last executing test programs: 8m58.726833959s ago: executing program 2 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x54, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}]}, 0x54}, 0x1, 0x7000000, 0x0, 0x4010}, 0x0) 8m58.199792021s ago: executing program 2 (id=553): ioperm(0xcb1, 0x7fff, 0x400) fchmod(0xffffffffffffffff, 0x10) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001240)=0xffffffffffffffff, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001280), 0x1c902, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001300), 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%pi6 \x00'}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES32=r7], 0x3c}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto(0xffffffffffffffff, &(0x7f0000000000)="bced", 0x2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000003440)) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000003480)={0x2, 0x8000000000000000}) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000034c0)={0x800, 0x41a1}) syz_open_dev$sndpcmc(&(0x7f0000003500), 0x4, 0x501400) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r13, &(0x7f0000000980)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75c02719a96ce2fe716cdc727017372e4a86a57fd9d5e93e1f2542257d2bfae83199964f2ace5805178af7a492c4c3a0c09cae43545032d93d4628fb4aea6775d601bcf8d3bae3b4dea198bef7d141f5292c8e6941e1ce9df2cc33873b3c2f7aca772d7e92072badcce8c437a089aa850cf6e780d8dc944f845f9ce78f65fc8b8740e5727be061e4df2cae1c3aaee509379eac357e11b2db759527dcb308"], 0x15) r14 = dup(r13) write$FUSE_BMAP(r14, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r14, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xed, 0x0, 0xfffffffc}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='tranw=fn,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB=',k']) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003640)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000080)="4d9420af3724e0cdaa08d2120ba1661eea5b2992e556db607ac80198f08471a52f99a6027e6502391c0016e5e438f9ea094c4e963b7423a80112bd266ef58659d15b002ce03ac3e4a7542820944cbb4d47d2f44cfd4a0b43efec9263c02afe9a20454f32867fcd9b361926e5fb84a523fb1f7dd28f9f43833c4d06708b0b7ee8c7222e76246aca5c3015a18df423f41c8df5f9faf43ea514e59042f8b72dbb2905fd02ded6d8da6dcb0d6cd954f885501dcba92385cdfd0aab2978ceec18dd7ea7b3592d97fec1e3123a914daf4b6401a89612616c660c976eda83df7db3a5b098dc344523d89d20ecde73d57a31e6", 0xef}, {&(0x7f0000000200)="45f3f6d6a1f42ce0773d4b1140efd4a35caae3d6c0848f5038654b549ade0afc6acbba74ccffcda407e41df18621f890ae0fc6699118204c0ba2ea8989a9a7bd4dfef333ceebac3e51af8457ee8d0221c41510d1b41c08f7eefe4b39c9ad638c2da5475b595a8cdd32cb49dbd9f895be664a20f38402257eac0d8d16daf2c5be76bf9cdcfad6af4c48386a5e989c1d241216bbdc429a5c4a3790f972dd307791d40793c3789a4ef1bb", 0xa9}, {&(0x7f0000000180)="24b350", 0x3}, {&(0x7f00000002c0)="1bcd614f3aa23f7cd5d57c2a8a9f2ca370cb46596dc29cd04f2b258e9493840077c5a3340c9c4f716cf3631abd2f9e36e57f1a3b43c80e77d0e5a34472b3dd7398775c5efe169e6ee6b82bbf49b0ed0291cd36d68e1e3e8ad8f75ae1269fcbda543d56d66fb47011f282809adbeafb9a8980eeb0439ad31acdc294d035ebc76b784f8ed8fb862a8109fcb74bc57702cbc3724ef072545e4f46", 0x99}, {&(0x7f0000000380)="415c88f9ba5574909de996af674b038f0e07e51f43e8b7cbfa334fe948b0291642833b64c927", 0x26}, {&(0x7f00000003c0)="5eef3e6cb0f9c454bf514ba0fb53ffca26169d92febc0a8c6cc1f4259f1617d7c6312d706449a1e96bbb4e8adf8444ac1a71a58580ccaf8b77beb54156a81fef761150c2e4506b85449b0ce32710513ccc06ffa7d46f9d6fdad1b2223e677c7294a898", 0x63}], 0x6, 0x0, 0x0, 0x98}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)="ebdc2a3deba6c2a1b0dc4b50e555039ac401303a6cadd1b23e8b42ef410f559ca1e130bc4c8ec3db6b3a02e4fbf792825d4877acd0c351a8514801ffe7825d2ad001274d341892994b6401ead5e7826532c33d66484c33d285e6fdb37f66a734afad5028f9bd25a460923acfe629d8812c6fbbd0874f7fcf5c4aa170", 0x7c}, {&(0x7f00000005c0)="c1a83ad8336ab2c8f6036c471b32999b3ee28f3312ac4ff6d99627f7a96b430c2ff3d2f25403ce18b43214744cd6c900261ba764c7da6bb428f38ac3562875b6855ff14bc3ad80cb203ffb8d3b9b18bcdf4e2e2f3bb81c05109bb134fd22425b2b9bdde62aeb8ebbff682935d0e8d9931681c6355ce6996e8f1d1416c9bbcc13f7ed916d45c02821f0e355a52bb8a2064d5a1b53bc11f23a86194a2a3c0c5b7e06be77517f4905c99f148dc5e42ebee52a19cc6bcfe8f0ff8e21c5a7c581cb47bea7ecdc0b30d03a174c85549e4f59ef518deabe57ec6bfd12b486a7caf94cb86709", 0xe2}, {&(0x7f00000006c0)="43bce5aa2fe4e51351ed4c60606ef60115fb4ef2db3721590d7001cfdb0e965b9c62a4bc2632b955e1271964414216c32e053b49e5b4b0e1ee4d675ed2b2c41fd917c845686e227dd3ec4d09e63f976a56cf928a032286c8ab260f08a042e9c150d3260a9c8328adedd8dc0189eeff53a8cdc3b3d80af6c08b84606c086470b2771de62c3a9f1493ec61af0c255f31a57c372fb75268f45ce7856c92d38b53a21ddbbe0da535ecdcfae83d77408f7bd9000eb301742702bf9c5e28871909a7cb7bc634902e383aa14e5c1d62572afd961b55e9f1b065ca91ea2d65b99ab63b46a19b133df59d373b6e19203c0ec899ed", 0xf0}, {&(0x7f00000007c0)}], 0x4, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x8014}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="146206cfb129a6f6a312c55ba0b593934d7c85e315cd1fcb828c00c3f267c5650d426e9c21aae368aa82f2f297726d1e0411795e7672b0fdc930bceff97cc932a500de1f06513cfa6093ec1e041dc3bec923ce7df3931dda0b591eee02aed89f176dad4ee73f4701a060a2a9b5a0a910952db0dc9a3f6ce6270d44495d37", 0x7e}], 0x1, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x80, 0x4811}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000e80)="22417fa43f841117619b6cb6427dcfad9faedbe8e8cc9177f12db3cb338e0e9f25ad774e029c9fb1885b55b2e0d1d45623e6cc60e62746b0d3cd37a74394382e52a88e0a81c998", 0x47}, {&(0x7f0000000f00)="425fdb06d8fb9d240c884f8dd589eacf", 0x10}, {&(0x7f0000000f40)="810fda6720cd25ade9599a1f3898c55b89b3ea190346b93ec3ab9058844214fe132498d1f98ba617915b8f802d028148f9b41b81c025c51ec7d78799aac6df3ee0f49056515038a904302f5c4c110df797", 0x51}, {&(0x7f0000000fc0)="21324a9acf60022e967872d6e392e39c483d568080f176a4158929a6da27dfdff16bf338a2f0fc382bdb80c785cb113da7c14b4d2103bfae7603b53de9caeabc816bdfb6bc377079589b689bf3de5a680719c1ed6d3fe88b30523a4a2a06", 0x5e}, {&(0x7f0000001040)="5514922381496ca2b1c547ef58fc636b754056a97935944e7d4968929e58d0", 0x1f}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001c0000a9d3be97eccdd6e8f6fcda6d650100000000000100000002000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=0xee01, @ANYBLOB="0000000010000000000000000100000001000000"], 0xc8, 0x4001841}}], 0x4, 0x4004810) r15 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_generic(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r15], 0x1c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000b40)={0x80, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x15}, 0x0) 8m57.766544286s ago: executing program 2 (id=554): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 8m57.516069432s ago: executing program 2 (id=559): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x121342, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0x10, 0x803, 0x0) 8m56.520014721s ago: executing program 2 (id=562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa900, 0x0) r1 = getpid() r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x1, 0x5004) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xec) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xec) 8m55.463729928s ago: executing program 2 (id=565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x80800) r3 = socket$alg(0x26, 0x5, 0x0) r4 = getuid() chown(&(0x7f0000000180)='./file0\x00', r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_clone3(&(0x7f0000000e80)={0xa0080000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x26}, &(0x7f0000000d00)=""/43, 0x2b, &(0x7f0000000d40)=""/207, &(0x7f0000000e40)=[0x0], 0x1}, 0x58) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000f00)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001000)=0xe8) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f00000029c0)={0x658, 0x0, r9, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r10, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r10, r11, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r10, r11, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r10, r11, 0x28a, 0x7, 0x700}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r10, r11, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r10, r11, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r10, r11, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r10, r11, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r11, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) sendmmsg$unix(r2, &(0x7f0000001340)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000002c0)="be8c1d516906bb8a897ebb59a01603a60b238443c13867c21c6107f7d8d152c34c6c73e716874fc414fce68e65c3c551e3", 0x31}, {&(0x7f0000000300)}, {&(0x7f0000000340)="b5466a902b3953c3ed718974fdc892c2a4fa590e77a2450439e752a6a994b90ceb8ee2ceafdd77a74d831581d59b8a6c17b6481d1a7a6142b3a8b4428d49f12e74f54fcd6fa8ac75cbb7ff4690f24694cba91ebba22f5a3c9c0ee68f57422d3aed4251f8bdb98f288b3c7f484c1365edb04a01112e3dbc701a56f5b65b32832d7c9a93cb4f1ad9e5fdd817e1dbecb4ebeb8bddf3e00e25a1a18e5255f6b0b889d946bb91705224cbeb37e1cc4103beaab04a18886ea8a36059ae5b7c2736743ea0c5fad94e3cc47160add285135d5ae1aaaa4618160224817d429a04454b208bf93c870e76cccabae32e2758060d09cc5261c40c92b476d14f", 0xf9}, {&(0x7f0000000440)="2265f2fd8b0967e269900ec57635c4d4a95611a84d0a81b24c8975bc4b6fd84e3195d8e86c69661bc3f86483c6953d5ef218aa3f7531128fe6df1e305ab540448a77b12a9cd052f39c9bb272acb1d8d196fc", 0x52}, {&(0x7f00000004c0)="d27080c0e6ab93dc1afa9b532c76b1b371d3e24ec66d8219b69a3b6d279302591b23ee776beed76bd8e257ee4d8ce3e607bddfbda20d852959c065415d4a266e91ad794ef3eb2a339671831422896b1ba04008e1d0f9ac1f046e658436787a5d23b91b1a347f53e6ebe10a0738fbfd335f8577181e71f9f2940903902f729a0aee0522d91b4d593f223b669224733a498829b21b70326d29a6", 0x99}, {&(0x7f0000000580)="4a7cd5c3d854c5a4", 0x8}, {&(0x7f0000000680)="1738d9bbed447abc415c17847db3148d0dee411f0efcc811fcedfed590f224bf42f807cdd75391e38ae6cbad077a43a67bd78d2ab837506272ea25bfbcdafb0a8eea1a81202a7f6c5cd6380a68b832e27cc728285b12c6753f99b7e159606004562f60cd3093f5faea03629bba14aa9904668ef864e6ef1aac0d804a8494cba6696c5d43d026347f903be9d3cbef133b5b8059b7f379baa3992f24d85a1fe5c12edd9b4daf338bbe1cbe5f1d21fb68b6e233dd01765ab65514395be2373b0c95bb0594c6a8b27066bcaf1b76d4a95c0b8f66342e", 0xd4}, {&(0x7f00000005c0)="ac483471b4b4d58e8b50e84b6435135def349db9543db3014a3257031652470f5ec5277b0a", 0x25}, {&(0x7f0000000600)="d4fb7cfcea62c1d3551c7e6ac517c9ce0d0b", 0x12}], 0x9, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x60}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000980)="8b34efae2e39710637bac2ee275dd80d3abb7e6c69a92b74afe72c0d13ff3bda63e14043cb82da991098100841381481e6e63f9359033603992c34dce849ea4cde38f99358cc1f5ed1a3e73fb386458382d5dc3c4654bce45753b4420e87ef16146de9f645c42b0775464052dcfc325d1636c4bd29901586512ed2cc4498a09cfac9ade1b660a5349b83789e22a00a68fc91b484dbb40034fb797738b7c621b54284932f7edc8f2ceedd03e5a8daca2e576ee8549e521df4ca5a3f2b07298bc0855a6138465f7702742305e53d4bcb9248490b57b74e08", 0xd7}, {&(0x7f0000000a80)="939cb732db5473884b81c097f2d7a03157c365f60273eb92f3feeb116b94b949dc5c1d15fe67df10e5a1a3c5c7029f91b3192f5030d67f0077dde1604daab69bd644ba81d2a129b293e9017bc95a55f770c493db5128256d01f703da2fcebe4c7d0a47677bf20e26d5caa6a8f70e89ff136e0c05d3c4867f788b05d947138d413d6be445b69d2c427a711b5911ce2c183c47a139d95c49edd2b671dd7f7a06d3bb3e1a8111", 0xa5}, {&(0x7f0000000b40)="0a6bb0c9b5709bbffa7924ce24b66ae5e2b3ea8085665a906a6a7e9367adccdbb8ca5e207442473543b435e4ceb6fd76f58c99f9525d8e520ca2786465e441e935b5b9f99ec1ac60b354a475c82f7379c629711b0f6a4bd3b85b70538400c8159004e461ff39631ff1aef8644e795a1362e317f80b729a603da786ff24a2b00d598634394c0d65320b2034dc7dd38dabc2d67050652cccba0f6dc09f9611960344d5ad", 0xa3}], 0x3, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r11}}}], 0x20, 0x4000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001080)="127d5fc1764b6697de7a3318c4150cf37f9695341c76a216115509e938eca7284919f2b3411dfcf383a51283ff0f68f3582dc73a55eab0f062bb4db0db44a5b9c4e4a78cbc80f10fbdfdb7d869a7e0d89e6973dde760244a36a6343780bb48a890a6d53bee22a0e2fe6a06e477efc25108d83697", 0x74}, {&(0x7f0000001100)="5617ae73660f76cc38e4647917584b2255223274c44ed9bf5f83591a44d2bd7fdc6299e28a998c0b1516c5cfede53844e9e77785638ec4803d2a473b96a2f088fab0e26b66e385aa587a195eb92cca0a6b34d7efaa809bfd98304d5b351466c89b28ee763a48235da083c16a80d495a83403", 0x72}, {&(0x7f0000001180)="ba12964690f3d52867bffc2f0ee373f000b17098decc2acaecb3e8fba2f36e73a77c8f5f4487fd0c2b48fe8015fe37b22b29ae49f02aed97235558bcb99e089dcc93d9d72abcd464d8c81e10454a2ea2cb63615a0e6ceb0e996cd82c756dcb57b23291cc8e7a7197c261935824f599194a0c357f10d63164c4a64dffe751e0b1191b5e8de07192a785c8664f15736ccdf5748c58bb6e11146a33b07a425d1428c40ed1dfc7", 0xa5}], 0x3, 0x0, 0x0, 0x40810}}], 0x3, 0x8000) r12 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x200) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000080)=0x800) r13 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r15, 0x1, 0x41, &(0x7f0000000000)=0x11, 0x4) bind$inet(r15, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r15, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x35, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0) ioctl$CEC_S_MODE(r13, 0x40046109, 0x0) close(r13) 8m40.214955085s ago: executing program 32 (id=565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x80800) r3 = socket$alg(0x26, 0x5, 0x0) r4 = getuid() chown(&(0x7f0000000180)='./file0\x00', r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r6 = syz_clone3(&(0x7f0000000e80)={0xa0080000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x26}, &(0x7f0000000d00)=""/43, 0x2b, &(0x7f0000000d40)=""/207, &(0x7f0000000e40)=[0x0], 0x1}, 0x58) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000f00)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001000)=0xe8) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f00000029c0)={0x658, 0x0, r9, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r10, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r10, r11, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r10, r11, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r10, r11, 0x28a, 0x7, 0x700}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r10, r11, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r10, r11, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r10, r11, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r10, r11, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r11, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) sendmmsg$unix(r2, &(0x7f0000001340)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000002c0)="be8c1d516906bb8a897ebb59a01603a60b238443c13867c21c6107f7d8d152c34c6c73e716874fc414fce68e65c3c551e3", 0x31}, {&(0x7f0000000300)}, {&(0x7f0000000340)="b5466a902b3953c3ed718974fdc892c2a4fa590e77a2450439e752a6a994b90ceb8ee2ceafdd77a74d831581d59b8a6c17b6481d1a7a6142b3a8b4428d49f12e74f54fcd6fa8ac75cbb7ff4690f24694cba91ebba22f5a3c9c0ee68f57422d3aed4251f8bdb98f288b3c7f484c1365edb04a01112e3dbc701a56f5b65b32832d7c9a93cb4f1ad9e5fdd817e1dbecb4ebeb8bddf3e00e25a1a18e5255f6b0b889d946bb91705224cbeb37e1cc4103beaab04a18886ea8a36059ae5b7c2736743ea0c5fad94e3cc47160add285135d5ae1aaaa4618160224817d429a04454b208bf93c870e76cccabae32e2758060d09cc5261c40c92b476d14f", 0xf9}, {&(0x7f0000000440)="2265f2fd8b0967e269900ec57635c4d4a95611a84d0a81b24c8975bc4b6fd84e3195d8e86c69661bc3f86483c6953d5ef218aa3f7531128fe6df1e305ab540448a77b12a9cd052f39c9bb272acb1d8d196fc", 0x52}, {&(0x7f00000004c0)="d27080c0e6ab93dc1afa9b532c76b1b371d3e24ec66d8219b69a3b6d279302591b23ee776beed76bd8e257ee4d8ce3e607bddfbda20d852959c065415d4a266e91ad794ef3eb2a339671831422896b1ba04008e1d0f9ac1f046e658436787a5d23b91b1a347f53e6ebe10a0738fbfd335f8577181e71f9f2940903902f729a0aee0522d91b4d593f223b669224733a498829b21b70326d29a6", 0x99}, {&(0x7f0000000580)="4a7cd5c3d854c5a4", 0x8}, {&(0x7f0000000680)="1738d9bbed447abc415c17847db3148d0dee411f0efcc811fcedfed590f224bf42f807cdd75391e38ae6cbad077a43a67bd78d2ab837506272ea25bfbcdafb0a8eea1a81202a7f6c5cd6380a68b832e27cc728285b12c6753f99b7e159606004562f60cd3093f5faea03629bba14aa9904668ef864e6ef1aac0d804a8494cba6696c5d43d026347f903be9d3cbef133b5b8059b7f379baa3992f24d85a1fe5c12edd9b4daf338bbe1cbe5f1d21fb68b6e233dd01765ab65514395be2373b0c95bb0594c6a8b27066bcaf1b76d4a95c0b8f66342e", 0xd4}, {&(0x7f00000005c0)="ac483471b4b4d58e8b50e84b6435135def349db9543db3014a3257031652470f5ec5277b0a", 0x25}, {&(0x7f0000000600)="d4fb7cfcea62c1d3551c7e6ac517c9ce0d0b", 0x12}], 0x9, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x60}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000980)="8b34efae2e39710637bac2ee275dd80d3abb7e6c69a92b74afe72c0d13ff3bda63e14043cb82da991098100841381481e6e63f9359033603992c34dce849ea4cde38f99358cc1f5ed1a3e73fb386458382d5dc3c4654bce45753b4420e87ef16146de9f645c42b0775464052dcfc325d1636c4bd29901586512ed2cc4498a09cfac9ade1b660a5349b83789e22a00a68fc91b484dbb40034fb797738b7c621b54284932f7edc8f2ceedd03e5a8daca2e576ee8549e521df4ca5a3f2b07298bc0855a6138465f7702742305e53d4bcb9248490b57b74e08", 0xd7}, {&(0x7f0000000a80)="939cb732db5473884b81c097f2d7a03157c365f60273eb92f3feeb116b94b949dc5c1d15fe67df10e5a1a3c5c7029f91b3192f5030d67f0077dde1604daab69bd644ba81d2a129b293e9017bc95a55f770c493db5128256d01f703da2fcebe4c7d0a47677bf20e26d5caa6a8f70e89ff136e0c05d3c4867f788b05d947138d413d6be445b69d2c427a711b5911ce2c183c47a139d95c49edd2b671dd7f7a06d3bb3e1a8111", 0xa5}, {&(0x7f0000000b40)="0a6bb0c9b5709bbffa7924ce24b66ae5e2b3ea8085665a906a6a7e9367adccdbb8ca5e207442473543b435e4ceb6fd76f58c99f9525d8e520ca2786465e441e935b5b9f99ec1ac60b354a475c82f7379c629711b0f6a4bd3b85b70538400c8159004e461ff39631ff1aef8644e795a1362e317f80b729a603da786ff24a2b00d598634394c0d65320b2034dc7dd38dabc2d67050652cccba0f6dc09f9611960344d5ad", 0xa3}], 0x3, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r11}}}], 0x20, 0x4000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001080)="127d5fc1764b6697de7a3318c4150cf37f9695341c76a216115509e938eca7284919f2b3411dfcf383a51283ff0f68f3582dc73a55eab0f062bb4db0db44a5b9c4e4a78cbc80f10fbdfdb7d869a7e0d89e6973dde760244a36a6343780bb48a890a6d53bee22a0e2fe6a06e477efc25108d83697", 0x74}, {&(0x7f0000001100)="5617ae73660f76cc38e4647917584b2255223274c44ed9bf5f83591a44d2bd7fdc6299e28a998c0b1516c5cfede53844e9e77785638ec4803d2a473b96a2f088fab0e26b66e385aa587a195eb92cca0a6b34d7efaa809bfd98304d5b351466c89b28ee763a48235da083c16a80d495a83403", 0x72}, {&(0x7f0000001180)="ba12964690f3d52867bffc2f0ee373f000b17098decc2acaecb3e8fba2f36e73a77c8f5f4487fd0c2b48fe8015fe37b22b29ae49f02aed97235558bcb99e089dcc93d9d72abcd464d8c81e10454a2ea2cb63615a0e6ceb0e996cd82c756dcb57b23291cc8e7a7197c261935824f599194a0c357f10d63164c4a64dffe751e0b1191b5e8de07192a785c8664f15736ccdf5748c58bb6e11146a33b07a425d1428c40ed1dfc7", 0xa5}], 0x3, 0x0, 0x0, 0x40810}}], 0x3, 0x8000) r12 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x200) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000080)=0x800) r13 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r15, 0x1, 0x41, &(0x7f0000000000)=0x11, 0x4) bind$inet(r15, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r15, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x35, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0) ioctl$CEC_S_MODE(r13, 0x40046109, 0x0) close(r13) 6m49.943464477s ago: executing program 3 (id=1112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14, 0x700}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 6m48.72446973s ago: executing program 3 (id=1117): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8, 0x40, 0xfffffffd, 0x73, {{0x2a, 0x4, 0x2, 0x7, 0xa8, 0x64, 0x0, 0x87, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x2, [{@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x90, 0x3, 0x8, [{@private=0xa010101, 0xffff03db}, {@private=0xa010100, 0x1000}, {@local, 0x101}, {@broadcast, 0xfffffff6}]}, @generic={0x86, 0xb, "f44d1cfbce6c3502dd"}, @rr={0x7, 0x7, 0x9e, [@local]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x5, [{@remote, 0x1}, {@rand_addr=0x64010100, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x32, 0x1, 0x8, [{@loopback, 0x80}]}, @timestamp_addr={0x44, 0x24, 0xa1, 0x1, 0x8, [{@local, 0x9}, {@empty, 0x10000000}, {@remote, 0x100}, {@private=0xa010100}]}, @timestamp={0x44, 0x4, 0x84, 0x0, 0xe}]}}}}}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b1100000e8000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 6m45.03086036s ago: executing program 3 (id=1127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x3, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x800}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) close(r4) getsockname$inet(r3, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb702000008000000b704000000000000850000001600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988", 0xd}, {&(0x7f0000000700)='3', 0x1}], 0x2) 6m44.425142109s ago: executing program 3 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000100)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') lchown(&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0) 6m43.884729338s ago: executing program 3 (id=1134): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x180, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000240)={0x6, 'gretap0\x00', {0x7}, 0x7}) 6m43.275856412s ago: executing program 3 (id=1138): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40040000}, 0x40000) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, 0x0, &(0x7f0000000080)=0x53) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xc}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) close(r0) 6m43.171087957s ago: executing program 33 (id=1138): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40040000}, 0x40000) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, 0x0, &(0x7f0000000080)=0x53) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xc}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) close(r0) 2m58.92192978s ago: executing program 4 (id=2196): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x6ed7, &(0x7f0000000140)={0x0, 0xfad5, 0x1, 0x2, 0x2f2}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xb59, 0x0, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x122800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) alarm(0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e20, 0x3, 'wrr\x00', 0x0, 0x2, 0x800006f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x72}, {@local, 0x4e20, 0x2, 0x2, 0x12d5c, 0x12d5c}}, 0x44) dup3(r1, r1, 0x80000) futimesat(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x6}) 2m57.810612362s ago: executing program 4 (id=2202): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x8010) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x10002, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050003"], 0x60}}, 0x0) 2m57.073659945s ago: executing program 4 (id=2205): r0 = socket$kcm(0x11, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4000000010000570000000600000000000000805d918fc0830900"/79, 0x4f}, {&(0x7f0000002180)="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", 0xefb}], 0x2}, 0x24048082) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x50, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xec, 0x66, 0x7d, 0x40, 0x4dd, 0x9032, 0xfd0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm={0x15}]}]}}]}}]}}, 0x0) 2m54.874800838s ago: executing program 4 (id=2216): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$key(0xf, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x62c00, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x44010) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2m53.790618647s ago: executing program 4 (id=2222): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x4000d}, 0x20000000) 2m52.439660569s ago: executing program 4 (id=2225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0xfc}, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) write$nbd(r3, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRESHEX], 0xd6) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd7002f9dbdf2505200000"], 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) 2m36.329758098s ago: executing program 34 (id=2225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0xfc}, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) write$nbd(r3, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRESHEX], 0xd6) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd7002f9dbdf2505200000"], 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) 2m12.091942128s ago: executing program 1 (id=2424): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x8010) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x10002, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050006"], 0x60}}, 0x0) 2m10.772032123s ago: executing program 1 (id=2430): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000073864020720c1400ac390102030109021200010000000a09041df300"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="40037e000000dc6e67f0ee28bb3377d24c338fd00f2f870a0ea669a2ef6f979e3f7a4ff947ded918fa20c59684b3f2850f084488b52484112ecada6e71f0cafe53c3a6756d971bda611701248747e3957cf1207722e71f61edd3c01f4251707278850c3873e329c950f08bb001f90ec72222346b48d7000000000000000000000000b433ee0ca18ab4412a7d942c05be2d4ca7c41e962ca1c1e564f05a1b5a42da0322e6fad18e81e4ee27bdac2b0e89aec9ce410ecf6dd82ef86d8fe44c8113babd1bef1841bb5dba347cfc11d14819479b5f39b4fd0a1e65f9033ebd5785f66755cd834c4468ed8aa22fc1caea1f999b6523e1c9dc58f3c63c201f66cd92bccef0d017339a0ec366d76896ebe3f74e8b1b455795"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x20, 0x2, 0x13, {0x13, 0xa, "8202003101ef9846290c00000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 2m7.433243768s ago: executing program 1 (id=2441): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x800) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000000)) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000400)={'gre0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013070000000000000000ac1414aa000000000000000000400000fe800000000000eb0000000000000039c240e8d5bbfb29a3638d8566559dbb00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002000000000000", @ANYRES32=r7, @ANYBLOB='\n\x004'], 0x30}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 2m7.198891525s ago: executing program 1 (id=2444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x4c0900) ioctl$RTC_UIE_OFF(r1, 0x7004) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYBLOB="02002bbd7000fddbdf25010000000000000001410000001800170000000000000005756470ba73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000812}, 0x24000001) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 2m3.893820805s ago: executing program 1 (id=2453): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0x20000000}) 2m2.362598764s ago: executing program 1 (id=2460): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x5bbb, &(0x7f0000000140)={0x0, 0x9499, 0x40, 0x8, 0x22e}, &(0x7f0000000040), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x7c48, &(0x7f00000001c0)={0x0, 0x41b9, 0x2, 0x0, 0x28e, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x22008080, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfa) sync() sync() 1m46.202281998s ago: executing program 35 (id=2460): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x5bbb, &(0x7f0000000140)={0x0, 0x9499, 0x40, 0x8, 0x22e}, &(0x7f0000000040), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x7c48, &(0x7f00000001c0)={0x0, 0x41b9, 0x2, 0x0, 0x28e, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x22008080, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfa) sync() sync() 15.657012077s ago: executing program 6 (id=2920): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x40040) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0xffffff80}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.97453235s ago: executing program 6 (id=2932): r0 = io_uring_setup(0x1a30, &(0x7f0000000380)={0x0, 0x32b6, 0x40, 0x0, 0x35d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_GET_TIMERSLACK(0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f0000000100), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES32=r3], 0x70}}, 0x24040880) gettid() timer_create(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0xb1, 0xff, 0x0, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) 11.247368638s ago: executing program 7 (id=2938): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x800) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000000)) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000400)={'gre0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013070000000000000000ac1414aa000000000000000000400000fe800000000000eb0000000000000039c240e8d5bbfb29a3638d8566559dbb00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB='\n\x004'], 0x30}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 9.689976027s ago: executing program 7 (id=2945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffff23) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="01"], 0x40) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000200)='\xa0\x87\x06\x00\x00\x00\x00\x00\x00\x00\nx\xed\x7f\x05\t', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000040)={0x2, {0x3, 0x6, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000100000200b"], 0x48) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="4518f12da94ccc42d5f06a9c5ea7326d4ed7dc86d288b1358ea67120", 0x1c}], 0x1, 0x8, 0x80000001, 0x1) 8.971560763s ago: executing program 6 (id=2950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000c83d850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=0x1, @ANYBLOB="0002000000000000000000000000000000007244", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES64, @ANYRESHEX, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.838524756s ago: executing program 0 (id=2951): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x11, 0xffffffffffffffff, 0x100000000) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000000)={0x0, 0x200000, 0x2, 0x0, 0x1000007}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8880b8727ac0) setns(r4, 0x20000000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xf9) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xa9, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x8, 0x40, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x7, 0x3, "9f4997e6"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x58, 0x9, 0x2, "30211bf8bf0a39fd"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x31, 0x9, "ce76f5", "8ecb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x5, 0x7, {0x7, 0x25, 0x1, 0x102, 0xa, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0xc3, 0xc5, {0x7, 0x25, 0x1, 0x85, 0x5, 0x3}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2b, 0x4, 0x4, 0x8, 0x7}, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x3, 0xb, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "1dbc4373f9096d985270f546a5561cca"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_connect(0x1, 0x896, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x110, 0xff, 0x8a, 0x2e, 0x40, 0x6}, 0x20, &(0x7f0000000b00)=ANY=[@ANYBLOB="050f20530503100b0710020286f81f07100212cf090003100b07100202c41000"], 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x100c}}]}) waitid(0x1, r0, &(0x7f0000000240), 0x1000000, &(0x7f00000002c0)) 8.207964984s ago: executing program 6 (id=2952): creat(&(0x7f00000000c0)='./file0\x00', 0x172) syz_open_dev$vcsn(&(0x7f0000000100), 0xf7, 0x424040) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = getpgrp(0xffffffffffffffff) fcntl$setown(r5, 0x8, r6) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 8.200179016s ago: executing program 8 (id=2953): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x141301) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@setlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x414}}}}}}, @IFLA_MTU={0x8, 0x4, 0x800}, @IFLA_GROUP={0x8, 0x1b, 0xfff}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x60}, 0x1, 0x0, 0x2300}, 0x0) 6.419769694s ago: executing program 8 (id=2955): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x800) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000000)) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000400)={'gre0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013070000000000000000ac1414aa000000000000000000400000fe800000000000eb0000000000000039c240e8d5bbfb29a3638d8566559dbb00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB='\n\x004'], 0x30}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 6.173786569s ago: executing program 8 (id=2956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000002100010029bd7000ffdbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e2300004e2300000a00a0a02b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bc6b6e000100000050001100fe80"], 0xa0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0xbfffff1f, 0x1, 0x1], 0x2, 0x6}, {0x3, [0x3, 0x1, 0x0, 0x2, 0x4, 0x6], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x3, 0x3ff, 0x6, 0x7716, 0x2c9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x800, 0xf, [0x2, 0x16, 0x2c, 0x1b, 0x18, 0x22, 0x2, 0x33, 0x1a, 0xd, 0x38, 0x3f, 0x38, 0x35, 0x36, 0x3d], 0x0, 0x7, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 5.935846333s ago: executing program 8 (id=2958): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x5, 0x6f, 0x80, 0x1}, {0x6, 0x9, 0x8, 0x3}, {0x9, 0x8, 0x8, 0x80000001}, {0x7, 0x9, 0x3, 0x2}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = signalfd4(r0, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000002c0)=0x206646) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000080)) setregid(0x0, 0x0) setgroups(0x1, &(0x7f0000000000)=[0x0]) 5.356183357s ago: executing program 0 (id=2959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 5.317560109s ago: executing program 0 (id=2960): bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0ff}, {{0x18, 0x1, 0x1, 0x0, r4, 0x0, 0x0, 0x80ff}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.123188976s ago: executing program 5 (id=2961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$MSR(&(0x7f00000000c0), 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a00000000000061117c0000000000180000000000000000000000000040009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendfile(r3, r3, 0x0, 0x24002de8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0) 5.120871803s ago: executing program 7 (id=2962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x52b242d) pipe2$watch_queue(&(0x7f0000000000), 0x80) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0xc8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0xecffffff, 0x0, 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x79, {"4a4ec253062376dbc713e8692e0135b8"}, 0x35, 0x8, 0xe}, @ib={0x1b, 0x6, 0x2000, {"e19ca27711afdfa4e2e9e4339da77c9a"}, 0x8000, 0x0, 0xe}}}, 0x118) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x64, r7, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8, 0xb, 0x10}}]}, 0x64}}, 0x0) 3.174381781s ago: executing program 0 (id=2963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c0000040000001400018006000600800a000008002000040003"], 0x2c}}, 0x0) 3.126853262s ago: executing program 7 (id=2964): creat(&(0x7f00000000c0)='./file0\x00', 0x172) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = getpgrp(0xffffffffffffffff) fcntl$setown(r6, 0x8, r7) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 1.834599008s ago: executing program 0 (id=2965): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{}, [], {0x95, 0x0, 0x0, 0x12}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.730792759s ago: executing program 5 (id=2966): msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c) 1.719119091s ago: executing program 6 (id=2967): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x800) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000000)) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000400)={'gre0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013070000000000000000ac1414aa000000000000000000400000fe800000000000eb0000000000000039c240e8d5bbfb29a3638d8566559dbb00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB='\n\x004'], 0x30}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 1.706240844s ago: executing program 0 (id=2968): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x18, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000001c0)={0x0, 0x1, 0xb2, "e2d5185538b27910ae272879d12865b3d3db765b7c40de732336ea83cde5ddbf2a4b150ab5bc325cba445231140c9f3139a0ed16d2840196a2c5dd8aa472093c5d9e5cb3a9e3ed616f62db1755622f8f62a762217ce499f509a32c5bd54e3fe19a1887bb5735179230e7c211c44fd63ca24b7a932eb91110c659a2026c67c51175560d18c498923e541f5e8f7786f6a047ab96df7b2fbae2e1ea2ddc0a9984e12ad37f6aa71da749c9f23dd44c0aa3000000"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x4}, 0x0, &(0x7f0000000600)={0x40, 0xb, 0x2, "946c"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x13, 0xfffffffffffffe23, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f0000000000)={0x40, 0x19, 0x2, "d7e9"}, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x32}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x7}}) 1.626172011s ago: executing program 8 (id=2969): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x80000001, 0x7}) ioctl$TIOCSIG(r0, 0x40045436, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x21, 0x5, 0x6, 0x1, 0x6004, r0, 0x2, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, 0x26, 0x100, 0x70bd28, 0x25dfdbff, {0x9}, [@nested={0x96, 0xbf, 0x0, 0x1, [@typed={0xc, 0x4e, 0x0, 0x0, @u64=0x10}, @nested={0x4, 0xb2}, @generic="b2b0fff39342e70b67ecf50270ad094ecb581bd4537eafe2bae9d0a7219670685cc2d5d14bba74b73c211c52d5f2f3a9e5ffc94ff203644fece24258689fc36d23fc01e31d09395aa599405b09766dd3bda0d3faff00bbf53c05a0f0a2514917e8f541d8becbe0466a92d9519af8e791b911d0c1e0056c8516b43cf1d855cf3e9f46"]}, @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@multicast2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x55fdce2e80a31047}, 0x44840) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x6, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000480)={0xff, 0x5}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000004c0)={0x7, 0xfff}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)={0x0, 0x0}) r6 = syz_pidfd_open(r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000540)=0x3) syz_emit_ethernet(0x49, &(0x7f0000000580)={@multicast, @empty, @void, {@mpls_mc={0x8848, {[{0x6}, {0xd0, 0x0, 0x1}, {0x3080, 0x0, 0x1}], @generic="e87fb5b54c1af4bc0cad37680fe9e08b6968518360918a76dad04adb52bb47d5772bf43d04b26cffbc8aa53a052271"}}}}, &(0x7f0000000600)={0x1, 0x3, [0x818, 0xdc1, 0x783, 0x952]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6, {0x5ded0219, 0x2}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) kcmp(r8, r5, 0x6, r7, r9) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x484, &(0x7f0000000700)={0x3a, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e23, 0x0, 'dh\x00', 0x22, 0x1a97, 0x6f}, 0x2c) r11 = syz_open_dev$sg(&(0x7f0000000740), 0x8000000000000000, 0x20200) r12 = dup2(r0, r11) recvmmsg(r3, &(0x7f0000007840)=[{{&(0x7f0000000780)=@sco, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000800)=""/238, 0xee}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/213, 0xd5}], 0x3, &(0x7f0000001a40)=""/107, 0x6b}, 0x219}, {{&(0x7f0000001ac0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/123, 0x7b}, {&(0x7f0000002bc0)=""/168, 0xa8}, {&(0x7f0000002c80)=""/195, 0xc3}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/112, 0x70}], 0x6, &(0x7f0000003e80)=""/165, 0xa5}, 0x9}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003f40)=""/11, 0xb}], 0x1, &(0x7f0000003fc0)=""/107, 0x6b}, 0x1}, {{&(0x7f0000004040)=@isdn, 0x80, &(0x7f0000005600)=[{&(0x7f00000040c0)=""/213, 0xd5}, {&(0x7f00000041c0)=""/198, 0xc6}, {&(0x7f00000042c0)=""/39, 0x27}, {&(0x7f0000004300)=""/115, 0x73}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/113, 0x71}, {&(0x7f0000005400)=""/109, 0x6d}, {&(0x7f0000005480)=""/197, 0xc5}, {&(0x7f0000005580)=""/109, 0x6d}], 0x9, &(0x7f00000056c0)=""/67, 0x43}, 0x200}, {{&(0x7f0000005740)=@qipcrtr, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)=""/112, 0x70}], 0x1, &(0x7f0000005880)=""/147, 0x93}, 0xef}, {{&(0x7f0000005940)=@rc, 0x80, &(0x7f0000005e80)=[{&(0x7f00000059c0)=""/105, 0x69}, {&(0x7f0000005a40)=""/109, 0x6d}, {&(0x7f0000005ac0)=""/223, 0xdf}, {&(0x7f0000005bc0)=""/126, 0x7e}, {&(0x7f0000005c40)=""/104, 0x68}, {&(0x7f0000005cc0)=""/207, 0xcf}, {&(0x7f0000005dc0)=""/168, 0xa8}], 0x7, &(0x7f0000005f00)=""/180, 0xb4}, 0x4}, {{&(0x7f0000005fc0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000006300)=[{&(0x7f0000006040)=""/21, 0x15}, {&(0x7f0000006080)=""/246, 0xf6}, {&(0x7f0000006180)=""/43, 0x2b}, {&(0x7f00000061c0)=""/25, 0x19}, {&(0x7f0000006200)=""/97, 0x61}, {&(0x7f0000006280)=""/105, 0x69}], 0x6, &(0x7f0000006380)=""/161, 0xa1}, 0x40}, {{0x0, 0x0, &(0x7f0000007740)=[{&(0x7f0000006440)=""/4096, 0x1000}, {&(0x7f0000007440)=""/190, 0xbe}, {&(0x7f0000007500)=""/215, 0xd7}, {&(0x7f0000007600)=""/221, 0xdd}, {&(0x7f0000007700)=""/56, 0x38}], 0x5, &(0x7f00000077c0)=""/90, 0x5a}}], 0x8, 0x40000000, &(0x7f0000007a40)={0x77359400}) fcntl$addseals(r3, 0x409, 0x9) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000007ac0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r13, &(0x7f0000007bc0)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000007b80)={&(0x7f0000007b00)={0x68, r14, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x4000810) ioctl$VIDIOC_S_FBUF(r12, 0x4030560b, &(0x7f0000007cc0)={0x1, 0x1c, &(0x7f0000007c00)="9759ebcd55906478eddf8240fb1efe51b3d5f8acd37a79374238c2ee512673c8de677ad8bb494f11502f31cbfbc45d57338b5c1b14a5d71dfd3de315a856e9483e760c4c4254c83a74a9748abb01e8516d350b0cfe3c72693ab54a43d85a0287efd34f47eb8a7aaa44e5de4544c4cc08b5bbd356607030caf552d762eb131756a2b1475223982ff10309df3a3bcf34c3b200c74b5e86b476db9b7a55934ef097f19f474a9d5a149e45ccd8035a87cc", {0x4, 0x1b5, 0x47504a50, 0x4, 0x7, 0x5, 0xa, 0x1}}) 1.624121714s ago: executing program 7 (id=2970): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000001000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x44004000}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x80000001) 859.973068ms ago: executing program 7 (id=2971): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000073864020720c1400ac390102030109021200010000000a09041d"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="40037e000000dc6e67f0ee28bb3377d24c338f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x20, 0x2, 0x13, {0x13, 0xa, "8202003101ef9846290c00000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 846.431793ms ago: executing program 6 (id=2972): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x20000000001ff, 0x286a23) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001140)='M$z', 0x3}, {&(0x7f0000001180)="6139578f", 0x4}], 0x2}}], 0x1, 0x200040c0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'pim6reg\x00'}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) readv(r4, &(0x7f0000001780)=[{&(0x7f0000000480)=""/123, 0x7b}], 0x1) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000500)=ANY=[@ANYRES32=r5], &(0x7f0000000980)={0xa, &(0x7f0000000180)={0xffffff5c, 0x6, 0x300, 0x40, 0x7, 0x1b, 0x10, 0x7}, 0x5, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x5, [{0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8203"]}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@string={0x0, 0x3, "40b383c2f71f23d0f462dee88158b3b3d19a67ee60e82bcee06950e55352260848d1d70e9c7e2bd62e0e5b4d573b01766d0fd907bdaad70f949e65c7afcd896cd65aedda83377afca81c20fa8d0d1f51d23b832c27cdf203a28c7f84a6a7191f8bc7b9df1e998147bf9b7c41ea99b7d27f0436945c9a1244ca53ff86c819387bf4813c57aeb4a4e58941f50e54a19816dac860597485fbff6ff5fac692c94af79d83520222e18b9873e8c71af8d9"}}, {0x0, 0x0}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x402, 0x37, 0x6, 0x19, 0x3, 0x60, 0x2, 0x105, 0xffffffffffffffff}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x100, 0x0, 0x0, 0x81, 0x42}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) 736.156883ms ago: executing program 5 (id=2973): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000000280), 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x168, 0x10, 0x190, 0xb, 0x418, 0x250, 0x250, 0x418, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff, 0x0, 0xff], 'erspan0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x61}, 0x6000000, 0x128, 0x190, 0xffffff80, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x6000000, 0x1, 0xfffffffc, 0x10000, 0x80000001}, {0xc}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xfffffffc, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x160, 0x288, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x31}, [0xffffffff, 0xe704d5fd47b14c6a, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0xff, 0xffffffff, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}, [0xff000000, 0x0, 0xff000000, 0xff000000], @ipv6=@empty, [0xff, 0x0, 0xff, 0xff000000], 0x7, 0x2, 0x29, 0x4e22, 0x4e22, 0x4e20, 0x4e24, 0x102, 0x1220}, 0x1, 0x4}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:apt_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 282.490244ms ago: executing program 5 (id=2974): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x7900, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x16) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 190.99233ms ago: executing program 5 (id=2975): r0 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000040)="100c060026220300000000000000", 0xe, 0xfffffffffffffffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) setreuid(0x0, 0xee01) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xd) r3 = shmget$private(0x0, 0x4000, 0x1944, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x18, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) keyctl$instantiate(0xc, r0, &(0x7f0000000000)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'pkcs7_test\x00', 0x20, 0x101, 0x20, [0x31, 0x66, 0x38, 0x32, 0x37]}, 0x3a, r0) 120.636569ms ago: executing program 5 (id=2976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e9f}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x4000000, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0xa4}}, 0x0) 0s ago: executing program 8 (id=2977): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xf401, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): 7 netdevsim3: renamed from eth3 [ 564.429138][ T29] audit: type=1400 audit(1739970862.957:1434): avc: denied { ioctl } for pid=13549 comm="syz.1.2326" path="socket:[43176]" dev="sockfs" ino=43176 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 564.505913][ T901] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 564.522391][ T901] usb 1-1: can't read configurations, error -61 [ 564.550785][ T901] usb usb1-port1: attempt power cycle [ 564.938674][T12381] Bluetooth: hci5: command tx timeout [ 564.951176][T13469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.989744][T13469] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.006267][ T4525] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.014832][ T4525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.097726][ T901] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 565.121104][ T901] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 565.128879][ T901] usb 1-1: can't read configurations, error -61 [ 565.196714][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.203016][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.226910][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.234005][T10607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.763878][ T901] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 565.809308][ T901] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 565.846021][ T901] usb 1-1: can't read configurations, error -61 [ 565.878243][ T901] usb usb1-port1: unable to enumerate USB device [ 565.914360][ T29] audit: type=1326 audit(1739970864.361:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13566 comm="syz.6.2331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361198cde9 code=0x0 [ 566.090002][T13571] random: crng reseeded on system resumption [ 566.170946][ T29] audit: type=1326 audit(1739970864.604:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.5.2332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c0e18cde9 code=0x0 [ 566.245122][T13469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.302903][T13576] dns_resolver: Unsupported content type (152) [ 567.192913][T12381] Bluetooth: hci5: command tx timeout [ 567.659002][T13469] veth0_vlan: entered promiscuous mode [ 567.674860][T13469] veth1_vlan: entered promiscuous mode [ 567.988084][T13469] veth0_macvtap: entered promiscuous mode [ 568.023899][T13469] veth1_macvtap: entered promiscuous mode [ 568.056505][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.099790][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.110370][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.122821][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.132744][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.143295][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.153240][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.163738][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.173633][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.184135][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.194233][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.204728][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.215566][T13469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.230652][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.253788][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.263921][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.274528][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.288131][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.299527][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.310189][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.320766][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.378117][T13469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.539254][T13469] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.553896][T13469] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.562667][T13469] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.571413][T13469] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.707804][ T4525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.730112][ T4525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.774266][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.788120][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.841541][ T29] audit: type=1400 audit(1739970867.073:1437): avc: denied { mounton } for pid=13469 comm="syz-executor" path="/root/syzkaller.jCLoLt/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 569.362809][ T29] audit: type=1400 audit(1739970867.083:1438): avc: denied { mounton } for pid=13469 comm="syz-executor" path="/root/syzkaller.jCLoLt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 569.395560][T12381] Bluetooth: hci5: command tx timeout [ 569.499491][ T29] audit: type=1400 audit(1739970867.092:1439): avc: denied { mounton } for pid=13469 comm="syz-executor" path="/root/syzkaller.jCLoLt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 569.557639][ T29] audit: type=1400 audit(1739970867.148:1440): avc: denied { mounton } for pid=13469 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 569.723741][ T29] audit: type=1400 audit(1739970867.532:1441): avc: denied { mounton } for pid=13469 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 570.658605][ T29] audit: type=1400 audit(1739970868.804:1442): avc: denied { map } for pid=13640 comm="syz.6.2349" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 571.084856][ T901] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 571.298681][ T901] usb 7-1: Using ep0 maxpacket: 16 [ 571.337830][ T901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.006406][ T901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.262189][ T901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 572.301495][ T29] audit: type=1400 audit(1739970870.328:1443): avc: denied { write } for pid=13652 comm="syz.7.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 572.309880][ T901] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 572.354948][ T901] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.548954][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 572.727361][ T901] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 572.751054][ T901] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 572.777518][ T901] usb 7-1: Manufacturer: syz [ 572.790894][ T901] usb 7-1: config 0 descriptor?? [ 573.288030][ T901] rc_core: IR keymap rc-hauppauge not found [ 573.293951][ T901] Registered IR keymap rc-empty [ 573.335944][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.393573][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.439526][ T901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 573.517848][ T901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input52 [ 573.553721][T13671] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.566389][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.640106][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.661514][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.663224][T13677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2359'. [ 573.685866][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.746671][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.810677][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.869169][T13671] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.885456][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.953958][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 574.002902][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 574.045689][ T901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 574.111521][ T901] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 574.134666][ T901] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 574.164969][T13671] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.188927][ T901] usb 7-1: USB disconnect, device number 26 [ 574.321641][T13671] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.448537][T13671] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.494147][T13671] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.514687][T13671] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.554412][T13671] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.467512][ T1217] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 575.489861][ T901] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 575.665767][ T1217] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 575.681598][ T1217] usb 1-1: can't read configurations, error -61 [ 575.810599][ T901] usb 6-1: Using ep0 maxpacket: 32 [ 575.820605][ T901] usb 6-1: config 3 has an invalid interface number: 202 but max is 0 [ 575.852389][ T1217] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 575.867492][T13707] xt_TPROXY: Can be used only with -p tcp or -p udp [ 575.877566][ T901] usb 6-1: config 3 has no interface number 0 [ 575.910143][ T901] usb 6-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=c1.5b [ 576.014377][ T1217] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 576.032739][ T901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.051589][ T1217] usb 1-1: can't read configurations, error -61 [ 576.084873][ T1217] usb usb1-port1: attempt power cycle [ 576.285659][ T901] usb 6-1: string descriptor 0 read error: -71 [ 576.305554][T13716] veth1_macvtap: left promiscuous mode [ 576.306900][ T29] audit: type=1400 audit(1739970874.079:1444): avc: denied { getopt } for pid=13715 comm="syz.7.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 576.312782][ T901] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 576.360517][ T901] sonixb 6-1:3.202: Error reading register 00: -71 [ 576.387088][ T901] usb 6-1: USB disconnect, device number 45 [ 576.471550][ T29] audit: type=1400 audit(1739970874.229:1445): avc: denied { listen } for pid=13721 comm="syz.1.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 576.491846][ T1217] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 576.528768][ T1217] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 576.537218][ T1217] usb 1-1: can't read configurations, error -61 [ 576.545231][T13729] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 576.710782][ T1217] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 576.756968][ T1217] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 576.765232][ T1217] usb 1-1: can't read configurations, error -61 [ 576.773683][ T1217] usb usb1-port1: unable to enumerate USB device [ 577.718454][T13748] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2386'. [ 578.172236][ T1217] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 578.311222][ T1217] usb 8-1: device descriptor read/64, error -71 [ 578.491461][T13766] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2393'. [ 578.963785][ T5824] Bluetooth: hci6: command 0x1003 tx timeout [ 578.964134][T12381] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 579.016734][ T1217] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 579.157745][ T1217] usb 8-1: device descriptor read/64, error -71 [ 579.298180][ T1217] usb usb8-port1: attempt power cycle [ 580.171320][ T1217] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 580.193748][ T1217] usb 8-1: device descriptor read/8, error -71 [ 580.461852][ T1217] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 580.505298][ T1217] usb 8-1: device descriptor read/8, error -71 [ 580.587145][T13804] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2406'. [ 580.621966][ T1217] usb usb8-port1: unable to enumerate USB device [ 581.208367][ T9] IPVS: starting estimator thread 0... [ 581.308672][ T1217] libceph: connect (1)[c::]:6789 error -22 [ 581.315338][T13812] IPVS: using max 30 ests per chain, 72000 per kthread [ 581.329985][ T1217] libceph: mon0 (1)[c::]:6789 connect error [ 581.475924][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 581.492145][T13824] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2412'. [ 581.604161][ T1217] libceph: connect (1)[c::]:6789 error -22 [ 581.610259][ T1217] libceph: mon0 (1)[c::]:6789 connect error [ 581.646696][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 581.653225][ T9] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 581.661656][ T9] usb 8-1: config 0 has no interface number 0 [ 581.668659][ T9] usb 8-1: config 0 interface 35 has no altsetting 0 [ 581.676934][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6a.c2 [ 581.686738][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.694830][ T9] usb 8-1: Product: syz [ 581.699033][ T9] usb 8-1: Manufacturer: syz [ 581.703992][ T9] usb 8-1: SerialNumber: syz [ 581.709667][ T9] usb 8-1: config 0 descriptor?? [ 581.716603][ T9] usbtest 8-1:0.35: couldn't get endpoints, -22 [ 581.722970][ T9] usbtest 8-1:0.35: probe with driver usbtest failed with error -22 [ 581.775017][ T5911] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 581.782644][T13814] ceph: No mds server is up or the cluster is laggy [ 581.890331][T13828] tun0: tun_chr_ioctl cmd 1074025675 [ 581.896519][T13828] tun0: persist enabled [ 581.900942][T13828] tun0: tun_chr_ioctl cmd 1074025675 [ 581.907421][T13828] tun0: persist enabled [ 581.930224][ T9] usb 8-1: USB disconnect, device number 6 [ 582.015702][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.074575][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.119288][ T5911] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 582.182547][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.227994][ T5911] usb 6-1: config 0 descriptor?? [ 582.681830][ T5911] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 583.843165][ T5911] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 583.851093][ T5911] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 583.858936][ T5911] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 583.869223][ T5911] usb 6-1: USB disconnect, device number 46 [ 585.101570][T13872] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2426'. [ 586.771996][ T5911] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 587.709337][T13901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.983393][ T5911] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.003478][ T5911] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.157178][ T5911] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 588.264116][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.272135][ T5911] usb 8-1: Product: syz [ 588.284768][ T5911] usb 8-1: Manufacturer: syz [ 588.289436][ T5911] usb 8-1: SerialNumber: syz [ 588.295554][ T5911] usb 8-1: config 0 descriptor?? [ 588.439450][T13916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2440'. [ 588.514796][T13920] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 588.535139][T13919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2441'. [ 588.894114][T13928] input: syz1 as /devices/virtual/input/input53 [ 590.075110][T10838] usb 8-1: USB disconnect, device number 7 [ 591.877884][ T26] block nbd2: Possible stuck request ffff888026125080: control (read@0,4096B). Runtime 240 seconds [ 592.059365][ T901] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 592.544674][ T901] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 592.688506][ T901] usb 1-1: config 0 has no interface number 0 [ 592.705982][ T901] usb 1-1: config 0 interface 29 has no altsetting 0 [ 592.719709][ T901] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 592.728269][T13967] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2454'. [ 592.741719][T13967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2454'. [ 592.803050][T13968] hub 9-0:1.0: USB hub found [ 592.817904][T13968] hub 9-0:1.0: 1 port detected [ 593.252017][ T901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.260197][ T901] usb 1-1: Product: syz [ 593.264365][ T901] usb 1-1: Manufacturer: syz [ 593.269016][ T901] usb 1-1: SerialNumber: syz [ 593.275072][ T901] usb 1-1: config 0 descriptor?? [ 593.396647][T13975] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 593.643992][ T5911] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 593.696745][ T901] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 593.770839][ T29] audit: type=1326 audit(1739970890.421:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088338cde9 code=0x7ffc0000 [ 593.794329][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.840052][ T29] audit: type=1326 audit(1739970890.421:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088338cde9 code=0x7ffc0000 [ 593.866543][ T29] audit: type=1326 audit(1739970890.449:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f088338cde9 code=0x7ffc0000 [ 593.873336][ T901] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 593.902728][ T29] audit: type=1326 audit(1739970890.449:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088338cde9 code=0x7ffc0000 [ 593.928303][ T901] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 593.939088][ T5911] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 593.956176][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.964760][ T29] audit: type=1326 audit(1739970890.449:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088338cde9 code=0x7ffc0000 [ 593.989951][ T5911] usb 8-1: config 0 descriptor?? [ 593.997818][ T5911] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 594.015919][ T29] audit: type=1326 audit(1739970890.449:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f088338cde9 code=0x7ffc0000 [ 594.047972][ T901] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 594.070492][ T901] usb 1-1: USB disconnect, device number 55 [ 594.077557][ T29] audit: type=1326 audit(1739970890.449:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f088338ce23 code=0x7ffc0000 [ 594.115942][ T29] audit: type=1326 audit(1739970890.449:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f088338ce23 code=0x7ffc0000 [ 594.139548][ T29] audit: type=1326 audit(1739970890.458:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088338cde9 code=0x7ffc0000 [ 594.175538][ T29] audit: type=1326 audit(1739970890.458:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088338cde9 code=0x7ffc0000 [ 597.056966][T14011] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2467'. [ 597.155813][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2467'. [ 597.422406][ T5911] usb 8-1: USB disconnect, device number 8 [ 597.596162][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2470'. [ 598.327461][T14030] netlink: 'syz.0.2474': attribute type 21 has an invalid length. [ 598.335343][T14030] netlink: 'syz.0.2474': attribute type 15 has an invalid length. [ 600.250396][T14048] netlink: 'syz.5.2479': attribute type 1 has an invalid length. [ 600.287502][T14048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.360057][T14050] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2480'. [ 600.380827][T14050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2480'. [ 600.383969][T14048] bond2: (slave gretap0): making interface the new active one [ 600.408641][T14048] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 600.507477][T14048] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 600.594116][T14057] FAULT_INJECTION: forcing a failure. [ 600.594116][T14057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.607653][T14057] CPU: 0 UID: 0 PID: 14057 Comm: syz.0.2481 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 600.607677][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 600.607687][T14057] Call Trace: [ 600.607692][T14057] [ 600.607698][T14057] dump_stack_lvl+0x16c/0x1f0 [ 600.607723][T14057] should_fail_ex+0x50a/0x650 [ 600.607751][T14057] _copy_from_user+0x2e/0xd0 [ 600.607768][T14057] __sys_bpf+0x21c/0x49c0 [ 600.607786][T14057] ? __pfx_lock_release+0x10/0x10 [ 600.607811][T14057] ? __pfx___sys_bpf+0x10/0x10 [ 600.607826][T14057] ? vfs_write+0x306/0x1150 [ 600.607857][T14057] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 600.607890][T14057] ? fput+0x67/0x440 [ 600.607909][T14057] ? ksys_write+0x1ba/0x250 [ 600.607934][T14057] ? __pfx_ksys_write+0x10/0x10 [ 600.607963][T14057] __x64_sys_bpf+0x78/0xc0 [ 600.607980][T14057] ? lockdep_hardirqs_on+0x7c/0x110 [ 600.607996][T14057] do_syscall_64+0xcd/0x250 [ 600.608017][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.608039][T14057] RIP: 0033:0x7f8d1b78cde9 [ 600.608053][T14057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.608068][T14057] RSP: 002b:00007f8d1c6aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.608084][T14057] RAX: ffffffffffffffda RBX: 00007f8d1b9a5fa0 RCX: 00007f8d1b78cde9 [ 600.608094][T14057] RDX: 0000000000000094 RSI: 0000400000000200 RDI: 0000000000000005 [ 600.608104][T14057] RBP: 00007f8d1c6aa090 R08: 0000000000000000 R09: 0000000000000000 [ 600.608114][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.608123][T14057] R13: 0000000000000000 R14: 00007f8d1b9a5fa0 R15: 00007ffea60c4648 [ 600.608145][T14057] [ 601.019101][T14066] Invalid ELF header magic: != ELF [ 601.025598][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 601.025613][ T29] audit: type=1400 audit(1739970897.202:1469): avc: denied { module_load } for pid=14065 comm="syz.0.2486" path="/562/bus" dev="tmpfs" ino=3009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 601.137897][T14069] ptrace attach of "./syz-executor exec"[13469] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 601.904762][ T5870] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 602.381515][ T5870] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 602.390080][ T5870] usb 1-1: config 0 has no interface number 0 [ 602.403444][ T5870] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 602.418933][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.447192][ T5870] usb 1-1: Product: syz [ 602.453077][ T5870] usb 1-1: Manufacturer: syz [ 602.457681][ T5870] usb 1-1: SerialNumber: syz [ 602.544327][ T5870] usb 1-1: config 0 descriptor?? [ 602.710265][T14087] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 602.935511][ T5870] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 603.419472][ T5870] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 603.446643][ T5870] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 603.574373][ T5870] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 603.608615][ T5870] usb 1-1: USB disconnect, device number 56 [ 604.319524][T14098] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2493'. [ 604.329936][T14098] netlink: 'syz.7.2493': attribute type 72 has an invalid length. [ 604.347064][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2493'. [ 604.974154][ T5870] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 605.024082][ T29] audit: type=1400 audit(1739970900.944:1470): avc: denied { write } for pid=14113 comm="syz.0.2499" name="file0" dev="tmpfs" ino=3031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 605.061643][T14117] block device autoloading is deprecated and will be removed. [ 605.078537][T14116] block device autoloading is deprecated and will be removed. [ 605.083350][ T29] audit: type=1400 audit(1739970900.944:1471): avc: denied { open } for pid=14113 comm="syz.0.2499" path="/566/file0" dev="tmpfs" ino=3031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 605.182100][ T5870] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 605.204362][ T5870] usb 8-1: config 0 has no interface number 0 [ 605.302481][ T5870] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 605.339294][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.350847][ T5870] usb 8-1: Product: syz [ 605.355027][ T5870] usb 8-1: Manufacturer: syz [ 605.359761][ T5870] usb 8-1: SerialNumber: syz [ 605.366078][ T5870] usb 8-1: config 0 descriptor?? [ 605.604825][T10838] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 605.613412][ T5870] peak_usb 8-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 605.798182][T10838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.843985][ T5870] peak_usb 8-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 605.855262][T10838] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 605.866137][ T5870] peak_usb 8-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 605.874949][T10838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.930721][T10838] usb 1-1: config 0 descriptor?? [ 606.012901][T10838] pwc: Askey VC010 type 2 USB webcam detected. [ 606.151440][ T5870] peak_usb 8-1:0.29: probe with driver peak_usb failed with error -71 [ 606.174919][ T5870] usb 8-1: USB disconnect, device number 9 [ 606.522258][T14136] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 606.575462][T14139] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2506'. [ 606.590237][T14139] netlink: 'syz.7.2506': attribute type 72 has an invalid length. [ 606.598631][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2506'. [ 607.008224][T10838] pwc: recv_control_msg error -32 req 02 val 2c00 [ 607.016638][T10838] pwc: recv_control_msg error -71 req 04 val 1000 [ 607.032064][T10838] pwc: recv_control_msg error -71 req 04 val 1300 [ 607.054691][T10838] pwc: recv_control_msg error -71 req 04 val 1400 [ 607.084756][T10838] pwc: recv_control_msg error -71 req 02 val 2000 [ 607.091832][T10838] pwc: recv_control_msg error -71 req 02 val 2100 [ 607.099011][T10838] pwc: recv_control_msg error -71 req 04 val 1500 [ 607.106256][T10838] pwc: recv_control_msg error -71 req 02 val 2500 [ 607.113159][T10838] pwc: recv_control_msg error -71 req 02 val 2400 [ 607.113427][T10838] pwc: recv_control_msg error -71 req 02 val 2600 [ 607.113693][T10838] pwc: recv_control_msg error -71 req 02 val 2900 [ 607.113950][T10838] pwc: recv_control_msg error -71 req 02 val 2800 [ 607.114269][T10838] pwc: recv_control_msg error -71 req 04 val 1100 [ 607.114503][T10838] pwc: recv_control_msg error -71 req 04 val 1200 [ 607.116033][T10838] pwc: Registered as video103. [ 607.116873][T10838] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input54 [ 607.228678][T10838] usb 1-1: USB disconnect, device number 57 [ 607.582251][ T1217] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 607.766391][ T1217] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 607.795990][ T1217] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 607.826779][ T1217] usb 6-1: config 1 has no interface number 1 [ 607.848396][ T1217] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 607.879951][ T1217] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 607.914556][ T1217] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.923635][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.945127][ T1217] usb 6-1: Product: syz [ 607.956535][ T1217] usb 6-1: Manufacturer: syz [ 607.961147][ T1217] usb 6-1: SerialNumber: syz [ 607.972142][ T29] audit: type=1400 audit(1739970903.703:1472): avc: denied { create } for pid=14159 comm="syz.6.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 608.025302][ T29] audit: type=1400 audit(1739970903.741:1473): avc: denied { write } for pid=14159 comm="syz.6.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 608.188163][ T1217] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 608.212259][ T1217] usb 6-1: USB disconnect, device number 47 [ 608.223235][ T29] audit: type=1400 audit(1739970903.937:1474): avc: denied { create } for pid=14155 comm="syz.0.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 608.857328][T14172] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2517'. [ 608.907991][T14172] netlink: 'syz.5.2517': attribute type 72 has an invalid length. [ 608.941645][T14172] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2517'. [ 609.163907][T14186] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 609.173464][T14186] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2522'. [ 609.274980][T14187] can0: slcan on ttyS3. [ 609.289787][T14187] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2520'. [ 609.300760][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2520'. [ 610.159806][T14178] can0 (unregistered): slcan off ttyS3. [ 610.627081][T14195] lo speed is unknown, defaulting to 1000 [ 610.775165][T14205] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 610.801555][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.810045][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.870036][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 610.886151][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 610.894828][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 610.903107][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 610.910617][ T5824] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 610.918282][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 611.003476][ T5929] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 611.141605][T14206] lo speed is unknown, defaulting to 1000 [ 611.212546][ T5929] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.259671][ T5929] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.291527][ T5929] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 611.314365][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.336933][ T5929] usb 8-1: config 0 descriptor?? [ 611.612437][ T5929] usb 8-1: string descriptor 0 read error: -71 [ 611.657054][ T5929] usb 8-1: USB disconnect, device number 10 [ 612.098709][T14227] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2531'. [ 612.250785][T14227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2531'. [ 612.531184][T14206] chnl_net:caif_netlink_parms(): no params data found [ 612.695719][T14206] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.712335][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.719465][ T5929] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 612.754813][T14206] bridge_slave_0: entered allmulticast mode [ 612.765130][T14206] bridge_slave_0: entered promiscuous mode [ 612.786597][T14206] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.807340][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.825753][T14206] bridge_slave_1: entered allmulticast mode [ 612.838300][T14206] bridge_slave_1: entered promiscuous mode [ 612.843112][ T29] audit: type=1400 audit(1739970908.259:1475): avc: denied { bind } for pid=14243 comm="syz.0.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 612.895318][T10838] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 612.906194][ T5929] usb 6-1: device descriptor read/64, error -71 [ 612.919349][T14206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.935153][T14206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.991793][T14206] team0: Port device team_slave_0 added [ 613.019388][T14206] team0: Port device team_slave_1 added [ 613.060458][T14206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.067641][T10838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 613.067668][T10838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 613.067696][T10838] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 613.067718][T10838] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 613.069346][T10838] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.087028][T14206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.119943][T10838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.122424][T14206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.167761][T14206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.177826][T10838] usb 7-1: Product: syz [ 613.182150][T10838] usb 7-1: Manufacturer: syz [ 613.182157][T12381] Bluetooth: hci6: command tx timeout [ 613.194785][ T5929] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 613.195863][T10838] usb 7-1: SerialNumber: syz [ 613.202432][ T901] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 613.214654][T14206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.251356][T14206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.340384][T14236] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 613.366644][T14206] hsr_slave_0: entered promiscuous mode [ 613.372784][T14206] hsr_slave_1: entered promiscuous mode [ 613.379152][T14206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.386758][T14206] Cannot create hsr debugfs directory [ 613.591742][T14236] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 613.600166][T14236] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 613.772524][ T5929] usb 6-1: device descriptor read/64, error -71 [ 613.779193][ T901] usb 1-1: device descriptor read/64, error -71 [ 613.889219][T14206] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 613.896650][ T5929] usb usb6-port1: attempt power cycle [ 613.904983][T14206] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 613.916730][T14206] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 613.926584][T14206] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 613.979872][T14206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.003849][T14206] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.015247][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.022382][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.036407][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.043618][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.060918][ T901] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 614.212196][ T901] usb 1-1: device descriptor read/64, error -71 [ 614.263153][T14206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.274691][ T5929] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 614.442499][ T901] usb usb1-port1: attempt power cycle [ 614.453548][ T5929] usb 6-1: device descriptor read/8, error -71 [ 614.512533][T14236] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 614.522053][T14236] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 614.749628][T10838] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 614.759888][T10838] cdc_ncm 7-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 614.823630][T10838] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 614.953361][T14206] veth0_vlan: entered promiscuous mode [ 614.971892][T10838] cdc_ncm 7-1:1.0: setting tx_max = 36 [ 614.975026][T14206] veth1_vlan: entered promiscuous mode [ 614.986467][T10838] cdc_ncm 7-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 615.004394][T10838] usb 7-1: USB disconnect, device number 27 [ 615.006282][T14206] veth0_macvtap: entered promiscuous mode [ 615.011102][T10838] cdc_ncm 7-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 615.036528][T14206] veth1_macvtap: entered promiscuous mode [ 615.051240][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.062315][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.072867][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.083927][ T5929] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 615.092107][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.103054][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.113592][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.123459][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.134143][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.144252][ T5929] usb 6-1: device descriptor read/8, error -71 [ 615.150441][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.161014][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.171130][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.181672][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.239643][ T901] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 615.248833][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.259706][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.269941][ T5929] usb usb6-port1: unable to enumerate USB device [ 615.276937][ T901] usb 1-1: device descriptor read/8, error -71 [ 615.284280][T14206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.419454][T12381] Bluetooth: hci6: command tx timeout [ 615.495875][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.633002][ T901] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 615.669743][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.696018][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.696168][ T901] usb 1-1: device descriptor read/8, error -71 [ 615.763847][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.780436][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.794361][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.815631][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.837580][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.876313][ T901] usb usb1-port1: unable to enumerate USB device [ 615.922866][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.466854][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.499465][T14206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.585517][T14286] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2544'. [ 616.595405][T14286] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2544'. [ 616.618418][T14206] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.628223][T14206] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.696814][T14206] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.719642][T14206] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.973584][ T9320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.006680][ T9320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.385343][ T901] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 617.409453][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.444879][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.629970][T12381] Bluetooth: hci6: command tx timeout [ 617.640695][ T901] usb 6-1: Using ep0 maxpacket: 8 [ 617.668324][ T901] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 617.677405][ T901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.687204][ T901] usb 6-1: Product: syz [ 617.691377][ T901] usb 6-1: Manufacturer: syz [ 617.696046][ T901] usb 6-1: SerialNumber: syz [ 617.702055][ T901] usb 6-1: config 0 descriptor?? [ 617.718579][ T29] audit: type=1400 audit(1739970912.824:1476): avc: denied { read } for pid=14304 comm="syz.6.2550" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 617.719799][ T901] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 617.770691][ T29] audit: type=1400 audit(1739970912.824:1477): avc: denied { open } for pid=14304 comm="syz.6.2550" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 617.835147][ T29] audit: type=1400 audit(1739970912.824:1478): avc: denied { ioctl } for pid=14304 comm="syz.6.2550" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 617.938875][ T901] gspca_sn9c2028: read1 error 0 [ 618.157386][ T901] gspca_sn9c2028: read1 error -71 [ 618.234962][T10838] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 618.310366][ T901] gspca_sn9c2028: read1 error -71 [ 618.324483][ T901] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 618.335843][ T901] usb 6-1: USB disconnect, device number 52 [ 618.448165][T14320] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2554'. [ 618.457277][T14320] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2554'. [ 618.466312][T14320] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2554'. [ 618.475404][T14320] vlan0: entered allmulticast mode [ 618.480567][T14320] veth0_vlan: entered allmulticast mode [ 618.920837][T10838] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 618.931076][T10838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.941262][T10838] usb 7-1: Product: syz [ 618.957211][T10838] usb 7-1: Manufacturer: syz [ 618.961988][T10838] usb 7-1: SerialNumber: syz [ 619.023553][T10838] usb 7-1: config 0 descriptor?? [ 619.314250][T10838] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 619.367329][T10838] peak_usb 7-1:0.0: unable to read PCAN-USB X6 firmware info (err -32) [ 619.449481][T10838] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -32 [ 619.467038][T10838] usb 7-1: USB disconnect, device number 28 [ 619.472468][T14327] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2557'. [ 619.658678][T14327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2557'. [ 619.865156][T12381] Bluetooth: hci6: command tx timeout [ 620.413090][ T29] audit: type=1400 audit(1739970915.321:1479): avc: denied { write } for pid=14344 comm="syz.0.2563" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 620.561844][ T29] audit: type=1400 audit(1739970915.321:1480): avc: denied { open } for pid=14344 comm="syz.0.2563" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 620.688694][ T29] audit: type=1400 audit(1739970915.330:1481): avc: denied { read } for pid=14344 comm="syz.0.2563" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 620.989245][ T29] audit: type=1400 audit(1739970915.882:1482): avc: denied { append } for pid=14354 comm="syz.5.2566" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 621.374814][T14358] bridge1: entered promiscuous mode [ 621.871215][ T29] audit: type=1400 audit(1739970916.200:1483): avc: denied { bind } for pid=14354 comm=6C2586CE36DB0CCF197CC94F7FCE8F scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 621.908821][T14356] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 623.311086][T14383] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 623.328479][ T901] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 624.109106][ T26] block nbd2: Possible stuck request ffff888026125080: control (read@0,4096B). Runtime 270 seconds [ 624.110467][ T901] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 624.185691][ T901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.323663][ T901] usb 6-1: Product: syz [ 624.327827][ T901] usb 6-1: Manufacturer: syz [ 624.332389][ T901] usb 6-1: SerialNumber: syz [ 624.936177][ T901] usb 6-1: config 0 descriptor?? [ 625.180740][ T901] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 625.190177][ T901] peak_usb 6-1:0.0: unable to read PCAN-USB X6 firmware info (err -32) [ 625.276187][T14396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.293951][T14396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.759717][ T901] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -32 [ 625.802344][ T901] usb 6-1: USB disconnect, device number 53 [ 625.857112][T14393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.650894][ T29] audit: type=1400 audit(1739970922.103:1484): avc: denied { setopt } for pid=14430 comm="syz.6.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 627.685239][T14424] xt_hashlimit: max too large, truncated to 1048576 [ 627.692535][T14424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 628.514280][ T5911] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 628.610738][T14445] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2590'. [ 628.857687][ T5911] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 628.871196][ T5911] usb 6-1: config 0 has no interface number 0 [ 629.907738][ T5911] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 629.949185][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.043094][ T5911] usb 6-1: Product: syz [ 630.066890][ T5911] usb 6-1: Manufacturer: syz [ 630.071521][ T5911] usb 6-1: SerialNumber: syz [ 630.078182][ T5911] usb 6-1: config 0 descriptor?? [ 630.368377][ T5911] peak_usb 6-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 630.391551][ T5911] peak_usb 6-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 630.978455][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.984855][ T5911] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -32 [ 631.072398][T14464] netlink: 'syz.8.2596': attribute type 2 has an invalid length. [ 631.347530][ T5911] usb 6-1: USB disconnect, device number 54 [ 632.861572][T14483] netlink: 'syz.8.2601': attribute type 1 has an invalid length. [ 632.993648][T14486] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2601'. [ 633.006565][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.017551][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.034474][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.036605][ T1217] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 633.084030][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.111280][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.139383][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.175584][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.218179][ T1217] usb 6-1: device descriptor read/64, error -71 [ 633.225068][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.245859][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.276262][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.296344][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.342508][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.356589][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.368546][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.391887][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.419725][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.431237][T14486] vlan2: entered promiscuous mode [ 633.446139][T14486] batadv_slave_0: entered promiscuous mode [ 633.570967][ T1217] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 634.108317][T14503] netlink: 'syz.8.2607': attribute type 1 has an invalid length. [ 634.188431][ T29] audit: type=1400 audit(1739970928.220:1485): avc: denied { create } for pid=14505 comm="syz.0.2608" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 634.210145][T14506] overlay: ./file0 is not a directory [ 634.215792][ T1217] usb 6-1: device descriptor read/64, error -71 [ 634.358543][ T1217] usb usb6-port1: attempt power cycle [ 634.381053][ T29] audit: type=1400 audit(1739970928.398:1486): avc: denied { ioctl } for pid=14505 comm="syz.0.2608" path="socket:[45007]" dev="sockfs" ino=45007 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 634.491318][T10838] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 634.648516][ T29] audit: type=1400 audit(1739970928.651:1487): avc: denied { ioctl } for pid=14515 comm="syz.8.2611" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 634.679163][T10838] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 634.694587][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 634.699017][T10838] usb 8-1: config 0 has no interface number 0 [ 634.762741][T10838] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 634.789724][ T1217] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 634.828956][T10838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.840484][T10838] usb 8-1: Product: syz [ 634.845956][T10838] usb 8-1: Manufacturer: syz [ 635.001379][T10838] usb 8-1: SerialNumber: syz [ 635.010455][T10838] usb 8-1: config 0 descriptor?? [ 635.056969][ T1217] usb 6-1: device not accepting address 57, error -71 [ 635.873680][T10838] peak_usb 8-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 635.889725][T10838] peak_usb 8-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 636.459096][T10838] peak_usb 8-1:0.29: probe with driver peak_usb failed with error -32 [ 636.500454][T10838] usb 8-1: USB disconnect, device number 11 [ 636.647118][T14551] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2623'. [ 636.670465][ T29] audit: type=1400 audit(1739970930.540:1488): avc: denied { ioctl } for pid=14552 comm="syz.0.2624" path="socket:[46754]" dev="sockfs" ino=46754 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 636.697135][T14551] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2623'. [ 636.757368][T14555] FAULT_INJECTION: forcing a failure. [ 636.757368][T14555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.782217][ T29] audit: type=1326 audit(1739970930.652:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.0.2624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d1b78cde9 code=0x0 [ 636.806752][T14555] CPU: 1 UID: 0 PID: 14555 Comm: syz.8.2625 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 636.806775][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 636.806783][T14555] Call Trace: [ 636.806788][T14555] [ 636.806795][T14555] dump_stack_lvl+0x16c/0x1f0 [ 636.806816][T14555] should_fail_ex+0x50a/0x650 [ 636.806840][T14555] _copy_from_user+0x2e/0xd0 [ 636.806856][T14555] copy_msghdr_from_user+0x99/0x160 [ 636.806877][T14555] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 636.806908][T14555] ___sys_sendmsg+0xff/0x1e0 [ 636.806928][T14555] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.806960][T14555] ? __pfx_lock_release+0x10/0x10 [ 636.806979][T14555] ? trace_lock_acquire+0x14e/0x1f0 [ 636.807001][T14555] ? __fget_files+0x206/0x3a0 [ 636.807020][T14555] __sys_sendmsg+0x16e/0x220 [ 636.807037][T14555] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.807067][T14555] do_syscall_64+0xcd/0x250 [ 636.807085][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.807105][T14555] RIP: 0033:0x7fa2e398cde9 [ 636.807117][T14555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.807130][T14555] RSP: 002b:00007fa2e48cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.807145][T14555] RAX: ffffffffffffffda RBX: 00007fa2e3ba5fa0 RCX: 00007fa2e398cde9 [ 636.807154][T14555] RDX: 0000000000000000 RSI: 0000400000000580 RDI: 0000000000000004 [ 636.807163][T14555] RBP: 00007fa2e48cf090 R08: 0000000000000000 R09: 0000000000000000 [ 636.807171][T14555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.807179][T14555] R13: 0000000000000000 R14: 00007fa2e3ba5fa0 R15: 00007ffe1e57fd18 [ 636.807198][T14555] [ 636.981497][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.290350][T14564] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2627'. [ 637.321292][T14564] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2627'. [ 637.621862][ T29] audit: type=1400 audit(1739970931.429:1490): avc: denied { map } for pid=14569 comm="syz.7.2630" path="socket:[46804]" dev="sockfs" ino=46804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 637.665589][T10838] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 637.838211][T10838] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 638.171732][ T29] audit: type=1400 audit(1739970931.429:1491): avc: denied { accept } for pid=14569 comm="syz.7.2630" path="socket:[46804]" dev="sockfs" ino=46804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 638.209208][T10838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.272891][T14573] input: syz1 as /devices/virtual/input/input55 [ 638.509213][T10838] usb 9-1: Product: syz [ 638.515371][T10838] usb 9-1: Manufacturer: syz [ 638.519981][T10838] usb 9-1: SerialNumber: syz [ 638.541619][T10838] usb 9-1: config 0 descriptor?? [ 638.765641][T10838] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 638.797882][T10838] peak_usb 9-1:0.0: unable to read PCAN-USB X6 firmware info (err -32) [ 638.855607][ T29] audit: type=1400 audit(1739970932.579:1492): avc: denied { write } for pid=14589 comm="syz.7.2639" name="net" dev="proc" ino=47171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 638.885474][T10838] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -32 [ 638.914549][ T29] audit: type=1400 audit(1739970932.589:1493): avc: denied { add_name } for pid=14589 comm="syz.7.2639" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 638.935409][T10838] usb 9-1: USB disconnect, device number 2 [ 638.944075][ T29] audit: type=1400 audit(1739970932.589:1494): avc: denied { create } for pid=14589 comm="syz.7.2639" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 639.429479][ T1217] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 640.014447][ T1217] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 640.049395][ T1217] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 640.058279][ T1217] usb 8-1: config 1 has no interface number 0 [ 640.058587][T14611] random: crng reseeded on system resumption [ 640.092307][ T1217] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.212865][ T1217] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.231329][ T1217] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.261070][ T1217] usb 8-1: Product: syz [ 640.284611][ T1217] usb 8-1: Manufacturer: syz [ 640.297676][ T1217] usb 8-1: SerialNumber: syz [ 640.322746][ T1217] usb 8-1: selecting invalid altsetting 1 [ 640.705310][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 640.705342][ T29] audit: type=1400 audit(1739970934.291:1496): avc: denied { setopt } for pid=14598 comm="syz.7.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 640.826145][ T1217] cdc_ncm 8-1:1.1: bind() failure [ 640.833927][ T1217] usb 8-1: USB disconnect, device number 12 [ 640.848516][T14621] cgroup: Invalid name [ 640.871232][T14621] tipc: Started in network mode [ 640.900577][T14621] tipc: Node identity 080211000001, cluster identity 4711 [ 640.931268][T14621] tipc: Enabled bearer , priority 0 [ 641.506754][T14637] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2650'. [ 641.549274][ T5911] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 641.738749][ T5911] usb 6-1: device descriptor read/64, error -71 [ 641.952839][ T44] IPVS: starting estimator thread 0... [ 642.059268][T14653] IPVS: using max 30 ests per chain, 72000 per kthread [ 642.070171][ T5911] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 642.145601][ T5870] tipc: Node number set to 134418688 [ 642.244048][ T5911] usb 6-1: device descriptor read/64, error -71 [ 642.440189][ T5911] usb usb6-port1: attempt power cycle [ 643.076223][ T5911] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 643.110071][ T29] audit: type=1400 audit(1739970936.564:1497): avc: denied { setopt } for pid=14658 comm="syz.6.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 643.174966][ T5911] usb 6-1: device descriptor read/8, error -71 [ 643.460270][ T5911] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 643.572171][ T5911] usb 6-1: device descriptor read/8, error -71 [ 643.706008][ T5911] usb usb6-port1: unable to enumerate USB device [ 643.835420][T14675] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2663'. [ 643.998657][T14679] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2664'. [ 644.066628][T14682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.218975][ T5911] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 644.390145][ T5911] usb 9-1: device descriptor read/64, error -71 [ 644.411209][ T1217] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 644.549989][ T29] audit: type=1400 audit(1739970937.911:1498): avc: denied { name_bind } for pid=14689 comm="syz.5.2669" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 644.596383][ T1217] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 644.604768][ T1217] usb 7-1: config 0 has no interface number 0 [ 644.612851][ T1217] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 644.632971][ T1217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.655117][ T1217] usb 7-1: Product: syz [ 644.665278][ T1217] usb 7-1: Manufacturer: syz [ 644.667868][ T5911] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 644.676033][ T1217] usb 7-1: SerialNumber: syz [ 644.690956][ T1217] usb 7-1: config 0 descriptor?? [ 644.749476][T14696] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2672'. [ 644.793004][T14697] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 644.807081][ T5911] usb 9-1: device descriptor read/64, error -71 [ 644.988597][ T5911] usb usb9-port1: attempt power cycle [ 645.011169][ T1217] peak_usb 7-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 645.030789][ T1217] peak_usb 7-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 645.645278][ T1217] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -32 [ 645.660694][ T1217] usb 7-1: USB disconnect, device number 29 [ 645.715723][ T5911] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 645.737384][ T5911] usb 9-1: device descriptor read/8, error -71 [ 646.015250][ T5911] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 646.028727][ T5824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 646.053203][ T5929] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 646.065025][ T5824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 646.073184][ T5824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 646.092316][ T5824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 646.100746][ T5824] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 646.108040][ T5824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 646.108474][ T5911] usb 9-1: device descriptor read/8, error -71 [ 646.174434][T11526] syz_tun (unregistering): left allmulticast mode [ 646.203283][T14717] lo speed is unknown, defaulting to 1000 [ 646.808582][ T5911] usb usb9-port1: unable to enumerate USB device [ 647.052650][ T5929] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.063226][ T5929] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 647.080781][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.090442][ T5929] usb 8-1: config 0 descriptor?? [ 647.224712][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 647.570954][T14717] chnl_net:caif_netlink_parms(): no params data found [ 647.621010][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 647.629875][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 647.637445][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 647.662270][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 647.680290][ T5929] pwc: recv_control_msg error -32 req 04 val 1300 [ 647.693798][ T5929] pwc: recv_control_msg error -32 req 04 val 1400 [ 647.704288][ T5929] pwc: recv_control_msg error -32 req 02 val 2000 [ 647.711363][ T5929] pwc: recv_control_msg error -32 req 02 val 2100 [ 647.747891][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.763674][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.782031][T14717] bridge_slave_0: entered allmulticast mode [ 647.790958][T14717] bridge_slave_0: entered promiscuous mode [ 647.808523][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.832356][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.839627][T14717] bridge_slave_1: entered allmulticast mode [ 647.865171][T14717] bridge_slave_1: entered promiscuous mode [ 647.895185][T14717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.921996][T14717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.938261][ T5929] pwc: recv_control_msg error -71 req 02 val 2500 [ 647.946082][ T5929] pwc: recv_control_msg error -71 req 02 val 2400 [ 647.950261][ T5870] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 647.952925][ T5929] pwc: recv_control_msg error -71 req 02 val 2600 [ 647.966911][ T5929] pwc: recv_control_msg error -71 req 02 val 2900 [ 647.974500][ T5929] pwc: recv_control_msg error -71 req 02 val 2800 [ 647.988613][ T5929] pwc: recv_control_msg error -71 req 04 val 1100 [ 647.996956][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 648.016610][T14717] team0: Port device team_slave_0 added [ 648.023399][ T5929] pwc: Registered as video103. [ 648.032715][T14717] team0: Port device team_slave_1 added [ 648.039830][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input56 [ 648.063371][ T5929] usb 8-1: USB disconnect, device number 13 [ 648.074744][T14717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.085210][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.111801][T14717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.126967][T14717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.134237][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.172783][T14717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.304927][ T5870] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.309142][T14717] hsr_slave_0: entered promiscuous mode [ 648.322471][T14717] hsr_slave_1: entered promiscuous mode [ 648.323164][ T5870] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 648.328712][T14717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.347620][T12381] Bluetooth: hci7: command tx timeout [ 648.352682][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.354527][T14717] Cannot create hsr debugfs directory [ 648.376350][ T5870] usb 9-1: config 0 descriptor?? [ 648.429100][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 648.448377][T14717] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.532186][T14717] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.620523][T14717] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.674306][T14717] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.806529][ T29] audit: type=1400 audit(1739970941.886:1499): avc: denied { recv } for pid=14748 comm="syz.6.2688" saddr=10.128.0.169 src=36640 daddr=10.128.1.140 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 648.837340][ T5929] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 648.856980][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 648.877355][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 649.024662][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 649.033687][ T5929] usb 8-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 649.076411][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.106012][ T5870] pwc: recv_control_msg error -71 req 04 val 1000 [ 649.114444][ T5870] pwc: recv_control_msg error -71 req 04 val 1300 [ 649.119493][T14717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.121549][ T5870] pwc: recv_control_msg error -71 req 04 val 1400 [ 649.128692][ T5929] usb 8-1: config 0 descriptor?? [ 649.160315][T14717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 649.181624][T14717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 649.192659][ T5870] pwc: recv_control_msg error -71 req 02 val 2000 [ 649.193316][T14717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.207008][ T5870] pwc: recv_control_msg error -71 req 02 val 2100 [ 649.214485][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 649.223452][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 649.230761][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 649.237957][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 649.248405][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 649.255639][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 649.263178][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 649.270541][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 649.288616][ T5870] pwc: Registered as video103. [ 649.324104][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input57 [ 649.364636][T14717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.374173][ T5870] usb 9-1: USB disconnect, device number 7 [ 649.386860][T14717] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.390989][ T29] audit: type=1400 audit(1739970942.438:1500): avc: denied { append } for pid=14756 comm="syz.7.2690" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 649.414104][T14717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 649.503132][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2690'. [ 649.506778][T14717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.513225][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2690'. [ 649.564662][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.571730][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.937295][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.944414][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.133354][T14772] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2694'. [ 650.217561][T10838] usb 8-1: USB disconnect, device number 14 [ 650.290497][T14779] netlink: 'syz.8.2696': attribute type 3 has an invalid length. [ 650.323293][T14717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.378761][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2697'. [ 650.416182][T14717] veth0_vlan: entered promiscuous mode [ 650.423270][ T29] audit: type=1400 audit(1739970943.402:1501): avc: denied { open } for pid=14778 comm="syz.8.2696" path="/dev/ptyr5" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 650.482762][T14717] veth1_vlan: entered promiscuous mode [ 650.540789][T14717] veth0_macvtap: entered promiscuous mode [ 650.548510][T12381] Bluetooth: hci7: command tx timeout [ 650.555851][T14717] veth1_macvtap: entered promiscuous mode [ 651.681163][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.713150][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.723009][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.779293][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.789238][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.799976][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.823386][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.839252][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.921199][ T29] audit: type=1400 audit(1739970944.796:1502): avc: denied { write } for pid=14799 comm="syz.8.2701" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 651.925753][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.965488][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.976333][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.996466][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.008265][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.030555][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.046847][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.076370][ T5870] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 652.097748][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.115655][T14717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.123594][T14798] netlink: 'syz.6.2702': attribute type 21 has an invalid length. [ 652.131678][T14798] netlink: 'syz.6.2702': attribute type 15 has an invalid length. [ 652.173218][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.193580][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.203999][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.216846][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.226879][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.237545][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.247742][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.302468][ T5870] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 652.309460][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.334499][ T5870] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.361413][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.371303][T14805] sd 0:0:1:0: device reset [ 652.381584][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.678418][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.710576][ T5870] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid wMaxPacketSize 0 [ 652.728495][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.744954][ T5870] usb 6-1: config 0 interface 0 has no altsetting 0 [ 652.900245][T12381] Bluetooth: hci7: command tx timeout [ 652.914900][T14717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.922468][ T5870] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 652.931745][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.950116][ T5870] usb 6-1: config 0 descriptor?? [ 653.088219][T14717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.116422][T14717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.129063][T14717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.147898][T14717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.229618][ T5870] usb 6-1: USB disconnect, device number 63 [ 654.087161][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.100403][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.394274][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.517697][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2708'. [ 654.566322][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.144926][ T5824] Bluetooth: hci7: command tx timeout [ 656.438309][ T901] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 656.627200][ T901] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 656.662638][ T901] usb 6-1: config 0 has no interface number 0 [ 656.684019][ T901] usb 6-1: config 0 interface 89 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 656.813732][ T901] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=2c.75 [ 656.882081][ T901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.913477][ T26] block nbd2: Possible stuck request ffff888026125080: control (read@0,4096B). Runtime 300 seconds [ 656.931570][ T901] usb 6-1: Product: syz [ 656.965547][ T901] usb 6-1: Manufacturer: syz [ 657.020682][ T901] usb 6-1: SerialNumber: syz [ 657.103084][ T901] usb 6-1: config 0 descriptor?? [ 657.186683][T14859] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 658.041760][ T901] kvaser_usb 6-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 658.088924][ T901] usb 6-1: USB disconnect, device number 64 [ 658.148828][T14875] mac80211_hwsim hwsim38 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 658.171598][T14877] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2724'. [ 658.277634][T14881] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 658.294594][T14881] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 658.324587][ T29] audit: type=1400 audit(1739970950.801:1503): avc: denied { read } for pid=14880 comm="syz.0.2726" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 658.399553][ T29] audit: type=1400 audit(1739970950.820:1504): avc: denied { open } for pid=14880 comm="syz.0.2726" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 658.447963][ T29] audit: type=1400 audit(1739970950.820:1505): avc: denied { search } for pid=14880 comm="syz.0.2726" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 658.448091][T10838] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 658.489504][ T29] audit: type=1400 audit(1739970950.820:1506): avc: denied { getattr } for pid=14880 comm="syz.0.2726" name="saved_tgids" dev="tracefs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 658.684580][T10838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.703194][T10838] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 658.758067][T10838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.785243][T10838] usb 7-1: config 0 descriptor?? [ 659.131284][T10838] pwc: Askey VC010 type 2 USB webcam detected. [ 659.716947][ T29] audit: type=1400 audit(1739970951.970:1507): avc: denied { accept } for pid=14903 comm="syz.8.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 659.744387][T10838] pwc: recv_control_msg error -32 req 02 val 2b00 [ 659.750971][ T29] audit: type=1400 audit(1739970951.970:1508): avc: denied { lock } for pid=14903 comm="syz.8.2733" path="socket:[48741]" dev="sockfs" ino=48741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 659.775774][T10838] pwc: recv_control_msg error -32 req 02 val 2700 [ 659.963366][T14909] can0: slcan on ttyS3. [ 659.986672][T14909] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2734'. [ 659.999034][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2734'. [ 660.327575][ T35] wlan0: Trigger new scan to find an IBSS to join [ 660.338766][T10838] pwc: recv_control_msg error -71 req 04 val 1000 [ 660.411820][T10838] pwc: recv_control_msg error -71 req 04 val 1300 [ 660.600730][T14902] can0 (unregistered): slcan off ttyS3. [ 660.644259][T10838] pwc: recv_control_msg error -71 req 04 val 1400 [ 660.671752][T10838] pwc: recv_control_msg error -71 req 02 val 2000 [ 660.695770][T10838] pwc: recv_control_msg error -71 req 02 val 2100 [ 660.725822][T10838] pwc: recv_control_msg error -71 req 04 val 1500 [ 660.737087][T10838] pwc: recv_control_msg error -71 req 02 val 2500 [ 660.754476][ T29] audit: type=1400 audit(1739970953.074:1509): avc: denied { unmount } for pid=14717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 660.788704][T10838] pwc: recv_control_msg error -71 req 02 val 2400 [ 660.832000][T10838] pwc: recv_control_msg error -71 req 02 val 2600 [ 660.839315][T10838] pwc: recv_control_msg error -71 req 02 val 2900 [ 660.853737][T10838] pwc: recv_control_msg error -71 req 02 val 2800 [ 660.874833][T10838] pwc: recv_control_msg error -71 req 04 val 1100 [ 660.885830][T10838] pwc: recv_control_msg error -71 req 04 val 1200 [ 660.917747][T10838] pwc: Registered as video103. [ 660.930428][T10838] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input58 [ 660.981231][T10838] usb 7-1: USB disconnect, device number 30 [ 662.256021][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 662.909681][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2750'. [ 662.931747][T14948] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 663.543291][T14968] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2754'. [ 663.857548][T10838] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 664.624121][T10838] usb 9-1: config 0 has an invalid interface number: 115 but max is 2 [ 664.648728][T10838] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.691394][ T1217] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 664.699093][T10838] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 664.719024][T10838] usb 9-1: config 0 has no interface number 0 [ 664.737679][T10838] usb 9-1: too many endpoints for config 0 interface 115 altsetting 101: 116, using maximum allowed: 30 [ 664.741002][T14984] vlan2: entered promiscuous mode [ 664.764564][T14984] bridge0: entered promiscuous mode [ 664.770915][T14984] vlan2: entered allmulticast mode [ 664.776289][T14984] bridge0: entered allmulticast mode [ 664.782105][T10838] usb 9-1: config 0 interface 115 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 664.814266][T10838] usb 9-1: config 0 interface 115 has no altsetting 0 [ 664.827131][T10838] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 664.852139][ T1217] usb 1-1: device descriptor read/64, error -71 [ 664.862458][T10838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.896019][T10838] usb 9-1: config 0 descriptor?? [ 665.119189][ T1217] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 665.250749][ T29] audit: type=1400 audit(1739970957.283:1510): avc: denied { getopt } for pid=14966 comm="syz.8.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 665.302706][ T1217] usb 1-1: device descriptor read/64, error -71 [ 665.450635][ T1217] usb usb1-port1: attempt power cycle [ 665.463673][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2763'. [ 665.482691][T15002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.603538][ T68] wlan0: Trigger new scan to find an IBSS to join [ 665.752819][T15009] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2766'. [ 665.835544][ T1217] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 665.836624][T15009] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2766'. [ 665.889323][ T1217] usb 1-1: device descriptor read/8, error -71 [ 665.896904][T15009] netlink: 'syz.6.2766': attribute type 4 has an invalid length. [ 666.145304][ T1217] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 666.178776][ T1217] usb 1-1: device descriptor read/8, error -71 [ 666.217882][T15017] overlay: Unknown parameter 'obj_role' [ 666.295279][ T1217] usb usb1-port1: unable to enumerate USB device [ 666.346813][T15023] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2773'. [ 666.366711][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2773'. [ 666.578020][ T11] wlan0: Creating new IBSS network, BSSID 82:8f:58:3c:3b:0c [ 666.700508][ T9] usb 9-1: USB disconnect, device number 8 [ 667.657543][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 667.972004][T15047] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 668.007515][T15049] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2785'. [ 668.018927][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 668.049777][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 668.072158][ T9] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 668.194721][ T9] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 668.230555][ T9] usb 8-1: config 0 has no interface number 0 [ 668.486460][ T9] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 668.505110][ T9] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 668.535769][ T9] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 668.548359][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 668.561479][T10838] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 668.562006][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.579133][ T9] usb 8-1: config 0 descriptor?? [ 668.776068][T10838] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 668.784363][T10838] usb 7-1: config 0 has no interface number 0 [ 668.801775][T10838] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 668.818200][T15063] loop2: detected capacity change from 0 to 7 [ 668.826216][T15041] xfs: Unknown parameter 'noecovery' [ 668.832141][T15063] Dev loop2: unable to read RDB block 7 [ 668.837386][ T9] usb 8-1: USB disconnect, device number 15 [ 668.845632][T10838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.864606][T15063] loop2: unable to read partition table [ 668.872064][T10838] usb 7-1: Product: syz [ 668.876388][T10838] usb 7-1: Manufacturer: syz [ 668.882355][T15063] loop2: partition table beyond EOD, truncated [ 668.888905][T10838] usb 7-1: SerialNumber: syz [ 668.895608][T10838] usb 7-1: config 0 descriptor?? [ 668.911479][T15063] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 669.102410][T15069] netlink: 'syz.5.2791': attribute type 1 has an invalid length. [ 669.121853][T10838] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 669.164236][T15069] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 669.175594][T15069] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 669.187637][T15069] bond3: (slave ip6gre1): making interface the new active one [ 669.202743][T15069] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 669.438959][T10838] peak_usb 7-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 669.447400][T10838] peak_usb 7-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 669.523268][T10838] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -71 [ 669.624043][T10838] usb 7-1: USB disconnect, device number 31 [ 670.109472][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2793'. [ 670.136088][T15079] bond_slave_1: entered promiscuous mode [ 670.151124][T15079] bond0: (slave bond_slave_1): Releasing backup interface [ 670.183181][T15081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2794'. [ 670.250162][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2796'. [ 670.403367][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2796'. [ 671.031757][T15091] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2798'. [ 671.041062][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2798'. [ 671.118582][T15093] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2800'. [ 671.169949][T15093] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2800'. [ 672.228351][T15109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2805'. [ 672.249664][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2805'. [ 672.542042][T15116] netlink: 'syz.8.2808': attribute type 1 has an invalid length. [ 673.019318][ T5866] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 673.245502][ T5866] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 673.254429][ T5866] usb 6-1: config 0 has no interface number 0 [ 673.298010][ T5866] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 673.307103][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.328904][ T5866] usb 6-1: Product: syz [ 673.345979][ T5866] usb 6-1: Manufacturer: syz [ 673.351590][ T5866] usb 6-1: SerialNumber: syz [ 673.369012][ T5866] usb 6-1: config 0 descriptor?? [ 673.619601][ T5866] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 673.846022][ T5866] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 673.863439][ T5866] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 673.949593][ T1217] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 673.983611][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 674.015132][ T5866] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 674.031182][ T5866] usb 6-1: USB disconnect, device number 65 [ 674.060513][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.070669][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.095663][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.104604][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.133636][ T1217] usb 8-1: Using ep0 maxpacket: 16 [ 674.140006][ T1217] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 674.141899][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 674.152098][ T1217] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 674.167567][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.170128][ T1217] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 674.188059][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.188663][ T1217] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.202809][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 674.206045][ T1217] usb 8-1: Product: syz [ 674.219343][ T1217] usb 8-1: Manufacturer: syz [ 674.223860][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.223979][ T1217] usb 8-1: SerialNumber: syz [ 674.234085][ T9] usb 7-1: config 0 descriptor?? [ 674.243806][ T1217] usb 8-1: config 0 descriptor?? [ 674.247145][ T9] hub 7-1:0.0: USB hub found [ 674.334266][ T1201] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 674.551779][ T1201] usb 9-1: device descriptor read/64, error -71 [ 674.635423][ T9] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 674.637955][ T1217] input: Griffin PowerMate as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input59 [ 674.679045][ C1] powermate: config urb returned -71 [ 674.684688][ C1] powermate: config urb returned -71 [ 674.690628][ C1] powermate: config urb returned -71 [ 674.696074][ C1] powermate: config urb returned -71 [ 674.712099][ T1217] usb 8-1: USB disconnect, device number 16 [ 674.718078][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 674.826254][ T1201] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 674.975939][ T1201] usb 9-1: device descriptor read/64, error -71 [ 675.256129][ T1201] usb usb9-port1: attempt power cycle [ 675.471994][ T9] hid-generic 0003:046D:C31C.0016: item fetching failed at offset 0/1 [ 675.662297][ T9] hid-generic 0003:046D:C31C.0016: probe with driver hid-generic failed with error -22 [ 675.717080][ T9] usb 7-1: USB disconnect, device number 32 [ 675.788133][ T1201] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 675.842495][ T1201] usb 9-1: device descriptor read/8, error -71 [ 676.130711][ T1201] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 676.218887][ T1201] usb 9-1: device descriptor read/8, error -71 [ 676.323938][T15172] __nla_validate_parse: 4 callbacks suppressed [ 676.323979][T15172] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2823'. [ 676.348929][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2823'. [ 676.402524][ T1201] usb usb9-port1: unable to enumerate USB device [ 677.680532][ T5929] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 677.940764][T15188] SET target dimension over the limit! [ 678.140174][ T5929] usb 8-1: Using ep0 maxpacket: 32 [ 678.163511][ T5929] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.187000][T15207] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 678.193814][ T5929] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 678.226421][ T5929] usb 8-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 678.244106][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 678.250865][ T5929] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 678.260006][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.354916][ T5929] usb 8-1: config 0 descriptor?? [ 678.381228][T15200] fuse: Bad value for 'fd' [ 678.407372][ T1217] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 678.415845][ T29] audit: type=1400 audit(1739970969.593:1511): avc: denied { name_connect } for pid=15193 comm="syz.0.2829" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 678.546524][ T1217] usb 9-1: device descriptor read/64, error -71 [ 678.625037][ T5929] usbhid 8-1:0.0: can't add hid device: -71 [ 678.634775][ T5929] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 678.643445][T15219] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2836'. [ 678.644908][ T5929] usb 8-1: USB disconnect, device number 17 [ 678.668602][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2836'. [ 678.845737][ T1217] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 678.995581][ T1217] usb 9-1: device descriptor read/64, error -71 [ 679.274171][ T1217] usb usb9-port1: attempt power cycle [ 679.658341][T15239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 679.668859][ T1217] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 679.733847][ T1217] usb 9-1: device descriptor read/8, error -71 [ 679.856067][ T5824] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 679.864183][T15248] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2844'. [ 679.886677][T15248] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2844'. [ 679.896904][T15250] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 679.955777][T15250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 679.995568][T15257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 680.011079][ T1217] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 680.021985][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2847'. [ 680.031188][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2847'. [ 680.044610][T15257] bond2: (slave batadv1): making interface the new active one [ 680.052083][T15258] nbd: socks must be embedded in a SOCK_ITEM attr [ 680.062481][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2846'. [ 680.063412][ T1217] usb 9-1: device descriptor read/8, error -71 [ 680.078967][T15257] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 680.126188][T15256] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2848'. [ 680.142091][T15250] vlan2: entered promiscuous mode [ 680.154549][T15250] bond2: entered promiscuous mode [ 680.168812][T15250] batadv1: entered promiscuous mode [ 680.224980][ T1217] usb usb9-port1: unable to enumerate USB device [ 680.419245][ T29] audit: type=1400 audit(1739970971.473:1512): avc: denied { lock } for pid=15263 comm="syz.7.2850" path="socket:[50526]" dev="sockfs" ino=50526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 680.475589][T15270] overlayfs: conflicting options: nfs_export=on,index=off [ 680.887010][ T29] audit: type=1400 audit(1739970971.903:1513): avc: denied { connect } for pid=15263 comm="syz.7.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 680.949894][ T29] audit: type=1400 audit(1739970971.903:1514): avc: denied { map } for pid=15263 comm="syz.7.2850" path="socket:[50522]" dev="sockfs" ino=50522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 680.976238][ T29] audit: type=1400 audit(1739970971.903:1515): avc: denied { read accept } for pid=15263 comm="syz.7.2850" path="socket:[50522]" dev="sockfs" ino=50522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 682.320142][ T5866] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 682.469846][ T5866] usb 6-1: device descriptor read/64, error -71 [ 682.538452][T15295] __nla_validate_parse: 3 callbacks suppressed [ 682.538463][T15295] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2860'. [ 682.620212][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 682.726512][ T5866] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 683.528163][ T5866] usb 6-1: device descriptor read/64, error -71 [ 683.690344][ T5866] usb usb6-port1: attempt power cycle [ 684.127073][ T5866] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 684.224981][ T5866] usb 6-1: device descriptor read/8, error -71 [ 684.618703][ T5866] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 685.235814][ T5866] usb 6-1: device descriptor read/8, error -71 [ 685.368177][ T5866] usb usb6-port1: unable to enumerate USB device [ 685.526549][T15325] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2868'. [ 685.544666][T15325] netlink: 'syz.5.2868': attribute type 9 has an invalid length. [ 685.579295][T15330] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2870'. [ 685.589637][T15330] netlink: 'syz.6.2870': attribute type 7 has an invalid length. [ 685.599870][T15330] netlink: 'syz.6.2870': attribute type 8 has an invalid length. [ 685.610216][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2870'. [ 686.031167][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2868'. [ 686.084056][ T29] audit: type=1400 audit(1739970976.758:1516): avc: denied { bind } for pid=15324 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 686.437230][T15338] loop9: detected capacity change from 0 to 6 [ 687.129141][T15342] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2873'. [ 687.193152][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2873'. [ 688.285570][ T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 688.530161][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 688.670367][ T9] usb 1-1: device descriptor read/64, error -32 [ 689.110056][ T5870] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 689.497685][ T9] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 689.509503][ T26] block nbd2: Possible stuck request ffff888026125080: control (read@0,4096B). Runtime 330 seconds [ 689.668098][ T9] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 689.684509][ T9] usb 1-1: config 0 has no interface number 0 [ 689.693666][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 689.703012][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.716070][ T9] usb 1-1: Product: syz [ 689.720778][ T9] usb 1-1: Manufacturer: syz [ 689.725373][ T9] usb 1-1: SerialNumber: syz [ 689.761470][ T9] usb 1-1: config 0 descriptor?? [ 689.782548][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24796, setting to 8 [ 689.803852][ T5870] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 689.813004][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.825594][ T5870] usb 7-1: config 0 descriptor?? [ 689.831021][T15373] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 689.846362][ T1201] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 690.028135][ T1201] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.040474][ T1201] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.391707][ T1201] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 690.400825][ T1201] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.410630][ T1201] usb 8-1: config 0 descriptor?? [ 690.412989][ T9] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 690.488314][ T5870] cmedia_hs100b 0003:0D8C:0014.0017: unknown main item tag 0x0 [ 690.517766][ T5870] cmedia_hs100b 0003:0D8C:0014.0017: item fetching failed at offset 3/5 [ 690.595099][ T5870] cmedia_hs100b 0003:0D8C:0014.0017: probe with driver cmedia_hs100b failed with error -22 [ 690.644149][ T9] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 690.658949][ T9] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 690.705155][ T5911] usb 7-1: USB disconnect, device number 33 [ 690.733890][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.752134][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.794583][ T9] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 690.835726][ T9] usb 1-1: USB disconnect, device number 67 [ 690.936105][ T1201] usbhid 8-1:0.0: can't add hid device: -71 [ 690.939217][ T29] audit: type=1400 audit(1739970981.314:1517): avc: denied { setopt } for pid=15395 comm="syz.5.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 691.554521][ T1201] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 691.585743][ T1201] usb 8-1: USB disconnect, device number 18 [ 692.969513][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2892'. [ 693.326497][T12381] Bluetooth: hci5: command 0x0405 tx timeout [ 693.463291][T15429] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2897'. [ 693.649282][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2897'. [ 694.222888][T15443] overlay: ./file0 is not a directory [ 695.682258][ T29] audit: type=1400 audit(1739970985.738:1518): avc: denied { unmount } for pid=9826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 695.837429][T15462] netlink: 'syz.8.2903': attribute type 21 has an invalid length. [ 695.865229][T15462] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2903'. [ 696.401180][ T29] audit: type=1400 audit(1739970986.412:1519): avc: denied { connect } for pid=15468 comm="syz.6.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 696.405819][T15473] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2908'. [ 696.628136][T15473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.760855][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.186095][T15481] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2912'. [ 697.196460][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2912'. [ 697.651889][T15479] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.659230][T15479] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.827698][T15479] bridge0: entered allmulticast mode [ 698.493515][T15489] bridge_slave_1: left allmulticast mode [ 698.531586][T15489] bridge_slave_1: left promiscuous mode [ 698.607457][T15489] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.060564][ T1201] libceph: connect (1)[c::]:6789 error -101 [ 699.077118][ T1201] libceph: mon0 (1)[c::]:6789 connect error [ 699.331791][T15489] bridge_slave_0: left allmulticast mode [ 699.337465][T15489] bridge_slave_0: left promiscuous mode [ 699.361032][ T5929] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 699.415494][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 699.423957][T15489] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.462671][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 700.110693][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 700.116765][T15504] ceph: No mds server is up or the cluster is laggy [ 700.262709][ T5929] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 700.286952][ T5929] usb 8-1: config 0 has no interface number 0 [ 700.298221][ T5929] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.339832][ T5929] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.354582][ T5929] usb 8-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 700.366136][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.379510][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 700.391762][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.515337][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.526958][ T5929] usb 8-1: config 0 descriptor?? [ 700.529886][T15520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=15520 comm=syz.8.2921 [ 700.559475][ T9] usb 1-1: config 0 descriptor?? [ 700.603298][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 701.326205][ T5929] uclogic 0003:28BD:0905.0018: Interface probing failed: -22 [ 701.333899][ T5929] uclogic 0003:28BD:0905.0018: interface is invalid, ignoring [ 701.608585][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 701.615269][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 701.628793][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 701.640880][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 701.661665][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 701.711537][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 701.734112][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 701.750508][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 701.767135][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 701.774026][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 701.789315][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 701.801828][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 701.823622][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 701.893819][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 702.013147][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 702.046800][ T9] pwc: Registered as video103. [ 702.052226][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 702.104545][ T9] usb 1-1: USB disconnect, device number 68 [ 702.327878][T15544] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2926'. [ 702.346190][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 702.821704][T15551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2928'. [ 702.850237][ T5929] usb 8-1: USB disconnect, device number 19 [ 702.942286][ T5866] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 703.124106][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 703.132262][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 703.141564][ T5866] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 703.149872][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.183810][ T5866] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 703.200750][ T5866] usb 1-1: config 1 has no interface number 3 [ 703.207286][ T5866] usb 1-1: config 1 interface 4 altsetting 10 endpoint 0x3 has invalid maxpacket 2056, setting to 64 [ 703.262895][ T5866] usb 1-1: config 1 interface 4 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 703.313768][ T5866] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 703.369982][ T5866] usb 1-1: config 1 interface 4 has no altsetting 0 [ 703.468190][ T5866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 703.484501][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=20 [ 703.492976][ T5866] usb 1-1: Product: 譄匳홫뜊鱴簑淠髫氼덹훅ᘹ䪟犧꫑⁰ぺ頴挠缋둜冻ퟨ纲耆퓯䧥᭖圦잇ꖁ숙漖때딧㝂ᆖ䠯尷ꂝ嚐㴧၊鲸竟㗇쩁媛㈡걖聎≪朚㎞ﭦ먶᷷㔛䕓駄邔큙凘咿᪈僧该Á閌׺ḭަᖜ㈏䍗靪庴ߩ.㉜磛䫷싄ᣧꦄ迠았Ⰻ棜侐㰘⛸窠ᨗꍾ徛ႄ歲࿗㨾疶 [ 703.698849][ T5866] usb 1-1: Manufacturer: 댲힍䒭ꬨ鸅彞慍┳ህ玣늬⵾쏭퀍菃㚅팥ᑚɣ뜉랍䄙࢕硎䭢⚯ᙖ茧䅯챢䥀⃭姬嶇줙涇禂嚷헶䋇곥ࡥ럅䧲検쬃ꌧ㠾毓ຌ癌가ꍤꌹ糳䷨ퟲ慺阆筓 [ 704.297831][ T5866] usb 1-1: SerialNumber: syz [ 705.316011][ T5866] usb 1-1: USB disconnect, device number 69 [ 705.863060][T15591] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2938'. [ 705.911050][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2938'. [ 706.153686][ T29] audit: type=1400 audit(1739970995.541:1520): avc: denied { read } for pid=15599 comm="syz.8.2941" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 706.180821][ T29] audit: type=1400 audit(1739970995.541:1521): avc: denied { open } for pid=15599 comm="syz.8.2941" path="/69/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 706.213727][ T29] audit: type=1400 audit(1739970995.541:1522): avc: denied { ioctl } for pid=15599 comm="syz.8.2941" path="/69/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 706.238156][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.513469][ T5866] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 706.705690][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 706.722398][ T5866] usb 8-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 706.732075][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.740747][ T5866] usb 8-1: Product: syz [ 706.745097][ T5866] usb 8-1: Manufacturer: syz [ 706.749841][ T5866] usb 8-1: SerialNumber: syz [ 707.068990][ T5866] visor 8-1:1.0: Handspring Visor / Palm OS converter detected [ 707.178381][T15629] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2949'. [ 707.187550][T15629] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2949'. [ 707.196519][T15629] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2949'. [ 707.205661][T15629] vlan0: entered allmulticast mode [ 707.211045][T15629] veth0_vlan: entered allmulticast mode [ 707.486236][T15409] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 707.591661][ T5866] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 707.611553][ T5866] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 707.627384][T15634] netlink: 'syz.8.2948': attribute type 3 has an invalid length. [ 707.630439][T15633] netlink: 'syz.8.2948': attribute type 3 has an invalid length. [ 707.871264][T15409] usb 1-1: Using ep0 maxpacket: 16 [ 708.067805][T15409] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 708.084498][T15409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.103180][T15409] usb 1-1: config 0 descriptor?? [ 708.172382][T15409] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 708.952680][T15650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.961848][T15650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.982895][T15650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.991712][T15650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.412024][T15409] gspca_sonixj: reg_w1 err -110 [ 709.417162][T15409] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 709.452166][ T1201] usb 8-1: USB disconnect, device number 20 [ 709.557879][ T1201] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 709.582246][ T1201] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 709.594482][ T1201] visor 8-1:1.0: device disconnected [ 709.614650][T15654] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2955'. [ 709.651080][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2955'. [ 710.532992][T15409] usb 1-1: USB disconnect, device number 70 [ 712.814684][T15681] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 713.996612][T15684] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 714.672467][ T5908] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 714.953787][T15693] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2967'. [ 714.986584][T15701] IPVS: set_ctl: invalid protocol: 58 172.20.20.57:20003 [ 715.015743][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2967'. [ 715.109044][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 715.128522][ T5908] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 715.141013][ T5908] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 715.166499][ T5908] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.192585][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 715.202184][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.211636][ T5908] usb 1-1: Product: syz [ 715.273280][T15712] xt_hashlimit: max too large, truncated to 1048576 [ 715.293393][T15712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.315052][ T5929] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 715.367044][ T5908] usb 1-1: Manufacturer: syz [ 715.429036][ T5908] usb 1-1: SerialNumber: syz [ 715.493771][ T5866] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 715.653591][ T5866] usb 7-1: device descriptor read/64, error -71 [ 715.661126][ T5929] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 715.675161][ T5929] usb 8-1: config 0 has no interface number 0 [ 715.688390][ T5929] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 715.700893][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.709865][T15716] PKCS7: Unknown OID: [4] (bad) [ 715.714855][T15716] PKCS7: Only support pkcs7_signedData type [ 715.721277][ T5929] usb 8-1: Product: syz [ 715.725433][ T5929] usb 8-1: Manufacturer: syz [ 715.730121][ T5929] usb 8-1: SerialNumber: syz [ 715.736750][ T5929] usb 8-1: config 0 descriptor?? [ 715.910269][ T5866] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 715.988105][ T5908] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 715.995645][ T5929] peak_usb 8-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 716.251679][ T5929] peak_usb 8-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 716.275541][ T5929] peak_usb 8-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 716.383711][ T5929] peak_usb 8-1:0.29: probe with driver peak_usb failed with error -71 [ 716.387823][ T5866] usb 7-1: device descriptor read/64, error -71 [ 716.402503][ T30] INFO: task syz.4.2225:13229 blocked for more than 143 seconds. [ 716.410810][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 716.418963][ T5929] usb 8-1: USB disconnect, device number 21 [ 716.426317][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.438049][ T30] task:syz.4.2225 state:D stack:28560 pid:13229 tgid:13228 ppid:5821 task_flags:0x400040 flags:0x00004004 [ 716.450261][ T30] Call Trace: [ 716.453612][ T30] [ 716.456841][ T30] __schedule+0xf43/0x5890 [ 716.461319][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 716.466734][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 716.472017][ T30] ? __pfx___schedule+0x10/0x10 [ 716.476945][ T30] ? schedule+0x298/0x350 [ 716.481388][ T30] ? __pfx_lock_release+0x10/0x10 [ 716.486476][ T30] ? __mutex_trylock_common+0x78/0x250 [ 716.492196][ T30] ? lock_acquire+0x2f/0xb0 [ 716.496805][ T30] ? schedule+0x1fd/0x350 [ 716.501252][ T30] schedule+0xe7/0x350 [ 716.505419][ T30] schedule_preempt_disabled+0x13/0x30 [ 716.512366][ T30] __mutex_lock+0x6bd/0xb10 [ 716.517006][ T30] ? sync_bdevs+0xfd/0x360 [ 716.521776][ T5866] usb usb7-port1: attempt power cycle [ 716.527349][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 716.533262][ T30] ? sync_bdevs+0xc7/0x360 [ 716.537755][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 716.543176][ T30] ? iput+0xd3/0x890 [ 716.547162][ T30] ? sync_bdevs+0xfd/0x360 [ 716.551745][ T30] sync_bdevs+0xfd/0x360 [ 716.556058][ T30] ksys_sync+0xb3/0x150 [ 716.560262][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 716.565117][ T30] ? rcu_is_watching+0x12/0xc0 [ 716.569941][ T30] ? do_syscall_64+0x91/0x250 [ 716.575469][ T30] __do_sys_sync+0xe/0x20 [ 716.579864][ T30] do_syscall_64+0xcd/0x250 [ 716.584472][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.590414][ T30] RIP: 0033:0x7fa79058cde9 [ 716.594958][ T30] RSP: 002b:00007fa791305038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 716.603422][ T30] RAX: ffffffffffffffda RBX: 00007fa7907a5fa0 RCX: 00007fa79058cde9 [ 716.611968][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.620355][ T30] RBP: 00007fa7907a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 716.632145][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.640276][ T30] R13: 0000000000000000 R14: 00007fa7907a5fa0 R15: 00007ffd08f4fd38 [ 716.648502][ T30] [ 716.651604][ T30] INFO: task syz.4.2225:13232 blocked for more than 143 seconds. [ 716.659829][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 716.667535][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.676382][ T30] task:syz.4.2225 state:D stack:27984 pid:13232 tgid:13228 ppid:5821 task_flags:0x400040 flags:0x00004004 [ 716.688565][ T30] Call Trace: [ 716.697973][ T30] [ 716.763621][ T30] __schedule+0xf43/0x5890 [ 716.768622][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 716.773912][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 716.779252][ T30] ? __pfx___schedule+0x10/0x10 [ 716.784128][ T30] ? schedule+0x298/0x350 [ 716.788501][ T30] ? __pfx_lock_release+0x10/0x10 [ 716.793534][ T30] ? __mutex_trylock_common+0x78/0x250 [ 716.799076][ T30] ? lock_acquire+0x2f/0xb0 [ 716.803585][ T30] ? schedule+0x1fd/0x350 [ 716.808025][ T30] schedule+0xe7/0x350 [ 716.812163][ T30] schedule_preempt_disabled+0x13/0x30 [ 716.817622][ T30] __mutex_lock+0x6bd/0xb10 [ 716.822222][ T30] ? sync_bdevs+0xfd/0x360 [ 716.826648][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 716.831741][ T30] ? sync_bdevs+0xc7/0x360 [ 716.836170][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 716.844939][ T30] ? iput+0xd3/0x890 [ 716.846910][T15720] overlayfs: statfs failed on './file0' [ 716.848846][ T30] ? sync_bdevs+0xfd/0x360 [ 716.848869][ T30] sync_bdevs+0xfd/0x360 [ 716.867164][ T30] ksys_sync+0xb3/0x150 [ 716.871331][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 716.882646][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 716.892522][ T30] ? do_syscall_64+0x91/0x250 [ 716.897393][ T30] __do_sys_sync+0xe/0x20 [ 716.901726][ T30] do_syscall_64+0xcd/0x250 [ 716.906371][ T5866] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 716.913984][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.915596][ T5908] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 716.920128][ T30] RIP: 0033:0x7fa79058cde9 [ 716.930113][ T30] RSP: 002b:00007fa78e3f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 716.938688][ T30] RAX: ffffffffffffffda RBX: 00007fa7907a6080 RCX: 00007fa79058cde9 [ 716.946876][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.947153][ T5866] usb 7-1: device descriptor read/8, error -71 [ 716.959910][ T5908] usb 1-1: USB disconnect, device number 71 [ 716.967250][ T30] RBP: 00007fa7907a6080 R08: 0000000000000000 R09: 0000000000000000 [ 716.975348][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.983460][ T30] R13: 0000000000000001 R14: 00007fa7907a6080 R15: 00007ffd08f4fd38 [ 716.991494][ T30] [ 716.994539][ T30] INFO: task syz.4.2225:13235 blocked for more than 143 seconds. [ 717.011271][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 717.018938][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.030560][ T30] task:syz.4.2225 state:D stack:27856 pid:13235 tgid:13228 ppid:5821 task_flags:0x400040 flags:0x00004004 [ 717.042575][ T30] Call Trace: [ 717.045940][ T30] [ 717.048876][ T30] __schedule+0xf43/0x5890 [ 717.053296][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.058594][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.063794][ T30] ? __pfx___schedule+0x10/0x10 [ 717.068678][ T30] ? schedule+0x298/0x350 [ 717.072998][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.078036][ T30] ? __mutex_trylock_common+0x78/0x250 [ 717.083477][ T30] ? lock_acquire+0x2f/0xb0 [ 717.088855][ T30] ? schedule+0x1fd/0x350 [ 717.093201][ T30] schedule+0xe7/0x350 [ 717.098295][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.103754][ T30] __mutex_lock+0x6bd/0xb10 [ 717.108317][ T30] ? sync_bdevs+0xfd/0x360 [ 717.112742][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.117771][ T30] ? sync_bdevs+0xc7/0x360 [ 717.122298][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 717.127575][ T30] ? iput+0xd3/0x890 [ 717.131698][ T30] ? sync_bdevs+0xfd/0x360 [ 717.136117][ T30] sync_bdevs+0xfd/0x360 [ 717.140400][ T30] ksys_sync+0xb3/0x150 [ 717.144556][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 717.149316][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 717.154647][ T30] ? do_syscall_64+0x91/0x250 [ 717.159321][ T30] __do_sys_sync+0xe/0x20 [ 717.163917][ T30] do_syscall_64+0xcd/0x250 [ 717.168495][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.174496][ T30] RIP: 0033:0x7fa79058cde9 [ 717.178909][ T30] RSP: 002b:00007fa78e3d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 717.187366][ T30] RAX: ffffffffffffffda RBX: 00007fa7907a6160 RCX: 00007fa79058cde9 [ 717.195346][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.203317][ T30] RBP: 00007fa7907a6160 R08: 0000000000000000 R09: 0000000000000000 [ 717.211316][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.219402][ T30] R13: 0000000000000001 R14: 00007fa7907a6160 R15: 00007ffd08f4fd38 [ 717.227480][ T5866] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 717.235745][ T30] [ 717.238816][ T30] INFO: task syz.4.2225:13239 blocked for more than 144 seconds. [ 717.247079][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 717.254799][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.263592][ T30] task:syz.4.2225 state:D stack:28656 pid:13239 tgid:13228 ppid:5821 task_flags:0x400040 flags:0x00004004 [ 717.275995][ T30] Call Trace: [ 717.279411][ T30] [ 717.282433][ T5866] usb 7-1: device descriptor read/8, error -71 [ 717.288635][ T30] __schedule+0xf43/0x5890 [ 717.293208][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.298470][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.303736][ T30] ? __pfx___schedule+0x10/0x10 [ 717.308587][ T30] ? schedule+0x298/0x350 [ 717.312941][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.317974][ T30] ? __mutex_trylock_common+0x78/0x250 [ 717.323472][ T30] ? lock_acquire+0x2f/0xb0 [ 717.327956][ T30] ? schedule+0x1fd/0x350 [ 717.332341][ T30] schedule+0xe7/0x350 [ 717.336414][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.341883][ T30] __mutex_lock+0x6bd/0xb10 [ 717.346499][ T30] ? sync_bdevs+0xfd/0x360 [ 717.350908][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.356092][ T30] ? sync_bdevs+0xc7/0x360 [ 717.360515][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 717.365834][ T30] ? iput+0xd3/0x890 [ 717.369715][ T30] ? sync_bdevs+0xfd/0x360 [ 717.374128][ T30] sync_bdevs+0xfd/0x360 [ 717.378408][ T30] ksys_sync+0xb3/0x150 [ 717.382563][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 717.387435][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 717.392704][ T30] ? do_syscall_64+0x91/0x250 [ 717.398163][ T30] __do_sys_sync+0xe/0x20 [ 717.402507][ T30] do_syscall_64+0xcd/0x250 [ 717.407130][ T5866] usb usb7-port1: unable to enumerate USB device [ 717.414192][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.420130][ T30] RIP: 0033:0x7fa79058cde9 [ 717.424542][ T30] RSP: 002b:00007fa78dfb2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 717.432988][ T30] RAX: ffffffffffffffda RBX: 00007fa7907a6240 RCX: 00007fa79058cde9 [ 717.440992][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.448960][ T30] RBP: 00007fa7907a6240 R08: 0000000000000000 R09: 0000000000000000 [ 717.456983][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.465003][ T30] R13: 0000000000000001 R14: 00007fa7907a6240 R15: 00007ffd08f4fd38 [ 717.473147][ T30] [ 717.476199][ T30] INFO: task syz.4.2225:13246 blocked for more than 144 seconds. [ 717.491802][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 717.499598][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.508329][ T30] task:syz.4.2225 state:D stack:27792 pid:13246 tgid:13228 ppid:5821 task_flags:0x400040 flags:0x00004004 [ 717.527132][ T30] Call Trace: [ 717.530440][ T30] [ 717.533368][ T30] __schedule+0xf43/0x5890 [ 717.537815][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.543016][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.548256][ T30] ? __pfx___schedule+0x10/0x10 [ 717.553110][ T30] ? schedule+0x298/0x350 [ 717.557462][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.562514][ T30] ? __mutex_trylock_common+0x78/0x250 [ 717.568006][ T30] ? lock_acquire+0x2f/0xb0 [ 717.572517][ T30] ? schedule+0x1fd/0x350 [ 717.576861][ T30] schedule+0xe7/0x350 [ 717.580993][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.586456][ T30] __mutex_lock+0x6bd/0xb10 [ 717.591117][ T30] ? sync_bdevs+0xfd/0x360 [ 717.595532][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.600643][ T30] ? sync_bdevs+0xc7/0x360 [ 717.605155][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 717.610485][ T30] ? iput+0xd3/0x890 [ 717.614389][ T30] ? sync_bdevs+0xfd/0x360 [ 717.618798][ T30] sync_bdevs+0xfd/0x360 [ 717.623080][ T30] ksys_sync+0xb3/0x150 [ 717.627227][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 717.632015][ T30] ? xfd_validate_state+0x5d/0x180 [ 717.637137][ T30] ? do_syscall_64+0x91/0x250 [ 717.641849][ T30] __do_sys_sync+0xe/0x20 [ 717.646175][ T30] do_syscall_64+0xcd/0x250 [ 717.650683][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.656650][ T30] RIP: 0033:0x7fa79058cde9 [ 717.661069][ T30] RSP: 002b:00007fa78db8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 717.669535][ T30] RAX: ffffffffffffffda RBX: 00007fa7907a6320 RCX: 00007fa79058cde9 [ 717.677553][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.685573][ T30] RBP: 00007fa7907a6320 R08: 0000000000000000 R09: 0000000000000000 [ 717.693558][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.701549][ T30] R13: 0000000000000001 R14: 00007fa7907a6320 R15: 00007ffd08f4fd38 [ 717.709705][ T30] [ 717.712737][ T30] INFO: task syz.4.2225:13247 blocked for more than 144 seconds. [ 717.721076][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 717.728745][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.737411][ T30] task:syz.4.2225 state:D stack:28656 pid:13247 tgid:13228 ppid:5821 task_flags:0x400040 flags:0x00004006 [ 717.750016][ T30] Call Trace: [ 717.753299][ T30] [ 717.756222][ T30] __schedule+0xf43/0x5890 [ 717.760669][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.765867][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.771266][ T30] ? __pfx___schedule+0x10/0x10 [ 717.776120][ T30] ? schedule+0x298/0x350 [ 717.780459][ T30] ? __pfx_lock_release+0x10/0x10 [ 717.785533][ T30] ? __mutex_trylock_common+0x78/0x250 [ 717.790997][ T30] ? lock_acquire+0x2f/0xb0 [ 717.795577][ T30] ? schedule+0x1fd/0x350 [ 717.799918][ T30] schedule+0xe7/0x350 [ 717.805650][ T30] schedule_preempt_disabled+0x13/0x30 [ 717.811133][ T30] __mutex_lock+0x6bd/0xb10 [ 717.815681][ T30] ? sync_bdevs+0xfd/0x360 [ 717.820090][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 717.825399][ T30] ? sync_bdevs+0xc7/0x360 [ 717.829830][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 717.835157][ T30] ? iput+0xd3/0x890 [ 717.839053][ T30] ? sync_bdevs+0xfd/0x360 [ 717.843450][ T30] sync_bdevs+0xfd/0x360 [ 717.847739][ T30] ksys_sync+0xb3/0x150 [ 717.851900][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 717.856730][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 717.862022][ T30] ? do_syscall_64+0x91/0x250 [ 717.867056][ T30] __do_sys_sync+0xe/0x20 [ 717.871399][ T30] do_syscall_64+0xcd/0x250 [ 717.875904][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.881835][ T30] RIP: 0033:0x7fa79058cde9 [ 717.886241][ T30] RSP: 002b:00007fa78d76c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 717.894720][ T30] RAX: ffffffffffffffda RBX: 00007fa7907a6400 RCX: 00007fa79058cde9 [ 717.902735][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.910727][ T30] RBP: 00007fa7907a6400 R08: 0000000000000000 R09: 0000000000000000 [ 717.918695][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.927332][ T30] R13: 0000000000000001 R14: 00007fa7907a6400 R15: 00007ffd08f4fd38 [ 717.936086][ T30] [ 717.939129][ T30] INFO: task syz.4.2225:13248 blocked for more than 144 seconds. [ 717.947123][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 717.954782][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.963462][ T30] task:syz.4.2225 state:D stack:28656 pid:13248 tgid:13228 ppid:5821 task_flags:0x400040 flags:0x00004004 [ 717.975558][ T30] Call Trace: [ 717.978850][ T30] [ 717.981783][ T30] __schedule+0xf43/0x5890 [ 717.986290][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.991504][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 717.996814][ T30] ? __pfx___schedule+0x10/0x10 [ 718.001696][ T30] ? schedule+0x298/0x350 [ 718.006066][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.011103][ T30] ? __mutex_trylock_common+0x78/0x250 [ 718.016669][ T30] ? lock_acquire+0x2f/0xb0 [ 718.021188][ T30] ? schedule+0x1fd/0x350 [ 718.025497][ T30] schedule+0xe7/0x350 [ 718.029787][ T30] schedule_preempt_disabled+0x13/0x30 [ 718.035248][ T30] __mutex_lock+0x6bd/0xb10 [ 718.040412][ T30] ? sync_bdevs+0xfd/0x360 [ 718.044911][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 718.050588][ T30] ? sync_bdevs+0xc7/0x360 [ 718.055029][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 718.060528][ T30] ? iput+0xd3/0x890 [ 718.064423][ T30] ? sync_bdevs+0xfd/0x360 [ 718.068828][ T30] sync_bdevs+0xfd/0x360 [ 718.073140][ T30] ksys_sync+0xb3/0x150 [ 718.077291][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 718.082126][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 718.087414][ T30] ? do_syscall_64+0x91/0x250 [ 718.095268][ T30] __do_sys_sync+0xe/0x20 [ 718.099582][ T30] do_syscall_64+0xcd/0x250 [ 718.104173][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.110068][ T30] RIP: 0033:0x7fa79058cde9 [ 718.114649][ T30] RSP: 002b:00007fa78d349038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 718.123142][ T30] RAX: ffffffffffffffda RBX: 00007fa7907a64e0 RCX: 00007fa79058cde9 [ 718.131106][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 718.139111][ T30] RBP: 00007fa7907a64e0 R08: 0000000000000000 R09: 0000000000000000 [ 718.147182][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.155371][ T30] R13: 0000000000000001 R14: 00007fa7907a64e0 R15: 00007ffd08f4fd38 [ 718.163345][ T30] [ 718.166991][ T30] INFO: task syz.4.2225:13253 blocked for more than 144 seconds. [ 718.174724][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 718.182913][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.191636][ T30] task:syz.4.2225 state:D stack:27856 pid:13253 tgid:13228 ppid:5821 task_flags:0x400040 flags:0x00004004 [ 718.203805][ T30] Call Trace: [ 718.207073][ T30] [ 718.210029][ T30] __schedule+0xf43/0x5890 [ 718.214450][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 718.219717][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 718.224930][ T30] ? __pfx___schedule+0x10/0x10 [ 718.229842][ T30] ? schedule+0x298/0x350 [ 718.234171][ T30] ? __pfx_lock_release+0x10/0x10 [ 718.239206][ T30] ? __mutex_trylock_common+0x78/0x250 [ 718.244780][ T30] ? lock_acquire+0x2f/0xb0 [ 718.249279][ T30] ? schedule+0x1fd/0x350 [ 718.253650][ T30] schedule+0xe7/0x350 [ 718.257727][ T30] schedule_preempt_disabled+0x13/0x30 [ 718.263315][ T30] __mutex_lock+0x6bd/0xb10 [ 718.267806][ T30] ? sync_bdevs+0xfd/0x360 [ 718.272216][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 718.277320][ T30] ? sync_bdevs+0xc7/0x360 [ 718.281743][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 718.287206][ T30] ? iput+0xd3/0x890 [ 718.291106][ T30] ? sync_bdevs+0xfd/0x360 [ 718.295678][ T30] sync_bdevs+0xfd/0x360 [ 718.304640][ T30] ksys_sync+0xb3/0x150 [ 718.308819][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 718.313575][ T30] ? xfd_validate_state+0x5d/0x180 [ 718.327918][ T30] ? do_syscall_64+0x91/0x250 [ 718.332616][ T30] __do_sys_sync+0xe/0x20 [ 718.337020][ T30] do_syscall_64+0xcd/0x250 [ 718.341539][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.347497][ T30] RIP: 0033:0x7fa79058cde9 [ 718.351915][ T30] RSP: 002b:00007fa78cf26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 718.360406][ T30] RAX: ffffffffffffffda RBX: 00007fa7907a65c0 RCX: 00007fa79058cde9 [ 718.368388][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 718.376653][ T30] RBP: 00007fa7907a65c0 R08: 0000000000000000 R09: 0000000000000000 [ 718.384688][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.392856][ T30] R13: 0000000000000001 R14: 00007fa7907a65c0 R15: 00007ffd08f4fd38 [ 718.400930][ T30] [ 718.403995][ T30] [ 718.403995][ T30] Showing all locks held in the system: [ 718.414678][ T30] 1 lock held by khungtaskd/30: [ 718.419518][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 718.429441][ T30] 2 locks held by getty/5571: [ 718.434470][ T30] #0: ffff888037b020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 718.444628][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 718.457982][ T30] 1 lock held by udevd/5968: [ 718.462584][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 718.471940][ T30] 1 lock held by syz.4.2225/13229: [ 718.477084][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.486609][ T30] 1 lock held by syz.4.2225/13232: [ 718.491743][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.501189][ T30] 1 lock held by syz.4.2225/13235: [ 718.506307][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.522049][ T30] 1 lock held by syz.4.2225/13239: [ 718.527158][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.536713][ T30] 1 lock held by syz.4.2225/13246: [ 718.542045][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.551426][ T30] 1 lock held by syz.4.2225/13247: [ 718.556527][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.565896][ T30] 1 lock held by syz.4.2225/13248: [ 718.570993][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.580358][ T30] 1 lock held by syz.4.2225/13253: [ 718.589071][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.598439][ T30] 1 lock held by syz.1.2460/13982: [ 718.603527][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.612999][ T30] 1 lock held by syz.1.2460/13984: [ 718.618145][ T30] #0: ffff8880260994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 718.632616][ T30] [ 718.634942][ T30] ============================================= [ 718.634942][ T30] [ 718.644367][ T30] NMI backtrace for cpu 1 [ 718.644378][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 718.644397][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 718.644407][ T30] Call Trace: [ 718.644413][ T30] [ 718.644420][ T30] dump_stack_lvl+0x116/0x1f0 [ 718.644444][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 718.644467][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 718.644489][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 718.644516][ T30] watchdog+0xf62/0x12b0 [ 718.644544][ T30] ? __pfx_watchdog+0x10/0x10 [ 718.644566][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 718.644586][ T30] ? __kthread_parkme+0x148/0x220 [ 718.644602][ T30] ? __pfx_watchdog+0x10/0x10 [ 718.644626][ T30] kthread+0x3af/0x750 [ 718.644646][ T30] ? __pfx_kthread+0x10/0x10 [ 718.644669][ T30] ? __pfx_kthread+0x10/0x10 [ 718.644689][ T30] ret_from_fork+0x45/0x80 [ 718.644710][ T30] ? __pfx_kthread+0x10/0x10 [ 718.644729][ T30] ret_from_fork_asm+0x1a/0x30 [ 718.644761][ T30] [ 718.644768][ T30] Sending NMI from CPU 1 to CPUs 0: [ 718.756820][ C0] NMI backtrace for cpu 0 [ 718.756832][ C0] CPU: 0 UID: 0 PID: 4525 Comm: kworker/u8:8 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 718.756848][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 718.756857][ C0] Workqueue: 0x0 (bond1) [ 718.756874][ C0] RIP: 0010:debug_object_deactivate+0x16f/0x370 [ 718.756893][ C0] Code: 42 80 3c 28 00 0f 85 ca 01 00 00 48 8b 9b e0 fc a3 9a 45 31 e4 48 85 db 0f 84 36 01 00 00 49 bd 00 00 00 00 00 fc ff df eb 1e <48> 89 d8 48 c1 e8 03 42 80 3c 28 00 0f 85 7f 01 00 00 48 8b 1b 48 [ 718.756906][ C0] RSP: 0018:ffffc90010057b70 EFLAGS: 00000087 [ 718.756916][ C0] RAX: 1ffff1100f7a3cdc RBX: ffff88807bd1e6c8 RCX: 0000000000000002 [ 718.756925][ C0] RDX: 1ffffffff354e767 RSI: 0000000000000004 RDI: ffff88807bd1e6e0 [ 718.756933][ C0] RBP: ffffc90010057c50 R08: 0000000000000001 R09: fffff5200200af5c [ 718.756941][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000005 [ 718.756949][ C0] R13: dffffc0000000000 R14: ffff88804a01d238 R15: 1ffff9200200af70 [ 718.756958][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 718.756972][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 718.756981][ C0] CR2: 00007f3611b762d8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 718.756989][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 718.756997][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 718.757010][ C0] Call Trace: [ 718.757015][ C0] [ 718.757020][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 718.757040][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 718.757057][ C0] ? nmi_handle+0x1ac/0x5d0 [ 718.757075][ C0] ? debug_object_deactivate+0x16f/0x370 [ 718.757089][ C0] ? default_do_nmi+0x6a/0x160 [ 718.757108][ C0] ? exc_nmi+0x170/0x1e0 [ 718.757124][ C0] ? end_repeat_nmi+0xf/0x53 [ 718.757144][ C0] ? debug_object_deactivate+0x16f/0x370 [ 718.757158][ C0] ? debug_object_deactivate+0x16f/0x370 [ 718.757173][ C0] ? debug_object_deactivate+0x16f/0x370 [ 718.757187][ C0] [ 718.757191][ C0] [ 718.757197][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 718.757216][ C0] process_one_work+0x251/0x1ba0 [ 718.757236][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 718.757254][ C0] ? __pfx_process_one_work+0x10/0x10 [ 718.757272][ C0] ? assign_work+0x1a0/0x250 [ 718.757289][ C0] worker_thread+0x6c8/0xf00 [ 718.757307][ C0] ? __kthread_parkme+0x148/0x220 [ 718.757320][ C0] ? __pfx_worker_thread+0x10/0x10 [ 718.757336][ C0] kthread+0x3af/0x750 [ 718.757350][ C0] ? __pfx_kthread+0x10/0x10 [ 718.757364][ C0] ? lock_acquire+0x2f/0xb0 [ 718.757382][ C0] ? __pfx_kthread+0x10/0x10 [ 718.757397][ C0] ret_from_fork+0x45/0x80 [ 718.757413][ C0] ? __pfx_kthread+0x10/0x10 [ 718.757427][ C0] ret_from_fork_asm+0x1a/0x30 [ 718.757445][ C0] [ 718.758490][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 719.043528][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 719.054010][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 719.064059][ T30] Call Trace: [ 719.067331][ T30] [ 719.070268][ T30] dump_stack_lvl+0x3d/0x1f0 [ 719.074849][ T30] panic+0x71d/0x800 [ 719.078737][ T30] ? __pfx_panic+0x10/0x10 [ 719.083142][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 719.088510][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 719.094495][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 719.100291][ T30] ? watchdog+0xdcc/0x12b0 [ 719.104696][ T30] ? watchdog+0xdbf/0x12b0 [ 719.109118][ T30] watchdog+0xddd/0x12b0 [ 719.113363][ T30] ? __pfx_watchdog+0x10/0x10 [ 719.118031][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.123223][ T30] ? __kthread_parkme+0x148/0x220 [ 719.128235][ T30] ? __pfx_watchdog+0x10/0x10 [ 719.132905][ T30] kthread+0x3af/0x750 [ 719.136956][ T30] ? __pfx_kthread+0x10/0x10 [ 719.141544][ T30] ? __pfx_kthread+0x10/0x10 [ 719.146132][ T30] ret_from_fork+0x45/0x80 [ 719.150533][ T30] ? __pfx_kthread+0x10/0x10 [ 719.155107][ T30] ret_from_fork_asm+0x1a/0x30 [ 719.159868][ T30] [ 719.163064][ T30] Kernel Offset: disabled [ 719.167380][ T30] Rebooting in 86400 seconds..