last executing test programs: 2m52.334393646s ago: executing program 0 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0xfb7f0000, 0x0, 0x0) 2m51.806610453s ago: executing program 0 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000002100010029bd7000ffdbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e2300004e2300000a00a0a02b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bc6b6e000100000050001100fe80"], 0xa0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x100000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x0, 0x1, 0x1], 0x2, 0x6}, {0x3, [0x3, 0x1, 0x0, 0x2, 0x4, 0x6], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x3, 0x3ff, 0x6, 0x7716, 0x2c9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x800, 0xf, [0x2, 0x16, 0x2c, 0x1b, 0x18, 0x22, 0x2, 0x33, 0x1a, 0xd, 0x38, 0x3f, 0x38, 0x35, 0x36, 0x3d], 0x0, 0x7, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 2m51.329674226s ago: executing program 0 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000240), 0x9, 0x4c0900) ioctl$RTC_UIE_OFF(r1, 0x7004) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x5000000, 0x8010, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYBLOB="02002bbd7000fddbdf25010000000000000001410000001800170000000000000005756470ba73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000812}, 0x24000001) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 2m50.346746296s ago: executing program 0 (id=221): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x80000000, 0xbe, 0x19, 0x4, 0xd9d, 0x1ff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x86000, 0xffffffffffffffff}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x400, 0x0}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x335, '\x00', 0x0, r1, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x14, &(0x7f00000000c0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}], &(0x7f0000000180)='GPL\x00', 0x9, 0x3e, &(0x7f00000001c0)=""/62, 0x41100, 0x42, '\x00', r4, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r5, r1, 0x2, &(0x7f0000000340)=[r1, r3, r1, r6], &(0x7f0000000380)=[{0x1, 0x3, 0xc, 0xb}, {0x3, 0x4, 0x6, 0x6}], 0x10, 0x3, @void, @value}, 0x94) r8 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r8, r1, 0x0, 0x6, &(0x7f0000000480)='team0\x00'}, 0x30) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2080081}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)=@deltaction={0x20c, 0x31, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40008}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x321}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe35}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd67b}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x44044}, 0x20000800) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980)={r1, r1}, 0xc) io_setup(0x7, &(0x7f00000009c0)) read$watch_queue(r1, &(0x7f0000000a00)=""/132, 0x84) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, r3, 0x61c14000) setsockopt(r1, 0x80000001, 0x1, &(0x7f0000000ac0)="a50f234b7f5b3a9175002278a8a222b64681176d8d9017", 0x17) r10 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x8, &(0x7f0000000b00)) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xf4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000d00)={0xf, 0xd}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)=@deltclass={0x1f4, 0x29, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0xfff3}, {0xfff1, 0xe}, {0x2, 0x9}}, [@c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x1, 0xf, 0x0, 0x1, 0x9, 0x9, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffff, 0x3}}}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}]}}, @c_atm={{0x8}, {0x4c, 0x2, [@TCA_ATM_HDR={0x2f, 0x3, "d99748c82bc48b1361a78dc541d95da8942a9751784b0061bb7fc9b4e537e9fc0ca2ea74e78bd4d8a22c0e"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xe}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0x8}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_HDR={0xf, 0x3, "f5e54367ebbcb2eead9fb2"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x5}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xd}}}, @c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x10}}, @TCA_ATM_HDR={0x10, 0x3, "f231e9b55c750b3f82dc3dc3"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x10}}, @TCA_ATM_HDR={0xd, 0x3, "cb4cd110cfd934e218"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x6}}}, @c_atm={{0x8}, {0x74, 0x2, [@TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x4}}, @TCA_ATM_HDR={0x3f, 0x3, "102f16a3ae1f511caa6182db2e1fdadcd1264d34e5cb55a6f096bed1088de35f61092940e82906cab9e2d1163a30956b5a5bb038a8d17ec215111f"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0x10}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x9}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xf}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xbd}}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000001) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001040), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000001080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x58, r11, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendfile(r3, r6, &(0x7f00000011c0)=0xfffffffffffffffe, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 2m49.75481039s ago: executing program 0 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0x13}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 2m49.697130012s ago: executing program 0 (id=223): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x18) sync() r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f00000029c0)={0x658, 0x0, r4, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r5, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r5, r6, 0xfffffff7, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r5, r6, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r5, r6, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x7, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r5, r6, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r5, r6, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r5, r6, 0x6, 0x5}}, {0x0, 0xd, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000200, 0x1000, 0x80, r5, r6, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbeca, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r6, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m35.064058972s ago: executing program 1 (id=284): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000180)=0x407, 0xfffffffffffffe3c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r5, &(0x7f0000004180), 0xff77) recvmmsg(r5, &(0x7f0000003a80), 0x0, 0x0, 0x0) r6 = dup(r2) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x13d, 0x0, 0xd6f, 0xc}}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r7, 0x20, &(0x7f0000000240)={&(0x7f0000000500)=""/100, 0x64, 0x0, &(0x7f0000000580)=""/203, 0xcb}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x8, '\x00', 0x0, r6, 0x0, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="3e00000000000000dc000000ffffffff00000400", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300000000000000000000000000000000000000e0ffffff"], 0x50) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0xc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9e8b}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, @jmp={0x5, 0x1, 0xb, 0x7, 0x5, 0x1, 0xfffffffffffffff0}, @generic={0x5, 0x5, 0x3, 0x1, 0x3}, @jmp={0x5, 0x1, 0x2, 0x4, 0x8, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xd3, &(0x7f0000000400)=""/211, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r7, 0x7, &(0x7f0000000800)=[r3, 0xffffffffffffffff, r11, r9, r10, r7, r3], &(0x7f0000000840)=[{0x3, 0x4, 0x2, 0x3}, {0x1, 0x3, 0x8, 0x4}, {0x1, 0x1, 0x9, 0x6}, {0x3, 0x5, 0xc, 0x6}, {0x4, 0x5, 0xe, 0xa}, {0x4, 0x5, 0xe, 0x2}, {0x0, 0x4, 0x4, 0x7}], 0x10, 0x5, @void, @value}, 0x94) sendfile(r0, r7, 0x0, 0xffffffff000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fanotify_mark(r12, 0x1, 0x50000038, 0xffffffffffffffff, 0x0) 2m33.949068201s ago: executing program 32 (id=223): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x18) sync() r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f00000029c0)={0x658, 0x0, r4, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r5, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r5, r6, 0xfffffff7, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r5, r6, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r5, r6, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x7, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r5, r6, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r5, r6, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r5, r6, 0x6, 0x5}}, {0x0, 0xd, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000200, 0x1000, 0x80, r5, r6, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbeca, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r6, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m33.604270241s ago: executing program 1 (id=287): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0xefffffff}, 0x0) 2m33.277650377s ago: executing program 1 (id=289): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x800) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000000)) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000400)={'gre0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013070000000000000000ac1414aa000000000000000000400000fe800000000000eb0000000000000039c240e8d5bbfb29a3638d8566559dbb00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB='\n\x004'], 0x30}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 2m33.086150868s ago: executing program 1 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000100)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') lchown(&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0) 2m32.360956542s ago: executing program 1 (id=293): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = dup2(r0, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff7, 0x0, 0x3, 0x9, 0x2, 0x5e3}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x4}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100000001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r7, 0x0, 0x0, 'syz1\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000d0000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r9}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 2m32.002770974s ago: executing program 1 (id=295): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_io_uring_setup(0x12c3, &(0x7f0000000440)={0x0, 0x184a, 0x2000, 0x3, 0x6b, 0x0, r2}, &(0x7f0000000380)=0x0, &(0x7f00000004c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000500), 0x0, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pread64(r5, &(0x7f0000000540)=""/60, 0x3c, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x2, @empty=0x11}}}, 0x108) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m31.884568872s ago: executing program 33 (id=295): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_io_uring_setup(0x12c3, &(0x7f0000000440)={0x0, 0x184a, 0x2000, 0x3, 0x6b, 0x0, r2}, &(0x7f0000000380)=0x0, &(0x7f00000004c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000500), 0x0, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pread64(r5, &(0x7f0000000540)=""/60, 0x3c, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x2, @empty=0x11}}}, 0x108) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m48.8138833s ago: executing program 4 (id=462): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000100)={0x0, 0x6e}, 0x7, 0x0, 0x0, 0x4204c813}, 0xc880) 1m48.678805614s ago: executing program 4 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}, 0x1b}, 0x0) 1m48.564519408s ago: executing program 4 (id=466): syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da"], 0x0) syz_usb_connect$uac1(0x6, 0x101, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x0, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2}, [@selector_unit={0xb, 0x24, 0x5, 0x1, 0x6, "6e1a8961a987"}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x9, 0x81, "3ac7"}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x1, 0x5, 'S'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x81, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x7, 0x64, "81c807a9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xa8, 0x2, 0x9, 0x6, "ba18"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xf7, 0x3, {0x7, 0x25, 0x1, 0x0, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x80, 0x1, 0x0, 0x80, "ae45fa24ec8754"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x40, 0x3, 0x7, "f7e68f7ee198f9e753"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x4, '5', "66e1"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x5, 0xbf, "e35155a2a378d55b"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x3, "7b0d11f33a"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x10, 0x2, 0x3, 0x81, "c83c71ab8408"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x80, 0x7f, {0x7, 0x25, 0x1, 0x0, 0x9e, 0x2}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xda, 0x89, 0x2, 0x20, 0x75}, 0x38, &(0x7f0000000180)={0x5, 0xf, 0x38, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x47, "4d69cde2283dcee47e3c9e8fda5fc19e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x2, 0x7, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x9, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf, 0x0, 0x4, 0x101, 0x10}]}, 0xa, [{0xb8, &(0x7f00000001c0)=@string={0xb8, 0x3, "737fd329264cd6a1a809a8b581509b74b0d1856c57cdfe43ad49be4c139696739dc1c5706802ac0b8bd95d743e0384a960e77e565613fd9ed4cb974ae86f96b85ff0a9f47aa268f1760eb01f1a1453c75219809c1c106b4b0d97ee6dfdb72410ba510f2d7fef17b1c34d074bddd98951cb8733993e974eaa3acd212ac00c18117d52b61c0dd1dc9bcc1880e7a85c9568726f8a1c8fb9ea4bfe5a40c510be9c592c0117f3841ef459a1e4d1341f1462aadaea60697aea"}}, {0x100, &(0x7f0000000280)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4b, &(0x7f0000000480)=@string={0x4b, 0x3, "b512c46a04155b0c5c23d1e507c0d3e1e99d3980e5c0e1401644888c832d89a4efd1618a144b50147bc69b7c6fb6867bd21492ec70ff7f59d3554e0763162411fc5e8eec3389884dcd"}}, {0x2e, &(0x7f0000000500)=@string={0x2e, 0x3, "c04ee2cdde175c0160d36319e42e8414d39f31e2a7b2c6048f4c5ea16788fbff47de67f4b27978b4110070a8"}}, {0xda, &(0x7f0000000540)=@string={0xda, 0x3, "8d6952b846853a4b863e18e3c485b9045d72446c4b5d67764350321adab6f217c6f88f970b892666b95000108348217fd5044cbe45ad8ead4345898c83f7db5b4559e4d08a3daa12d4ee7f89b4ddb43f79a4fdaa3efd6c1c75ca54bc393c95787bb3c31c0fceda56ddbef19105673876bed24fd728e52ef43d638ba368c97cce82b294d745053d58793217db071d375fafb087ef5f371d9542b4b9b83957774af071a288857f3f00a650d5e0e1b885457d290dc6ba2cf81c8533902846565a17eff5bca73d8ee70d1ec4c0520acb097c2441440466fe82fe"}}, {0xc2, &(0x7f0000000640)=@string={0xc2, 0x3, "73aee182571549d11574dad677705f72284ea4e362333a4775dd4e7ce7318e332e5d0be38e8be5a6d76b0d7f131faeb8dce8c2ca477c830e6fed183bdd928ed5304231046c86465fe092efdfe7f4ff96005155eef3889300f335d606dc88886dcf2c96d93f54586110c628a7295ccc3410b0c1fc880ffb14394b5d8d702c91c2e51200370f4fb1070c8b3bfef4305bddcb96363a147b9ff8b73b16c058ce9cf1c0ccd5bfd00c708c78b4357a453c229845b8809f559ffdb6c08f43686b2e959f"}}, {0x5e, &(0x7f0000000740)=@string={0x5e, 0x3, "fd0e4dcc8dcdd5ac26a33430360efda13564cbedf0003a134682c74849d7a43ca02fa7a71d7ece9f4a8e1de13fce147790871674dd5a17e2ba6137b35eab313706af087b598e5b99d0edacee4690cb1f90962e91f7b4f11afffde3a0"}}]}) 1m46.7428814s ago: executing program 4 (id=471): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000026c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0xd, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x3, 0xffffffff}, {0x4, 0x9}]}, @float={0x6, 0x0, 0x0, 0x10, 0x10}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x800, [{0x5, 0x2, 0x2}]}, @volatile={0x3}, @enum64={0x2, 0x4, 0x0, 0x13, 0x1, 0x1, [{0xc, 0x2, 0x3}, {0x6, 0x3, 0xf}, {0xe, 0x6, 0x6}, {0x7, 0x7, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0xffffffff, 0x2, 0x2}}]}, {0x0, [0x5f, 0x30, 0x0, 0x5f, 0x41, 0x2e, 0x61, 0x30, 0x0, 0x61, 0x1e]}}, &(0x7f0000000380)=""/186, 0xd1, 0xba, 0x0, 0x42, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000004000000090000000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0400000000000000000000a887ac74eeea48792a", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0400000004000000030000000d00"/28], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 1m46.234381879s ago: executing program 4 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept(r1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c00024000000000000078"], 0x140}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="b514b73a325412cdb62f9fcb46f816a2cfb0519cb7fd9f7a08b19e736b9250f3706e13043882df460526d487572100886285cbce1884d9f9e5ebf72c1240526695d51fd3f9f5ef5af0aaca648b1bc4c7effe1cadbb1a1bb11c85fc535fccdc0522c324d704eadd8eab7f0000fe2396d4c90ab9ec6ae2cc87af15a3fcae03cd4f353fc4a0d549c7fb0835fec9aa053dc1ad1cf0b28149363bfe2876b040d05f2931e07f942cd3e938ce858d0018b6c7c275af0eb2e024759fa948974a787a014b3a561c8782b96f9f54c25b2dbf06", 0xce}], 0x1}, 0x4048080) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) 1m45.766789813s ago: executing program 4 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7000000, 0x600}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m44.756516935s ago: executing program 34 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7000000, 0x600}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m33.114501309s ago: executing program 5 (id=522): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100000000000000000000000300", @ANYRES32=r3, @ANYBLOB="00000000000000001800348014"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m32.53340796s ago: executing program 5 (id=523): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000073864020720c1400ac390102030109021200010000000a09041df300716c7500b9b7d0cb20b7a3879f6146b4a62b62290d74cabc5986ddb4d870837a77031e068665020c40cebd1884bac0567366454140be7e3b4e08aa5fc09f623033078f9fe4b48cde60151c7d985415206a664b43db77bf44e83cf88f5f62b9db3751bde754f3722255e4f47f17933cf0"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="40037e000000dc6e67f0ee28bb3377d24c338fd00f2f870a0ea669a2ef6f979e3f7a4ff947ded918fa20c59684b3f2850f084488b52484112ecada6e71f0cafe53c3a6756d971bda611701248747e3957cf1207722e71f61edd3c01f4251707278850c3873e329c950f08bb001f90ec72222346b48d7000000000000000000000000b433ee0ca18ab4412a7d942c05be2d4ca7c41e962ca1c1e564f05a1b5a42da0322e6fad18e81e4ee27bdac2b0e89aec9ce410ecf6dd82ef86d8fe44c8113babd1bef1841bb5dba347cfc11d14819479b5f39b4fd0a1e65f9033ebd5785f66755cd834c4468ed8aa22fc1caea1f999b6523e1c9dc58f3c63c201f66cd92bccef0d017339a0ec366d76896ebe3f74e8b1b455795"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x20, 0x2, 0x13, {0x13, 0xa, "8202003101ef9846290c00000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 1m29.439418366s ago: executing program 5 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) 1m28.704698639s ago: executing program 5 (id=541): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x10) r5 = eventfd(0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0/../file0\x00', 0x16080, 0x80) io_submit(r2, 0x4, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000480)="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", 0xfa, 0x4, 0x0, 0x3, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0xffff, r4, &(0x7f0000000240)="41e3b03359752808987eb2aba29f57a88a34c289a6", 0x15, 0x10, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r5, &(0x7f0000000380)="5927569e33a66cd9e0fd6801af0fd7b0dc78744ab0032e73b8311ee8c2ce9d7163ca408b15d02688e864d95a2e96b066f857d146208f12f515414c74e5f23f1fb15877ee06d52270ef25fa948781c5bd9e61a811a35ccb89446237e322ded9e6be9ec1be0fd7332f81aad65802dfea7e921b4976", 0x74, 0x1, 0x0, 0x2, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x101, r6, &(0x7f00000006c0)="faf685bd4432491f75d127eebcbe629ec655b8001c4a51d745cff8624c78bce90fa80ec030dd47fa50eedc3d176c5f02797f16f2c0c255627d9cc22cf659c636178a2077a7b6c51eeb934dd8654af420a559f996de41444531bf4cb0672c35b3284b808180e724fdf557d8ebf12cab07fcdfe4e372ecdba6ce3e5c21be5e12f7e077743236dc54b59d218e9280570b3c4fc23b15d343492addf6b63c50768de317482a4d11ea7679c8400fc7803fcc821305bf80c95138916800892296fde05aee6ac510", 0xc4, 0xb10d, 0x0, 0x1, r5}]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000140)=ANY=[]) r9 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r10, 0x1, 0x27, 0x0, &(0x7f0000002380)) ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) 1m27.587393896s ago: executing program 5 (id=546): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000002100010029bd7000ffdbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e2300004e2300000a00a0a02b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bc6b6e000100000050001100fe80"], 0xa0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0xffffff7f00000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x0, 0x1, 0x1], 0x2, 0x6}, {0x3, [0x3, 0x1, 0x0, 0x2, 0x4, 0x6], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x3, 0x3ff, 0x6, 0x7716, 0x2c9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x800, 0xf, [0x2, 0x16, 0x2c, 0x1b, 0x18, 0x22, 0x2, 0x33, 0x1a, 0xd, 0x38, 0x3f, 0x38, 0x35, 0x36, 0x3d], 0x0, 0x7, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 1m27.214788215s ago: executing program 5 (id=551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 1m26.107912446s ago: executing program 35 (id=551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 9.29657125s ago: executing program 6 (id=1099): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="becec46b4c9dff4f666a7138a02e4d20fc6a39c9c5e205e490b37458487d30c18a4918716e7d2c9bd0e39f0da99f113d33ef28bcfaa2d72da3f6dc9c83c138c2f2c27d74840100cc9325014f89d2cb1cbe94e8ce41d771652fa0b609442f378fc0658b31dcfa8e23e9eae255ba4c9a52ccd56ee0e7543f5605918b0f4f5e09cd01a66e94fe52b40a2ca20a6a0effb52d86403c344f94cd0051a29570", 0x9c}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x11f0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 7.946696163s ago: executing program 2 (id=1104): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x10}}, 0xfe44, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d48a8840b21536007abb000000010902240001100040000904004b028d4add0c0905070008516a8fac0b8e35e0a1f2cac021bfe00009080009050610000400040e"], 0x0) 7.604622984s ago: executing program 7 (id=1109): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0xfeff, 0x40000100}, 0x40004) 7.290792526s ago: executing program 7 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x200000008, 0x0, 0x0, 0x69, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x40100, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffffffffffd, 0x2, 0x0, 0x1040, 0x7, 0x7f, 0x3, 0x3, 0x3, 0xfffffffffffffffe, 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000008000000811980000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.837120717s ago: executing program 6 (id=1111): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x2b, @remote, 0x13, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c) setresgid(0xee00, 0xee01, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) listen(r3, 0x4) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000000), 0x4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000080), &(0x7f00000000c0), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"73dc1c1590c3f3f0f380aef1838d0e97", 0x0, 0x0, {0xa384, 0xd}, {0x8, 0x17b3}, 0x98, [0x101, 0x2, 0x1000, 0x0, 0x7, 0x6, 0x1, 0x1, 0xc, 0xd, 0x0, 0x94, 0x6, 0x5, 0x101, 0xb]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa76, 0x47}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x180}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001240)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x2000000}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x8f7084bcb4e933bd}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 5.442824439s ago: executing program 7 (id=1114): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x804c0, 0x9, 0x31}, 0x18) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"997cbc18f9ab9563183faab7125dbc92", 0x0, 0x0, {0x4765, 0x40}, {0x8, 0x2}, 0x3, [0x23, 0x10000, 0x3, 0xa, 0x1, 0x10001, 0x95, 0x8, 0x91, 0xa42, 0x3ff, 0xa1, 0x4, 0x7ff, 0x7, 0x4]}) rt_sigaction(0x21, 0x0, 0x0, 0x8, &(0x7f0000000580)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000380)={{r1}, r2, 0x2, @unused=[0x9, 0x6, 0x1, 0xc], @subvolid=0x8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x4) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000180)={0x2, r5, 0xffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x1, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x44810, 0x0, 0x0) 5.33695147s ago: executing program 6 (id=1116): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3a00, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.887291941s ago: executing program 2 (id=1119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x0, &(0x7f00000006c0)) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 4.60693328s ago: executing program 3 (id=1121): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff6b36, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndctrl(&(0x7f00000004c0), 0x8000000000000, 0xbf5ab42addb1bb5e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x80045530, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0006d059e7d443e5f1000000000007000000000000000000859c738b2b871e370e8d1f4e4750fb07a546052dd27af324af7a9dedcc5cc237cc"], &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000000)={0x9, 0x2d, 0xfffffffffffffff9, 0x3a, 0x0, 0x2c}, 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) 4.378864018s ago: executing program 6 (id=1122): r0 = io_uring_setup(0x74ad, &(0x7f00000001c0)={0x0, 0x80016777, 0x40, 0x3, 0x170}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010d00, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.728615176s ago: executing program 3 (id=1123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000de0800ddff05000000090000006ca2e6093b1c859f2cc42c91ceb55fb28e7177ce3a0bee52b8fb2b5b19e056b5979dae4ceea1332f48d38ebf761d9d2fdee73d35da82e588f9a88051c7a4a3abe36ad58b176fa97a2808942d81374f21c502d921ac908b9216d1e86242b9ee47cd1354b717efddf3ed7f09b1b700cd0a5949928dbb15ecc526848ba40c8ac867b57f1e3373df943b", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000140), 0x0}, 0x20) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) (rerun: 32) dup2(r4, r2) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000"], 0x1c}], 0x1}, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "000f0200"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}, @global]}}, 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000100)=""/95) (async, rerun: 32) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 3.717724605s ago: executing program 7 (id=1124): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x2, 0x4) 3.711553668s ago: executing program 2 (id=1125): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x3000000}, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="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", 0x201, 0xfffffffffffffffe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2d, 0x0, @tid=r2}) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) mount$tmpfs(0x0, 0x0, 0x0, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(r4) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xf5ff}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) 3.506726604s ago: executing program 6 (id=1126): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfff, 0x10}}, './file0\x00'}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xc0, "7a6393e9210ee6dcf6f1b3a91a9e9a937647d4b5920869f6c1b3a03e00a6a56ccdfd870bc227d75f6d3aef304297818e5690387cf3f10e88d1872f1ccff11e0528a4cc298cbe8a45f928814066a03175956078dc38222cdb5af75d986b6c87091b0f92fbf1b097854b5ab7f800b7618d5a9dfac8490802adf10e8c2f0aa790a70cbc00c513018d6a4bb8abb3d00af5ddf9f340f8d3e5fed8b46d15ba16f5861cb3fabe40a5f56b86b2acd12a1bddd67067bb006a612d399061791633fd5cbcc6"}, &(0x7f0000000280)=0xc8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x2}, 0x8) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{}]}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000340)) sendto$ax25(r1, &(0x7f0000000380)="ec7af29003277e098624e631e19a9d13163e2060e2751ddbe0d505341a5839b0178e36fcca70f213ff1e91109124aaed47d15fef6cb5696f4e82c2bee61608370da33ed056721bae8f0191ce887ef7920a241ca97884d5e6a556df11e10d010cf6dd6c4c4cb5e90a3894fdd63963fe4e5f763d43e598b113f4493c847d9fff0f1e949f55f0610a81bf86c1172f24e6ea9abfb335ddd91904b8b3797acca8f44d1f72e344800a1c39431b74da8196fc952fbb4438a199c637795d65a63d6ecda9acbf6776da8c3ac04e1499b2bf3fccdf76e407574af6c92388987b41452f", 0xde, 0x80, &(0x7f0000000480)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null]}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=@bridge_getneigh={0x294, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x10, 0x20000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x89}, @IFLA_EXT_MASK={0x8, 0x1d, 0x800}, @IFLA_MAP={0x24, 0xe, {0xff2, 0x8, 0x0, 0x6, 0x8, 0x6}}, @IFLA_VF_PORTS={0x23c, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5781a31158937706ec91fc547839cd4c"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "8b6009919f0b2765f28e14b72fa91271"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2efab5ccb026eb2b61219c7e4dbf8854"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d7abd3fb07b54a05ccd89bc26e3725a6"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "be8f0d6953b201eec9dbea25d6de3ff7"}, @IFLA_PORT_VF={0x8, 0x1, 0xa}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4f28d88c9424e1a8e9f8ab0c75650460"}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8a5693ac7e0d7ed011b4a46dfd7d3af7"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "91920721dbcd46583720f98d4f427bf5"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7a131f4afb43eed8a69ad6136e41b0d2"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "79cb2034459fb596793c9c6807daf76f"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6b2de5b79fdbc9868b050a220de69de4"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5658e2d3243f2e0db8337b0d0c4a39cd"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_PROFILE={0x7, 0x2, '\xc5\\\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7c9c1fff92fce6d61236cd76142f519a"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0xfe}, @IFLA_PORT_PROFILE={0x6, 0x2, '*\x00'}, @IFLA_PORT_PROFILE={0xe, 0x2, '@\xd2@,#/a*-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a9d19cdc2d1c92372226315d61a077d"}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '@\x98\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x789}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4efc382bd6e474606368fe6b02abcba7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dfc977f8ce1a7a6c2b73afaae00aecd5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "55d5951fa6a547f353449af0f90a20f6"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "61e3626dd99b127553ada7c5ddc7cc79"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x13, 0x2, '/dev/ttyprintk\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '\'*-^*}\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x80}]}]}, @IFLA_IFALIASn={0x4}]}, 0x294}, 0x1, 0x0, 0x0, 0x50}, 0x20008015) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000880)={0x1, "1067743782842303e20230cd68891bf647a3e0bbd05b7d98e7e245af190bbfcf01d3ce73381e81253f2a13894965c8f4ee0448085a719e3036b3a3aba29878ba06dfdbb933ecdafb293886d7289af72b5808a4f8455a6012b315d80cfe32958a77276223f590c412fd646e0e3a42d16d35e0c206738e9633e7e3c6904316ca70302047d3c73480cc59cb53d42820b0e241979a66b75d0196e94663a9fa6eeb9abce4f57116a27848214a4b5eb3cd954b77ad6f68ba3e56e2df8db69a12b0ce87a82c5ca81892d02d52cd3448079f5b5cf290997e9a8b0e50431f7d613409f9c8e5dc1e2ee1037d0ac08276c1902e9c3e7135ea149abc1893f546224bcfa8d5d4cefe48362ae4ac642de345b6471b8c15d63d5761855c2c5fd9604573149555229dc4f845ae4f2f0ab035f05f8105d556491ef3ea1b4edcbdba27bf740470bf254ff353e7f1d4b5ace057e849cf6d02b35820ac9e8bfc0f4c1e8c4d5df12f17bf21ed022136e6661881114c366f9731bc16c4e0bf00b6a39ffdad213fb24d88ecbd922ebe3f9f657aa848462f8faf18763bd7c9dd1a16deabd461e23a27e77a3b4c426c7a302e55cfb164b28f1caa18cca5a9ba8ca8d95d62c103a020f4d3743a926a00b403ab376002d6fabaf641301d950910be16f12de3a2a57adc0de56727d6240157c99afb1817841211555f49a41a5bb40074bef7e29e7f597ad04fa03f"}) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000ac0)=0x3, 0x4) recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/101, 0x65}, {&(0x7f0000000c00)=""/31, 0x1f}, {&(0x7f0000000c40)=""/39, 0x27}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/166, 0xa6}], 0x6, &(0x7f0000000f00)=""/247, 0xf7}, 0xa}, {{&(0x7f0000001000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/9, 0x9}, {&(0x7f00000010c0)=""/54, 0x36}, {&(0x7f0000001100)=""/71, 0x47}], 0x3, &(0x7f00000011c0)=""/4096, 0x1000}, 0x8000}], 0x2, 0x100, &(0x7f0000002240)={0x0, 0x3938700}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$packet_buf(r5, 0x107, 0x1, &(0x7f00000022c0)="10376ba57b4176f0069a8930ddcf9c2d4bf3e8c7086a1f551791fcc9f51208e35a390ad41f13d344f13ab2d4914008e48970b0c1b23490f308cdb01d6deb5ac73012db63c540a91a5471744399df1f43c9663ed0c1b2613ddddcd7f396bd87aef67aa3fcbec8a8bf718bb8b4ca30e45e7b2d0d8041fa06890fcccba3ec06182ce9dd0d48659a17ecfb35c5c9dca4e84243f5ab994bd569e019d36aa302fb2712776611b148c0d1a08f9ff76072dba89c2c8031b221f1b05be3ae642133b1b46e4cb80de2e3438ac10239", 0xca) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002480)={r4, 0x8c, &(0x7f00000023c0)=[@in6={0xa, 0x4e23, 0x2, @remote, 0xdb1}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f00000024c0)=0x10) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000002500)='projid_map\x00') write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000002540)={0x13, 0x65, 0xffff, 0x7, 0x6, '9P2000'}, 0x13) mkdir(&(0x7f0000002580)='./file0\x00', 0x11) close_range(r7, r2, 0x2) mq_timedreceive(r3, &(0x7f00000025c0)=""/106, 0x6a, 0xc18, &(0x7f0000002640)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002680)='./binderfs2/binder1\x00', 0x801, 0x0) ioctl$TIOCNOTTY(r7, 0x5422) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0/file0\x00'}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000002800), 0x8) 3.077496577s ago: executing program 2 (id=1127): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16], 0x38}}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000d14040029bd7000fedbdf25080001000100000007e903000000000008003e0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x30000040}, 0x1) syz_open_dev$evdev(&(0x7f0000000300), 0x2f31, 0x446c00) socket$netlink(0x10, 0x3, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(r0, 0x0, 0xffffffffffffff83, 0x46804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$revoke(0x6, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) futex(&(0x7f00000003c0), 0x4, 0xfffffffe, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000000040)=0x3, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bind$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) 3.042635308s ago: executing program 8 (id=1128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400"], 0x184}}, 0x0) 3.042331411s ago: executing program 6 (id=1129): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth1_virt_wifi\x00', @random="e2791333aec3"}) r1 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb22f7cddef1cddc4}}, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 2.994847448s ago: executing program 3 (id=1130): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000006"], 0x118}], 0x1, 0x0, 0x0, 0xa00}, 0x180) 2.85487562s ago: executing program 3 (id=1131): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = open(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000300000000004000080040010"], 0x18}], 0x1}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x4e23, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x418) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 2.679071578s ago: executing program 8 (id=1132): r0 = io_uring_setup(0x1a30, &(0x7f0000000380)={0x0, 0x32b6, 0x40, 0x0, 0x35d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_GET_TIMERSLACK(0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f0000000100), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES32=r3], 0x70}}, 0x24040880) gettid() timer_create(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0xb1, 0xff, 0x0, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) 1.672910069s ago: executing program 8 (id=1133): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0xbffe0000}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}}], 0x2, 0x4008440) 1.534696038s ago: executing program 8 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getuid() quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r1, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000c5) inotify_add_watch(r4, 0x0, 0xa50003d1) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000efffffff0030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x7, &(0x7f00000000c0)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 1.504540336s ago: executing program 3 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x0, &(0x7f00000006c0)) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 1.336001287s ago: executing program 2 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000010000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x44004000}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x80000001) 622.838582ms ago: executing program 8 (id=1137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x32}, {0x2000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x80000000, 0x2, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2}}, 0xe8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f000027a000/0x1000)=nil, 0x1000, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/87, 0x128000, 0x0, 0x1, 0x7}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x2000, 0x0, 0x10000003, 0x1}, 0x20) 621.211031ms ago: executing program 7 (id=1138): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5bc, 0x0) bind$x25(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000580001804400040020000112f2fa860000000000ff01000000000000000000000000100101ffffff200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x7ffe}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) close(r2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[], 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 230.834519ms ago: executing program 7 (id=1139): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xb309, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0xfa, {0x9, 0x21, 0x8, 0xcd, 0x1, {0x22, 0xf77}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc2, 0x3, 0xec}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xd8fe}}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000080)={0x3, 0x3, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x2ad5, &(0x7f00000001c0)={0x0, 0x1}) gettid() close(r3) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="84"], 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x2004020, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000200)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000400)={r8, 0x1, r6, 0x4008}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000280)={r8, 0x0, 0x5}) prlimit64(0x0, 0xe, 0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r9, 0x3559482e553b8fc3, 0x0, 0x0, {{0x5}, {@val={0x8, 0xe}, @void}}}, 0x1c}}, 0x0) 230.619528ms ago: executing program 8 (id=1140): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000073864020720c1400ac390102030109021200010000000a09041df300716c7500b9b7d0cb20b7a3879f6146b4a62b62290d74cabc5986ddb4d870837a77031e068665020c40cebd1884bac0567366454140be7e3b4e08aa5fc09f623033078f9fe4b48cde60151c7d985415206a664b43db77bf44e83cf88f5f62b9db3751bde754f3722255e4f47f17933cf0"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x20, 0x2, 0x13, {0x13, 0xa, "8202003101ef9846290c00000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 198.250814ms ago: executing program 3 (id=1141): creat(&(0x7f00000000c0)='./file0\x00', 0x172) syz_open_dev$vcsn(&(0x7f0000000100), 0xf7, 0x424040) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = getpgrp(0xffffffffffffffff) fcntl$setown(r6, 0x8, r7) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 0s ago: executing program 2 (id=1142): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x33, &(0x7f00000003c0)="1700", 0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000df000000000010000000000000001410000001c001700000000000000006574683a73797a"], 0x38}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): =0304, bcdDevice=e4.df [ 145.823170][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.835994][ T5868] usb 4-1: config 0 descriptor?? [ 145.852713][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 145.945894][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.956926][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.966907][ T25] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 145.977443][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.987466][ T25] usb 7-1: config 0 descriptor?? [ 146.102198][ T5922] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 146.250043][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 146.257724][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 146.273048][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 146.274437][ T5923] usb 3-1: USB disconnect, device number 17 [ 146.287945][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 146.299114][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.317981][ T5922] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 146.328666][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.338563][ T5922] usb 5-1: config 0 descriptor?? [ 146.395928][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.404734][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.617184][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 146.627548][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 146.643817][ T25] usb 7-1: USB disconnect, device number 3 [ 146.698862][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 146.706335][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 146.715911][ T5868] pwc: recv_control_msg error -71 req 02 val 2100 [ 146.723159][ T5868] pwc: recv_control_msg error -71 req 04 val 1500 [ 146.729876][ T5868] pwc: recv_control_msg error -71 req 02 val 2500 [ 146.737658][ T5868] pwc: recv_control_msg error -71 req 02 val 2400 [ 146.744613][ T5868] pwc: recv_control_msg error -71 req 02 val 2600 [ 146.751293][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 146.753211][ T5922] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 146.758433][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 146.775446][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 146.785628][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 146.794099][ T5868] pwc: Registered as video103. [ 146.800277][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 146.834871][ T5868] usb 4-1: USB disconnect, device number 7 [ 146.894201][ T7410] input: syz0 as /devices/virtual/input/input19 [ 147.318720][ T969] usb 6-1: USB disconnect, device number 2 [ 147.504519][ T5923] usb 5-1: USB disconnect, device number 16 [ 149.062120][ T7433] tipc: Started in network mode [ 149.067021][ T7433] tipc: Node identity 7f000001, cluster identity 4711 [ 149.074813][ T7433] tipc: Enabled bearer , priority 10 [ 149.282224][ T7433] tipc: Enabled bearer , priority 0 [ 149.302882][ T7435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.384'. [ 149.311781][ T7435] netlink: 52 bytes leftover after parsing attributes in process `syz.5.384'. [ 149.320686][ T7435] netlink: 36 bytes leftover after parsing attributes in process `syz.5.384'. [ 149.329853][ T7435] vlan0: entered allmulticast mode [ 149.335183][ T7435] veth0_vlan: entered allmulticast mode [ 149.967378][ T7439] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 150.020444][ T7439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.001643][ T969] tipc: Node number set to 2130706433 [ 151.064708][ T7450] bond3: (slave veth5): Enslaving as an active interface with a down link [ 151.085511][ T7439] bond3: (slave ip6erspan0): making interface the new active one [ 151.098208][ T7439] ip6erspan0: entered promiscuous mode [ 151.105338][ T7439] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 151.162079][ T29] audit: type=1400 audit(1739970653.372:469): avc: denied { map } for pid=7465 comm="syz.4.391" path="pipe:[15806]" dev="pipefs" ino=15806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 151.422695][ T7479] batadv_slave_1: entered promiscuous mode [ 151.427131][ T7481] input: syz1 as /devices/virtual/input/input20 [ 151.550663][ T29] audit: type=1400 audit(1739970653.702:470): avc: denied { getopt } for pid=7477 comm="syz.2.392" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.987044][ T7479] batadv_slave_1: left promiscuous mode [ 151.995139][ T7488] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 152.013980][ T29] audit: type=1400 audit(1739970653.752:471): avc: denied { ioctl } for pid=7474 comm="syz.6.393" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.144086][ T7488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.178714][ T7490] bond1: (slave gretap1): making interface the new active one [ 152.233493][ T7490] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.297155][ T7493] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 152.328193][ T7502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.400'. [ 153.698682][ T29] audit: type=1400 audit(1739970655.929:472): avc: denied { listen } for pid=7498 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.324670][ T7529] netlink: 68 bytes leftover after parsing attributes in process `syz.2.407'. [ 155.068495][ T7558] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.116986][ T7558] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.186136][ T7558] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.205178][ T7558] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.233681][ T5923] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.462438][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 155.475227][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.536157][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.606202][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.673773][ T7558] geneve1: entered promiscuous mode [ 155.684965][ T5923] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 155.720411][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.736570][ T5923] usb 4-1: config 0 descriptor?? [ 156.281213][ T5923] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 156.465392][ T29] audit: type=1400 audit(1739970658.639:473): avc: denied { create } for pid=7541 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.487796][ T7546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.495811][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 156.498582][ T29] audit: type=1400 audit(1739970658.649:474): avc: denied { getopt } for pid=7541 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.505694][ T5923] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 156.549927][ T29] audit: type=1400 audit(1739970658.769:475): avc: denied { bind } for pid=7583 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.570052][ T5923] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 156.570077][ T5923] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 156.570095][ T5923] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 156.578365][ T5923] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 156.728482][ T5923] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 156.750142][ T7593] netlink: 'syz.4.423': attribute type 21 has an invalid length. [ 156.759689][ T5923] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 156.782612][ T7593] netlink: 132 bytes leftover after parsing attributes in process `syz.4.423'. [ 157.042026][ T5867] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 157.824536][ T5934] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 157.828920][ T5867] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 157.846376][ T5934] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 158.012581][ T45] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 158.023262][ T5934] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 158.039733][ T5867] usb 6-1: config 0 has no interface number 0 [ 158.173865][ T5867] usb 6-1: config 0 interface 29 has no altsetting 0 [ 158.183207][ T5934] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 158.219052][ T5867] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 158.230688][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.238822][ T5867] usb 6-1: Product: syz [ 158.243259][ T5867] usb 6-1: Manufacturer: syz [ 158.247844][ T5867] usb 6-1: SerialNumber: syz [ 158.254465][ T5867] usb 6-1: config 0 descriptor?? [ 158.462206][ T5922] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 158.655756][ T5867] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 158.844333][ T5922] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 158.858128][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.862066][ T5867] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 158.876844][ T5922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.906930][ T5867] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 158.932305][ T5867] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 158.940259][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.954409][ T25] usb 4-1: USB disconnect, device number 8 [ 158.968014][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.003841][ T5922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.024166][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.036703][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.051047][ T5922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.069640][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.081947][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.090996][ T5922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.108266][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.118832][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.130923][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.141768][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.162331][ T5867] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -22 [ 159.202977][ T5922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.244704][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.256440][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.272069][ T969] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 159.273384][ T5922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.280757][ T5829] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.290741][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.311861][ T5867] usb 6-1: USB disconnect, device number 3 [ 159.341574][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.355792][ T5922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.370076][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.403041][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.422111][ T5922] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.433257][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.448674][ T5922] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 159.456021][ T969] usb 3-1: Using ep0 maxpacket: 8 [ 159.459596][ T5922] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 159.473272][ T969] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 159.486532][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 159.505524][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.525673][ T969] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.551159][ T5829] usb 5-1: config 0 has no interfaces? [ 159.558528][ T969] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 159.574626][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.604008][ T5922] usb 7-1: Product: syz [ 159.604521][ T5829] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 159.608544][ T5922] usb 7-1: Manufacturer: syz [ 159.621842][ T5922] usb 7-1: SerialNumber: syz [ 159.635723][ T5922] usb 7-1: config 0 descriptor?? [ 159.655605][ T5922] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 159.668494][ T969] usb 3-1: config 0 descriptor?? [ 159.674557][ T5829] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 159.687693][ T5829] usb 5-1: Product: syz [ 159.822347][ T29] audit: type=1400 audit(1739970661.979:476): avc: denied { bind } for pid=7650 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.151437][ T5829] usb 5-1: Manufacturer: syz [ 160.187722][ T5829] usb 5-1: SerialNumber: syz [ 160.243182][ T5829] usb 5-1: config 0 descriptor?? [ 160.280221][ T7636] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 160.406577][ T969] usbhid 3-1:0.0: can't add hid device: -71 [ 160.421070][ T969] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 160.449698][ T969] usb 3-1: USB disconnect, device number 18 [ 160.472879][ T5867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.641971][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 160.653824][ T5867] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 160.671982][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.736679][ T7675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=7675 comm=syz.3.441 [ 160.823536][ T5867] usb 6-1: Product: syz [ 160.828292][ T5867] usb 6-1: Manufacturer: syz [ 160.834391][ T5867] usb 6-1: SerialNumber: syz [ 160.885860][ T969] usb 5-1: USB disconnect, device number 17 [ 160.898215][ T5867] usb 6-1: config 0 descriptor?? [ 161.107420][ T5867] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 161.252943][ T29] audit: type=1400 audit(1739970663.489:477): avc: denied { map } for pid=7612 comm="syz.6.430" path="socket:[16544]" dev="sockfs" ino=16544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 161.281517][ T7661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.430'. [ 161.731176][ T29] audit: type=1400 audit(1739970663.959:478): avc: denied { ioctl } for pid=7659 comm="syz.5.439" path="socket:[16337]" dev="sockfs" ino=16337 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.942802][ T5867] gspca_sunplus: reg_w_riv err -71 [ 161.950961][ T5867] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 161.980280][ T5867] usb 6-1: USB disconnect, device number 4 [ 162.293276][ T7718] netdevsim netdevsim4: Direct firmware load for . [ 162.293276][ T7718] failed with error -2 [ 162.342029][ T7718] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 162.342029][ T7718] [ 162.615285][ T5922] usb 7-1: USB disconnect, device number 4 [ 162.638815][ T29] audit: type=1400 audit(1739970664.869:479): avc: denied { bind } for pid=7729 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.662226][ T5922] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 162.807208][ T29] audit: type=1400 audit(1739970664.929:480): avc: denied { module_request } for pid=7734 comm="syz.5.451" kmod=6E65746465762D11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 162.922729][ T29] audit: type=1400 audit(1739970665.069:481): avc: denied { setopt } for pid=7737 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 163.173067][ T29] audit: type=1400 audit(1739970665.409:482): avc: denied { write } for pid=7756 comm="syz.4.455" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.252393][ T969] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.268119][ T29] audit: type=1400 audit(1739970665.499:483): avc: denied { write } for pid=7756 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.402370][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 163.409546][ T969] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 163.429887][ T969] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.481484][ T969] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.490916][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.499237][ T969] usb 4-1: Product: syz [ 163.504147][ T969] usb 4-1: Manufacturer: ｃ漮̯駲ꔰ慴ꚫ玓驯æµï‹¤ç‹¶å™¸é…£ç£¸å£â¸žèŒ’兑膘ȯ綃笢翉èŠé¾ªå¢—䒬뚷勤äŸä˜µæ‰¾äœ†âµ¤å—–î³àª–î©—ä««å ©â­„î½£ê—䇧贋鑗댺淪 [ 163.527538][ T969] usb 4-1: SerialNumber: syz [ 164.790545][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.794092][ T7773] random: crng reseeded on system resumption [ 164.833262][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.920094][ T969] usb 4-1: 0:2 : does not exist [ 165.002757][ T5075] ip6erspan0: left promiscuous mode [ 165.031121][ T969] usb 4-1: USB disconnect, device number 9 [ 165.137337][ T7784] xt_TPROXY: Can be used only with -p tcp or -p udp [ 165.258966][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.409362][ T7799] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 165.571972][ T969] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.582101][ T5923] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 165.682075][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 165.722197][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 165.731133][ T969] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 165.743426][ T5923] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 165.746587][ T969] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.764739][ T969] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.768630][ T5923] usb 3-1: config 0 has no interface number 0 [ 165.774043][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.791420][ T969] usb 4-1: Product: à “ [ 165.791419][ T5923] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 165.791442][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.795768][ T969] usb 4-1: Manufacturer: á Š [ 165.795785][ T969] usb 4-1: SerialNumber: 븿޼嫄簖〈┱棢⮽죷틽᜸욳瞩ي㳳८᥽힮➩硇ì¸é‘”æ¾ì‚€ã¥€ë°žé¼£ê¥Ÿç˜µëºˆî¨²é—‘਄诿춞토谽薫繳ேꄰ䦵☉ï™ê« æšá¯¸á²¾â¸¶î­´å¿•í”¤éŠŒë“¼â¬½æ¸£ä¶‹ç˜¶ê•¬èž€Òœï–»á›“ኧëœå¹ ë¦¥ê’☾㟠[ 165.843698][ T5923] usb 3-1: Product: syz [ 165.848286][ T5923] usb 3-1: Manufacturer: syz [ 165.853351][ T5923] usb 3-1: SerialNumber: syz [ 165.864959][ T5923] usb 3-1: config 0 descriptor?? [ 165.872140][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 165.888969][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 165.900709][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 165.933998][ T25] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 165.949808][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.982628][ T25] usb 5-1: Product: syz [ 165.989298][ T25] usb 5-1: Manufacturer: syz [ 165.995008][ T25] usb 5-1: SerialNumber: syz [ 166.015165][ T25] usb 5-1: config 0 descriptor?? [ 166.031050][ T7814] netlink: 'syz.5.469': attribute type 1 has an invalid length. [ 166.101451][ T7815] netlink: 68 bytes leftover after parsing attributes in process `syz.5.469'. [ 166.202664][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.395552][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.604464][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.705104][ T29] audit: type=1400 audit(1739970668.909:484): avc: denied { mounton } for pid=7816 comm="syz.5.470" path="/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 167.029827][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.190177][ T969] usb 4-1: 0:2 : does not exist [ 167.239737][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.311622][ T969] usb 4-1: USB disconnect, device number 10 [ 167.407506][ T29] audit: type=1400 audit(1739970669.639:485): avc: denied { mount } for pid=7795 comm="syz.2.464" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 167.612682][ T25] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 167.663631][ T25] usb 5-1: USB disconnect, device number 18 [ 167.873061][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.893410][ T7832] udevd[7832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 168.161204][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.553196][ T969] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.681050][ T29] audit: type=1400 audit(1739970671.909:486): avc: denied { append } for pid=7867 comm="syz.6.483" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 169.862453][ T29] audit: type=1400 audit(1739970671.959:487): avc: denied { map } for pid=7867 comm="syz.6.483" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 169.925636][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.933644][ T7873] input: syz0 as /devices/virtual/input/input22 [ 169.939974][ T29] audit: type=1400 audit(1739970671.959:488): avc: denied { write execute } for pid=7867 comm="syz.6.483" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 169.967420][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.988774][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.025614][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.102369][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.111693][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.455037][ T7878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7878 comm=syz.6.483 [ 170.546236][ T5923] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 170.563715][ T5923] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 170.582336][ T5923] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 170.590111][ T5923] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 170.641136][ T5923] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 170.715651][ T5923] usb 3-1: USB disconnect, device number 19 [ 170.725651][ T5836] udevd[5836]: failed to send result of seq 13653 to main daemon: Connection refused [ 170.737236][ T5923] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 170.757353][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 170.759562][ T5923] keyspan 3-1:0.133: device disconnected [ 170.820585][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'. [ 171.331215][ T29] audit: type=1400 audit(1739970673.559:489): avc: denied { create } for pid=7882 comm="syz.3.486" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 171.758718][ T29] audit: type=1400 audit(1739970673.709:490): avc: denied { write } for pid=7896 comm="syz.2.491" path="socket:[17830]" dev="sockfs" ino=17830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.890946][ T7874] chnl_net:caif_netlink_parms(): no params data found [ 172.248255][ T5829] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.249327][ T29] audit: type=1400 audit(1739970674.479:491): avc: denied { read } for pid=7926 comm="syz.5.494" path="socket:[16960]" dev="sockfs" ino=16960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.290657][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.293503][ T7930] input: syz0 as /devices/virtual/input/input23 [ 172.298556][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.354223][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.383788][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.390979][ T7874] bridge_slave_0: entered allmulticast mode [ 172.406943][ T7874] bridge_slave_0: entered promiscuous mode [ 172.414312][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.421381][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.434949][ T7874] bridge_slave_1: entered allmulticast mode [ 172.441489][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.453370][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.583622][ T5832] Bluetooth: hci0: command tx timeout [ 172.616151][ T7874] bridge_slave_1: entered promiscuous mode [ 172.616393][ T5829] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 172.631851][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.704937][ T5829] usb 4-1: config 0 descriptor?? [ 172.867671][ T29] audit: type=1400 audit(1739970675.089:492): avc: denied { bind } for pid=7933 comm="syz.6.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.950346][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.954772][ T29] audit: type=1400 audit(1739970675.189:493): avc: denied { create } for pid=7918 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 172.994525][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.007110][ T29] audit: type=1400 audit(1739970675.189:494): avc: denied { write } for pid=7918 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 173.062170][ T29] audit: type=1400 audit(1739970675.189:495): avc: denied { nlmsg_read } for pid=7918 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 173.097398][ T7874] team0: Port device team_slave_0 added [ 173.123672][ T7874] team0: Port device team_slave_1 added [ 173.185348][ T5829] wacom 0003:056A:00F4.0006: hidraw0: USB HID v0.00 Device [HID 056a:00f4] on usb-dummy_hcd.3-1/input0 [ 173.273463][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.501005][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.510590][ T5829] usb 4-1: USB disconnect, device number 11 [ 173.562754][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.587436][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.596146][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.622435][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.659896][ T5923] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 173.727602][ T7874] hsr_slave_0: entered promiscuous mode [ 173.753287][ T7874] hsr_slave_1: entered promiscuous mode [ 173.768580][ T7874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.776872][ T7874] Cannot create hsr debugfs directory [ 173.804227][ T29] audit: type=1400 audit(1739970676.029:496): avc: denied { getopt } for pid=7952 comm="syz.5.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.823935][ T7954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7954 comm=syz.5.503 [ 173.877815][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.895075][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 174.042098][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 174.055096][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 174.065288][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.094415][ T5923] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 174.103914][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 174.115426][ T1064] block nbd0: Possible stuck request ffff8880260ce000: control (read@0,4096B). Runtime 90 seconds [ 174.327668][ T5923] usb 3-1: Product: syz [ 174.331841][ T5923] usb 3-1: Manufacturer: syz [ 174.388508][ T5923] usb 3-1: SerialNumber: syz [ 174.665213][ T5832] Bluetooth: hci0: command tx timeout [ 174.696049][ T7874] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.703821][ T5923] usb 3-1: config 0 descriptor?? [ 174.760936][ T7874] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.939739][ T5923] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 174.949121][ T7874] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.956029][ T5923] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 175.141554][ T7874] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 175.556268][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 175.562729][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 175.572160][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 176.020518][ T7976] netlink: 68 bytes leftover after parsing attributes in process `syz.6.508'. [ 176.628587][ T5923] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 176.863471][ T5133] Bluetooth: hci0: command tx timeout [ 176.897486][ T5923] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 176.910016][ T5923] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 176.927057][ T5923] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 176.936607][ T5923] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 176.946930][ T5923] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 177.004453][ T5923] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 177.028687][ T5923] usb 3-1: USB disconnect, device number 20 [ 177.150819][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.166311][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.194474][ T7874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.212388][ T7874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.238256][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.245423][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.272445][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.279639][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.941838][ T5923] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 177.975987][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.984712][ T8000] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 178.132176][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 178.139718][ T8005] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 178.146532][ T5923] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 178.172606][ T5923] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 178.280938][ T5923] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 178.347961][ T5923] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 178.424078][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 178.491731][ T5923] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 178.504950][ T8010] sd 0:0:1:0: device reset [ 178.512524][ T5923] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 178.521255][ T5923] usb 3-1: Product: syz [ 178.525555][ T5923] usb 3-1: Manufacturer: syz [ 178.530147][ T5923] usb 3-1: SerialNumber: syz [ 178.542869][ T5923] usb 3-1: config 0 descriptor?? [ 178.549820][ T5923] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 178.643015][ T5923] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 178.755279][ T8008] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 178.902367][ T5133] Bluetooth: hci0: command tx timeout [ 179.124336][ T5923] usb 3-1: USB disconnect, device number 21 [ 179.165563][ T5923] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 179.501003][ T7874] veth0_vlan: entered promiscuous mode [ 179.527462][ T7874] veth1_vlan: entered promiscuous mode [ 179.585627][ T7874] veth0_macvtap: entered promiscuous mode [ 179.595499][ T7874] veth1_macvtap: entered promiscuous mode [ 179.614121][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.624950][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.642491][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.671959][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.695966][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.718570][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.517'. [ 179.747048][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.757024][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.767891][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.778016][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.788582][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.798460][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.328898][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.339676][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.396796][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.417635][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.429473][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.440430][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.443445][ T8028] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 180.451749][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.469812][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.479899][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.490548][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.500454][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.515765][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.525873][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.536794][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.549044][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.568482][ T7874] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.582325][ T7874] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.591016][ T7874] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.607539][ T7874] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.617692][ T8027] netlink: 'syz.2.518': attribute type 4 has an invalid length. [ 180.632962][ T29] audit: type=1400 audit(1739970682.869:497): avc: denied { write } for pid=8025 comm="syz.2.518" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 180.780405][ T8035] netlink: 'syz.6.520': attribute type 12 has an invalid length. [ 180.794236][ T8035] netlink: 'syz.6.520': attribute type 2 has an invalid length. [ 180.829672][ T8035] netlink: 200 bytes leftover after parsing attributes in process `syz.6.520'. [ 180.840699][ T8032] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 180.855104][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.873078][ T8036] bridge0: entered allmulticast mode [ 181.444276][ T8045] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 181.457279][ T8036] bridge_slave_1: left promiscuous mode [ 181.466110][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.486850][ T8036] bridge_slave_0: left allmulticast mode [ 181.493365][ T8036] bridge_slave_0: left promiscuous mode [ 181.499078][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.932199][ T5820] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 182.046706][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.062885][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.089919][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.098397][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.225075][ T5820] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 182.233407][ T5820] usb 6-1: config 0 has no interface number 0 [ 182.248417][ T5820] usb 6-1: config 0 interface 29 has no altsetting 0 [ 182.433930][ T8067] hub 9-0:1.0: USB hub found [ 182.440361][ T8067] hub 9-0:1.0: 1 port detected [ 182.555799][ T5820] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 182.731019][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.775989][ T5820] usb 6-1: Product: syz [ 182.793665][ T5820] usb 6-1: Manufacturer: syz [ 182.800191][ T5820] usb 6-1: SerialNumber: syz [ 182.807158][ T5820] usb 6-1: config 0 descriptor?? [ 182.931678][ T29] audit: type=1400 audit(1739970685.159:498): avc: denied { read } for pid=8071 comm="syz.7.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 183.022052][ T5820] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 183.236880][ T5820] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 183.249543][ T5820] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 183.256761][ T5820] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 183.322153][ T25] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 183.354459][ T8080] veth1_to_hsr: entered promiscuous mode [ 183.454289][ T5820] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -22 [ 183.539271][ T25] usb 8-1: config 0 has an invalid interface number: 6 but max is 0 [ 183.601648][ T5820] usb 6-1: USB disconnect, device number 6 [ 183.649969][ T25] usb 8-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 183.771464][ T25] usb 8-1: config 0 has no interface number 0 [ 183.780758][ T25] usb 8-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 183.799502][ T25] usb 8-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 19200, setting to 64 [ 183.881591][ T8075] veth1_to_hsr: left promiscuous mode [ 183.943349][ T25] usb 8-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 183.952564][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.960549][ T25] usb 8-1: Product: syz [ 183.964724][ T25] usb 8-1: Manufacturer: syz [ 184.365002][ T25] usb 8-1: SerialNumber: syz [ 184.426564][ T25] usb 8-1: config 0 descriptor?? [ 184.444511][ T8072] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 184.461089][ T8072] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 184.472733][ T25] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 184.565239][ T29] audit: type=1400 audit(1739970686.789:499): avc: denied { read } for pid=8090 comm="syz.3.537" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 184.977119][ T5820] usb 8-1: USB disconnect, device number 2 [ 185.363744][ T29] audit: type=1400 audit(1739970687.589:500): avc: denied { read write } for pid=8101 comm="syz.5.541" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.387226][ T29] audit: type=1400 audit(1739970687.589:501): avc: denied { open } for pid=8101 comm="syz.5.541" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.428933][ T29] audit: type=1400 audit(1739970687.659:502): avc: denied { ioctl } for pid=8101 comm="syz.5.541" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 185.525524][ T8109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.721963][ T8115] netlink: 76 bytes leftover after parsing attributes in process `syz.2.544'. [ 186.505435][ T8124] netdevsim netdevsim2: Direct firmware load for . [ 186.505435][ T8124] failed with error -2 [ 186.517493][ T8124] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 186.517493][ T8124] [ 186.647875][ T8125] input: syz0 as /devices/virtual/input/input27 [ 187.527020][ T8127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=8127 comm=syz.6.547 [ 187.884024][ T29] audit: type=1400 audit(1739970690.119:503): avc: denied { mounton } for pid=8140 comm="syz.6.554" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 187.911119][ T8141] 9pnet_fd: p9_fd_create_tcp (8141): problem connecting socket to 127.0.0.1 [ 189.205473][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.214250][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.228830][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.237390][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.244806][ T5830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 189.252943][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.359747][ T29] audit: type=1400 audit(1739970691.569:504): avc: denied { bind } for pid=8155 comm="syz.7.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.455975][ T29] audit: type=1400 audit(1739970691.569:505): avc: denied { write } for pid=8155 comm="syz.7.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.607861][ T8175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=8175 comm=syz.6.564 [ 189.772420][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 189.981007][ T8163] chnl_net:caif_netlink_parms(): no params data found [ 190.036047][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.052166][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 190.071828][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.097786][ T29] audit: type=1400 audit(1739970692.329:506): avc: denied { setopt } for pid=8183 comm="syz.6.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.123681][ T9] usb 4-1: config 0 descriptor?? [ 190.138171][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 190.188358][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.202061][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.234275][ T8163] bridge_slave_0: entered allmulticast mode [ 190.260834][ T8163] bridge_slave_0: entered promiscuous mode [ 190.285789][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.318248][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.335261][ T8163] bridge_slave_1: entered allmulticast mode [ 190.358547][ T8163] bridge_slave_1: entered promiscuous mode [ 190.439923][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.568800][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 190.578670][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 190.710343][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 190.927002][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 190.945793][ T8200] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 190.974579][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.990902][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 191.002201][ T29] audit: type=1400 audit(1739970693.239:507): avc: denied { write } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.007661][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 191.030405][ T29] audit: type=1400 audit(1739970693.239:508): avc: denied { remove_name } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.061321][ T29] audit: type=1400 audit(1739970693.239:509): avc: denied { add_name } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.127468][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 191.141745][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 191.151833][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 191.169496][ T8163] team0: Port device team_slave_0 added [ 191.175599][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 191.185814][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 191.201730][ T8163] team0: Port device team_slave_1 added [ 191.302259][ T8163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.332095][ T5830] Bluetooth: hci5: command tx timeout [ 191.336707][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 191.344333][ T8163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.344358][ T8163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.345639][ T8163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.370195][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.402272][ T8163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.441476][ T8163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.453184][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 191.470045][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 191.480859][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 191.490401][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.573'. [ 191.507358][ T29] audit: type=1400 audit(1739970693.719:510): avc: denied { bind } for pid=8204 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 191.508728][ T8163] hsr_slave_0: entered promiscuous mode [ 191.535457][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.575'. [ 191.536398][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 191.564407][ T8163] hsr_slave_1: entered promiscuous mode [ 191.570407][ T8163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.579522][ T9] pwc: Registered as video103. [ 191.592716][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 191.608421][ T8163] Cannot create hsr debugfs directory [ 191.617550][ T9] usb 4-1: USB disconnect, device number 12 [ 191.687598][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.7.575'. [ 191.780217][ T8212] netlink: 68 bytes leftover after parsing attributes in process `syz.7.575'. [ 191.828206][ T8218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=8218 comm=syz.6.576 [ 192.781469][ T8163] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 192.808562][ T8163] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 193.292397][ T8163] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 193.375709][ T8163] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 193.392109][ T5830] Bluetooth: hci5: command tx timeout [ 193.703432][ T8243] netlink: 104 bytes leftover after parsing attributes in process `syz.6.583'. [ 193.732473][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.583'. [ 193.740108][ T8163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.797784][ T8163] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.875778][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.882873][ T8118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.968031][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.974903][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.007040][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.014136][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.149807][ T8253] evm: overlay not supported [ 195.006955][ T8262] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.025324][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.587'. [ 195.474319][ T5830] Bluetooth: hci5: command tx timeout [ 195.961593][ T8282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=8282 comm=syz.3.592 [ 196.234426][ T8163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.254821][ T8295] netlink: 104 bytes leftover after parsing attributes in process `syz.3.597'. [ 197.332349][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 197.456297][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 197.469660][ T29] audit: type=1400 audit(1739970699.689:511): avc: denied { getopt } for pid=8301 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 197.602097][ T5830] Bluetooth: hci5: command tx timeout [ 197.973702][ T8163] veth0_vlan: entered promiscuous mode [ 197.994266][ T8163] veth1_vlan: entered promiscuous mode [ 198.001290][ T29] audit: type=1400 audit(1739970700.229:512): avc: denied { ioctl } for pid=8311 comm="syz.7.602" path="socket:[21552]" dev="sockfs" ino=21552 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.012120][ T8163] veth0_macvtap: entered promiscuous mode [ 198.559880][ T29] audit: type=1400 audit(1739970700.329:513): avc: denied { write } for pid=8308 comm="syz.3.601" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 198.596890][ T29] audit: type=1400 audit(1739970700.329:514): avc: denied { create } for pid=8308 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.617638][ T8163] veth1_macvtap: entered promiscuous mode [ 198.630305][ T29] audit: type=1400 audit(1739970700.329:515): avc: denied { write } for pid=8308 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.652552][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.664861][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.674878][ T29] audit: type=1400 audit(1739970700.359:516): avc: denied { ioctl } for pid=8308 comm="syz.3.601" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 198.699730][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.746513][ T29] audit: type=1400 audit(1739970700.769:517): avc: denied { write } for pid=8311 comm="syz.7.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.771408][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.781569][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.792231][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.802224][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.812853][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.823173][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.834262][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.844284][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.864934][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.875087][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.889656][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.900626][ T8163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.967673][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.989036][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.067852][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.182170][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.192538][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.203217][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.412213][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.417669][ T5923] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 200.463332][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.512236][ T29] audit: type=1400 audit(1739970702.729:518): avc: denied { read } for pid=8326 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 200.521946][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.563523][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.578693][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.602125][ T5923] usb 8-1: Using ep0 maxpacket: 8 [ 200.617329][ T5923] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.641636][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.671932][ T5923] usb 8-1: config 0 has no interfaces? [ 200.705362][ T5923] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 200.716865][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.751489][ T5923] usb 8-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 200.759753][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.779454][ T5923] usb 8-1: Product: syz [ 200.791416][ T5923] usb 8-1: Manufacturer: syz [ 200.817487][ T8163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.833173][ T5923] usb 8-1: SerialNumber: syz [ 200.863030][ T5923] usb 8-1: config 0 descriptor?? [ 200.906341][ T8163] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.916321][ T8163] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.926862][ T8163] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.940906][ T8163] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.036590][ T8351] sd 0:0:1:0: device reset [ 201.051496][ T7606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.079067][ T7606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.104145][ T969] usb 8-1: USB disconnect, device number 3 [ 201.110559][ T8118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.121282][ T8118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.142615][ T5829] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 201.424095][ T5829] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.431661][ T8358] netlink: 'syz.2.614': attribute type 21 has an invalid length. [ 201.532020][ T8358] netlink: 156 bytes leftover after parsing attributes in process `syz.2.614'. [ 201.542169][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.590497][ T5829] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 201.606442][ T8353] netlink: 'syz.2.614': attribute type 21 has an invalid length. [ 201.620214][ T8353] netlink: 156 bytes leftover after parsing attributes in process `syz.2.614'. [ 201.632203][ T5829] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.642890][ T5829] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.654997][ T5829] usb 7-1: Manufacturer: syz [ 201.671350][ T8360] No such timeout policy "syz1" [ 201.678364][ T5829] usb 7-1: config 0 descriptor?? [ 201.779967][ T8367] netlink: 256 bytes leftover after parsing attributes in process `syz.2.617'. [ 201.789579][ T8367] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 201.801521][ T29] audit: type=1400 audit(1739970704.039:519): avc: denied { create } for pid=8366 comm="syz.2.617" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 201.992565][ T5829] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 202.212034][ T5829] usb 9-1: device descriptor read/64, error -71 [ 202.307373][ T8376] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 202.421972][ T8378] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 202.518512][ T5829] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 202.722560][ T8380] input: syz0 as /devices/virtual/input/input30 [ 202.830924][ T9] usb 7-1: USB disconnect, device number 5 [ 202.836820][ T5829] usb 9-1: device descriptor read/64, error -71 [ 202.855747][ T8383] netlink: 80 bytes leftover after parsing attributes in process `syz.3.622'. [ 202.937597][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 202.952210][ T5829] usb usb9-port1: attempt power cycle [ 202.973803][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 203.210833][ T29] audit: type=1326 audit(1739970705.439:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 203.302571][ T29] audit: type=1326 audit(1739970705.439:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 203.327845][ T29] audit: type=1326 audit(1739970705.449:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f853f38b750 code=0x7ffc0000 [ 203.663708][ T29] audit: type=1326 audit(1739970705.449:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f853f38b750 code=0x7ffc0000 [ 203.707166][ T29] audit: type=1326 audit(1739970705.449:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 203.730364][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.742980][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 203.750643][ T5829] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 203.779888][ T29] audit: type=1326 audit(1739970705.449:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 203.811682][ T29] audit: type=1326 audit(1739970705.449:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 203.852383][ T5829] usb 9-1: device descriptor read/8, error -71 [ 203.929873][ T29] audit: type=1326 audit(1739970705.499:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 203.933731][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 204.008388][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.018152][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.026377][ T9] usb 4-1: Product: syz [ 204.036302][ T9] usb 4-1: Manufacturer: syz [ 204.040909][ T9] usb 4-1: SerialNumber: syz [ 204.048414][ T9] usb 4-1: config 0 descriptor?? [ 204.092664][ T5829] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 204.122413][ T5829] usb 9-1: device descriptor read/8, error -71 [ 204.189839][ T1064] block nbd0: Possible stuck request ffff8880260ce000: control (read@0,4096B). Runtime 120 seconds [ 204.232483][ T5829] usb usb9-port1: unable to enumerate USB device [ 204.292265][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 204.582276][ T29] audit: type=1326 audit(1739970706.809:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.6.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f6b8cde9 code=0x7ffc0000 [ 204.648802][ T29] audit: type=1326 audit(1739970706.839:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.6.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f6b8cde9 code=0x7ffc0000 [ 205.721323][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 205.744124][ T9] usb 4-1: USB disconnect, device number 13 [ 205.977015][ T8497] netlink: 'syz.7.670': attribute type 2 has an invalid length. [ 206.811043][ T8553] syz.2.696 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 206.884274][ T8557] futex_wake_op: syz.2.698 tries to shift op by 32; fix this program [ 207.079712][ T8562] syzkaller0: entered promiscuous mode [ 207.086381][ T8562] syzkaller0: entered allmulticast mode [ 207.378510][ T8587] netlink: 16 bytes leftover after parsing attributes in process `syz.7.710'. [ 207.402953][ T8587] netlink: 20 bytes leftover after parsing attributes in process `syz.7.710'. [ 207.458555][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 207.470018][ T8589] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.482861][ T8589] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 208.236415][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 208.236431][ T29] audit: type=1326 audit(1739970710.469:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.2.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 208.584145][ T29] audit: type=1326 audit(1739970710.829:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 208.613236][ T29] audit: type=1326 audit(1739970710.829:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 208.636812][ T29] audit: type=1326 audit(1739970710.829:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 208.665707][ T29] audit: type=1326 audit(1739970710.829:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 208.689572][ T29] audit: type=1326 audit(1739970710.849:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 208.713769][ T29] audit: type=1326 audit(1739970710.849:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 208.737162][ T29] audit: type=1326 audit(1739970710.849:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 208.838801][ T8587] geneve2: entered allmulticast mode [ 209.178083][ T29] audit: type=1326 audit(1739970711.409:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.6.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f6b8cde9 code=0x7ffc0000 [ 209.225386][ T29] audit: type=1326 audit(1739970711.409:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.6.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f6b8cde9 code=0x7ffc0000 [ 209.887647][ T8660] xt_bpf: check failed: parse error [ 210.059460][ T8669] netlink: 44 bytes leftover after parsing attributes in process `syz.3.746'. [ 210.244561][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.7.750'. [ 210.259328][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.750'. [ 211.123810][ T8721] netem: change failed [ 211.798286][ T8755] serio: Serial port ptm0 [ 212.658886][ T8815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8815 comm=syz.6.797 [ 214.123139][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 214.123152][ T29] audit: type=1326 audit(1739970716.359:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb708f8cde9 code=0x7fc00000 [ 214.195112][ T29] audit: type=1326 audit(1739970716.419:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb708f8cde9 code=0x7fc00000 [ 214.281042][ T29] audit: type=1326 audit(1739970716.429:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3678cde9 code=0x7ffc0000 [ 214.325371][ T29] audit: type=1326 audit(1739970716.429:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3678cde9 code=0x7ffc0000 [ 214.349820][ T29] audit: type=1326 audit(1739970716.449:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3678cde9 code=0x7ffc0000 [ 214.426988][ T29] audit: type=1326 audit(1739970716.449:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3678cde9 code=0x7ffc0000 [ 214.494201][ T29] audit: type=1326 audit(1739970716.449:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3678cde9 code=0x7ffc0000 [ 214.570952][ T29] audit: type=1326 audit(1739970716.459:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3678cde9 code=0x7ffc0000 [ 214.637835][ T29] audit: type=1326 audit(1739970716.459:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3678cde9 code=0x7ffc0000 [ 214.733948][ T29] audit: type=1326 audit(1739970716.459:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf3678cde9 code=0x7ffc0000 [ 216.466208][ T8932] input: syz1 as /devices/virtual/input/input32 [ 216.562792][ T5869] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 216.826028][ T5869] usb 7-1: New USB device found, idVendor=2006, idProduct=0018, bcdDevice= 0.ff [ 216.877714][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.888537][ T8934] netlink: 96 bytes leftover after parsing attributes in process `syz.2.840'. [ 216.894515][ T5869] usb 7-1: config 0 descriptor?? [ 216.925710][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.7.841'. [ 216.935544][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.7.841'. [ 217.064916][ T8938] mkiss: ax0: crc mode is auto. [ 217.204966][ T5869] usbhid 7-1:0.0: can't add hid device: -71 [ 217.210972][ T5869] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 217.221028][ T8946] netlink: 9 bytes leftover after parsing attributes in process `syz.7.846'. [ 217.239281][ T5869] usb 7-1: USB disconnect, device number 6 [ 217.259250][ T8946] gretap0: entered promiscuous mode [ 217.570643][ T8946] netlink: 5 bytes leftover after parsing attributes in process `syz.7.846'. [ 217.703162][ T8946] 0ªX¹¦D: renamed from gretap0 [ 217.845996][ T8946] 0ªX¹¦D: left promiscuous mode [ 217.852011][ T8946] 0ªX¹¦D: entered allmulticast mode [ 217.924043][ T8946] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 218.171997][ T5867] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 218.754589][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.853'. [ 218.775249][ T5867] usb 9-1: Using ep0 maxpacket: 32 [ 218.835575][ T5867] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 218.844755][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.852917][ T5867] usb 9-1: Product: syz [ 218.857179][ T5867] usb 9-1: Manufacturer: syz [ 218.898703][ T5867] usb 9-1: SerialNumber: syz [ 218.944382][ T8969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.955240][ T5867] usb 9-1: config 0 descriptor?? [ 218.973346][ T8974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32528 sclass=netlink_route_socket pid=8974 comm=syz.6.853 [ 219.016392][ T5867] ttusb_dec_send_command: command bulk message failed: error -22 [ 219.045359][ T5867] ttusb-dec 9-1:0.0: probe with driver ttusb-dec failed with error -22 [ 219.094332][ T8973] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 219.381984][ T8956] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.848'. [ 219.391241][ T8949] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.848'. [ 219.420428][ T5869] usb 9-1: USB disconnect, device number 6 [ 219.956781][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 219.956792][ T29] audit: type=1400 audit(1739970722.189:909): avc: denied { map } for pid=8985 comm="syz.2.858" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 220.282394][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 220.609064][ T5867] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 220.642045][ T5829] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 220.681992][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 220.900186][ T9000] fuse: Bad value for 'fd' [ 221.158029][ T5867] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 221.169973][ T5867] usb 4-1: config 0 has no interface number 0 [ 221.182180][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.193650][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.203922][ T9] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 221.213390][ T5829] usb 7-1: device descriptor read/64, error -71 [ 221.219824][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.228022][ T5867] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 221.237518][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.249336][ T9] usb 3-1: config 0 descriptor?? [ 221.255186][ T5867] usb 4-1: Product: syz [ 221.260402][ T5867] usb 4-1: Manufacturer: syz [ 221.267057][ T5867] usb 4-1: SerialNumber: syz [ 221.274819][ T5867] usb 4-1: config 0 descriptor?? [ 221.460575][ T9003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9003 comm=syz.8.863 [ 221.492535][ T5829] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 221.622073][ T5829] usb 7-1: device descriptor read/64, error -71 [ 221.679311][ T9] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 221.732256][ T5829] usb usb7-port1: attempt power cycle [ 221.844455][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.853229][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.870161][ T29] audit: type=1400 audit(1739970724.099:910): avc: denied { read } for pid=8990 comm="syz.3.860" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 221.932237][ T29] audit: type=1400 audit(1739970724.099:911): avc: denied { map } for pid=8990 comm="syz.3.860" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 221.964240][ T5878] usb 3-1: USB disconnect, device number 22 [ 222.051764][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.866'. [ 222.072324][ T5829] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 222.093099][ T5829] usb 7-1: device descriptor read/8, error -71 [ 222.331993][ T5829] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 222.355415][ T5829] usb 7-1: device descriptor read/8, error -71 [ 222.474461][ T5829] usb usb7-port1: unable to enumerate USB device [ 222.561995][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 222.586625][ T9022] openvswitch: netlink: Key type 15878 is out of range max 32 [ 222.796486][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 222.865080][ T9] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 222.887447][ T9] usb 9-1: config 0 has no interface number 0 [ 223.004981][ T9] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 223.034804][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.106454][ T9] usb 9-1: Product: syz [ 223.123095][ T9] usb 9-1: Manufacturer: syz [ 223.135412][ T9] usb 9-1: SerialNumber: syz [ 223.168627][ T9] usb 9-1: config 0 descriptor?? [ 223.192568][ T5867] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 223.206323][ T9] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 223.216449][ T5867] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 223.241471][ T5867] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 223.262798][ T5867] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 223.294108][ T5867] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 223.313082][ T9031] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 223.329595][ T29] audit: type=1400 audit(1739970725.539:912): avc: denied { create } for pid=9028 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 223.352369][ T5867] usb 4-1: USB disconnect, device number 14 [ 223.358444][ T29] audit: type=1400 audit(1739970725.539:913): avc: denied { ioctl } for pid=9028 comm="syz.2.871" path="socket:[24133]" dev="sockfs" ino=24133 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 223.399297][ T5867] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 223.414808][ T9037] netlink: 68 bytes leftover after parsing attributes in process `syz.3.872'. [ 223.419509][ T5867] keyspan 4-1:0.133: device disconnected [ 223.436262][ T29] audit: type=1400 audit(1739970725.549:914): avc: denied { write } for pid=9028 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 223.459423][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.486903][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.515923][ T9] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 223.544258][ T9] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 223.728921][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 223.757256][ T9042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=9042 comm=syz.3.875 [ 223.895340][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 223.932696][ T29] audit: type=1400 audit(1739970726.159:915): avc: denied { setopt } for pid=9019 comm="syz.8.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.938471][ T5869] usb 9-1: USB disconnect, device number 7 [ 223.952258][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 223.974047][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 223.989171][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 224.001458][ T5869] quatech2 9-1:0.51: device disconnected [ 225.832898][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 225.845639][ T29] audit: type=1400 audit(1739970728.049:916): avc: denied { mount } for pid=9061 comm="syz.6.883" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 225.878680][ T9062] devpts: called with bogus options [ 226.471627][ T29] audit: type=1400 audit(1739970728.109:917): avc: denied { setattr } for pid=9061 comm="syz.6.883" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 227.764902][ T29] audit: type=1400 audit(1739970729.999:918): avc: denied { connect } for pid=9103 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.980550][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.7.891'. [ 227.989574][ T9108] netlink: 52 bytes leftover after parsing attributes in process `syz.7.891'. [ 227.998510][ T9108] netlink: 36 bytes leftover after parsing attributes in process `syz.7.891'. [ 228.436050][ T9108] vlan0: entered allmulticast mode [ 228.441242][ T9108] veth0_vlan: entered allmulticast mode [ 228.471986][ T5820] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 228.629723][ T5820] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 228.668407][ T5820] usb 3-1: config 0 has no interface number 0 [ 228.702781][ T5820] usb 3-1: config 0 interface 29 has no altsetting 0 [ 228.751448][ T5820] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 228.796094][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.866861][ T5820] usb 3-1: Product: syz [ 228.871032][ T5820] usb 3-1: Manufacturer: syz [ 228.878211][ T5820] usb 3-1: SerialNumber: syz [ 228.962285][ T5869] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 228.971113][ T5820] usb 3-1: config 0 descriptor?? [ 229.202229][ T9126] netlink: 'syz.7.898': attribute type 1 has an invalid length. [ 229.209937][ T9126] netlink: 184 bytes leftover after parsing attributes in process `syz.7.898'. [ 229.224127][ T9126] netlink: 'syz.7.898': attribute type 1 has an invalid length. [ 229.232231][ T9126] netlink: 'syz.7.898': attribute type 2 has an invalid length. [ 229.243338][ T5869] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 229.252005][ T5869] usb 7-1: config 0 has no interface number 0 [ 229.258273][ T5869] usb 7-1: config 0 interface 29 has no altsetting 0 [ 229.363255][ T9131] FAULT_INJECTION: forcing a failure. [ 229.363255][ T9131] name failslab, interval 1, probability 0, space 0, times 1 [ 229.368628][ T5820] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 229.407743][ T5869] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 229.420461][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.428724][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.8.899 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 229.428746][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 229.428755][ T9131] Call Trace: [ 229.428760][ T9131] [ 229.428766][ T9131] dump_stack_lvl+0x16c/0x1f0 [ 229.428791][ T9131] should_fail_ex+0x50a/0x650 [ 229.428814][ T9131] ? fs_reclaim_acquire+0xae/0x150 [ 229.428839][ T9131] ? __do_sys_futex_waitv+0x221/0x2c0 [ 229.428858][ T9131] should_failslab+0xc2/0x120 [ 229.428876][ T9131] __kmalloc_noprof+0xcb/0x510 [ 229.428898][ T9131] __do_sys_futex_waitv+0x221/0x2c0 [ 229.428919][ T9131] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 229.428947][ T9131] ? trace_csd_function_exit+0x17f/0x1f0 [ 229.428968][ T9131] do_syscall_64+0xcd/0x250 [ 229.428986][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.429007][ T9131] RIP: 0033:0x7faf3678cde9 [ 229.429019][ T9131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.429034][ T9131] RSP: 002b:00007faf3766f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 229.429049][ T9131] RAX: ffffffffffffffda RBX: 00007faf369a6080 RCX: 00007faf3678cde9 [ 229.429060][ T9131] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000400000001080 [ 229.429070][ T9131] RBP: 00007faf3766f090 R08: 0000000000000001 R09: 0000000000000000 [ 229.429079][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.429088][ T9131] R13: 0000000000000000 R14: 00007faf369a6080 R15: 00007ffebf2c1248 [ 229.429109][ T9131] [ 229.433176][ T5869] usb 7-1: Product: syz [ 229.540176][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.558019][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 229.565143][ T5869] usb 7-1: Manufacturer: syz [ 229.628377][ T5820] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 229.638627][ T5820] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 229.654225][ T5869] usb 7-1: SerialNumber: syz [ 229.671278][ T5869] usb 7-1: config 0 descriptor?? [ 229.869011][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.8.903'. [ 229.913136][ T9141] netlink: 52 bytes leftover after parsing attributes in process `syz.8.903'. [ 230.470422][ T5869] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 230.547216][ T5820] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 230.561702][ T5869] peak_usb 7-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 230.570348][ T5820] usb 3-1: USB disconnect, device number 23 [ 230.577470][ T5869] peak_usb 7-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 230.625100][ T9147] input: syz0 as /devices/virtual/input/input33 [ 230.692913][ T5869] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -71 [ 230.703678][ T5869] usb 7-1: USB disconnect, device number 11 [ 230.758333][ T29] audit: type=1400 audit(1739970732.989:919): avc: denied { create } for pid=9157 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 230.810927][ T29] audit: type=1400 audit(1739970733.039:920): avc: denied { write } for pid=9157 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 230.905043][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.910'. [ 230.928344][ T29] audit: type=1400 audit(1739970733.159:921): avc: denied { create } for pid=9164 comm="syz.8.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 230.963728][ T9165] Bluetooth: MGMT ver 1.23 [ 230.965628][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 231.153309][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 231.173080][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 231.192041][ T9] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 231.217625][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.263609][ T9] usb 8-1: config 0 descriptor?? [ 231.302504][ T9] usb 8-1: selecting invalid altsetting 3 [ 231.308236][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 231.940340][ T9] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 231.962082][ T9] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 231.972252][ T9] usb 8-1: USB disconnect, device number 4 [ 232.165442][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.918'. [ 232.309124][ T9189] netlink: 'syz.6.918': attribute type 7 has an invalid length. [ 232.411997][ T29] audit: type=1400 audit(1739970734.479:922): avc: denied { ioctl } for pid=9186 comm="syz.6.918" path="socket:[24416]" dev="sockfs" ino=24416 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 232.792884][ T9192] input: syz0 as /devices/virtual/input/input34 [ 233.204116][ T9204] __nla_validate_parse: 1 callbacks suppressed [ 233.204167][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.923'. [ 233.246447][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.923'. [ 233.626440][ T9217] netlink: 'syz.8.926': attribute type 2 has an invalid length. [ 233.752064][ T5878] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 233.831990][ T5820] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 233.945070][ T5878] usb 7-1: device descriptor read/64, error -71 [ 234.134501][ T5820] usb 8-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 234.155695][ T5820] usb 8-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.177285][ T5820] usb 8-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid wMaxPacketSize 0 [ 234.182115][ T5878] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 234.190517][ T5820] usb 8-1: config 0 interface 0 has no altsetting 0 [ 234.201715][ T5820] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 234.220231][ T5820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.240139][ T5820] usb 8-1: config 0 descriptor?? [ 234.350710][ T1064] block nbd0: Possible stuck request ffff8880260ce000: control (read@0,4096B). Runtime 150 seconds [ 234.387326][ T29] audit: type=1400 audit(1739970736.619:923): avc: denied { listen } for pid=9243 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.408485][ T29] audit: type=1400 audit(1739970736.639:924): avc: denied { getopt } for pid=9243 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.422138][ T5878] usb 7-1: device descriptor read/64, error -71 [ 234.552877][ T5878] usb usb7-port1: attempt power cycle [ 234.748103][ T29] audit: type=1400 audit(1739970736.969:925): avc: denied { unmount } for pid=8163 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 235.033698][ T9249] 9pnet_fd: Insufficient options for proto=fd [ 235.039943][ T5878] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 235.072428][ T5878] usb 7-1: device descriptor read/8, error -71 [ 235.172790][ T5820] usb 8-1: USB disconnect, device number 5 [ 235.365946][ T5878] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 235.397876][ T5878] usb 7-1: device descriptor read/8, error -71 [ 235.532130][ T5878] usb usb7-port1: unable to enumerate USB device [ 235.962214][ T9268] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 236.015785][ T9268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.083906][ T9268] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 236.165450][ T9274] befs: (nullb0): No write support. Marking filesystem read-only [ 236.175420][ T9274] befs: (nullb0): invalid magic header [ 236.596344][ T9268] bond1: (slave batadv1): making interface the new active one [ 236.615134][ T9268] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 236.702204][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.943'. [ 237.513842][ T29] audit: type=1400 audit(1739970739.739:926): avc: denied { bind } for pid=9292 comm="syz.7.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.714951][ T29] audit: type=1400 audit(1739970739.749:927): avc: denied { name_bind } for pid=9292 comm="syz.7.950" src=11812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 237.781040][ T29] audit: type=1400 audit(1739970739.769:928): avc: denied { node_bind } for pid=9292 comm="syz.7.950" src=11812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 238.611087][ T9311] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 239.161949][ T9324] tipc: Enabling of bearer rejected, failed to enable media [ 239.578806][ T9301] can0: slcan on ttyS3. [ 239.590959][ T9301] netlink: 72 bytes leftover after parsing attributes in process `syz.6.955'. [ 239.612161][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.955'. [ 239.703303][ T9298] can0 (unregistered): slcan off ttyS3. [ 240.009549][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.965'. [ 240.446862][ T29] audit: type=1326 audit(1739970742.679:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 241.441956][ T5829] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 241.471064][ T29] audit: type=1326 audit(1739970742.679:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 241.835230][ T29] audit: type=1326 audit(1739970742.709:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 241.858521][ T29] audit: type=1326 audit(1739970742.709:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 241.881826][ T29] audit: type=1326 audit(1739970742.709:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 241.891995][ T9363] tty tty25: ldisc open failed (-12), clearing slot 24 [ 241.957723][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.6.973'. [ 242.012965][ T29] audit: type=1326 audit(1739970742.709:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 242.043653][ T29] audit: type=1326 audit(1739970742.709:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f853f38cde9 code=0x7ffc0000 [ 242.237088][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.977'. [ 242.386123][ T9384] netlink: 'syz.6.980': attribute type 21 has an invalid length. [ 242.393933][ T9384] netlink: 'syz.6.980': attribute type 15 has an invalid length. [ 242.422278][ T9388] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 242.422278][ T9388] The task syz.3.977 (9388) triggered the difference, watch for misbehavior. [ 242.548162][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 242.548177][ T29] audit: type=1400 audit(1739970744.779:996): avc: denied { create } for pid=9389 comm="syz.6.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 242.740520][ T9397] Can't find a SQUASHFS superblock on nullb0 [ 243.347405][ T29] audit: type=1400 audit(1739970745.539:997): avc: denied { getopt } for pid=9392 comm="syz.8.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.542176][ T5867] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 243.692821][ T9406] netlink: 16 bytes leftover after parsing attributes in process `syz.6.986'. [ 243.701790][ T9406] netlink: 52 bytes leftover after parsing attributes in process `syz.6.986'. [ 243.710815][ T9406] netlink: 36 bytes leftover after parsing attributes in process `syz.6.986'. [ 243.720141][ T9406] vlan0: entered allmulticast mode [ 243.725322][ T9406] veth0_vlan: entered allmulticast mode [ 244.211942][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 244.295410][ T5867] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 244.840839][ T5867] usb 3-1: config 0 has no interface number 0 [ 244.961640][ T5867] usb 3-1: config 0 interface 16 has no altsetting 0 [ 244.982329][ T5867] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea61, bcdDevice=d8.6a [ 244.991391][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.150761][ T5867] usb 3-1: Product: syz [ 245.211754][ T5867] usb 3-1: Manufacturer: syz [ 245.232686][ T5867] usb 3-1: SerialNumber: syz [ 245.249993][ T5867] usb 3-1: config 0 descriptor?? [ 245.269706][ T5867] cp210x 3-1:0.16: cp210x converter detected [ 245.611284][ T5867] cp210x 3-1:0.16: failed to get vendor val 0x370b size 1: -71 [ 245.629412][ T5867] cp210x 3-1:0.16: querying part number failed [ 245.664108][ T5867] usb 3-1: cp210x converter now attached to ttyUSB0 [ 245.716929][ T5867] usb 3-1: USB disconnect, device number 24 [ 245.763047][ T5867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 245.776768][ T5867] cp210x 3-1:0.16: device disconnected [ 246.772789][ T9448] veth0_to_team: entered promiscuous mode [ 246.778561][ T9448] veth0_to_team: entered allmulticast mode [ 247.223631][ T5133] Bluetooth: hci4: command 0x0405 tx timeout [ 248.408506][ T969] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 249.055970][ T969] usb 9-1: device descriptor read/64, error -71 [ 249.171736][ T9510] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 249.270799][ T9511] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 249.397882][ T969] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 249.623121][ T969] usb 9-1: device descriptor read/64, error -71 [ 249.755280][ T969] usb usb9-port1: attempt power cycle [ 251.395762][ T29] audit: type=1400 audit(1739970752.617:998): avc: denied { sqpoll } for pid=9517 comm="syz.7.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 251.418918][ T8118] Bluetooth: hci6: Frame reassembly failed (-84) [ 251.422445][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 251.462897][ T9520] bond0: (slave bond_slave_1): Releasing backup interface [ 252.015192][ T9542] fuse: Bad value for 'fd' [ 252.456234][ T5133] Bluetooth: hci6: command 0x1003 tx timeout [ 252.492397][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 252.841726][ T29] audit: type=1400 audit(1739970755.047:999): avc: denied { write } for pid=9549 comm="syz.7.1033" name="net" dev="proc" ino=25071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 252.888871][ T29] audit: type=1400 audit(1739970755.077:1000): avc: denied { add_name } for pid=9549 comm="syz.7.1033" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 252.944046][ T29] audit: type=1400 audit(1739970755.077:1001): avc: denied { create } for pid=9549 comm="syz.7.1033" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 253.008654][ T29] audit: type=1400 audit(1739970755.077:1002): avc: denied { associate } for pid=9549 comm="syz.7.1033" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 253.031702][ T9552] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1033'. [ 253.052036][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1033'. [ 253.061234][ T9552] netlink: 31 bytes leftover after parsing attributes in process `syz.7.1033'. [ 253.101989][ T9552] netlink: 'syz.7.1033': attribute type 3 has an invalid length. [ 253.132014][ T9552] netlink: 'syz.7.1033': attribute type 2 has an invalid length. [ 253.171452][ T9552] netlink: 31 bytes leftover after parsing attributes in process `syz.7.1033'. [ 253.304689][ T9561] random: crng reseeded on system resumption [ 253.796232][ T9563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40131 sclass=netlink_route_socket pid=9563 comm=syz.8.1031 [ 254.682069][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 254.912579][ T5820] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 254.978305][ T29] audit: type=1400 audit(1739970757.217:1003): avc: denied { read } for pid=9596 comm="syz.6.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.979972][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1050'. [ 255.014183][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1050'. [ 255.027318][ T9597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65534 sclass=netlink_route_socket pid=9597 comm=syz.6.1050 [ 255.181946][ T5820] usb 9-1: Using ep0 maxpacket: 16 [ 255.195234][ T5820] usb 9-1: unable to get BOS descriptor or descriptor too short [ 255.209744][ T5820] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 255.217687][ T5820] usb 9-1: can't read configurations, error -61 [ 255.293745][ T5829] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 255.302508][ T5934] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 255.384326][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.384929][ T5820] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 255.390868][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.451087][ T969] IPVS: starting estimator thread 0... [ 255.499287][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.501984][ T969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.572308][ T9606] IPVS: using max 32 ests per chain, 76800 per kthread [ 255.589052][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.615426][ T5829] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 255.634008][ T5829] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.664517][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.687261][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.695462][ T5829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 255.714106][ T5934] usb 3-1: Product: syz [ 255.718514][ T5934] usb 3-1: Manufacturer: syz [ 255.812232][ T5829] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 255.825889][ T5820] usb 9-1: Using ep0 maxpacket: 16 [ 255.831568][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.846666][ T5820] usb 9-1: unable to get BOS descriptor or descriptor too short [ 255.863778][ T5934] usb 3-1: SerialNumber: syz [ 255.871522][ T5820] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 255.872039][ T5829] usb 8-1: Product: syz [ 255.903941][ T5820] usb 9-1: can't read configurations, error -61 [ 255.910505][ T9595] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 255.912243][ T5829] usb 8-1: Manufacturer: syz [ 255.931995][ T5829] usb 8-1: SerialNumber: syz [ 255.938284][ T5829] usb 8-1: config 0 descriptor?? [ 255.943759][ T5820] usb usb9-port1: attempt power cycle [ 255.968152][ T5829] yurex 8-1:0.0: Could not find endpoints [ 256.169215][ T29] audit: type=1400 audit(1739970758.407:1004): avc: denied { remount } for pid=9589 comm="syz.7.1046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 256.321970][ T5820] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 256.342895][ T5934] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 256.363499][ T5934] usb 3-1: USB disconnect, device number 25 [ 256.376102][ T5820] usb 9-1: Using ep0 maxpacket: 16 [ 256.388882][ T5820] usb 9-1: unable to get BOS descriptor or descriptor too short [ 256.399337][ T5820] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 256.407139][ T5820] usb 9-1: can't read configurations, error -61 [ 256.562031][ T5820] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 256.592960][ T5820] usb 9-1: Using ep0 maxpacket: 16 [ 256.605007][ T5820] usb 9-1: unable to get BOS descriptor or descriptor too short [ 256.619262][ T5820] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 256.628850][ T5820] usb 9-1: can't read configurations, error -61 [ 256.643475][ T5820] usb usb9-port1: unable to enumerate USB device [ 257.138114][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.147896][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.190779][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.222877][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.279643][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.292533][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.312016][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.331611][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.343998][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.356254][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.372274][ T5934] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 257.562149][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 257.618577][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.682135][ T5934] usb 4-1: string descriptor 0 read error: -71 [ 257.690140][ T5934] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 257.714252][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.731242][ T5934] usb 4-1: config 0 descriptor?? [ 257.736846][ T5934] usb 4-1: can't set config #0, error -71 [ 257.765191][ T5934] usb 4-1: USB disconnect, device number 15 [ 258.004376][ T9647] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1062'. [ 258.563938][ T5934] usb 8-1: USB disconnect, device number 6 [ 258.579407][ T29] audit: type=1400 audit(1739970760.817:1005): avc: denied { unmount } for pid=7874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 259.005363][ T29] audit: type=1400 audit(1739970761.247:1006): avc: denied { read } for pid=9656 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 259.102025][ T9665] input: syz0 as /devices/virtual/input/input35 [ 259.142311][ T29] audit: type=1400 audit(1739970761.337:1007): avc: denied { connect } for pid=9664 comm="syz.8.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.142346][ T29] audit: type=1400 audit(1739970761.337:1008): avc: denied { setopt } for pid=9664 comm="syz.8.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.142371][ T29] audit: type=1400 audit(1739970761.337:1009): avc: denied { read } for pid=9664 comm="syz.8.1072" path="socket:[25388]" dev="sockfs" ino=25388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.211825][ T9670] sd 0:0:1:0: device reset [ 259.930238][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 259.931528][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 259.959976][ T5934] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 260.113678][ T9672] ceph: No mds server is up or the cluster is laggy [ 260.116678][ T5934] usb 3-1: device descriptor read/64, error -71 [ 260.432626][ T5934] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 260.562141][ T5934] usb 3-1: device descriptor read/64, error -71 [ 260.716030][ T5934] usb usb3-port1: attempt power cycle [ 261.062033][ T5934] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 261.083480][ T5934] usb 3-1: device descriptor read/8, error -71 [ 261.342590][ T5934] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 261.363158][ T5934] usb 3-1: device descriptor read/8, error -71 [ 261.496572][ T5934] usb usb3-port1: unable to enumerate USB device [ 261.596412][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1079'. [ 261.611460][ T9692] netlink: 'syz.7.1079': attribute type 7 has an invalid length. [ 261.620746][ T9692] netlink: 'syz.7.1079': attribute type 8 has an invalid length. [ 261.652125][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1079'. [ 261.665500][ T9692] syz_tun: entered promiscuous mode [ 261.673247][ T9692] batadv_slave_1: entered promiscuous mode [ 261.695727][ T9692] 0ªX¹¦D: entered promiscuous mode [ 261.882087][ T5829] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 262.873018][ T29] audit: type=1400 audit(1739970764.407:1010): avc: denied { setopt } for pid=9705 comm="syz.7.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 262.924632][ T9711] netlink: 'syz.8.1087': attribute type 1 has an invalid length. [ 263.041119][ T9711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.401910][ T5829] usb 7-1: device descriptor read/64, error -71 [ 263.410127][ T9716] bond1: (slave gretap1): making interface the new active one [ 263.438580][ T9716] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 263.727066][ T5829] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 263.948762][ T5820] IPVS: starting estimator thread 0... [ 264.022682][ T5829] usb 7-1: device descriptor read/64, error -71 [ 264.063475][ T9729] IPVS: using max 26 ests per chain, 62400 per kthread [ 264.276335][ T5829] usb usb7-port1: attempt power cycle [ 264.582060][ T5820] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 264.632671][ T5934] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 264.641941][ T5829] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 264.754760][ T5820] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 264.763017][ T5820] usb 4-1: config 0 has no interface number 0 [ 264.769090][ T5820] usb 4-1: config 0 interface 29 has no altsetting 0 [ 264.775962][ T5923] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 264.786042][ T5820] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 264.795324][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.803579][ T5820] usb 4-1: Product: syz [ 264.808421][ T5820] usb 4-1: Manufacturer: syz [ 264.813408][ T5820] usb 4-1: SerialNumber: syz [ 264.818218][ T5934] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 264.826770][ T5934] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.837450][ T5820] usb 4-1: config 0 descriptor?? [ 264.842590][ T5934] usb 9-1: config 0 has no interface number 0 [ 264.848709][ T5934] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 264.860686][ T5934] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.861960][ T5829] usb 7-1: device not accepting address 18, error -71 [ 264.875759][ T5934] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 264.889947][ T5934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.897999][ T5934] usb 9-1: Product: syz [ 264.902244][ T5934] usb 9-1: Manufacturer: syz [ 264.906848][ T5934] usb 9-1: SerialNumber: syz [ 264.914451][ T5934] usb 9-1: config 0 descriptor?? [ 264.953412][ T5923] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 264.961684][ T5923] usb 3-1: config 0 has no interface number 0 [ 264.967947][ T5923] usb 3-1: config 0 interface 29 has no altsetting 0 [ 264.976457][ T5923] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 264.986686][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.991341][ T1064] block nbd0: Possible stuck request ffff8880260ce000: control (read@0,4096B). Runtime 180 seconds [ 264.994975][ T5923] usb 3-1: Product: syz [ 265.017071][ T5923] usb 3-1: Manufacturer: syz [ 265.021761][ T5923] usb 3-1: SerialNumber: syz [ 265.028516][ T5923] usb 3-1: config 0 descriptor?? [ 265.062596][ T5820] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 265.222153][ T5829] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 265.240932][ T5923] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 265.244287][ T5829] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 265.258170][ T5829] usb 7-1: config 0 has no interface number 0 [ 265.266341][ T5829] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 265.271951][ T5820] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 265.275570][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.291834][ T5829] usb 7-1: Product: syz [ 265.296155][ T5829] usb 7-1: Manufacturer: syz [ 265.300746][ T5829] usb 7-1: SerialNumber: syz [ 265.306864][ T5829] usb 7-1: config 0 descriptor?? [ 265.313902][ T5820] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 265.382732][ T5820] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 265.394421][ T5820] usb 4-1: USB disconnect, device number 16 [ 265.446743][ T5923] peak_usb 3-1:0.29 can1: unable to request usb[type=2 value=5] err=-71 [ 265.456286][ T5923] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 265.502722][ T5923] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 265.514023][ T5923] usb 3-1: USB disconnect, device number 30 [ 265.518562][ T9] usb 9-1: USB disconnect, device number 16 [ 265.881422][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.890307][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.900456][ T5829] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 265.911291][ T5829] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 265.919532][ T5829] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 265.928346][ T5829] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 265.940796][ T5829] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 266.048360][ T29] audit: type=1400 audit(1739970768.287:1011): avc: denied { getopt } for pid=9764 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.179417][ T9] usb 7-1: USB disconnect, device number 19 [ 266.195000][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 266.205820][ T9] keyspan 7-1:0.133: device disconnected [ 266.252192][ T5923] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 267.004931][ T5923] usb 3-1: config 16 has an invalid descriptor of length 11, skipping remainder of the config [ 267.019325][ T5923] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 20744, setting to 64 [ 267.038629][ T5923] usb 3-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.075537][ T5923] usb 3-1: config 16 interface 0 has no altsetting 0 [ 267.097297][ T5923] usb 3-1: New USB device found, idVendor=15b2, idProduct=0036, bcdDevice=bb.7a [ 267.117552][ T9780] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 267.255928][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.747846][ T9780] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 268.453920][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 268.466134][ T5923] usb 3-1: USB disconnect, device number 31 [ 268.802382][ T5867] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 269.074436][ T5867] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 269.096307][ T5867] usb 9-1: config 0 has no interface number 0 [ 269.106265][ T5867] usb 9-1: config 0 interface 29 has no altsetting 0 [ 269.142642][ T5867] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 269.151709][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.162051][ T5867] usb 9-1: Product: syz [ 269.172041][ T5867] usb 9-1: Manufacturer: syz [ 269.177415][ T5867] usb 9-1: SerialNumber: syz [ 269.183647][ T5867] usb 9-1: config 0 descriptor?? [ 269.328244][ T29] audit: type=1400 audit(1739970771.567:1012): avc: denied { setopt } for pid=9809 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 269.474255][ T9795] overlayfs: statfs failed on './file0' [ 269.491990][ T5867] peak_usb 9-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 269.565047][ T9812] kernel profiling enabled (shift: 9) [ 270.081060][ T5867] peak_usb 9-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 270.090015][ T5867] peak_usb 9-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 270.133391][ T9814] loop2: detected capacity change from 0 to 7 [ 270.143754][ T9814] Dev loop2: unable to read RDB block 7 [ 270.186264][ T5867] peak_usb 9-1:0.29: probe with driver peak_usb failed with error -71 [ 270.215871][ T9814] loop2: unable to read partition table [ 270.221653][ T9814] loop2: partition table beyond EOD, truncated [ 270.233598][ T5867] usb 9-1: USB disconnect, device number 17 [ 270.259165][ T9814] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.001577][ T9834] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 271.016950][ T9834] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1130'. [ 271.026354][ T9834] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 271.035356][ T9834] netlink: 'syz.3.1130': attribute type 2 has an invalid length. [ 271.071404][ T9837] netlink: 344 bytes leftover after parsing attributes in process `syz.8.1128'. [ 271.126702][ T5830] Bluetooth: hci2: unexpected event for opcode 0x200b [ 271.256620][ T9831] netlink: 'syz.2.1127': attribute type 10 has an invalid length. [ 271.264577][ T9831] tipc: Resetting bearer [ 271.273870][ T9831] batman_adv: batadv0: Adding interface: team0 [ 271.280027][ T9831] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.305330][ T9831] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 271.319372][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 271.542713][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 271.840294][ T9841] netlink: 'syz.2.1127': attribute type 10 has an invalid length. [ 271.855657][ T9841] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1127'. [ 271.876519][ T9841] team0: entered promiscuous mode [ 271.888929][ T9841] team_slave_0: entered promiscuous mode [ 271.895219][ T9] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 271.954954][ T9841] team_slave_1: entered promiscuous mode [ 272.111878][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.223250][ T9841] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.262746][ T9841] batman_adv: batadv0: Interface activated: team0 [ 272.269257][ T9] usb 7-1: config 0 has no interface number 0 [ 272.275745][ T9841] batman_adv: batadv0: Interface deactivated: team0 [ 272.293841][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 272.309649][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.317832][ T9841] batman_adv: batadv0: Removing interface: team0 [ 272.324360][ T9] usb 7-1: Product: syz [ 272.328523][ T9] usb 7-1: Manufacturer: syz [ 272.341474][ T9] usb 7-1: SerialNumber: syz [ 272.427418][ T9] usb 7-1: config 0 descriptor?? [ 272.674524][ T9855] befs: (nullb0): No write support. Marking filesystem read-only [ 272.683152][ T9855] befs: (nullb0): invalid magic header [ 273.233984][ T9] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 273.249720][ T9] usb 7-1: No valid video chain found. [ 273.631955][ T9] usb 7-1: USB disconnect, device number 20 [ 274.042697][ T30] INFO: task syz.0.223:6642 blocked for more than 163 seconds. [ 274.050301][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 274.062662][ T5934] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 274.070522][ T5923] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 274.078430][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.135748][ T30] task:syz.0.223 state:D stack:26000 pid:6642 tgid:6640 ppid:5816 task_flags:0x400140 flags:0x00004004 [ 274.201554][ T30] Call Trace: [ 274.213379][ T30] [ 274.216795][ T30] __schedule+0xf43/0x5890 [ 274.221569][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 274.255566][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 274.288813][ T5934] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 274.298112][ T5923] usb 8-1: config 1 interface 0 has no altsetting 0 [ 274.335744][ T30] ? __pfx___schedule+0x10/0x10 [ 274.340645][ T30] ? schedule+0x298/0x350 [ 274.345521][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.350626][ T30] ? __mutex_trylock_common+0x78/0x250 [ 274.356147][ T30] ? lock_acquire+0x2f/0xb0 [ 274.358285][ T5923] usb 8-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 274.360648][ T30] ? schedule+0x1fd/0x350 [ 274.372927][ T5934] usb 9-1: config 0 has no interface number 0 [ 274.374099][ T30] schedule+0xe7/0x350 [ 274.384309][ T30] schedule_preempt_disabled+0x13/0x30 [ 274.389780][ T30] __mutex_lock+0x6bd/0xb10 [ 274.393608][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.394324][ T30] ? sync_bdevs+0xfd/0x360 [ 274.402648][ T5934] usb 9-1: config 0 interface 29 has no altsetting 0 [ 274.406990][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 274.418560][ T30] ? sync_bdevs+0xc7/0x360 [ 274.423319][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 274.424194][ T5923] usb 8-1: Product: syz [ 274.428697][ T30] ? iput+0xd3/0x890 [ 274.438570][ T30] ? sync_bdevs+0xfd/0x360 [ 274.441610][ T5923] usb 8-1: SerialNumber: syz [ 274.443158][ T30] sync_bdevs+0xfd/0x360 [ 274.448854][ T5934] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 274.462900][ T5934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.470996][ T30] ksys_sync+0xb3/0x150 [ 274.471635][ T5934] usb 9-1: Product: syz [ 274.476004][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 274.480999][ T5934] usb 9-1: Manufacturer: syz [ 274.484290][ T30] ? rcu_is_watching+0x12/0xc0 [ 274.484318][ T30] ? do_syscall_64+0x91/0x250 [ 274.495523][ T5934] usb 9-1: SerialNumber: syz [ 274.498492][ T30] __do_sys_sync+0xe/0x20 [ 274.507480][ T30] do_syscall_64+0xcd/0x250 [ 274.512182][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.512849][ T5934] usb 9-1: config 0 descriptor?? [ 274.518171][ T30] RIP: 0033:0x7f7ece78cde9 [ 274.527753][ T30] RSP: 002b:00007f7ecf624038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 274.536406][ T30] RAX: ffffffffffffffda RBX: 00007f7ece9a6080 RCX: 00007f7ece78cde9 [ 274.544615][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.553188][ T30] RBP: 00007f7ece9a6080 R08: 0000000000000000 R09: 0000000000000000 [ 274.561271][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.569893][ T30] R13: 0000000000000000 R14: 00007f7ece9a6080 R15: 00007ffcc1212da8 [ 274.578029][ T30] [ 274.581123][ T30] [ 274.581123][ T30] Showing all locks held in the system: [ 274.616517][ T30] 1 lock held by khungtaskd/30: [ 274.639859][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 274.650164][ T30] 2 locks held by getty/5580: [ 274.655043][ T30] #0: ffff8880374ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 274.665334][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 274.687946][ T30] 4 locks held by kworker/1:6/5923: [ 274.713089][ T30] #0: ffff8881416a4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 274.724369][ T30] #1: ffffc9000439fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 274.736097][ T30] #2: ffff8880297c4190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 274.736288][ T5934] peak_usb 9-1:0.29: PEAK-System PCAN-USB X6 v119 fw v210.76.51 (2 channels) [ 274.745293][ T30] #3: ffff88802b4df190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 274.745348][ T30] 7 locks held by kworker/1:7/5934: [ 274.745359][ T30] 2 locks held by kworker/1:8/5944: [ 274.745369][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 274.745420][ T30] #1: ffffc9000440fd18 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 274.745475][ T30] 1 lock held by udevd/6259: [ 274.799441][ T30] #0: ffff888025c444c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 274.803141][ T9875] tipc: Enabling of bearer rejected, failed to enable media [ 274.808919][ T30] 1 lock held by syz.0.223/6642: [ 274.822230][ T30] #0: ffff888025c444c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 274.833689][ T30] 5 locks held by kworker/u8:9/7606: [ 274.839101][ T30] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 274.849353][ T30] #1: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d6/0x5a0 [ 274.861876][ T30] #2: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0x1a2/0x2d0 [ 274.873424][ T30] #3: ffffffff9aa89968 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x149/0x4a0 [ 274.883934][ T30] #4: ffffffff9ab3c690 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x1cf/0x600 [ 274.894690][ T30] 2 locks held by syz.2.1142/9872: [ 274.899810][ T30] #0: ffffffff8e08abc8 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x3f/0xa0 [ 274.909732][ T30] #1: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 274.920302][ T30] [ 274.946732][ T5934] peak_usb 9-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 274.979325][ T5934] peak_usb 9-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 275.067264][ T30] ============================================= [ 275.067264][ T30] [ 275.173623][ T5934] peak_usb 9-1:0.29: probe with driver peak_usb failed with error -71 [ 275.174377][ T30] NMI backtrace for cpu 0 [ 275.174388][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 275.174404][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 275.174412][ T30] Call Trace: [ 275.174419][ T30] [ 275.174425][ T30] dump_stack_lvl+0x116/0x1f0 [ 275.174445][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 275.174466][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 275.174486][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 275.174508][ T30] watchdog+0xf62/0x12b0 [ 275.174532][ T30] ? __pfx_watchdog+0x10/0x10 [ 275.174551][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.174567][ T30] ? __kthread_parkme+0x148/0x220 [ 275.174581][ T30] ? __pfx_watchdog+0x10/0x10 [ 275.174601][ T30] kthread+0x3af/0x750 [ 275.174618][ T30] ? __pfx_kthread+0x10/0x10 [ 275.174637][ T30] ? __pfx_kthread+0x10/0x10 [ 275.174653][ T30] ret_from_fork+0x45/0x80 [ 275.174670][ T30] ? __pfx_kthread+0x10/0x10 [ 275.174686][ T30] ret_from_fork_asm+0x1a/0x30 [ 275.174710][ T30] [ 275.174729][ T30] Sending NMI from CPU 0 to CPUs 1: [ 275.191634][ T5934] usb 9-1: USB disconnect, device number 18 [ 275.196787][ C1] NMI backtrace for cpu 1 [ 275.196797][ C1] CPU: 1 UID: 0 PID: 5934 Comm: kworker/1:7 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 275.196813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 275.196821][ C1] Workqueue: usb_hub_wq hub_event [ 275.196839][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 275.196859][ C1] Code: 82 08 16 00 00 83 f8 02 75 20 48 8b 8a 10 16 00 00 8b 92 0c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 275.196872][ C1] RSP: 0018:ffffc9000435ee58 EFLAGS: 00000287 [ 275.196882][ C1] RAX: 0000000000033b48 RBX: ffffc9000435f267 RCX: ffffc9001aa98000 [ 275.196894][ C1] RDX: 0000000000100000 RSI: ffffffff8b5373c8 RDI: 0000000000000005 [ 275.196902][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 275.196909][ C1] R10: 0000000000000003 R11: 00000000000281a0 R12: ffffc9000435f269 [ 275.196917][ C1] R13: ffffc9000435eef3 R14: ffffc9008435f25f R15: 0000000000000005 [ 275.196925][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 275.196939][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.196947][ C1] CR2: 0000400000028000 CR3: 000000006c3d4000 CR4: 00000000003526f0 [ 275.196955][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.196962][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.196970][ C1] Call Trace: [ 275.196975][ C1] [ 275.196980][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 275.197000][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 275.197017][ C1] ? nmi_handle+0x1ac/0x5d0 [ 275.197034][ C1] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 275.197052][ C1] ? default_do_nmi+0x6a/0x160 [ 275.197069][ C1] ? exc_nmi+0x170/0x1e0 [ 275.197085][ C1] ? end_repeat_nmi+0xf/0x53 [ 275.197104][ C1] ? number+0x878/0xc50 [ 275.197119][ C1] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 275.197136][ C1] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 275.197154][ C1] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 275.197184][ C1] [ 275.197188][ C1] [ 275.197191][ C1] number+0x878/0xc50 [ 275.197208][ C1] ? hlock_class+0x4e/0x130 [ 275.197221][ C1] ? __pfx_number+0x10/0x10 [ 275.197236][ C1] ? format_decode+0x1ae/0xd40 [ 275.197255][ C1] ? __pfx_mark_lock+0x10/0x10 [ 275.197273][ C1] vsnprintf+0x5f6/0x1180 [ 275.197287][ C1] ? __pfx_vsnprintf+0x10/0x10 [ 275.197300][ C1] ? __asan_memcpy+0x3c/0x60 [ 275.197319][ C1] sprintf+0xcd/0x110 [ 275.197331][ C1] ? __pfx_sprintf+0x10/0x10 [ 275.197344][ C1] ? get_data+0x39b/0x550 [ 275.197363][ C1] info_print_prefix+0x25c/0x350 [ 275.197381][ C1] ? __pfx_info_print_prefix+0x10/0x10 [ 275.197397][ C1] ? __asan_memcpy+0x3c/0x60 [ 275.197414][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 275.197436][ C1] record_print_text+0x141/0x400 [ 275.197455][ C1] ? __pfx_record_print_text+0x10/0x10 [ 275.197473][ C1] ? __pfx_prb_read_valid+0x10/0x10 [ 275.197492][ C1] printk_get_next_message+0x2be/0x690 [ 275.197506][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 275.197524][ C1] ? rcu_is_watching+0x12/0xc0 [ 275.197537][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 275.197551][ C1] ? hlock_class+0x4e/0x130 [ 275.197562][ C1] ? console_flush_all+0x159/0xc60 [ 275.197577][ C1] console_flush_all+0x6ec/0xc60 [ 275.197591][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 275.197608][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 275.197619][ C1] ? __pfx_mark_lock+0x10/0x10 [ 275.197638][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 275.197653][ C1] console_unlock+0xd9/0x210 [ 275.197665][ C1] ? __pfx_console_unlock+0x10/0x10 [ 275.197679][ C1] ? lock_acquire+0x2f/0xb0 [ 275.197694][ C1] ? vprintk_emit+0x638/0x6f0 [ 275.197707][ C1] vprintk_emit+0x424/0x6f0 [ 275.197720][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 275.197732][ C1] ? __pfx_lock_release+0x10/0x10 [ 275.197751][ C1] dev_printk_emit+0xfb/0x140 [ 275.197769][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 275.197789][ C1] ? __pfx_mark_lock+0x10/0x10 [ 275.197803][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 275.197818][ C1] ? hlock_class+0x4e/0x130 [ 275.197830][ C1] ? mark_lock+0xb5/0xc60 [ 275.197845][ C1] ? __queue_work+0x431/0x1080 [ 275.197864][ C1] __dev_printk+0xf5/0x270 [ 275.197876][ C1] _dev_info+0xe5/0x120 [ 275.197888][ C1] ? __pfx__dev_info+0x10/0x10 [ 275.197906][ C1] usb_disconnect+0xec/0x920 [ 275.197921][ C1] hub_event+0x1da5/0x4e10 [ 275.197941][ C1] ? lock_acquire+0x2f/0xb0 [ 275.197955][ C1] ? debug_object_deactivate+0x13b/0x370 [ 275.197972][ C1] ? __pfx_hub_event+0x10/0x10 [ 275.197985][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 275.198002][ C1] ? rcu_is_watching+0x12/0xc0 [ 275.198015][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 275.198028][ C1] ? process_one_work+0x921/0x1ba0 [ 275.198044][ C1] ? lock_acquire+0x2f/0xb0 [ 275.198059][ C1] ? process_one_work+0x921/0x1ba0 [ 275.198076][ C1] process_one_work+0x9c5/0x1ba0 [ 275.198095][ C1] ? __pfx_hub_event+0x10/0x10 [ 275.198107][ C1] ? __pfx_process_one_work+0x10/0x10 [ 275.198126][ C1] ? assign_work+0x1a0/0x250 [ 275.198141][ C1] worker_thread+0x6c8/0xf00 [ 275.198160][ C1] ? __kthread_parkme+0x148/0x220 [ 275.198173][ C1] ? __pfx_worker_thread+0x10/0x10 [ 275.198188][ C1] kthread+0x3af/0x750 [ 275.198202][ C1] ? __pfx_kthread+0x10/0x10 [ 275.198216][ C1] ? lock_acquire+0x2f/0xb0 [ 275.198233][ C1] ? __pfx_kthread+0x10/0x10 [ 275.198248][ C1] ret_from_fork+0x45/0x80 [ 275.198263][ C1] ? __pfx_kthread+0x10/0x10 [ 275.198277][ C1] ret_from_fork_asm+0x1a/0x30 [ 275.198297][ C1] [ 276.044157][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 276.051038][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 276.061526][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 276.071561][ T30] Call Trace: [ 276.074825][ T30] [ 276.077743][ T30] dump_stack_lvl+0x3d/0x1f0 [ 276.082321][ T30] panic+0x71d/0x800 [ 276.086206][ T30] ? __pfx_panic+0x10/0x10 [ 276.090598][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 276.095957][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 276.101937][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 276.107300][ T30] ? watchdog+0xdcc/0x12b0 [ 276.111694][ T30] ? watchdog+0xdbf/0x12b0 [ 276.116098][ T30] watchdog+0xddd/0x12b0 [ 276.120338][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.124992][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.130165][ T30] ? __kthread_parkme+0x148/0x220 [ 276.135183][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.139855][ T30] kthread+0x3af/0x750 [ 276.143900][ T30] ? __pfx_kthread+0x10/0x10 [ 276.148468][ T30] ? __pfx_kthread+0x10/0x10 [ 276.153042][ T30] ret_from_fork+0x45/0x80 [ 276.157454][ T30] ? __pfx_kthread+0x10/0x10 [ 276.162026][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.166796][ T30] [ 276.169989][ T30] Kernel Offset: disabled [ 276.174290][ T30] Rebooting in 86400 seconds..