bluetooth: hci2: command tx timeout [ 64.039083][ T29] audit: type=1400 audit(1733639790.659:161): avc: denied { connect } for pid=5930 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.064337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.091867][ T5861] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.101056][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.109303][ T5861] usb 5-1: Product: syz [ 64.113618][ T5861] usb 5-1: Manufacturer: syz [ 64.139423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.154720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.233836][ T5861] cdc_wdm 5-1:1.0: skipping garbage [ 64.326609][ T5861] cdc_wdm 5-1:1.0: skipping garbage [ 64.358821][ T5861] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 64.362163][ T29] audit: type=1400 audit(1733639790.869:162): avc: denied { create } for pid=5930 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.405333][ T5861] cdc_wdm 5-1:1.0: Unknown control protocol [ 64.542428][ T29] audit: type=1400 audit(1733639790.879:163): avc: denied { ioctl } for pid=5930 comm="syz.0.13" path="socket:[8632]" dev="sockfs" ino=8632 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.635652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.639865][ T5861] usb 5-1: USB disconnect, device number 2 [ 64.804162][ T5951] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 64.859557][ T29] audit: type=1400 audit(1733639792.069:164): avc: denied { create } for pid=5946 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.366061][ T29] audit: type=1400 audit(1733639792.089:165): avc: denied { ioctl } for pid=5946 comm="syz.2.16" path="socket:[8647]" dev="sockfs" ino=8647 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.392103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.470715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.823584][ T29] audit: type=1400 audit(1733639793.079:166): avc: denied { create } for pid=5950 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 65.882321][ T29] audit: type=1400 audit(1733639793.129:167): avc: denied { connect } for pid=5950 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.928263][ T5952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 65.989796][ T29] audit: type=1400 audit(1733639793.229:168): avc: denied { read } for pid=5174 comm="acpid" name="mouse1" dev="devtmpfs" ino=2728 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.992375][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.021604][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.074283][ T29] audit: type=1400 audit(1733639793.229:169): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2728 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.289864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.434284][ T5964] Zero length message leads to an empty skb [ 66.685370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.824218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.089653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.237905][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.246090][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.308483][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 67.364300][ T25] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 67.370593][ T5981] syz.1.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.542445][ T25] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 67.613036][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 67.685142][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.707326][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 67.749805][ T25] usb 5-1: SerialNumber: syz [ 67.778572][ T25] usb 5-1: bad CDC descriptors [ 69.344101][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 69.344119][ T29] audit: type=1400 audit(1733639796.599:190): avc: denied { create } for pid=5994 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.370269][ T29] audit: type=1400 audit(1733639796.599:191): avc: denied { connect } for pid=5994 comm="syz.1.30" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.391178][ T29] audit: type=1400 audit(1733639796.599:192): avc: denied { setopt } for pid=5994 comm="syz.1.30" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.416280][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.422395][ T29] audit: type=1400 audit(1733639796.599:193): avc: denied { write } for pid=5994 comm="syz.1.30" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.447420][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.511139][ T5974] xt_hashlimit: max too large, truncated to 1048576 [ 69.659668][ T29] audit: type=1400 audit(1733639796.889:194): avc: denied { write } for pid=5973 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.700874][ T5998] fuse: Unknown parameter '0x0000000000000003' [ 70.474891][ T6004] Cannot find add_set index 0 as target [ 70.504797][ T29] audit: type=1400 audit(1733639797.749:195): avc: denied { bind } for pid=5973 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.574060][ T933] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.598509][ T29] audit: type=1400 audit(1733639797.749:196): avc: denied { getopt } for pid=5973 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.624826][ T29] audit: type=1400 audit(1733639797.759:197): avc: denied { getopt } for pid=5973 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.643987][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.655432][ T29] audit: type=1400 audit(1733639797.759:198): avc: denied { ioctl } for pid=5973 comm="syz.4.24" path="socket:[7764]" dev="sockfs" ino=7764 ioctlcmd=0x45ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.680365][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.739858][ T29] audit: type=1400 audit(1733639797.999:199): avc: denied { setopt } for pid=6008 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.895093][ T933] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 70.905134][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.913238][ T933] usb 1-1: Product: syz [ 70.917649][ T933] usb 1-1: Manufacturer: syz [ 70.922355][ T933] usb 1-1: SerialNumber: syz [ 70.939674][ T933] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 71.110496][ T6014] netlink: 100 bytes leftover after parsing attributes in process `syz.1.35'. [ 71.487266][ T5891] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 71.491281][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.504383][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.567949][ T6014] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.585586][ T6014] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.629814][ T933] usb 5-1: USB disconnect, device number 3 [ 71.701045][ T6021] capability: warning: `syz.4.38' uses deprecated v2 capabilities in a way that may be insecure [ 71.717938][ T5858] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 71.757829][ T6014] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.785963][ T6014] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.794487][ T6014] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.803521][ T6014] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.813129][ T6014] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.821214][ T6014] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.868192][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 71.876747][ T5891] usb 3-1: not running at top speed; connect to a high speed hub [ 71.886904][ T6014] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.897369][ T6014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.903352][ T6014] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.029631][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 72.870323][ T5858] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 72.878159][ T5858] ath9k_htc: Failed to initialize the device [ 72.921263][ T5891] usb 3-1: config 176 has an invalid interface number: 135 but max is 0 [ 73.027866][ T5891] usb 3-1: config 176 has no interface number 0 [ 73.034418][ T5891] usb 3-1: config 176 interface 135 has no altsetting 0 [ 73.125011][ T5858] usb 1-1: ath9k_htc: USB layer deinitialized [ 73.131549][ T5891] usb 3-1: New USB device found, idVendor=04a5, idProduct=300c, bcdDevice= b.4c [ 73.140925][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.258327][ T6014] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.280731][ T5891] usb 3-1: Product: syz [ 73.286450][ T6014] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 73.296789][ T5891] usb 3-1: Manufacturer: syz [ 73.297563][ T6014] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 73.301433][ T5891] usb 3-1: SerialNumber: syz [ 73.384253][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.807470][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.885001][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.964515][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.030905][ T5891] usb 3-1: can't set config #176, error -71 [ 74.040753][ T5891] usb 3-1: USB disconnect, device number 2 [ 74.755638][ T6014] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 75.034385][ T5859] usb 1-1: USB disconnect, device number 2 [ 75.326007][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 75.384706][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 75.384723][ T29] audit: type=1400 audit(1733639802.649:215): avc: denied { create } for pid=6051 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.414666][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.047577][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.053670][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.059789][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.150097][ T29] audit: type=1400 audit(1733639802.689:216): avc: denied { connect } for pid=6051 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.202146][ T29] audit: type=1400 audit(1733639802.719:217): avc: denied { write } for pid=6051 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.204073][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.288509][ T29] audit: type=1400 audit(1733639802.949:218): avc: denied { setopt } for pid=6051 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.308180][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.538523][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 76.619686][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.633658][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 76.700603][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.048047][ T5858] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 77.057897][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.091991][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.103242][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.168942][ T5891] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 77.208875][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.404159][ T29] audit: type=1400 audit(1733639802.949:219): avc: denied { bind } for pid=6051 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.430433][ T5813] Bluetooth: hci4: command 0x0c1a tx timeout [ 77.431436][ T970] cfg80211: failed to load regulatory.db [ 77.503563][ T5858] usb 2-1: config 0 descriptor?? [ 77.577470][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.650120][ T5891] usb 3-1: config 0 descriptor?? [ 77.680374][ T29] audit: type=1400 audit(1733639802.949:220): avc: denied { name_bind } for pid=6051 comm="syz.4.47" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 77.683340][ T5858] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 77.702462][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.968692][ T29] audit: type=1400 audit(1733639802.949:221): avc: denied { node_bind } for pid=6051 comm="syz.4.47" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 78.007541][ T29] audit: type=1400 audit(1733639802.959:222): avc: denied { connect } for pid=6051 comm="syz.4.47" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.094129][ T29] audit: type=1400 audit(1733639802.959:223): avc: denied { name_connect } for pid=6051 comm="syz.4.47" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 78.126308][ T5813] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.132360][ T5813] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.138772][ T5813] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.191624][ T29] audit: type=1400 audit(1733639803.619:224): avc: denied { unlink } for pid=6057 comm="syz.3.48" name="#1" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.397778][ T5891] koneplus 0003:1E7D:2E22.0001: item fetching failed at offset 0/2 [ 78.406783][ T5891] koneplus 0003:1E7D:2E22.0001: parse failed [ 78.412847][ T5891] koneplus 0003:1E7D:2E22.0001: probe with driver koneplus failed with error -22 [ 78.570182][ T5859] usb 3-1: USB disconnect, device number 3 [ 79.259995][ T970] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.278358][ T6085] block device autoloading is deprecated and will be removed. [ 79.287626][ T6085] syz.0.56: attempt to access beyond end of device [ 79.287626][ T6085] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.310650][ T5859] usb 2-1: USB disconnect, device number 2 [ 79.415003][ T970] usb 5-1: Using ep0 maxpacket: 32 [ 79.433379][ T970] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 79.442876][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.457649][ T970] usb 5-1: Product: syz [ 79.462061][ T970] usb 5-1: Manufacturer: syz [ 79.485700][ T970] usb 5-1: SerialNumber: syz [ 79.503718][ T970] usb 5-1: config 0 descriptor?? [ 79.511970][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 79.650126][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 80.133070][ T6097] netlink: 256 bytes leftover after parsing attributes in process `syz.2.61'. [ 80.143795][ T6097] netlink: 64 bytes leftover after parsing attributes in process `syz.2.61'. [ 80.394138][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 80.394244][ T29] audit: type=1400 audit(1733639807.649:234): avc: denied { create } for pid=6098 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.741675][ T29] audit: type=1400 audit(1733639807.659:235): avc: denied { setopt } for pid=6098 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.761454][ T970] airspy 5-1:0.0: Board ID: 00 [ 80.784151][ T970] airspy 5-1:0.0: Firmware version: [ 80.994768][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 81.033700][ T29] audit: type=1400 audit(1733639808.279:236): avc: denied { execute } for pid=6113 comm="syz.2.68" name="file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.078492][ T29] audit: type=1400 audit(1733639808.279:237): avc: denied { create } for pid=6113 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 81.384136][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.490483][ T6128] netdevsim netdevsim1: Direct firmware load for printk failed with error -2 [ 81.500605][ T6128] netdevsim netdevsim1: Falling back to sysfs fallback for: printk [ 81.566625][ T6084] can0: slcan on ttynull. [ 81.574158][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 81.587750][ T5858] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.600835][ T29] audit: type=1400 audit(1733639808.859:238): avc: denied { search } for pid=5483 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.622193][ T5891] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.677489][ T29] audit: type=1400 audit(1733639808.859:239): avc: denied { read } for pid=5483 comm="dhcpcd" name="n100" dev="tmpfs" ino=2113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.706370][ T5858] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 81.721634][ T6129] syz.1.71: attempt to access beyond end of device [ 81.721634][ T6129] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 81.740363][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.758645][ T29] audit: type=1400 audit(1733639808.859:240): avc: denied { open } for pid=5483 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.783290][ T6129] syz.1.71: attempt to access beyond end of device [ 81.783290][ T6129] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 81.801464][ T6129] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 81.806194][ T5858] usb 1-1: config 0 descriptor?? [ 81.832463][ T6129] syz.1.71: attempt to access beyond end of device [ 81.832463][ T6129] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 81.840090][ T5858] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 81.853024][ T29] audit: type=1400 audit(1733639808.859:241): avc: denied { getattr } for pid=5483 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.879174][ T6129] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 81.889519][ T6129] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 81.900223][ T6129] UDF-fs: Scanning with blocksize 512 failed [ 81.901227][ T29] audit: type=1400 audit(1733639808.969:242): avc: denied { read } for pid=6132 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.929496][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 81.942339][ T5891] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 81.952907][ T6129] syz.1.71: attempt to access beyond end of device [ 81.952907][ T6129] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 81.964353][ T5891] usb 3-1: config 0 has no interface number 0 [ 81.971622][ T5891] usb 3-1: too many endpoints for config 0 interface 154 altsetting 60: 66, using maximum allowed: 30 [ 82.003031][ T29] audit: type=1400 audit(1733639808.969:243): avc: denied { open } for pid=6132 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.034492][ T5891] usb 3-1: config 0 interface 154 altsetting 60 has 2 endpoint descriptors, different from the interface descriptor's value: 66 [ 82.062893][ T6129] syz.1.71: attempt to access beyond end of device [ 82.062893][ T6129] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 82.066010][ T5891] usb 3-1: config 0 interface 154 has no altsetting 0 [ 82.088530][ T6129] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 82.101411][ T6129] syz.1.71: attempt to access beyond end of device [ 82.101411][ T6129] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 82.116058][ T6129] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 82.127388][ T6083] can0 (unregistered): slcan off ttynull. [ 82.136355][ T970] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 82.145169][ T5891] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 82.153207][ T970] airspy 5-1:0.0: Registered as swradio24 [ 82.158839][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.169273][ T6129] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 82.170614][ T5891] usb 3-1: Product: syz [ 82.179437][ T970] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 82.191421][ T6129] UDF-fs: Scanning with blocksize 1024 failed [ 82.210485][ T6129] syz.1.71: attempt to access beyond end of device [ 82.210485][ T6129] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 82.210543][ T5891] usb 3-1: Manufacturer: syz [ 82.219353][ T970] usb 5-1: USB disconnect, device number 4 [ 82.242025][ T6129] syz.1.71: attempt to access beyond end of device [ 82.242025][ T6129] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 82.255353][ T6129] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 82.273651][ T6129] syz.1.71: attempt to access beyond end of device [ 82.273651][ T6129] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 82.284016][ T5891] usb 3-1: SerialNumber: syz [ 82.291231][ T6129] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 82.305522][ T6129] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 82.314618][ T6129] UDF-fs: Scanning with blocksize 2048 failed [ 82.333695][ T6129] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 82.334588][ T5891] usb 3-1: config 0 descriptor?? [ 82.364558][ T6129] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 82.384304][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.391757][ T6129] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 82.391799][ T6129] UDF-fs: Scanning with blocksize 4096 failed [ 82.391810][ T6129] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 82.644616][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 82.658185][ T5858] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 82.844019][ T5858] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 82.855859][ T5858] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 83.627205][ T5858] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 83.636563][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.683595][ T6126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.698316][ T5858] usb 2-1: Product: syz [ 83.740261][ T5858] usb 2-1: Manufacturer: syz [ 83.759480][ T6126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.768207][ T5858] usb 2-1: SerialNumber: syz [ 83.815040][ T5858] usb 2-1: config 0 descriptor?? [ 83.827899][ T5891] f81534 3-1:0.154: f81534_get_register: reg: 1003 failed: -71 [ 83.836079][ T5891] f81534 3-1:0.154: f81534_find_config_idx: read failed: -71 [ 83.846682][ T5891] f81534 3-1:0.154: f81534_calc_num_ports: find idx failed: -71 [ 83.857306][ T5858] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 83.877878][ T5891] f81534 3-1:0.154: probe with driver f81534 failed with error -71 [ 83.999856][ T5891] usb 3-1: USB disconnect, device number 4 [ 84.010902][ T6186] syzkaller1: entered promiscuous mode [ 84.041718][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 84.054662][ T6186] syzkaller1: entered allmulticast mode [ 84.175637][ T5858] usb 1-1: USB disconnect, device number 3 [ 85.200975][ T5858] usb 2-1: USB disconnect, device number 3 [ 85.448776][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 85.448792][ T29] audit: type=1400 audit(1733639812.709:303): avc: denied { read } for pid=6201 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.764577][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.872173][ T6213] bio_check_eod: 3 callbacks suppressed [ 85.872211][ T6213] syz.2.84: attempt to access beyond end of device [ 85.872211][ T6213] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 86.461195][ T6207] netlink: 100 bytes leftover after parsing attributes in process `syz.0.80'. [ 86.848750][ T29] audit: type=1400 audit(1733639814.109:304): avc: denied { egress } for pid=1163 comm="kworker/u8:7" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 86.924271][ T29] audit: type=1400 audit(1733639814.109:305): avc: denied { sendto } for pid=1163 comm="kworker/u8:7" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 86.973730][ T6215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.183907][ T6215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.190271][ T29] audit: type=1400 audit(1733639814.429:306): avc: denied { create } for pid=6217 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 87.374408][ T29] audit: type=1400 audit(1733639814.439:307): avc: denied { read } for pid=6217 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 87.884176][ T6215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.914449][ T6215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.920423][ T6215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 88.085032][ T29] audit: type=1400 audit(1733639815.349:308): avc: denied { ioctl } for pid=6230 comm="syz.3.90" path="socket:[10270]" dev="sockfs" ino=10270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.119492][ T29] audit: type=1400 audit(1733639815.379:309): avc: denied { getopt } for pid=6220 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.164701][ T29] audit: type=1400 audit(1733639815.429:310): avc: denied { lock } for pid=6230 comm="syz.3.90" path="socket:[9300]" dev="sockfs" ino=9300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 88.200082][ T6243] bridge0: port 3(gretap0) entered blocking state [ 88.207823][ T6243] bridge0: port 3(gretap0) entered disabled state [ 88.214537][ T6243] gretap0: entered allmulticast mode [ 88.220985][ T6243] gretap0: entered promiscuous mode [ 88.227830][ T6243] bridge0: port 3(gretap0) entered blocking state [ 88.235007][ T6243] bridge0: port 3(gretap0) entered forwarding state [ 88.250805][ T6243] gretap0: left allmulticast mode [ 88.255891][ T6243] gretap0: left promiscuous mode [ 88.261863][ T6243] bridge0: port 3(gretap0) entered disabled state [ 88.334094][ T5858] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.355903][ T29] audit: type=1400 audit(1733639815.619:311): avc: denied { read } for pid=6220 comm="syz.2.85" dev="sockfs" ino=10267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.496537][ T5858] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.517049][ T5858] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.531843][ T5858] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.543094][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.571151][ T6232] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.589018][ T5858] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.625336][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.804209][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 88.813073][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.845959][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.870229][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.916146][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 88.946090][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.975690][ T970] usb 2-1: USB disconnect, device number 4 [ 89.001670][ T29] audit: type=1400 audit(1733639816.259:312): avc: denied { create } for pid=6250 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.003140][ T25] usb 4-1: config 0 descriptor?? [ 89.477235][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.485122][ T5813] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.535041][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.794077][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 89.800973][ T5891] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 89.843179][ T5891] usb 5-1: config 0 has no interface number 0 [ 89.916117][ T933] kernel write not supported for file /snd/seq (pid: 933 comm: kworker/0:2) [ 89.948077][ T5891] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.958122][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.966638][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.970498][ T25] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0 [ 89.972730][ T5813] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.987258][ T5813] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.993327][ T5891] usb 5-1: Product: syz [ 89.994264][ T25] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0 [ 89.997587][ T5891] usb 5-1: Manufacturer: syz [ 90.009272][ T5891] usb 5-1: SerialNumber: syz [ 90.020801][ T5891] usb 5-1: config 0 descriptor?? [ 90.028483][ T5891] smsc95xx v2.0.0 [ 90.078981][ T25] koneplus 0003:1E7D:2E22.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 90.242042][ T5891] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 90.368360][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 90.923969][ T5891] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.954927][ T5891] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 90.974202][ T5891] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 91.005066][ T933] usb 4-1: USB disconnect, device number 2 [ 91.068200][ T5891] usb 5-1: USB disconnect, device number 5 [ 91.115556][ T6270] fuse: Bad value for 'fd' [ 91.399777][ T29] audit: type=1804 audit(1733639818.649:313): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.100" name="/newroot/22/bus/file0" dev="overlay" ino=139 res=1 errno=0 [ 91.431117][ T6276] evm: overlay not supported [ 92.361497][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.102'. [ 92.412584][ T29] audit: type=1400 audit(1733639819.669:314): avc: denied { block_suspend } for pid=6283 comm="syz.2.103" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.484073][ T29] audit: type=1400 audit(1733639819.669:315): avc: denied { ioctl } for pid=6281 comm="syz.3.102" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.074030][ T29] audit: type=1400 audit(1733639819.699:316): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.213265][ T29] audit: type=1400 audit(1733639820.449:317): avc: denied { read write } for pid=6290 comm="syz.3.105" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.236933][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.160823][ T29] audit: type=1400 audit(1733639820.449:318): avc: denied { open } for pid=6290 comm="syz.3.105" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.184429][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.190711][ T29] audit: type=1400 audit(1733639820.449:319): avc: denied { map } for pid=6290 comm="syz.3.105" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.493187][ T6310] ecryptfs: Unknown parameter '/' [ 94.500327][ T29] audit: type=1400 audit(1733639821.749:320): avc: denied { mounton } for pid=6308 comm="syz.1.111" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 94.682983][ T29] audit: type=1326 audit(1733639821.939:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f7fed9 code=0x7ffc0000 [ 94.718387][ T29] audit: type=1326 audit(1733639821.939:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f7fed9 code=0x7ffc0000 [ 94.734062][ T933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.909873][ T6316] sp0: Synchronizing with TNC [ 94.926389][ T933] usb 5-1: Using ep0 maxpacket: 16 [ 94.947867][ T933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.969056][ T933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.014986][ T933] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 95.211044][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.235063][ T933] usb 5-1: config 0 descriptor?? [ 95.245315][ T933] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 96.011482][ T6327] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 96.218063][ T5862] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.504547][ T5862] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 96.513804][ T5862] usb 4-1: config 0 has no interface number 0 [ 96.781339][ T5862] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 98.200584][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 98.200602][ T29] audit: type=1400 audit(1733639824.619:328): avc: denied { mount } for pid=6335 comm="syz.1.115" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.235182][ T5862] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 98.245722][ T29] audit: type=1400 audit(1733639824.629:329): avc: denied { read } for pid=6335 comm="syz.1.115" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.269447][ T29] audit: type=1400 audit(1733639824.629:330): avc: denied { open } for pid=6335 comm="syz.1.115" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.272813][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.293080][ T29] audit: type=1400 audit(1733639824.639:331): avc: denied { ioctl } for pid=6335 comm="syz.1.115" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.359069][ T6326] overlayfs: statfs failed on './file0' [ 98.402775][ T5891] usb 5-1: USB disconnect, device number 6 [ 98.474721][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.485723][ T5862] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 98.502032][ T5862] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 98.526430][ T5862] usb 4-1: Product: syz [ 98.587652][ T5862] usb 4-1: Manufacturer: syz [ 98.592299][ T5862] usb 4-1: SerialNumber: syz [ 98.668854][ T5862] usb 4-1: config 0 descriptor?? [ 98.679567][ T29] audit: type=1400 audit(1733639825.929:332): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 99.432879][ T5862] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 99.440759][ T5862] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 99.449920][ T5862] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 99.574705][ T5862] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 99.595343][ T5862] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 99.626656][ T6359] FAULT_INJECTION: forcing a failure. [ 99.626656][ T6359] name failslab, interval 1, probability 0, space 0, times 1 [ 99.649923][ T6359] CPU: 0 UID: 0 PID: 6359 Comm: syz.0.121 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 99.660559][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.670636][ T6359] Call Trace: [ 99.673939][ T6359] [ 99.676876][ T6359] dump_stack_lvl+0x16c/0x1f0 [ 99.681602][ T6359] should_fail_ex+0x497/0x5b0 [ 99.686313][ T6359] ? fs_reclaim_acquire+0xae/0x150 [ 99.691452][ T6359] should_failslab+0xc2/0x120 [ 99.696240][ T6359] __kmalloc_cache_noprof+0x68/0x410 [ 99.701545][ T6359] ? __genradix_ptr_alloc+0x32e/0x5d0 [ 99.707200][ T6359] sctp_auth_shkey_create+0x87/0x1f0 [ 99.712506][ T6359] sctp_auth_asoc_copy_shkeys+0x1f4/0x360 [ 99.718248][ T6359] sctp_association_new+0x1973/0x2ab0 [ 99.723987][ T6359] sctp_connect_new_asoc+0x1b7/0x790 [ 99.729289][ T6359] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 99.735126][ T6359] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 99.740695][ T6359] sctp_sendmsg+0x1610/0x1eb0 [ 99.745422][ T6359] ? avc_has_perm+0x11b/0x1c0 [ 99.750131][ T6359] ? __pfx_sctp_sendmsg+0x10/0x10 [ 99.755182][ T6359] ? __pfx_sock_has_perm+0x10/0x10 [ 99.760335][ T6359] ? trace_lock_acquire+0x14e/0x1f0 [ 99.765566][ T6359] ? __might_fault+0xe3/0x190 [ 99.770255][ T6359] ? __might_fault+0xe3/0x190 [ 99.774954][ T6359] ? __pfx_sctp_sendmsg+0x10/0x10 [ 99.779998][ T6359] inet_sendmsg+0x119/0x140 [ 99.784525][ T6359] ____sys_sendmsg+0x98c/0xc90 [ 99.789317][ T6359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.794644][ T6359] ___sys_sendmsg+0x135/0x1e0 [ 99.799337][ T6359] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.804560][ T6359] ? __pfx_lock_release+0x10/0x10 [ 99.809612][ T6359] ? trace_lock_acquire+0x14e/0x1f0 [ 99.814880][ T6359] ? __fget_files+0x206/0x3a0 [ 99.819588][ T6359] __sys_sendmsg+0x16e/0x220 [ 99.824204][ T6359] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.829360][ T6359] do_syscall_64+0xcd/0x250 [ 99.833890][ T6359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.839802][ T6359] RIP: 0033:0x7f43ce37fed9 [ 99.844248][ T6359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.863884][ T6359] RSP: 002b:00007f43cf1b9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.872318][ T6359] RAX: ffffffffffffffda RBX: 00007f43ce545fa0 RCX: 00007f43ce37fed9 [ 99.880308][ T6359] RDX: 0000000000000000 RSI: 0000000020000f00 RDI: 0000000000000003 [ 99.888308][ T6359] RBP: 00007f43cf1b90a0 R08: 0000000000000000 R09: 0000000000000000 [ 99.896303][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.896970][ T5862] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 99.904275][ T6359] R13: 0000000000000000 R14: 00007f43ce545fa0 R15: 00007ffe29c197c8 [ 99.904350][ T6359] [ 99.924813][ T5862] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 99.958901][ T5862] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 99.968018][ T5862] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 99.980156][ T5862] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 99.994043][ T5862] usb 4-1: USB disconnect, device number 3 [ 100.005175][ T5862] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 100.019247][ T5862] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 100.041242][ T5862] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 100.123302][ T29] audit: type=1400 audit(1733639827.379:333): avc: denied { write } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.145021][ T29] audit: type=1400 audit(1733639827.379:334): avc: denied { remove_name } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.167606][ T29] audit: type=1400 audit(1733639827.379:335): avc: denied { rename } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.190155][ T29] audit: type=1400 audit(1733639827.379:336): avc: denied { add_name } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.212972][ T29] audit: type=1400 audit(1733639827.379:337): avc: denied { unlink } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.236703][ T5862] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 100.257030][ T5862] keyspan 4-1:0.107: device disconnected [ 101.167388][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.174785][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.520686][ T6363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.967956][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 103.967975][ T29] audit: type=1400 audit(1733639831.219:343): avc: denied { getopt } for pid=6391 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.074018][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.227510][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 104.234291][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.253650][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.263757][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.283635][ T5891] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 104.302144][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.336417][ T5891] usb 3-1: config 0 descriptor?? [ 104.606224][ T6402] xt_ecn: cannot match TCP bits for non-tcp packets [ 104.617128][ T29] audit: type=1400 audit(1733639831.859:344): avc: denied { execute } for pid=6395 comm="syz.3.132" path="/dev/dsp" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 105.271582][ T29] audit: type=1400 audit(1733639832.509:345): avc: denied { mount } for pid=6403 comm="syz.1.133" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.405127][ T29] audit: type=1400 audit(1733639832.669:346): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.913404][ T5891] koneplus 0003:1E7D:2E22.0003: item fetching failed at offset 0/2 [ 105.935778][ T5891] koneplus 0003:1E7D:2E22.0003: parse failed [ 105.941809][ T5891] koneplus 0003:1E7D:2E22.0003: probe with driver koneplus failed with error -22 [ 106.111532][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 106.535525][ T6415] tty tty27: ldisc open failed (-12), clearing slot 26 [ 106.618786][ T5891] usb 3-1: USB disconnect, device number 5 [ 106.693135][ T6400] netlink: 92 bytes leftover after parsing attributes in process `syz.0.131'. [ 106.706148][ T29] audit: type=1400 audit(1733639833.909:347): avc: denied { ioctl } for pid=6396 comm="syz.0.131" path="socket:[9656]" dev="sockfs" ino=9656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.756701][ T29] audit: type=1400 audit(1733639834.009:348): avc: denied { setopt } for pid=6419 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.810700][ T6418] Bluetooth: MGMT ver 1.23 [ 106.842732][ T29] audit: type=1400 audit(1733639834.009:349): avc: denied { getopt } for pid=6419 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.872057][ T29] audit: type=1400 audit(1733639834.069:350): avc: denied { bind } for pid=6417 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.126075][ T933] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.914019][ T933] usb 2-1: Using ep0 maxpacket: 32 [ 107.921144][ T933] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 107.929677][ T933] usb 2-1: config 0 has no interface number 1 [ 107.941470][ T933] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 107.958666][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.968547][ T933] usb 2-1: Product: syz [ 108.102456][ T933] usb 2-1: Manufacturer: syz [ 108.157473][ T933] usb 2-1: SerialNumber: syz [ 109.129606][ T933] usb 2-1: config 0 descriptor?? [ 109.134897][ T29] audit: type=1400 audit(1733639835.609:351): avc: denied { create } for pid=6431 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.154685][ T29] audit: type=1400 audit(1733639835.619:352): avc: denied { setopt } for pid=6431 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.174027][ T29] audit: type=1400 audit(1733639835.619:353): avc: denied { connect } for pid=6431 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.242421][ T6437] syz.2.142: attempt to access beyond end of device [ 109.242421][ T6437] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.834996][ T933] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 109.843053][ T933] snd-usb-6fire 2-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 109.860991][ T933] usb 2-1: USB disconnect, device number 5 [ 110.262053][ T6452] FAULT_INJECTION: forcing a failure. [ 110.262053][ T6452] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.275521][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.1.144 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 110.286129][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.296203][ T6452] Call Trace: [ 110.299488][ T6452] [ 110.302425][ T6452] dump_stack_lvl+0x16c/0x1f0 [ 110.307124][ T6452] should_fail_ex+0x497/0x5b0 [ 110.311810][ T6452] _copy_from_iter+0x2a1/0x1560 [ 110.316672][ T6452] ? preempt_schedule_common+0x44/0xc0 [ 110.322146][ T6452] ? __pfx__copy_from_iter+0x10/0x10 [ 110.327443][ T6452] ? __virt_addr_valid+0x2d3/0x590 [ 110.332564][ T6452] ? __virt_addr_valid+0x2e0/0x590 [ 110.337683][ T6452] ? __virt_addr_valid+0x5e/0x590 [ 110.342719][ T6452] ? __phys_addr_symbol+0x30/0x80 [ 110.347750][ T6452] ? __check_object_size+0x488/0x710 [ 110.353046][ T6452] netlink_sendmsg+0x813/0xd70 [ 110.357829][ T6452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.363128][ T6452] ? ____sys_sendmsg+0x7f8/0xc90 [ 110.368070][ T6452] ? ____sys_sendmsg+0x600/0xc90 [ 110.373019][ T6452] ____sys_sendmsg+0xaaf/0xc90 [ 110.377793][ T6452] ? copy_msghdr_from_user+0x10b/0x160 [ 110.383267][ T6452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.388574][ T6452] ___sys_sendmsg+0x135/0x1e0 [ 110.393287][ T6452] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.398501][ T6452] ? irqentry_exit+0x3b/0x90 [ 110.403100][ T6452] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.408319][ T6452] ? ___sys_sendmsg+0x20/0x1e0 [ 110.413091][ T6452] __sys_sendmsg+0x16e/0x220 [ 110.417685][ T6452] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.422819][ T6452] do_syscall_64+0xcd/0x250 [ 110.427344][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.433254][ T6452] RIP: 0033:0x7f6184f7fed9 [ 110.437673][ T6452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.457294][ T6452] RSP: 002b:00007f6185ce8058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.465717][ T6452] RAX: ffffffffffffffda RBX: 00007f6185146160 RCX: 00007f6184f7fed9 [ 110.473691][ T6452] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 110.481663][ T6452] RBP: 00007f6185ce80a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.489634][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.497635][ T6452] R13: 0000000000000000 R14: 00007f6185146160 R15: 00007ffd4e385078 [ 110.505632][ T6452] [ 110.664181][ T5862] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.673874][ T970] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.875110][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 110.884072][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 110.906330][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.924468][ T970] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 110.971628][ T970] usb 4-1: config 0 has no interface number 0 [ 110.981470][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.005724][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.020503][ T5862] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 111.030047][ T970] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 111.040725][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.051187][ T970] usb 4-1: Product: syz [ 111.059218][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.068694][ T970] usb 4-1: Manufacturer: syz [ 111.073323][ T970] usb 4-1: SerialNumber: syz [ 111.083780][ T5862] usb 3-1: config 0 descriptor?? [ 111.099965][ T970] usb 4-1: config 0 descriptor?? [ 111.154825][ T970] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 111.205615][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 111.631159][ T5862] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 111.749688][ T970] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 111.785654][ T29] audit: type=1400 audit(1733639839.049:354): avc: denied { bind } for pid=6462 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 111.788548][ T5862] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 111.825933][ T970] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 111.826268][ T29] audit: type=1400 audit(1733639839.069:355): avc: denied { listen } for pid=6462 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 111.854200][ T5862] koneplus 0003:1E7D:2E22.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 111.869544][ T29] audit: type=1400 audit(1733639839.069:356): avc: denied { setopt } for pid=6462 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 111.885879][ T6449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.892180][ T29] audit: type=1400 audit(1733639839.079:357): avc: denied { connect } for pid=6462 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 111.914669][ T5862] koneplus 0003:1E7D:2E22.0004: couldn't init struct koneplus_device [ 111.930076][ T29] audit: type=1400 audit(1733639839.079:358): avc: denied { name_connect } for pid=6462 comm="syz.4.149" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 111.952173][ T6449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.974019][ T5862] koneplus 0003:1E7D:2E22.0004: couldn't install mouse [ 112.033540][ T5862] koneplus 0003:1E7D:2E22.0004: probe with driver koneplus failed with error -32 [ 112.051575][ T29] audit: type=1400 audit(1733639839.279:359): avc: denied { getopt } for pid=6462 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.078257][ T5862] usb 3-1: USB disconnect, device number 6 [ 112.258964][ T6468] sp0: Synchronizing with TNC [ 112.279430][ T6224] [ 112.281773][ T6224] ===================================================== [ 112.288707][ T6224] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 112.296167][ T6224] 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 Not tainted [ 112.303277][ T6224] ----------------------------------------------------- [ 112.310224][ T6224] kworker/u8:10/6224 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 112.318129][ T6224] ffffffff8f3348b8 (disc_data_lock){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 112.326346][ T6224] [ 112.326346][ T6224] and this task is already holding: [ 112.333713][ T6224] ffffffff9ab116f8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 112.342419][ T6224] which would create a new lock dependency: [ 112.348311][ T6224] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 112.355992][ T6224] [ 112.355992][ T6224] but this new dependency connects a HARDIRQ-irq-safe lock: [ 112.365540][ T6224] (&port_lock_key){-.-.}-{3:3} [ 112.365569][ T6224] [ 112.365569][ T6224] ... which became HARDIRQ-irq-safe at: [ 112.378109][ T6224] lock_acquire.part.0+0x11b/0x380 [ 112.383321][ T6224] _raw_spin_lock_irqsave+0x3a/0x60 [ 112.388605][ T6224] serial8250_handle_irq+0x95/0xc80 [ 112.393904][ T6224] serial8250_default_handle_irq+0x9a/0x210 [ 112.399901][ T6224] serial8250_interrupt+0x103/0x210 [ 112.405213][ T6224] __handle_irq_event_percpu+0x229/0x7d0 [ 112.410937][ T6224] handle_irq_event+0xab/0x1e0 [ 112.415796][ T6224] handle_edge_irq+0x263/0xd10 [ 112.420659][ T6224] __common_interrupt+0xdf/0x250 [ 112.425676][ T6224] common_interrupt+0xba/0xe0 [ 112.430417][ T6224] asm_common_interrupt+0x26/0x40 [ 112.435532][ T6224] acpi_safe_halt+0x1a/0x20 [ 112.440151][ T6224] acpi_idle_enter+0xc5/0x160 [ 112.444909][ T6224] cpuidle_enter_state+0xaa/0x4f0 [ 112.450009][ T6224] cpuidle_enter+0x4e/0xa0 [ 112.454507][ T6224] do_idle+0x310/0x3f0 [ 112.458661][ T6224] cpu_startup_entry+0x4f/0x60 [ 112.463514][ T6224] start_secondary+0x222/0x2b0 [ 112.468356][ T6224] common_startup_64+0x13e/0x148 [ 112.473377][ T6224] [ 112.473377][ T6224] to a HARDIRQ-irq-unsafe lock: [ 112.480382][ T6224] (disc_data_lock){.+.+}-{3:3} [ 112.480400][ T6224] [ 112.480400][ T6224] ... which became HARDIRQ-irq-unsafe at: [ 112.493077][ T6224] ... [ 112.493083][ T6224] lock_acquire.part.0+0x11b/0x380 [ 112.500866][ T6224] _raw_read_lock+0x5f/0x70 [ 112.505449][ T6224] sp_get+0x18/0xf0 [ 112.509346][ T6224] sixpack_receive_buf+0x59/0x1c80 [ 112.514545][ T6224] tty_ldisc_receive_buf+0x153/0x190 [ 112.519918][ T6224] tty_port_default_receive_buf+0x70/0xb0 [ 112.525716][ T6224] flush_to_ldisc+0x264/0x780 [ 112.530487][ T6224] process_one_work+0x9c5/0x1ba0 [ 112.535514][ T6224] worker_thread+0x6c8/0xf00 [ 112.540209][ T6224] kthread+0x2c1/0x3a0 [ 112.544393][ T6224] ret_from_fork+0x45/0x80 [ 112.548911][ T6224] ret_from_fork_asm+0x1a/0x30 [ 112.553784][ T6224] [ 112.553784][ T6224] other info that might help us debug this: [ 112.553784][ T6224] [ 112.564100][ T6224] Possible interrupt unsafe locking scenario: [ 112.564100][ T6224] [ 112.572421][ T6224] CPU0 CPU1 [ 112.577786][ T6224] ---- ---- [ 112.583192][ T6224] lock(disc_data_lock); [ 112.587539][ T6224] local_irq_disable(); [ 112.594297][ T6224] lock(&port_lock_key); [ 112.601165][ T6224] lock(disc_data_lock); [ 112.608002][ T6224] [ 112.611433][ T6224] lock(&port_lock_key); [ 112.615922][ T6224] [ 112.615922][ T6224] *** DEADLOCK *** [ 112.615922][ T6224] [ 112.624039][ T6224] 6 locks held by kworker/u8:10/6224: [ 112.629393][ T6224] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 112.634166][ T29] audit: type=1400 audit(1733639839.849:360): avc: denied { read write } for pid=6448 comm="syz.3.146" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.640515][ T6224] #1: ffffc9000b59fd80 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 112.674539][ T6224] #2: ffff888025268ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x31/0x780 [ 112.678329][ T6449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 112.683598][ T6224] #3: ffff88805af050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 112.683659][ T6224] #4: ffffffff9ab116f8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 112.710901][ T6224] #5: ffff88805af050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 112.720229][ T6224] [ 112.720229][ T6224] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 112.730638][ T6224] -> (&port_lock_key){-.-.}-{3:3} { [ 112.735883][ T6224] IN-HARDIRQ-W at: [ 112.739868][ T6224] lock_acquire.part.0+0x11b/0x380 [ 112.746647][ T6224] _raw_spin_lock_irqsave+0x3a/0x60 [ 112.753502][ T6224] serial8250_handle_irq+0x95/0xc80 [ 112.760366][ T6224] serial8250_default_handle_irq+0x9a/0x210 [ 112.767909][ T6224] serial8250_interrupt+0x103/0x210 [ 112.774768][ T6224] __handle_irq_event_percpu+0x229/0x7d0 [ 112.782060][ T6224] handle_irq_event+0xab/0x1e0 [ 112.788495][ T6224] handle_edge_irq+0x263/0xd10 [ 112.794973][ T6224] __common_interrupt+0xdf/0x250 [ 112.801574][ T6224] common_interrupt+0xba/0xe0 [ 112.807902][ T6224] asm_common_interrupt+0x26/0x40 [ 112.814564][ T6224] acpi_safe_halt+0x1a/0x20 [ 112.820696][ T6224] acpi_idle_enter+0xc5/0x160 [ 112.827002][ T6224] cpuidle_enter_state+0xaa/0x4f0 [ 112.833654][ T6224] cpuidle_enter+0x4e/0xa0 [ 112.839709][ T6224] do_idle+0x310/0x3f0 [ 112.845490][ T6224] cpu_startup_entry+0x4f/0x60 [ 112.851876][ T6224] start_secondary+0x222/0x2b0 [ 112.858266][ T6224] common_startup_64+0x13e/0x148 [ 112.864853][ T6224] IN-SOFTIRQ-W at: [ 112.868805][ T6224] lock_acquire.part.0+0x11b/0x380 [ 112.875541][ T6224] _raw_spin_lock_irqsave+0x3a/0x60 [ 112.882451][ T6224] serial8250_handle_irq+0x95/0xc80 [ 112.889276][ T6224] serial8250_default_handle_irq+0x9a/0x210 [ 112.896810][ T6224] serial8250_interrupt+0x103/0x210 [ 112.903637][ T6224] __handle_irq_event_percpu+0x229/0x7d0 [ 112.910898][ T6224] handle_irq_event+0xab/0x1e0 [ 112.917290][ T6224] handle_edge_irq+0x263/0xd10 [ 112.923680][ T6224] __common_interrupt+0xdf/0x250 [ 112.930247][ T6224] common_interrupt+0x61/0xe0 [ 112.936548][ T6224] asm_common_interrupt+0x26/0x40 [ 112.943207][ T6224] handle_softirqs+0x1da/0x8f0 [ 112.949608][ T6224] __irq_exit_rcu+0x109/0x170 [ 112.955915][ T6224] irq_exit_rcu+0x9/0x30 [ 112.961784][ T6224] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 112.969046][ T6224] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.976657][ T6224] console_flush_all+0x9a4/0xc60 [ 112.983242][ T6224] console_unlock+0xd9/0x210 [ 112.989482][ T6224] vprintk_emit+0x424/0x6f0 [ 112.995622][ T6224] vprintk+0x7f/0xa0 [ 113.001155][ T6224] _printk+0xc8/0x100 [ 113.006771][ T6224] kauditd_hold_skb+0x205/0x250 [ 113.013261][ T6224] kauditd_send_queue+0x236/0x290 [ 113.020008][ T6224] kauditd_thread+0x611/0xa60 [ 113.026327][ T6224] kthread+0x2c1/0x3a0 [ 113.032033][ T6224] ret_from_fork+0x45/0x80 [ 113.038072][ T6224] ret_from_fork_asm+0x1a/0x30 [ 113.044473][ T6224] INITIAL USE at: [ 113.048338][ T6224] lock_acquire.part.0+0x11b/0x380 [ 113.054989][ T6224] _raw_spin_lock_irqsave+0x3a/0x60 [ 113.061724][ T6224] serial8250_do_set_termios+0x307/0x16f0 [ 113.068983][ T6224] serial8250_set_termios+0x6e/0x80 [ 113.075721][ T6224] uart_set_options+0x31b/0x5f0 [ 113.082120][ T6224] serial8250_console_setup+0x18a/0x460 [ 113.089209][ T6224] univ8250_console_setup+0x1d4/0x2c0 [ 113.096126][ T6224] try_enable_preferred_console+0x2fd/0x530 [ 113.103570][ T6224] register_console+0x3ac/0x1170 [ 113.110051][ T6224] univ8250_console_init+0x5f/0x90 [ 113.116701][ T6224] console_init+0x154/0x690 [ 113.122769][ T6224] start_kernel+0x29a/0x4d0 [ 113.128817][ T6224] x86_64_start_reservations+0x18/0x30 [ 113.135824][ T6224] x86_64_start_kernel+0xb2/0xc0 [ 113.142314][ T6224] common_startup_64+0x13e/0x148 [ 113.148792][ T6224] } [ 113.151280][ T6224] ... key at: [] port_lock_key+0x0/0x40 [ 113.158891][ T6224] [ 113.158891][ T6224] the dependencies between the lock to be acquired [ 113.158897][ T6224] and HARDIRQ-irq-unsafe lock: [ 113.172386][ T6224] -> (disc_data_lock){.+.+}-{3:3} { [ 113.177602][ T6224] HARDIRQ-ON-R at: [ 113.181594][ T6224] lock_acquire.part.0+0x11b/0x380 [ 113.188347][ T6224] _raw_read_lock+0x5f/0x70 [ 113.194482][ T6224] sp_get+0x18/0xf0 [ 113.199929][ T6224] sixpack_receive_buf+0x59/0x1c80 [ 113.206672][ T6224] tty_ldisc_receive_buf+0x153/0x190 [ 113.213667][ T6224] tty_port_default_receive_buf+0x70/0xb0 [ 113.221008][ T6224] flush_to_ldisc+0x264/0x780 [ 113.227331][ T6224] process_one_work+0x9c5/0x1ba0 [ 113.233900][ T6224] worker_thread+0x6c8/0xf00 [ 113.240117][ T6224] kthread+0x2c1/0x3a0 [ 113.245829][ T6224] ret_from_fork+0x45/0x80 [ 113.251882][ T6224] ret_from_fork_asm+0x1a/0x30 [ 113.258290][ T6224] SOFTIRQ-ON-R at: [ 113.262245][ T6224] lock_acquire.part.0+0x11b/0x380 [ 113.268984][ T6224] _raw_read_lock+0x5f/0x70 [ 113.275119][ T6224] sp_get+0x18/0xf0 [ 113.280561][ T6224] sixpack_receive_buf+0x59/0x1c80 [ 113.287306][ T6224] tty_ldisc_receive_buf+0x153/0x190 [ 113.294221][ T6224] tty_port_default_receive_buf+0x70/0xb0 [ 113.301569][ T6224] flush_to_ldisc+0x264/0x780 [ 113.307873][ T6224] process_one_work+0x9c5/0x1ba0 [ 113.314436][ T6224] worker_thread+0x6c8/0xf00 [ 113.320651][ T6224] kthread+0x2c1/0x3a0 [ 113.326350][ T6224] ret_from_fork+0x45/0x80 [ 113.332390][ T6224] ret_from_fork_asm+0x1a/0x30 [ 113.338782][ T6224] INITIAL USE at: [ 113.342665][ T6224] lock_acquire.part.0+0x11b/0x380 [ 113.349311][ T6224] _raw_write_lock_irq+0x36/0x50 [ 113.355787][ T6224] sixpack_close+0x1e/0x2f0 [ 113.361831][ T6224] tty_ldisc_close+0x111/0x1a0 [ 113.368138][ T6224] tty_ldisc_kill+0x8e/0x150 [ 113.374279][ T6224] tty_ldisc_hangup+0x311/0x6a0 [ 113.380663][ T6224] __tty_hangup.part.0+0x3f8/0x890 [ 113.387308][ T6224] tty_ioctl+0xf42/0x15d0 [ 113.393205][ T6224] __x64_sys_ioctl+0x190/0x200 [ 113.399517][ T6224] do_syscall_64+0xcd/0x250 [ 113.405564][ T6224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.412999][ T6224] INITIAL READ USE at: [ 113.417298][ T6224] lock_acquire.part.0+0x11b/0x380 [ 113.424381][ T6224] _raw_read_lock+0x5f/0x70 [ 113.430872][ T6224] sp_get+0x18/0xf0 [ 113.436675][ T6224] sixpack_receive_buf+0x59/0x1c80 [ 113.443851][ T6224] tty_ldisc_receive_buf+0x153/0x190 [ 113.451108][ T6224] tty_port_default_receive_buf+0x70/0xb0 [ 113.458796][ T6224] flush_to_ldisc+0x264/0x780 [ 113.465529][ T6224] process_one_work+0x9c5/0x1ba0 [ 113.472440][ T6224] worker_thread+0x6c8/0xf00 [ 113.478999][ T6224] kthread+0x2c1/0x3a0 [ 113.485045][ T6224] ret_from_fork+0x45/0x80 [ 113.491435][ T6224] ret_from_fork_asm+0x1a/0x30 [ 113.498175][ T6224] } [ 113.500645][ T6224] ... key at: [] disc_data_lock+0x18/0xfe0 [ 113.508515][ T6224] ... acquired at: [ 113.512286][ T6224] lock_acquire.part.0+0x11b/0x380 [ 113.517543][ T6224] _raw_read_lock+0x5f/0x70 [ 113.522192][ T6224] sp_get+0x18/0xf0 [ 113.526176][ T6224] sixpack_write_wakeup+0x20/0x390 [ 113.531437][ T6224] tty_wakeup+0xe5/0x120 [ 113.535831][ T6224] tty_port_default_wakeup+0x2a/0x40 [ 113.541262][ T6224] serial8250_tx_chars+0x68e/0x860 [ 113.546607][ T6224] __start_tx+0x3e9/0x4a0 [ 113.551083][ T6224] serial8250_start_tx+0x363/0x530 [ 113.556343][ T6224] __uart_start+0x292/0x4c0 [ 113.560995][ T6224] uart_write+0x218/0xb30 [ 113.565468][ T6224] sixpack_receive_buf+0x3d7/0x1c80 [ 113.570825][ T6224] tty_ldisc_receive_buf+0x153/0x190 [ 113.576260][ T6224] tty_port_default_receive_buf+0x70/0xb0 [ 113.582127][ T6224] flush_to_ldisc+0x264/0x780 [ 113.586949][ T6224] process_one_work+0x9c5/0x1ba0 [ 113.592047][ T6224] worker_thread+0x6c8/0xf00 [ 113.596819][ T6224] kthread+0x2c1/0x3a0 [ 113.601053][ T6224] ret_from_fork+0x45/0x80 [ 113.605621][ T6224] ret_from_fork_asm+0x1a/0x30 [ 113.610625][ T6224] [ 113.612922][ T6224] [ 113.612922][ T6224] stack backtrace: [ 113.618798][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: kworker/u8:10 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 113.629700][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.639731][ T6224] Workqueue: events_unbound flush_to_ldisc [ 113.645515][ T6224] Call Trace: [ 113.648770][ T6224] [ 113.651678][ T6224] dump_stack_lvl+0x116/0x1f0 [ 113.656336][ T6224] check_irq_usage+0xf22/0x1290 [ 113.661161][ T6224] ? __pfx_mark_lock+0x10/0x10 [ 113.665906][ T6224] ? __pfx_check_irq_usage+0x10/0x10 [ 113.671165][ T6224] ? hlock_conflict+0x58/0x200 [ 113.675914][ T6224] ? __bfs+0x2fa/0x670 [ 113.679963][ T6224] ? __pfx_hlock_conflict+0x10/0x10 [ 113.685137][ T6224] ? hlock_conflict+0x58/0x200 [ 113.689879][ T6224] ? lockdep_lock+0xc6/0x200 [ 113.694447][ T6224] ? __pfx_lockdep_lock+0x10/0x10 [ 113.699465][ T6224] ? __lock_acquire+0x24b4/0x3c40 [ 113.704465][ T6224] __lock_acquire+0x24b4/0x3c40 [ 113.709298][ T6224] ? __pfx___lock_acquire+0x10/0x10 [ 113.714471][ T6224] ? lock_acquire.part.0+0x11b/0x380 [ 113.719731][ T6224] lock_acquire.part.0+0x11b/0x380 [ 113.724814][ T6224] ? sp_get+0x18/0xf0 [ 113.728781][ T6224] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 113.734398][ T6224] ? rcu_is_watching+0x12/0xc0 [ 113.739140][ T6224] ? trace_lock_acquire+0x14e/0x1f0 [ 113.744330][ T6224] ? sp_get+0x18/0xf0 [ 113.748291][ T6224] ? lock_acquire+0x2f/0xb0 [ 113.752769][ T6224] ? sp_get+0x18/0xf0 [ 113.756733][ T6224] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 113.762435][ T6224] _raw_read_lock+0x5f/0x70 [ 113.766937][ T6224] ? sp_get+0x18/0xf0 [ 113.770910][ T6224] sp_get+0x18/0xf0 [ 113.774695][ T6224] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 113.780392][ T6224] sixpack_write_wakeup+0x20/0x390 [ 113.785481][ T6224] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 113.791193][ T6224] tty_wakeup+0xe5/0x120 [ 113.795418][ T6224] tty_port_default_wakeup+0x2a/0x40 [ 113.800680][ T6224] serial8250_tx_chars+0x68e/0x860 [ 113.805771][ T6224] __start_tx+0x3e9/0x4a0 [ 113.810083][ T6224] serial8250_start_tx+0x363/0x530 [ 113.815187][ T6224] __uart_start+0x292/0x4c0 [ 113.819677][ T6224] uart_write+0x218/0xb30 [ 113.823989][ T6224] sixpack_receive_buf+0x3d7/0x1c80 [ 113.829171][ T6224] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 113.834783][ T6224] tty_ldisc_receive_buf+0x153/0x190 [ 113.840055][ T6224] tty_port_default_receive_buf+0x70/0xb0 [ 113.845755][ T6224] flush_to_ldisc+0x264/0x780 [ 113.850405][ T6224] ? lock_acquire+0x2f/0xb0 [ 113.854885][ T6224] ? process_one_work+0x921/0x1ba0 [ 113.859974][ T6224] process_one_work+0x9c5/0x1ba0 [ 113.864906][ T6224] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 113.870522][ T6224] ? __pfx_process_one_work+0x10/0x10 [ 113.875869][ T6224] ? rcu_is_watching+0x12/0xc0 [ 113.880614][ T6224] ? assign_work+0x1a0/0x250 [ 113.885178][ T6224] worker_thread+0x6c8/0xf00 [ 113.889744][ T6224] ? __kthread_parkme+0x148/0x220 [ 113.894752][ T6224] ? __pfx_worker_thread+0x10/0x10 [ 113.899862][ T6224] kthread+0x2c1/0x3a0 [ 113.903908][ T6224] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.909083][ T6224] ? __pfx_kthread+0x10/0x10 [ 113.913650][ T6224] ret_from_fork+0x45/0x80 [ 113.918040][ T6224] ? __pfx_kthread+0x10/0x10 [ 113.922609][ T6224] ret_from_fork_asm+0x1a/0x30 [ 113.927353][ T6224] [ 114.278272][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.296413][ T5891] usb 4-1: USB disconnect, device number 4 [ 114.307243][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.321123][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.342276][ T5891] quatech2 4-1:0.51: device disconnected