last executing test programs: 7m45.051542658s ago: executing program 1 (id=157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000002000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c000000090002"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 7m43.652081731s ago: executing program 1 (id=164): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="aa1e216699066bda24668c703b141b5716e494772557fd2e57d5351d0ffb5b842539672118449cd5dec59f1b97d6f17cd96b62bae4a953e7e924533252813b211e67cad83cb149c234d9fbec631edac2f4462fe939964f265b6bafcca51ec91f63c7c1519ef115660eb46f1a110ee079a3922e09cb2bde0c35fe40b39b0a43cdb7864b8cb08097ff2b43029f9764452d3f3e4f2b73826d92ef4f0dcedd348d42", 0xa0}], 0x1}, 0x4000) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x0, 0x16, 0x0, 0xe54}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) 7m41.898708623s ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 7m41.660783953s ago: executing program 1 (id=170): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7m40.814735341s ago: executing program 1 (id=175): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0xfff2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x18c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xb, 0xbfdf, 0x7cff23ad, 0x0, 0xfffffff7, 0x2, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0x3, 0xa77, 0x4, 0xfff, 0x1000]}}, {{0x1c, 0x1, {0xc9, 0x6, 0xfffd, 0x0, 0x2, 0xfffffffa, 0x8, 0x5}}, {0xe, 0x2, [0xfe01, 0x4, 0x9, 0x1, 0x1000]}}, {{0x1c, 0x1, {0x9, 0x61, 0xffff, 0x2, 0x1, 0x100, 0x4, 0x2}}, {0x8, 0x2, [0x828, 0x4]}}, {{0x1c, 0x1, {0x10, 0x3, 0x1e, 0x963d, 0x1, 0x0, 0x6, 0x1}}, {0x6, 0x2, [0x7f]}}, {{0x1c, 0x1, {0x2, 0x6, 0xb, 0xe7, 0x2, 0x263, 0x3902, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x0, 0x7, 0x9, 0xc3a3]}}, {{0x1c, 0x1, {0xa5, 0x0, 0x2, 0x0, 0x0, 0x9, 0xc5eb, 0x6}}, {0x10, 0x2, [0x5, 0x7, 0x0, 0x2, 0x2, 0xf]}}, {{0x1c, 0x1, {0x6, 0x16, 0x9, 0x6, 0x0, 0x2, 0xca4, 0x6}}, {0x10, 0x2, [0x8000, 0x91a, 0x2, 0x581, 0x1, 0x4c4]}}, {{0x1c, 0x1, {0x0, 0x6, 0xffff, 0x7, 0x1, 0x7ff, 0x1}}, {0x4}}]}]}, 0x18c}}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000008c0)={0x14, 0x0, &(0x7f0000000840)=[@increfs_done={0x40106308, 0x2, 0x1000000}], 0x0, 0x0, 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {0x0}], 0x2}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 7m39.689568585s ago: executing program 1 (id=178): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = add_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000011c0)="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", 0xe6c, 0xfffffffffffffff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', ':%'}, 0x1a, r2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x540f, 0x1000000000000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x281000, &(0x7f0000000040)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x9, 0x8}) syz_io_uring_setup(0x49a, 0x0, &(0x7f00000010c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200), 0xa022, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000001140)={{0x6, @rose, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x1000}) 7m24.386119401s ago: executing program 32 (id=178): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = add_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000011c0)="8bbc12dc8ef4a6ed6be3b97b24da819b0f6d3f7375c87ea05e6d8240ef35e4837f33483cc592da3788e1d07be654416ca651609925b80ca0bc4c205cdd7d8a4a0f0c2cc0a5cfdad29e54b53100d09d762df3a352ba7964e58294981654ef1490111d4a8828676107b371e97e9a4d0907aa1c02b9dc727f4c898426d041a5e78007f2fcf747424dbb6ccdeac55af272466cd8c50f1f2ca86d7393d22c8e177f797ea817f47f54c69b2ab43dd234e3021469b837782de1d262eac90d4a2c06bbf2c9eda12b1bca2d62a131b2e8c4bbeda8cdbf6d6a478fdd40ded6820d84203e8934b126094a60752433ffb1e0ad0dc0b90b74b0af32f14af1bd9da5d7c9f6902d31421f426f608a0f95613f8399f55e9c3a7bf74895ab8ae73f8a75c1face51c7549038d3cccc78eef4179e93be7b0ef8629da3d434b72eb5f377ac059a1403c700415833bfbb6045f1b37d4f6f8742358b0986f9ffed5e4e1e8dab8070c6a9878ed50afc7ceed05378ac9dce5ad10cb008b98113319af4b2202bdaae6d811f51f38a99ca6a3c721df4fa2f68950d5c13c59aa03bcbbf717534fc3578d6ecebb9bcff4ad4099537bbf8cfce29057620ec846272a48b750f6130027d275f92285d9d8a5dfadbf0338b8528aae391184697b12f0e3f88929cde0536a96756f1d7964c0c7b09f1a7b0ca9e239fadad8acfc137d8e6b52b60d6e0e0c485020388aacfef08dd035e9871dbf1a96a45f7d9711dd013f9a06fa7e7a8deafdf98fec99906cd9a4d41df03b1a1138a5907fd69d1f4f04f99a3e01b4d41e4be9ecd29682a9f3d92909718df0652f2728073a484d115a77c69fe19fbccfafc8a2ed33a0db5cdf29ee515eea5daca31d809d05af262b8f5ce4980c5fb8e2ec0faed8c043f548be451f646a50cd27d93f1a7c003afedc5a25324be8276dc2e6914560de520576c1ff15a460ba5910fc9e92d3548736218ac6052044d6e7bb95090e622181907320aceeb9b0ced7cc2d3198117746899d279a0433a6d5a3cbc10abf8ec8878984d89ad265682d64e08aceffc045ac938446e121c9a369915235e704f2dc42d044d6a4ecd6609f1fb01941e96bae6069c148827810ae430fa5ca4fef3974cb3cb3a0a713f146a9c0a88da9097a354eb7167c63a0494d1bc4390779598dd283bf306a51759e40456408141969e4cdbea223613ed41c38962d0c3f097494a6a34b20258c6bfd85ea40a625b3b0dc7c998a9f048e9e67ac0798c1955a79a039eacb9b6482ea1154c3de983455f8dac071337b72987252afed3c1c6f440f642d50676ee07fb87e37ae2bccee2e664c6942856e275a6eb5a336af3b09d756a9efcf1fbf1edb75ccef21dc1f366ed5f40f425ca0fec8be11d36009f9ceeadc8ee9894ba8d5d136aae76df7831b73f148ef9e58c5de82ae8f115f34b8305e167d2f04582f443b9e7262f6d550df22c9a55a4e51988b0ddf359db19532c031145f64c0e643a9ee6225dfa18bc80844fe185af934a7c6919b1c8a7067b0fbf83f8ee952b81be744144f63c8187e2b317424567f7fd2ade8ccc8444db362046c699a2d486ba123ff1f19f5bfa3dc16c5bdd4123db51831652662f80464ce9113ad40b90639e778a952bc57d711aa0a4aeae976c70a0a905e2d182309a7fce41e42db71532b2754ab91f3d0a0426b33875b39ac6a61c1e6b70f9a1df46ddb85810ba9ed44af548805bbbdaff0e342588a645c5915eaaf1c0363722ca814c82ee547a638049b0ae60e2d28729097e338e966ecc9e86595de081d2ed25530de2460e4dfaae5152ac4f4371f496a703156d3317b046535e2f5595be3494ab26a59ed84fb36fab1724579b79ff4657db26458429ba5fe6e0dedae1208fb837d5cc2c7c3c6afd48e1d32a8f6f349ef50f27febc8753b7cd6ff0d190db7a8f51a4e553024507726b446779acf2d67540dccb3edd817fa9709a4239c0fbd6d05556e2c060f22af4ee155cf55667d1cb8ace267aa8de28f602ca65b28f2afc82c10191363d8bd6d3607646c05fc7d6d8701cc164e03109a13768c6638b7da89fdac8174b82bf1ecf78a974e42a495845eaa938f466d784377e3a3e3266d57b538c2889cc22a9e4714a15f31f624c845fb40492e27b008276b700d935860dd05bebcf727385d844d21574605867654cd0e121f0c9aad4e1220433c7523b9da55e8a57a08ad7d113a241454ce6b164b152569f8d93fd1943d839bb03b039b8af00e6f4cad40e73c24e19733ef1448f976f30688c0c400a36508aa6c9fe12818527ea791509668f78993ac2b2aab8b60be7e55f9612ee58e9ec8cf4f4456c05cdefc96ce0dd83d3cd8d0dab39295b1ef6ee8dd6db32a2e5a2bd3e6b7e76a71e0ed747998eaa7397745478c13fa6f685667d09a3b5a97883f3ced08a54d28de30cb20e916288fe82058f5b49a7b7542bd8a2dd9c357329c3e3f921fcc0c74a59ca9e92d3ba73c87168e7d5f5c5d45d2b53ed6e2dcd387bba165412f41bd6f1e47c1fdf824577103315b4282d4a9355c417d5829e08e727209febee33dfd151084493ad997a008348a92b174db3220e159db393b0e046d09c63714d3205821ed32e329fd88de10e60998c89e81ce682c0e2b97e19826042da1149a87653bfc332b5ea7d12af9a593ab987a236f60c6f07182c2bffe6482016d5cbf769174868ed4bb60e8afd6f62a1c79504b14b90be6c4b25caefb265073e32b46eeb851b49ebd62dc35902586e0ce3eb9e12950ee6dbbd04e76e984a31c64f41c36993cf817015b821eff6b8ee80f65f12380300c563594c8edacf3f097d2c762a9e8368b32afc2ef9bf5c956653b7d20e7df1172e1c25546db84e6352f1686bb23aa754fe5aae15ef00630ac3528d76ca58b57a9dc7bced3ba0e725a819d44c1cee90d611fd64f29e9aea8aa746ef189563170a1baa4d2f3ce68de0d807802766567f1af8896929dc1d7d02f0b40ead86415167cfa233e33631bb09e190d6518d631ea2f3531ccd89f18d083987ad26bd09cebb241002960c6ddb596f3b5cbeba6a8932a91466a384cb8abd1a33b916114350c9ac193fa1569b1efa88a57a0150086184486d6d321995c3c0d8c98c4c27acddcaabe05a069550664263a55d6d926810a8906b02a77efc77fed9aa5f890376144b868d58fa17b802e410d76d8253077d7005925222b96fb85312d70b392163c7df86a9188904d4f1fe7b0911f63d8df398353df46ceefb63c1fac645e12df1e19ed965d7b8b8a4a9dc8db7205d011f2b435da979ca7e9d28e6a8ada83096c4a6e402e9a0418ed30d134d8a3f1014552a6263e548df03f65a565240ef561c2b2add464c77d757a955f8bd060920a2a117424b4cc112667ca8cb3cf744ff7ed8f773670b299f6c91d9b528d8729c599ddb20c469a3af2f876d5fa21866740b6e8c974847c8f95364125b5a7da5064916c66e9ddb4bde7ae37d2c5b223204ea6ceee4452b27ec4c9cf6069bea1234c27b6ba1fc60cbd81945ebbf7c1c2c00a4897480afa8982ea764459815ae7657f31bbe7c38d144678514286486d86d71349f973bdd51b81d116cd4bf92458b7a25a77f11ca5cd6dce2062d600b5ef5b008d39cd973f342dbdb864595874907094bc0c1630fef1ef9a8af5c975c841632950420f0a6b7f608a54edd3163d424d3cf1a2c590ffe189900eb697467055c4d8e056d597e893ab5985159ac48baaca191c47f2837f46166d8bab4194a4a7dd479581cb50a0739fdb34ea251e4114461ee0faf0870cbfdc739561b80fb18f008ff71a8f6ca1298df96bd674567223fccca8b898521b170a417d067030f682b2c489b7e9511d1be821035ec5fbd3273bf67080fe23762f8b0ded9a52f8d4811d03e913790b1fff6d845f59e5afad9dae76a2dbb1e94164b1cfa31225fcbcec5879a44e46b9678739a03a30fb10901dabd799524e0a94b83d1b2d52dad891e91b32603712af225636c2d4949900669cb8718187c2c45769bc0d852841f3fe7d30b805f0b48f067e935b2aa936d6fc9076a3a12752683f9d9b0775da2ef086f0e453797f9b20228881d6ef2e9e47d78fb9adb829da39672f528b1fb1254738e9cd9937262598e0fac190a819642d06aa77ef3a59b7a5e84d2b89bdb344bff8d42da2694f4b1f2100c8c9b476a690a3b29045e2ad30cdc13f29cd6f014ba8656785cf8f468cfd19889c84d6dc8250a1989cdce5fddc9e1d3e324ffb90029560131f2975e7c76ee60016441b78fce0700e46a6e19b1fbf955af265fb3544073614ee656f7c503655c109e810c8d7cdc71d50e9e61b28246e257ed7d80d06ad33b05c42a68796a0bd037cf6ea9dbc8979c53542f92a46e8abdfd7db11808c6ac33696f108d982cd4dda442241deb99ceb53ec6273edc441934cf6e4ada0e1a45dc3b3b0ad14e53773c16eb1c4b1d343594e934ecb6a8c30fd9056b249b53f5427228046d775b1196d94ed0aff7919a9d7b97e79954d57148ac0854c86719f3c6e79d3d8313964231558c7806780d9820236012f452ed03b00aaa0d7704bbd26f6788b809cb84519516c98bed309c5c7532f70920771d9fc432fe61820186136f87ed0226ea14e8d11bd09772a20ae53b9a631f024667ec41eb283bbb5d378be6f709e4dc160f7c0d923545e3c7f9bb63b32e1871df7ce6b5d601276fe90f9de5079d1daa1cf7c453046467226adf8d9c47fb6dcc394ab1cc048015a913d86911a86d91e56623566e809643724f7303a0871ad39dccab2d421ffa9e74467cb768933dd80b0ca972bd8ccfd2125a8c181b1f9ab4d12eb2f79efb0dc9c049f8a652c64710375ee09ae8724532b46d2c595e0dfa401de9a3a187319926233416d08171861747a49dc5d931e2bbff5cd489bccd52d750f939193b0b0503d5a86815072f6897a9ed05f02b382819ff61e8394a6b01643aa76e1bc48a3f7a8700840fea110b8b7c82d1abae714c08e31844577d1706e0a7c164736ca4d36b72a6ed09727d7589b4f6f859fd4d78c38225c742c610fc670faf22ec8f002e0b35f8818012dc0f260dd9af4e7e3e9e4e94380e19b66ed56b7d88e6d997372964212294368fce3a92cc49b03812ce68c2cd39e1e06af613dbaa97621dab1da7f5f7c790e764ee6d71ca62cf118a52be7cab01c358283da2db3abd8ef05414794d53e2c55f5421e4c41c4a99bec8d6cb7c729c129042a61b", 0xe6c, 0xfffffffffffffff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', ':%'}, 0x1a, r2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x540f, 0x1000000000000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x281000, &(0x7f0000000040)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x9, 0x8}) syz_io_uring_setup(0x49a, 0x0, &(0x7f00000010c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200), 0xa022, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000001140)={{0x6, @rose, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x1000}) 6m21.255167773s ago: executing program 4 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(r6, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) 6m20.074494409s ago: executing program 4 (id=365): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00"], 0x528}}, 0xc000) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/55}, 0x20) openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6m17.366802755s ago: executing program 4 (id=374): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2a400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001f00), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000002240)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$fuseblk(0x0, &(0x7f0000004240)='./file0\x00', 0x0, 0x8104a9, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, &(0x7f00000002c0)='no,e\x00') 6m16.411710531s ago: executing program 4 (id=376): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000f703000000040000000300000000000000", @ANYRES32, @ANYBLOB="00000000000049c6fc000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000074c00000000040000000000200000ffffffef0000"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000100000050000000000", @ANYRES32=r2, @ANYRES32=r3], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) open$dir(0x0, 0x101081, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r10, &(0x7f0000000540)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 6m14.862772747s ago: executing program 4 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="64796e98a39b1190794faf2c00"]) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m14.558471697s ago: executing program 4 (id=381): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5m59.210674434s ago: executing program 33 (id=381): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m22.861514312s ago: executing program 3 (id=927): getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000280)=""/19, 0x13}], 0x2}, 0x0) 2m20.025379346s ago: executing program 3 (id=931): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffdffff, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x7, 0x4}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$userio(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r8, 0xf542}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 2m18.564368424s ago: executing program 3 (id=935): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r6 = dup(r4) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) connect$unix(r6, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x200000d0) 2m17.307959183s ago: executing program 3 (id=939): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c0110655000000000001090224000100986598d80400000103000000092100000001220500090581030000060000"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x80000000000005, &(0x7f0000000600)="01", 0x1) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_io_uring_setup(0x5d61, &(0x7f0000000140)={0x0, 0xab3b, 0x20000, 0xe, 0x5}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3518, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(r2, &(0x7f0000002040)='./file0\x00', 0x2929448b81eb7f26) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000024400)=""/102375, 0x18fe7) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x64, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0xa0200, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 2m14.550792514s ago: executing program 3 (id=947): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa"], 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) 2m13.282471737s ago: executing program 3 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x38}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r0], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, 0x0, 0x4880) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4043804}, 0x40) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r13}, 0x10) (async) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="343f80000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e000004000280"], 0x34}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r15 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0xe0}}, 0x810) (async) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000340)=""/175, 0xaf}], 0x2}, 0x12001) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r16, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m12.575261555s ago: executing program 34 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x38}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r0], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, 0x0, 0x4880) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4043804}, 0x40) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r13}, 0x10) (async) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="343f80000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e000004000280"], 0x34}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r15 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0xe0}}, 0x810) (async) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000340)=""/175, 0xaf}], 0x2}, 0x12001) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r16, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m54.484357356s ago: executing program 0 (id=204): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040), 0x4000) fremovexattr(r2, &(0x7f0000000280)=@known='user.syz\x00') 1m39.509725398s ago: executing program 0 (id=204): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040), 0x4000) fremovexattr(r2, &(0x7f0000000280)=@known='user.syz\x00') 1m17.904604794s ago: executing program 0 (id=204): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040), 0x4000) fremovexattr(r2, &(0x7f0000000280)=@known='user.syz\x00') 56.695750313s ago: executing program 0 (id=204): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040), 0x4000) fremovexattr(r2, &(0x7f0000000280)=@known='user.syz\x00') 27.452218619s ago: executing program 0 (id=204): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040), 0x4000) fremovexattr(r2, &(0x7f0000000280)=@known='user.syz\x00') 12.746653443s ago: executing program 6 (id=1254): recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x2f, 0x0, 0x403ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x82000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000001740)=""/138) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x180, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 11.982600536s ago: executing program 7 (id=1258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast1, 0xb}, 0x1c) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/28, 0xffd2) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x00\"\x8a~\x7f\x851w\x17V', &(0x7f00000001c0)='\x00\x00\x00\x04', 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000240)=0xffe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 11.45352331s ago: executing program 6 (id=1259): r0 = syz_socket_connect_nvme_tcp() r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0xb, 0x7ffd, 0x0, {}, [{0x4}]}, 0x18}}, 0x4010000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000200)=ANY=[@ANYBLOB="88", @ANYRESHEX=r0, @ANYRESHEX=0x0], 0x2, 0x2) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x121200) connect$rose(r3, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="249b6d1781f3982666c8aa83bf000000002900e3ff31004000fe800000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008aec1, &(0x7f0000000000)=""/65) getpid() ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000002c0)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) mq_notify(r4, 0x0) r8 = memfd_secret(0x0) fremovexattr(r8, &(0x7f0000000280)=@known='trusted.overlay.upper\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) r9 = openat$cgroup_pressure(r4, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) write$cgroup_pressure(r9, &(0x7f0000000340)={'some', 0x20, 0x1, 0x20, 0xffff9}, 0x2f) close(r1) 11.306052485s ago: executing program 6 (id=1260): r0 = syz_open_dev$video4linux(&(0x7f0000003ac0), 0x7ff, 0x40100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlockall(0x4) sysfs$2(0x2, 0x2000419, 0x0) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000380)=0x3) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @tick=0x80000, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0xfb, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000080)=[0x2, 0x7]) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 11.067168626s ago: executing program 7 (id=1262): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500a51cec5e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5384b9927ce1a186, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x89205480, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff07, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.31073192s ago: executing program 7 (id=1263): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f001, 0x6}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd80e, 0x10000, 0x0, 0x383}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 9.682370416s ago: executing program 5 (id=1266): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = syz_io_uring_setup(0x4a41, &(0x7f0000000140)={0x0, 0x34d, 0x8, 0xffffffff, 0xffdffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x2, 0x0, 0x1, {0x0, r3, r0}}) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) 8.374929095s ago: executing program 2 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000240)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg(r1, &(0x7f0000008440)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x4}) 8.138783764s ago: executing program 0 (id=204): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040), 0x4000) fremovexattr(r2, &(0x7f0000000280)=@known='user.syz\x00') 5.999267947s ago: executing program 5 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast1, 0xb}, 0x1c) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/28, 0xffd2) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x00\"\x8a~\x7f\x851w\x17V', &(0x7f00000001c0)='\x00\x00\x00\x04', 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000240)=0xffe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 5.987964144s ago: executing program 2 (id=1271): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004050) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_setup(0x4, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) 5.987571655s ago: executing program 7 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast1, 0xb}, 0x1c) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/28, 0xffd2) ioctl$UI_DEV_CREATE(r3, 0x5501) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x00\"\x8a~\x7f\x851w\x17V', &(0x7f00000001c0)='\x00\x00\x00\x04', 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 5.986637676s ago: executing program 6 (id=1273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9ed49cc5b96b67cb61d6602e20", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="080026006c09000008009f00050000000800a10000f8ffff"], 0x34}}, 0x40) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x400, 0x0) readv(r5, &(0x7f0000002400)=[{&(0x7f00000020c0)=""/101, 0x65}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000003780)=ANY=[@ANYBLOB="c035b0216f34111ce8ba514ce8c986eb00cd42653469fd6026bd1cccc19c12426872bca5b230e3155ed4b2c9d64f9ba71c78f82f18e2758a92136026d4e5d9b2c25daac5c8ebcee10495a3968883ed", @ANYRES16=0x0, @ANYBLOB="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"], 0x1334}, 0x1, 0x0, 0x0, 0x4}, 0xd0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 4.287883676s ago: executing program 7 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0x81204101, &(0x7f0000000440)) 4.192067657s ago: executing program 5 (id=1275): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) fremovexattr(r2, &(0x7f0000000280)=@known='user.syz\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001080)) io_uring_enter(r3, 0x5b81, 0x838a, 0x9, &(0x7f00000000c0)={[0x64]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@call={0x85, 0x0, 0x0, 0x8f}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) 4.188701159s ago: executing program 2 (id=1276): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e24, 0x5, @loopback, 0x6}], 0x38) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x3, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001814010000000100ffdbdf0508000100010000000901120002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2.55405345s ago: executing program 7 (id=1277): socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) 2.509136879s ago: executing program 5 (id=1278): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x80000000, 0x8, 0x10000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x5, &(0x7f0000000180)) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) fremovexattr(r2, &(0x7f0000000280)=@known='user.syz\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001080)) io_uring_enter(r3, 0x5b81, 0x838a, 0x9, &(0x7f00000000c0)={[0x64]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@call={0x85, 0x0, 0x0, 0x8f}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) 2.426556384s ago: executing program 2 (id=1279): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x46, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x4e4, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[], 0x0) 2.301647424s ago: executing program 2 (id=1280): r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1a, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1002000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=xen,uname=,cache=fscache,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c004fbf6f162e1e1f09c4b2c20f251e4d11c03dd6969fa0ddaafe9739810603fac5097fe0d1e4b0a316fd3b72e8c8e022ac5a1dae7d797640867c6109206ec82b82afc1627544f4fdb1c02d0f233b856a19791cfb092c9341fd8be3d26947d41d296e084196bf1d9d7d536820014148a5863a976412a64e4bac38f62dc5b282ee75795ac0bcfc2f83dd3cdb1ef7ae8c5f4db5874e2c6feed69e72fcc015dbc9db4a9e1443242fc293441eb605a8c2eaef4657b0b290e3f74e9593763dcb06bca9"]) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x67) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x149302) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000500)={0x0, 0xbab8, 0x8, 0x4, 0x28f}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r7, &(0x7f0000000000)=0xfe8e, 0x12) accept4$rose(r1, &(0x7f0000000000)=@short={0xb, @dev, @netrom, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80800) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x100}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x202000b}, 0x10) 1.044427743s ago: executing program 6 (id=1281): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004050) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_setup(0x4, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRESDEC=r3, @ANYBLOB="a297c326d0b69a316e17e75e64fc04b7e8a4b060365d4a1413d78ff35bdb89d530ac05d0ebef331a64e85c7a17e8770f1de3dce2e1fa746727e403605fe7d004c3dd320655baaa53c226214844db0042f86bace0c292545eb83bdff36854a674a376ad4d8172bf0aaf8bd06561c038c5bc5f3838ef5a34c3ce172b967a62618664d912d9270bae87574f8dfb53576be07ded6cdadefdb3352804de2ae5ac5d6c90de24b469c0a579c2fd1f7d8de23ee9f61b6d0ec0758fbd70a1951d393b3a2d1d59b3ff017af753dc3a86147429c896dc7b2a3c0fd01ea27a51586cbb0035d5e8b66643a99e", @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071110400000000008510000002000000850000007600000095000000000000009500a505000000009a6b4a3f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000000500)=ANY=[@ANYBLOB="6f2256ae0db857666679415a92e4c9343abce774c14cdf6ce7ad148051da98e4a4c384d0dc895985deb4bd4c43d541c83a5ea8419ee70178295c30b7f102aeec8f2b21bf597137c3971733a7a76d5d9bdeb58dffae7702f7ddb9b6b4ff2e01fca76b0a80fb44559b63f1a7bb12cfb9431d45b683a8462fc631106119ba5862b6adf3ffa2e00cbcbece2028a4bf54439b6745be88bf83fd6a39b66351"]) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) 855.447342ms ago: executing program 2 (id=1282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = creat(0x0, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x8000000000000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0xfffffea9) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000300)=0xd0) r5 = semget$private(0x0, 0x207, 0x53) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000040)=""/119) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r8, &(0x7f0000000300), 0x6) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000100), &(0x7f0000000340)=r7}, 0x20) 854.633127ms ago: executing program 5 (id=1283): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee000000000000) 462.674483ms ago: executing program 5 (id=1284): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000008c0), 0x0, 0x101, &(0x7f0000000940)={0x0, 0x3938700}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x2db6c923494b82cb, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x5, 0x5, 0xa, 0x2}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000340)={r9, 0x80000001, 0x9, 0x0, 0x1, [], [0x0, 0xfffffffb], [0x0, 0x80000002, 0x2], [0x8, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000380)={r5, r6, r9, 0x0, 0x0, 0x0, &(0x7f0000000340)}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, &(0x7f00000002c0)) listen(r10, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r12, &(0x7f0000000000)='./mnt\x00', r12, &(0x7f0000000100)='./mnt\x00', 0x33) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 0s ago: executing program 6 (id=1285): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r0 = getpid() setpriority(0x0, r0, 0x6) sched_setscheduler(r0, 0x3, &(0x7f0000000080)=0x40) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000005f40)=[{{&(0x7f0000004ac0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000004b40)=""/210, 0xd2}, {&(0x7f0000005fc0)=""/4101, 0x1005}], 0x2}, 0x6}, {{&(0x7f0000005c80)=@isdn, 0x80, &(0x7f0000005e00), 0x0, &(0x7f0000005d00)=""/205, 0xcd}, 0x1}], 0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='devlink_health_reporter_state_update\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x0, 0x0, 0x3a5, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r7, &(0x7f0000004940)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f00000007c0)=""/148, 0x94}], 0x6}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/198, 0xc6}, {&(0x7f0000001bc0)=""/195, 0xc3}, {&(0x7f0000001cc0)=""/147, 0x93}, {&(0x7f0000001d80)=""/79, 0x4f}], 0x8}, 0xd}, {{&(0x7f0000001e80)=@caif=@rfm, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/31, 0x1f}], 0x2, &(0x7f0000002f40)=""/251, 0xfb}, 0x7}, {{&(0x7f0000003040)=@l2, 0x80, &(0x7f00000032c0)=[{&(0x7f00000030c0)=""/144, 0x90}, {&(0x7f0000003180)=""/191, 0xbf}, {&(0x7f0000003240)=""/117, 0x75}], 0x3, &(0x7f0000003300)=""/154, 0x9a}, 0x3}, {{&(0x7f00000033c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/98, 0x62}, {&(0x7f00000044c0)=""/23, 0x17}, {&(0x7f0000004500)=""/184, 0xb8}], 0x4}}, {{&(0x7f0000004600)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004680)=""/234, 0xea}, {&(0x7f0000004780)=""/192, 0xc0}], 0x2, &(0x7f0000004880)=""/156, 0x9c}, 0xb0}], 0x6, 0x2102, 0x0) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) dup(0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x0 [ 424.188366][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.197120][ T975] elo 0003:04E7:0030.0009: unknown main item tag 0x0 [ 424.223632][ T975] elo 0003:04E7:0030.0009: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.6-1/input0 [ 424.411873][ T975] usb 7-1: USB disconnect, device number 13 [ 424.486485][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.496485][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.506256][ T12] bond0 (unregistering): Released all slaves [ 424.717115][T10881] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 424.762079][T10881] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 424.797562][T10883] 9pnet_fd: Insufficient options for proto=fd [ 425.401696][ T12] hsr_slave_0: left promiscuous mode [ 425.549943][ T12] hsr_slave_1: left promiscuous mode [ 425.628934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.675921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.789527][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.830006][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.047344][T10895] ceph: No mds server is up or the cluster is laggy [ 426.055112][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 426.149934][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 426.254668][ T12] veth1_macvtap: left promiscuous mode [ 426.273123][ T12] veth0_macvtap: left promiscuous mode [ 426.283747][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.293867][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.307878][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.322046][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.336848][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.344265][ T12] veth1_vlan: left promiscuous mode [ 426.354115][ T12] veth0_vlan: left promiscuous mode [ 426.378899][ T5898] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 426.539831][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 426.561108][ T5898] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 426.578419][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.586571][T10895] 9pnet: Could not find request transport:  [ 426.724981][ T5898] usb 3-1: Product: syz [ 426.733124][ T30] audit: type=1400 audit(1749447597.517:537): avc: denied { connect } for pid=10915 comm="syz.6.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 426.738050][ T5898] usb 3-1: Manufacturer: syz [ 426.810895][ T30] audit: type=1400 audit(1749447597.517:538): avc: denied { read } for pid=10915 comm="syz.6.885" path="socket:[33661]" dev="sockfs" ino=33661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 426.850777][ T5898] usb 3-1: SerialNumber: syz [ 426.886450][ T30] audit: type=1400 audit(1749447597.627:539): avc: denied { map } for pid=10915 comm="syz.6.885" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.920398][ T5898] r8152-cfgselector 3-1: Unknown version 0x0000 [ 426.946076][ T5898] r8152-cfgselector 3-1: config 0 descriptor?? [ 426.994196][ T30] audit: type=1400 audit(1749447597.627:540): avc: denied { execute } for pid=10915 comm="syz.6.885" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.979648][ T12] team0 (unregistering): Port device team_slave_1 removed [ 428.024209][ T12] team0 (unregistering): Port device team_slave_0 removed [ 428.355973][T10934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.890'. [ 428.377586][ T30] audit: type=1400 audit(1749447599.157:541): avc: denied { mount } for pid=10933 comm="syz.3.890" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 428.381867][T10934] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 428.451236][ T5827] Bluetooth: hci0: command tx timeout [ 428.461386][T10934] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 428.468039][T10934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 428.487670][T10934] vhci_hcd vhci_hcd.0: Device attached [ 428.500285][T10934] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 428.506891][T10934] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.515334][T10934] vhci_hcd vhci_hcd.0: Device attached [ 428.525419][T10934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.543796][T10934] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 428.550400][T10934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 428.563587][T10934] vhci_hcd vhci_hcd.0: Device attached [ 428.580273][T10934] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 428.586879][T10934] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 428.600988][T10934] vhci_hcd vhci_hcd.0: Device attached [ 428.640668][T10934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.654220][T10934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.665231][ T5898] r8152-cfgselector 3-1: Unknown version 0x0000 [ 428.669885][ T30] audit: type=1400 audit(1749447599.447:542): avc: denied { setopt } for pid=10933 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.671938][ T9] vhci_hcd: vhci_device speed not set [ 428.691891][T10934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.711227][ T5898] r8152-cfgselector 3-1: bad CDC descriptors [ 428.770149][ T5898] r8152-cfgselector 3-1: USB disconnect, device number 34 [ 428.817188][T10906] lo speed is unknown, defaulting to 1000 [ 428.864754][T10937] vhci_hcd: connection closed [ 428.866601][T10935] vhci_hcd: connection closed [ 428.868735][T10941] vhci_hcd: connection closed [ 428.872356][ T6441] vhci_hcd: stop threads [ 428.885602][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 428.894596][T10939] vhci_hcd: connection closed [ 428.910969][ T6441] vhci_hcd: release socket [ 428.930277][T10936] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 428.946100][ T6441] vhci_hcd: disconnect device [ 428.952019][ T6441] vhci_hcd: stop threads [ 428.957417][ T6441] vhci_hcd: release socket [ 428.972636][ T6441] vhci_hcd: disconnect device [ 428.978357][T10950] fuse: Bad value for 'fd' [ 428.985981][ T6441] vhci_hcd: stop threads [ 428.993860][ T6441] vhci_hcd: release socket [ 428.998423][ T6441] vhci_hcd: disconnect device [ 429.004980][ T6441] vhci_hcd: stop threads [ 429.010246][ T6441] vhci_hcd: release socket [ 429.014801][ T6441] vhci_hcd: disconnect device [ 429.109377][ T30] audit: type=1400 audit(1749447599.777:543): avc: denied { execmem } for pid=10946 comm="syz.6.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 429.857759][ T30] audit: type=1400 audit(1749447600.587:544): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 430.117850][T10906] chnl_net:caif_netlink_parms(): no params data found [ 430.518823][ T5827] Bluetooth: hci0: command tx timeout [ 432.066984][T10906] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.083123][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.117203][T10906] bridge_slave_0: entered allmulticast mode [ 432.151516][T10906] bridge_slave_0: entered promiscuous mode [ 432.264245][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.272049][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.299112][T10906] bridge_slave_1: entered allmulticast mode [ 432.343342][T10906] bridge_slave_1: entered promiscuous mode [ 432.574911][T10906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.599746][ T5827] Bluetooth: hci0: command tx timeout [ 432.623030][T10906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.811076][T10906] team0: Port device team_slave_0 added [ 432.892004][T10906] team0: Port device team_slave_1 added [ 433.000124][T10906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.007291][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.035927][T10906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.050703][T10906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.058049][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.311921][T10906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.777552][ T30] audit: type=1400 audit(1749447604.487:545): avc: denied { write } for pid=11023 comm="syz.2.904" path="socket:[33973]" dev="sockfs" ino=33973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 434.033576][ T9] vhci_hcd: vhci_device speed not set [ 434.151507][T10906] hsr_slave_0: entered promiscuous mode [ 434.231798][T10906] hsr_slave_1: entered promiscuous mode [ 434.268934][ T975] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 434.451938][ T975] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 434.679073][ T5827] Bluetooth: hci0: command tx timeout [ 434.743376][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.773469][ T975] usb 3-1: config 0 descriptor?? [ 434.791851][ T975] pwc: Samsung MPC-C10 USB webcam detected. [ 435.002871][ T975] pwc: send_video_command error -71 [ 435.008127][ T975] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 435.018817][ T48] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 435.030474][ T975] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 435.097216][ T975] usb 3-1: USB disconnect, device number 35 [ 435.548841][ T5898] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 435.708804][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 435.742437][ T5898] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 435.753293][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.768202][ T48] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 435.778394][ T5898] usb 7-1: Product: syz [ 435.782775][ T5898] usb 7-1: Manufacturer: syz [ 435.787788][ T5898] usb 7-1: SerialNumber: syz [ 435.799283][ T5898] r8152-cfgselector 7-1: Unknown version 0x0000 [ 435.806115][ T5898] r8152-cfgselector 7-1: config 0 descriptor?? [ 435.814834][ T48] usb 6-1: config 0 has no interface number 0 [ 435.865413][ T48] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 435.865580][ T975] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 435.878994][ T48] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 435.933821][ T48] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 436.216507][ T48] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 436.249526][ T48] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 436.258597][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.271274][ T48] usb 6-1: Product: syz [ 436.284197][ T48] usb 6-1: Manufacturer: syz [ 436.290027][ T48] usb 6-1: SerialNumber: syz [ 436.303625][ T48] usb 6-1: config 0 descriptor?? [ 436.340378][ T975] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 436.350731][ T48] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 436.354782][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.388692][ T975] usb 3-1: config 0 descriptor?? [ 436.400860][ T975] pwc: Samsung MPC-C10 USB webcam detected. [ 436.451501][ T48] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.237/input/input21 [ 436.479918][ T975] pwc: send_video_command error -71 [ 436.522741][ T975] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 436.543699][ T975] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 436.863447][ T30] audit: type=1400 audit(1749447607.557:546): avc: denied { create } for pid=11044 comm="syz.5.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.897918][ T975] usb 3-1: USB disconnect, device number 36 [ 436.944413][ T48] usb 6-1: USB disconnect, device number 22 [ 436.979932][ T48] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 437.534290][T10906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.601527][T10906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 437.633329][T10906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 437.664613][T10906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.450489][ T5898] r8152-cfgselector 7-1: Unknown version 0x0000 [ 438.476851][ T5898] r8152-cfgselector 7-1: bad CDC descriptors [ 438.517531][ T5898] r8152-cfgselector 7-1: USB disconnect, device number 14 [ 439.042068][T10906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.108536][T10906] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.185266][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.192376][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.327662][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.334771][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.474786][ T30] audit: type=1400 audit(1749447610.257:547): avc: denied { unmount } for pid=8143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 439.567778][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.578967][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.269131][T10906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.436273][T10906] veth0_vlan: entered promiscuous mode [ 440.470373][T10906] veth1_vlan: entered promiscuous mode [ 440.605056][T10906] veth0_macvtap: entered promiscuous mode [ 440.628837][ T5898] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 440.642118][T10906] veth1_macvtap: entered promiscuous mode [ 440.721802][T10906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.742184][T10906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.762564][T10906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.788963][T10906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.809023][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 440.818580][T10906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.840231][T10906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.849556][ T5898] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 440.860688][ T5898] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 440.885229][ T5898] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 440.934810][T11145] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 440.937607][ T5898] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 440.979499][ T5941] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 441.026797][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.046142][ T5898] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 441.055684][ T5898] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 441.080071][ T6447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.087892][ T6447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.097342][ T5898] usb 7-1: Product: syz [ 441.103556][ T5898] usb 7-1: Manufacturer: syz [ 441.119182][ T5898] usb 7-1: SerialNumber: syz [ 441.145596][ T5898] usb 7-1: config 0 descriptor?? [ 441.159875][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 441.161892][ T5898] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 441.194293][ T5941] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 441.199709][ T5898] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 441.203535][ T944] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 441.226927][ T6447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.258199][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.267831][ T6447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.276890][ T5941] usb 6-1: Product: syz [ 441.281358][ T5941] usb 6-1: Manufacturer: syz [ 441.286354][ T5941] usb 6-1: SerialNumber: syz [ 441.337687][ T30] audit: type=1400 audit(1749447612.117:548): avc: denied { mounton } for pid=10906 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 441.396654][ T5941] usb 6-1: config 0 descriptor?? [ 441.412441][ T5941] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 441.500541][ T5898] usb 7-1: USB disconnect, device number 15 [ 441.546776][ T5898] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 441.634113][ T944] usb 3-1: Using ep0 maxpacket: 32 [ 441.641009][ T944] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 441.649545][ T944] usb 3-1: config 0 has no interface number 0 [ 441.658484][ T944] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=af.00 [ 441.667638][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.675818][ T944] usb 3-1: Product: syz [ 441.680028][ T944] usb 3-1: Manufacturer: syz [ 441.684642][ T944] usb 3-1: SerialNumber: syz [ 441.692305][ T944] usb 3-1: config 0 descriptor?? [ 441.792478][T11161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11161 comm=syz.3.923 [ 441.825301][ T30] audit: type=1107 audit(1749447612.607:549): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 441.871643][ T5941] gspca_sonixj: reg_r err -71 [ 441.876474][ T5941] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 441.931049][ T5941] usb 6-1: USB disconnect, device number 23 [ 442.047675][ T6441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.254749][ T6441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.495346][ T6441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.728501][ T6441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.936951][ T6441] bridge_slave_1: left allmulticast mode [ 442.943348][ T6441] bridge_slave_1: left promiscuous mode [ 442.949318][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.965416][ T6441] bridge_slave_0: left allmulticast mode [ 442.972468][ T6441] bridge_slave_0: left promiscuous mode [ 442.978236][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.312525][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.323962][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.334193][ T6441] bond0 (unregistering): Released all slaves [ 443.620879][ T6441] hsr_slave_0: left promiscuous mode [ 443.631282][ T6441] hsr_slave_1: left promiscuous mode [ 443.637033][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.647504][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.658652][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.666336][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.748085][ T944] sierra 3-1:0.143: Sierra USB modem converter detected [ 443.772743][ T944] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 443.783852][ T6441] veth1_macvtap: left promiscuous mode [ 443.796255][ T944] usb 3-1: USB disconnect, device number 37 [ 443.805009][ T6441] veth0_macvtap: left promiscuous mode [ 443.819404][ T6441] veth1_vlan: left promiscuous mode [ 443.826394][ T6441] veth0_vlan: left promiscuous mode [ 443.833018][ T944] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 443.842815][ T944] sierra 3-1:0.143: device disconnected [ 444.892997][ T30] audit: type=1400 audit(1749447615.677:550): avc: denied { write } for pid=11221 comm="syz.2.926" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 444.959982][ T30] audit: type=1400 audit(1749447615.677:551): avc: denied { open } for pid=11221 comm="syz.2.926" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 444.989158][ T5898] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 445.046672][ T30] audit: type=1400 audit(1749447615.787:552): avc: denied { read } for pid=11221 comm="syz.2.926" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 445.168779][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 445.189361][ T5898] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 445.228756][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.249329][ T5898] usb 6-1: Product: syz [ 445.304379][ T5898] usb 6-1: Manufacturer: syz [ 445.309840][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 445.325624][ T5898] usb 6-1: SerialNumber: syz [ 445.331135][ T30] audit: type=1800 audit(1749447616.117:553): pid=11222 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.926" name="/" dev="9p" ino=2 res=0 errno=0 [ 445.358479][ T5898] r8152-cfgselector 6-1: Unknown version 0x0000 [ 445.838397][ T5898] r8152-cfgselector 6-1: config 0 descriptor?? [ 445.909352][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 445.929380][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 445.938486][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 445.950167][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 445.963503][ T9] usb 3-1: SerialNumber: syz [ 445.979115][ T9] usb 3-1: config 0 descriptor?? [ 446.014891][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.024182][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.036965][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.730290][ T9] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 446.746822][ T9] hackrf 3-1:0.0: Could not detect board [ 446.766247][ T9] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 446.793295][ T9] usb 3-1: USB disconnect, device number 38 [ 446.865834][T11251] FAULT_INJECTION: forcing a failure. [ 446.865834][T11251] name failslab, interval 1, probability 0, space 0, times 0 [ 446.878634][T11251] CPU: 0 UID: 0 PID: 11251 Comm: syz.6.932 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 446.878656][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.878665][T11251] Call Trace: [ 446.878671][T11251] [ 446.878677][T11251] dump_stack_lvl+0x16c/0x1f0 [ 446.878707][T11251] should_fail_ex+0x512/0x640 [ 446.878730][T11251] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 446.878752][T11251] should_failslab+0xc2/0x120 [ 446.878776][T11251] __kmalloc_cache_noprof+0x6a/0x3e0 [ 446.878795][T11251] ? rtnl_newlink+0x11b/0x2000 [ 446.878823][T11251] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.878846][T11251] rtnl_newlink+0x11b/0x2000 [ 446.878870][T11251] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.878886][T11251] ? find_held_lock+0x2b/0x80 [ 446.878900][T11251] ? avc_has_perm_noaudit+0x117/0x3b0 [ 446.878914][T11251] ? avc_has_perm_noaudit+0x149/0x3b0 [ 446.878926][T11251] ? cred_has_capability.isra.0+0x193/0x2f0 [ 446.878943][T11251] ? __lock_acquire+0x622/0x1c90 [ 446.878967][T11251] ? find_held_lock+0x2b/0x80 [ 446.878979][T11251] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.878995][T11251] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.879011][T11251] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 446.879028][T11251] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.879046][T11251] rtnetlink_rcv_msg+0x95b/0xe90 [ 446.879064][T11251] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.879081][T11251] ? __lock_acquire+0xb8a/0x1c90 [ 446.879103][T11251] netlink_rcv_skb+0x155/0x420 [ 446.879116][T11251] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.879134][T11251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.879145][T11251] ? rcu_is_watching+0x12/0xc0 [ 446.879165][T11251] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.879184][T11251] netlink_unicast+0x53d/0x7f0 [ 446.879197][T11251] ? __pfx_netlink_unicast+0x10/0x10 [ 446.879213][T11251] netlink_sendmsg+0x8d1/0xdd0 [ 446.879227][T11251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.879244][T11251] ____sys_sendmsg+0xa98/0xc70 [ 446.879257][T11251] ? copy_msghdr_from_user+0x10a/0x160 [ 446.879273][T11251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.879292][T11251] ___sys_sendmsg+0x134/0x1d0 [ 446.879309][T11251] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.879323][T11251] ? __lock_acquire+0x622/0x1c90 [ 446.879358][T11251] __sys_sendmsg+0x16d/0x220 [ 446.879374][T11251] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.879400][T11251] do_syscall_64+0xcd/0x4c0 [ 446.879418][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.879429][T11251] RIP: 0033:0x7f363058e929 [ 446.879438][T11251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.879449][T11251] RSP: 002b:00007f36313c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.879460][T11251] RAX: ffffffffffffffda RBX: 00007f36307b6080 RCX: 00007f363058e929 [ 446.879467][T11251] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 446.879473][T11251] RBP: 00007f36313c8090 R08: 0000000000000000 R09: 0000000000000000 [ 446.879479][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.879485][T11251] R13: 0000000000000000 R14: 00007f36307b6080 R15: 00007fff6376f2d8 [ 446.879499][T11251] [ 447.471855][ T5898] r8152-cfgselector 6-1: Unknown version 0x0000 [ 447.478320][ T5898] r8152-cfgselector 6-1: bad CDC descriptors [ 447.486753][ T5898] r8152-cfgselector 6-1: USB disconnect, device number 24 [ 448.121627][ T5827] Bluetooth: hci0: command tx timeout [ 448.207275][ T30] audit: type=1400 audit(1749447618.987:554): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 448.436356][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 448.511641][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 448.824394][T11290] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11290 comm=syz.2.938 [ 448.863868][ T30] audit: type=1107 audit(1749447619.647:555): pid=11283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 449.095857][T11255] batman_adv: batadv0: Interface deactivated: dummy0 [ 449.185148][T11255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.202528][T11255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.296308][T11255] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.308019][T11255] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.319522][T11255] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.328392][T11255] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.447824][T11235] lo speed is unknown, defaulting to 1000 [ 449.758789][ T5941] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 449.935604][ T5941] usb 4-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 450.029620][ T5941] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 450.152562][ T5941] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 450.218444][ T5827] Bluetooth: hci0: command tx timeout [ 450.241380][T11235] chnl_net:caif_netlink_parms(): no params data found [ 450.277004][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.340359][ T5941] usb 4-1: config 0 descriptor?? [ 451.055461][T11235] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.075290][ T5901] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 451.082362][T11235] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.239015][ T5885] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 451.403405][T11235] bridge_slave_0: entered allmulticast mode [ 451.420517][T11235] bridge_slave_0: entered promiscuous mode [ 451.430593][T11235] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.456376][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.476523][T11235] bridge_slave_1: entered allmulticast mode [ 451.495089][T11235] bridge_slave_1: entered promiscuous mode [ 451.548827][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 451.552134][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 451.575229][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 451.602590][ T5901] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 451.610209][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 451.614488][T11235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.644531][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.666663][ T5885] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 451.686014][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.699232][ T5901] usb 3-1: Product: syz [ 451.703459][ T5901] usb 3-1: Manufacturer: syz [ 451.708081][ T5901] usb 3-1: SerialNumber: syz [ 451.709334][ T5885] usb 6-1: Product: syz [ 451.715406][T11235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.729939][ T5901] r8152-cfgselector 3-1: Unknown version 0x0000 [ 451.739936][ T5901] r8152-cfgselector 3-1: config 0 descriptor?? [ 451.754478][ T5885] usb 6-1: Manufacturer: syz [ 451.775499][ T5885] usb 6-1: SerialNumber: syz [ 451.813022][ T5885] usb 6-1: config 0 descriptor?? [ 451.818492][T11330] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 451.865639][T11330] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 451.964734][ T5885] usb 6-1: ucan: probing device on interface #0 [ 452.099699][T11235] team0: Port device team_slave_0 added [ 452.132927][T11235] team0: Port device team_slave_1 added [ 452.291408][ T5827] Bluetooth: hci0: command tx timeout [ 452.597104][T11235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.624280][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.679767][T11235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.714551][ T5885] ucan 6-1:0.0 can0: registered device [ 452.737457][T11235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.745551][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.772184][T11235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.800815][ T5885] ucan 6-1:0.0 can0: firmware string: unknown [ 452.840509][ T5885] usb 6-1: USB disconnect, device number 25 [ 452.886490][ T5941] usb 4-1: string descriptor 0 read error: -71 [ 452.938590][ T5941] usb 4-1: USB disconnect, device number 25 [ 453.016174][T11235] hsr_slave_0: entered promiscuous mode [ 453.034472][T11235] hsr_slave_1: entered promiscuous mode [ 453.116321][ T6441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.153147][ T6441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.256317][ T6441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.295200][ T6441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.363795][ T5901] r8152-cfgselector 3-1: Unknown version 0x0000 [ 453.457147][ T5901] r8152-cfgselector 3-1: bad CDC descriptors [ 453.508877][ T5901] r8152-cfgselector 3-1: USB disconnect, device number 39 [ 453.788284][ T6441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.830455][ T6441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.150818][ T6441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.165057][ T6441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.365438][ T5827] Bluetooth: hci0: command tx timeout [ 454.552174][ T30] audit: type=1400 audit(1749447625.317:556): avc: denied { create } for pid=11373 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 454.853771][T11379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.633036][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.642369][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.652880][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.669436][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.677273][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.895428][ T48] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 457.965012][ T30] audit: type=1400 audit(1749447628.747:557): avc: denied { connect } for pid=11409 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 457.975426][T11395] lo speed is unknown, defaulting to 1000 [ 457.993426][ T6441] bridge_slave_1: left allmulticast mode [ 458.000626][ T6441] bridge_slave_1: left promiscuous mode [ 458.007637][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.036989][ T6441] bridge_slave_0: left allmulticast mode [ 458.055474][ T30] audit: type=1400 audit(1749447628.837:558): avc: denied { read } for pid=11409 comm="syz.2.960" dev="sockfs" ino=36333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 458.056633][ T6441] bridge_slave_0: left promiscuous mode [ 458.083818][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.099042][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 458.111599][ T48] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 458.136794][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.158213][ T48] usb 6-1: Product: syz [ 458.178251][ T48] usb 6-1: Manufacturer: syz [ 458.195895][ T48] usb 6-1: SerialNumber: syz [ 458.220821][ T48] r8152-cfgselector 6-1: Unknown version 0x0000 [ 458.240319][ T48] r8152-cfgselector 6-1: config 0 descriptor?? [ 458.761282][ T5822] Bluetooth: hci3: command tx timeout [ 458.910943][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.931562][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.950972][ T6441] bond0 (unregistering): Released all slaves [ 459.083068][ T6441] tipc: Disabling bearer [ 459.107270][ T6441] tipc: Left network mode [ 459.148844][ T5898] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 459.167691][T11412] lo speed is unknown, defaulting to 1000 [ 459.296245][T11235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.303567][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 459.310380][ T5898] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 459.320868][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.332579][T11235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 459.342467][ T5898] usb 7-1: config 0 descriptor?? [ 459.417198][T11235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.472761][T11235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.563327][ T5898] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 459.591211][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.607504][ T6441] hsr_slave_0: left promiscuous mode [ 459.613805][ T6441] hsr_slave_1: left promiscuous mode [ 459.614276][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 459.641022][ T6441] veth1_macvtap: left promiscuous mode [ 459.642967][ T5898] usb 7-1: media controller created [ 459.647452][ T6441] veth0_macvtap: left promiscuous mode [ 459.657611][ T6441] veth1_vlan: left promiscuous mode [ 459.663075][ T6441] veth0_vlan: left promiscuous mode [ 459.672077][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.746628][ T48] r8152-cfgselector 6-1: Unknown version 0x0000 [ 459.764234][ T48] r8152-cfgselector 6-1: bad CDC descriptors [ 459.787107][ T48] r8152-cfgselector 6-1: USB disconnect, device number 26 [ 459.811452][ T5898] az6027: usb out operation failed. (-71) [ 459.820743][ T5898] az6027: usb out operation failed. (-71) [ 459.826492][ T5898] stb0899_attach: Driver disabled by Kconfig [ 459.832679][ T5898] az6027: no front-end attached [ 459.832679][ T5898] [ 459.862699][ T5898] az6027: usb out operation failed. (-71) [ 459.868456][ T5898] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 459.878270][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 459.892196][ T5898] dvb-usb: schedule remote query interval to 400 msecs. [ 459.913693][ T5898] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 459.942921][ T5898] usb 7-1: USB disconnect, device number 16 [ 460.010459][ T5898] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 460.793883][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.967'. [ 460.838866][ T5822] Bluetooth: hci3: command tx timeout [ 461.082103][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 461.165460][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 461.989131][T11395] chnl_net:caif_netlink_parms(): no params data found [ 462.949422][ T5822] Bluetooth: hci3: command tx timeout [ 462.973905][ T30] audit: type=1400 audit(1749447633.747:559): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 463.128967][T11395] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.142916][T11395] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.158110][T11395] bridge_slave_0: entered allmulticast mode [ 463.193021][T11395] bridge_slave_0: entered promiscuous mode [ 463.225090][T11395] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.266480][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.285645][T11395] bridge_slave_1: entered allmulticast mode [ 463.463840][T11395] bridge_slave_1: entered promiscuous mode [ 463.739817][ T944] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 464.040487][ T944] usb 7-1: Using ep0 maxpacket: 32 [ 464.071370][ T944] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 464.101485][T11395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.130340][ T944] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 464.182170][ T6441] IPVS: stop unused estimator thread 0... [ 464.189112][ T944] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 464.224182][ T944] usb 7-1: Product: syz [ 464.232873][T11395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.247855][ T944] usb 7-1: Manufacturer: syz [ 464.268583][ T944] usb 7-1: SerialNumber: syz [ 464.329108][ T944] usb 7-1: config 0 descriptor?? [ 464.369664][T11471] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 464.381618][ T944] hub 7-1:0.0: bad descriptor, ignoring hub [ 464.387547][ T944] hub 7-1:0.0: probe with driver hub failed with error -5 [ 464.445344][T11235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.466915][T11395] team0: Port device team_slave_0 added [ 464.493096][T11395] team0: Port device team_slave_1 added [ 464.550472][T11235] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.698192][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.705402][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.956702][T11395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.005102][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.012105][ T5822] Bluetooth: hci3: command tx timeout [ 465.034805][T11395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.104275][T11395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.111449][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.137514][T11395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.153803][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.160898][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.535844][T11485] macsec1: entered promiscuous mode [ 465.545804][T11485] macsec1: entered allmulticast mode [ 465.714439][T11395] hsr_slave_0: entered promiscuous mode [ 465.731036][T11395] hsr_slave_1: entered promiscuous mode [ 465.744587][T11395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.771565][T11395] Cannot create hsr debugfs directory [ 466.045422][T11506] loop0: Can't mount, would change RO state [ 466.749201][ T944] usb 7-1: USB disconnect, device number 17 [ 467.109383][T11395] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 467.133398][T11235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.156034][T11395] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.221882][T11525] overlayfs: missing 'lowerdir' [ 467.378578][T11395] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.404248][T11395] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.777857][T11235] veth0_vlan: entered promiscuous mode [ 467.874667][T11235] veth1_vlan: entered promiscuous mode [ 467.987954][T11235] veth0_macvtap: entered promiscuous mode [ 468.016971][T11235] veth1_macvtap: entered promiscuous mode [ 468.024017][T11548] netlink: 'syz.5.980': attribute type 2 has an invalid length. [ 468.032105][T11548] netlink: 88 bytes leftover after parsing attributes in process `syz.5.980'. [ 468.143779][T11548] xt_connbytes: Forcing CT accounting to be enabled [ 468.144626][T11395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.153549][T11548] set match dimension is over the limit! [ 468.160002][T11235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.201620][T11235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.223025][T11235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.242168][T11235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.337918][T11557] autofs: Unknown parameter 'autofs' [ 468.364469][T11235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.460368][T11235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.628354][T11395] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.791020][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.798180][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.933980][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.941169][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.268633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.313820][T11395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.342359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.499453][ T6441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.547838][ T6441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.236248][T11395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.291550][ T5885] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 472.300109][ T30] audit: type=1400 audit(1749447643.067:560): avc: denied { read write } for pid=11600 comm="syz.5.991" name="uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 472.323469][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.364447][ T5885] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 472.408349][ T30] audit: type=1400 audit(1749447643.067:561): avc: denied { open } for pid=11600 comm="syz.5.991" path="/dev/uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 472.543724][T11607] fido_id[11607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 472.646400][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.781434][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.903444][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.018260][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.054723][T11395] veth0_vlan: entered promiscuous mode [ 473.086444][T11395] veth1_vlan: entered promiscuous mode [ 473.194151][T11395] veth0_macvtap: entered promiscuous mode [ 473.203452][ T69] bridge_slave_1: left allmulticast mode [ 473.210899][ T69] bridge_slave_1: left promiscuous mode [ 473.216642][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.232251][ T69] bridge_slave_0: left allmulticast mode [ 473.237879][ T69] bridge_slave_0: left promiscuous mode [ 473.244030][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.519009][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.529106][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.538558][ T69] bond0 (unregistering): Released all slaves [ 473.568453][T11395] veth1_macvtap: entered promiscuous mode [ 473.604980][T11395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.640359][T11395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.653163][T11395] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.662959][T11395] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.672679][T11395] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.688915][T11395] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.827320][ T69] hsr_slave_0: left promiscuous mode [ 473.835298][ T69] hsr_slave_1: left promiscuous mode [ 473.842673][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.853800][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.866372][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.873974][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.897383][ T69] veth1_macvtap: left promiscuous mode [ 473.904109][ T69] veth0_macvtap: left promiscuous mode [ 473.911639][ T69] veth1_vlan: left promiscuous mode [ 473.916938][ T69] veth0_vlan: left promiscuous mode [ 474.412725][T11653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.138821][ T48] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 475.255493][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.265184][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.273468][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.283148][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.291097][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.322535][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 475.329437][ T48] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 475.337983][ T48] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 475.350223][ T48] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 475.361783][ T48] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 475.375215][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 475.384048][ T48] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 475.393735][ T48] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 475.406451][ T48] usb 3-1: Product: syz [ 475.410883][ T48] usb 3-1: Manufacturer: syz [ 475.416860][ T48] usb 3-1: SerialNumber: syz [ 475.426528][ T48] usb 3-1: config 0 descriptor?? [ 475.438597][ T48] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 475.453295][ T48] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 475.661454][ T48] usb 3-1: USB disconnect, device number 40 [ 475.689668][ T48] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 475.797333][ T69] team0 (unregistering): Port device team_slave_1 removed [ 475.864299][ T69] team0 (unregistering): Port device team_slave_0 removed [ 476.642291][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.678753][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.729019][T11666] lo speed is unknown, defaulting to 1000 [ 476.746956][T11659] lo speed is unknown, defaulting to 1000 [ 476.846083][ T6449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.221823][ T6449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.340010][ T5827] Bluetooth: hci0: command tx timeout [ 477.409593][ T5885] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 477.524190][ T30] audit: type=1400 audit(1749447648.307:562): avc: denied { kexec_image_load } for pid=11678 comm="syz.7.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 477.568962][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 477.585293][ T5885] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 477.599084][ T5885] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 477.610483][ T5885] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 477.621852][ T5885] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 477.635259][ T5885] usb 7-1: config 0 interface 0 has no altsetting 0 [ 477.665308][ T5885] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 477.691038][ T5885] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 477.724747][ T5885] usb 7-1: Product: syz [ 477.746051][ T5885] usb 7-1: Manufacturer: syz [ 477.751177][ T30] audit: type=1400 audit(1749447648.527:563): avc: denied { ioctl } for pid=11681 comm="syz.2.1000" path="socket:[37416]" dev="sockfs" ino=37416 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 477.797403][ T5885] usb 7-1: SerialNumber: syz [ 477.812450][ T5885] usb 7-1: config 0 descriptor?? [ 477.825239][ T5885] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 477.857772][ T5885] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 477.974925][T11659] chnl_net:caif_netlink_parms(): no params data found [ 478.076021][ T9] usb 7-1: USB disconnect, device number 18 [ 478.100189][ T9] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 478.161267][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.168437][T11659] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.199801][T11659] bridge_slave_0: entered allmulticast mode [ 478.211809][T11659] bridge_slave_0: entered promiscuous mode [ 478.238606][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.247269][T11659] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.257174][T11659] bridge_slave_1: entered allmulticast mode [ 478.266727][T11659] bridge_slave_1: entered promiscuous mode [ 478.333134][T11659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.350803][T11659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.513999][T11659] team0: Port device team_slave_0 added [ 478.556552][T11659] team0: Port device team_slave_1 added [ 478.609920][T11659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.618723][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.665303][T11659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.702924][T11659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.720355][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.778190][T11659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.978546][T11659] hsr_slave_0: entered promiscuous mode [ 478.995299][T11659] hsr_slave_1: entered promiscuous mode [ 479.178854][ T944] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 479.539310][T11712] lo speed is unknown, defaulting to 1000 [ 480.088798][ T5827] Bluetooth: hci0: command tx timeout [ 480.168268][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.188751][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.198640][ T944] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 480.216043][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.443217][ T944] usb 3-1: config 0 descriptor?? [ 481.022186][ T944] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 481.198346][ T944] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 481.287878][ T944] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 481.836778][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.190127][ T5827] Bluetooth: hci0: command tx timeout [ 482.234932][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.412377][T11738] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1005'. [ 482.812313][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.870669][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.894925][ T944] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 482.929825][ T944] usb 3-1: USB disconnect, device number 41 [ 484.003059][T11659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 484.032910][T11659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 484.051279][T11659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 484.073753][T11659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.199437][ T5827] Bluetooth: hci0: command tx timeout [ 484.243131][T11659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.250152][ T944] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 484.270919][T11659] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.281856][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.288979][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.458894][ T944] usb 6-1: Using ep0 maxpacket: 32 [ 484.467167][ T944] usb 6-1: too many configurations: 39, using maximum allowed: 8 [ 484.477806][T11659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.504027][ T944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 484.521957][T11659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.533751][ T944] usb 6-1: can't read configurations, error -61 [ 484.556276][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.563436][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.679121][ T944] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 484.849146][ T944] usb 6-1: Using ep0 maxpacket: 32 [ 484.856155][ T944] usb 6-1: too many configurations: 39, using maximum allowed: 8 [ 484.876748][ T944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 484.897709][ T944] usb 6-1: can't read configurations, error -61 [ 484.906517][ T944] usb usb6-port1: attempt power cycle [ 484.964325][T11659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.074675][T11659] veth0_vlan: entered promiscuous mode [ 485.104962][T11659] veth1_vlan: entered promiscuous mode [ 485.167182][T11659] veth0_macvtap: entered promiscuous mode [ 485.173410][ T5959] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 485.193389][T11659] veth1_macvtap: entered promiscuous mode [ 485.236372][T11659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.252455][ T944] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 485.264284][T11659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.278192][T11659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.279873][ T944] usb 6-1: Using ep0 maxpacket: 32 [ 485.287289][T11659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.294367][ T944] usb 6-1: too many configurations: 39, using maximum allowed: 8 [ 485.302482][T11659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.323689][T11659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.324352][ T944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 485.342625][ T944] usb 6-1: can't read configurations, error -61 [ 485.362551][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.376734][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.399109][ T5941] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 485.408338][ T5959] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 485.432977][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.441752][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.446923][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.462277][ T5959] usb 3-1: config 0 descriptor?? [ 485.479036][ T944] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 485.495162][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.508187][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.509752][ T944] usb 6-1: Using ep0 maxpacket: 32 [ 485.533505][ T944] usb 6-1: too many configurations: 39, using maximum allowed: 8 [ 485.544887][ T944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 485.554329][ T944] usb 6-1: can't read configurations, error -61 [ 485.563522][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.585378][ T944] usb usb6-port1: unable to enumerate USB device [ 485.592246][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.604188][ T5941] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 485.613940][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.634869][ T5941] usb 7-1: config 0 descriptor?? [ 485.896441][ T5959] elo 0003:04E7:0030.000C: unknown main item tag 0x1 [ 485.916728][ T5959] elo 0003:04E7:0030.000C: item fetching failed at offset 3/7 [ 485.926091][ T5959] elo 0003:04E7:0030.000C: parse failed [ 485.931796][ T5959] elo 0003:04E7:0030.000C: probe with driver elo failed with error -22 [ 486.067036][ T5941] elo 0003:04E7:0030.000D: item fetching failed at offset 3/7 [ 486.076016][ T5941] elo 0003:04E7:0030.000D: parse failed [ 486.083157][ T5941] elo 0003:04E7:0030.000D: probe with driver elo failed with error -22 [ 486.111604][ T944] usb 3-1: USB disconnect, device number 42 [ 486.351321][ T5941] usb 7-1: USB disconnect, device number 19 [ 486.475752][T11827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.173162][T11838] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1021'. [ 487.189205][T11836] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3509855539 (224630754496 ns) > initial count (49405610240 ns). Using initial count to start timer. [ 487.623674][ T6457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.922380][T11845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.345130][ T6457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.420386][ T6457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.503563][ T6457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.634118][ T6457] bridge_slave_1: left allmulticast mode [ 489.642188][ T6457] bridge_slave_1: left promiscuous mode [ 489.653903][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.664560][ T6457] bridge_slave_0: left allmulticast mode [ 489.670920][ T6457] bridge_slave_0: left promiscuous mode [ 489.676633][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.406293][T11889] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11889 comm=syz.2.1024 [ 490.538090][ T30] audit: type=1107 audit(1749447661.257:564): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 490.778766][ T5885] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 490.806848][ T6457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.850448][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.864708][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.882171][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.890095][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.890451][ T6457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.897561][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.938759][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 490.951699][ T5885] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 490.961591][ T6457] bond0 (unregistering): Released all slaves [ 490.968842][ T5885] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 490.977950][T11899] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 490.981519][ T5885] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 491.006315][ T5885] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 491.019676][ T5885] usb 7-1: config 0 interface 0 has no altsetting 0 [ 491.027697][T11899] audit: out of memory in audit_log_start [ 491.044299][ T5885] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 491.083664][ T5885] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 491.135683][ T5885] usb 7-1: Product: syz [ 491.169186][ T5885] usb 7-1: Manufacturer: syz [ 491.173816][ T5885] usb 7-1: SerialNumber: syz [ 491.185364][ T5885] usb 7-1: config 0 descriptor?? [ 491.220457][ T5885] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 491.262608][ T5885] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 491.267500][T11896] lo speed is unknown, defaulting to 1000 [ 491.418995][ T944] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 491.644807][ T9] usb 7-1: USB disconnect, device number 20 [ 491.654076][ T9] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 491.678781][ T944] usb 6-1: Using ep0 maxpacket: 16 [ 491.690083][ T944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 491.706039][ T944] usb 6-1: can't read configurations, error -61 [ 491.859965][ T6457] hsr_slave_0: left promiscuous mode [ 491.871078][ T944] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 491.897920][ T6457] hsr_slave_1: left promiscuous mode [ 491.915871][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.945054][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.973036][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.990965][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.029892][ T944] usb 6-1: Using ep0 maxpacket: 16 [ 492.032753][ T6457] veth1_macvtap: left promiscuous mode [ 492.042927][ T944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 492.050842][ T6457] veth0_macvtap: left promiscuous mode [ 492.056446][ T6457] veth1_vlan: left promiscuous mode [ 492.060903][ T944] usb 6-1: can't read configurations, error -61 [ 492.071300][ T944] usb usb6-port1: attempt power cycle [ 492.083420][ T6457] veth0_vlan: left promiscuous mode [ 492.436398][ T944] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 492.491826][ T944] usb 6-1: Using ep0 maxpacket: 16 [ 492.508663][ T944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 492.516796][ T944] usb 6-1: can't read configurations, error -61 [ 492.669215][ T944] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 492.710410][ T944] usb 6-1: Using ep0 maxpacket: 16 [ 492.735695][ T944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 492.751373][ T944] usb 6-1: can't read configurations, error -61 [ 492.768267][ T944] usb usb6-port1: unable to enumerate USB device [ 492.999816][ T5901] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 493.001988][ T5822] Bluetooth: hci0: command tx timeout [ 493.278255][T11944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.671474][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 493.680466][ T5901] usb 3-1: not running at top speed; connect to a high speed hub [ 493.690107][ T5901] usb 3-1: config 4 has an invalid interface number: 32 but max is 0 [ 493.698279][ T5901] usb 3-1: config 4 has no interface number 0 [ 493.708841][ T5901] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 493.718095][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.726518][ T5901] usb 3-1: Product: syz [ 493.730890][ T5901] usb 3-1: Manufacturer: syz [ 493.735568][ T5901] usb 3-1: SerialNumber: syz [ 493.802053][ T6457] team0 (unregistering): Port device team_slave_1 removed [ 493.841201][ T6457] team0 (unregistering): Port device team_slave_0 removed [ 494.923714][ T30] audit: type=1400 audit(1749447665.697:565): avc: denied { append } for pid=11956 comm="syz.6.1041" name="pfkey" dev="proc" ino=4026533984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 495.112432][ T5822] Bluetooth: hci0: command tx timeout [ 495.765228][ T30] audit: type=1400 audit(1749447666.547:566): avc: denied { mounton } for pid=11964 comm="syz.7.1042" path="/13/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 495.765266][T11965] kAFS: No cell specified [ 495.973904][T11938] netlink: 'syz.2.1036': attribute type 29 has an invalid length. [ 496.423128][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1041'. [ 496.470568][ T5901] usb 3-1: Found UVC 0.02 device syz (17dc:0202) [ 496.496605][ T5901] usb 3-1: No valid video chain found. [ 496.536403][ T5901] usb 3-1: USB disconnect, device number 43 [ 496.775596][T11896] chnl_net:caif_netlink_parms(): no params data found [ 497.174875][ T5827] Bluetooth: hci0: command tx timeout [ 497.242601][T11896] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.278834][T11896] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.317055][T11896] bridge_slave_0: entered allmulticast mode [ 497.337289][T11896] bridge_slave_0: entered promiscuous mode [ 497.400626][T11896] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.427412][T11896] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.444432][T11896] bridge_slave_1: entered allmulticast mode [ 497.467342][T11896] bridge_slave_1: entered promiscuous mode [ 497.711277][T12017] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1048'. [ 497.810788][T11896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.867571][T11896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.216530][T11896] team0: Port device team_slave_0 added [ 498.224830][T11896] team0: Port device team_slave_1 added [ 498.243970][T11896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.300527][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.363010][T11896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.384085][T11896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.391129][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.452942][T11896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.731046][T12031] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1050'. [ 498.733117][T11896] hsr_slave_0: entered promiscuous mode [ 498.836553][T11896] hsr_slave_1: entered promiscuous mode [ 499.239723][ T5827] Bluetooth: hci0: command tx timeout [ 501.339951][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.346505][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.445354][T12078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=12078 comm=syz.2.1060 [ 502.059437][ T944] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 502.312176][ T944] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 502.347718][ T944] usb 7-1: config 0 has no interface number 0 [ 502.392156][ T944] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 502.412882][ T944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.425890][ T944] usb 7-1: Product: syz [ 502.434360][ T944] usb 7-1: Manufacturer: syz [ 502.439258][ T944] usb 7-1: SerialNumber: syz [ 502.470549][ T944] usb 7-1: config 0 descriptor?? [ 502.501972][ T944] hub 7-1:0.132: bad descriptor, ignoring hub [ 502.553950][ T944] hub 7-1:0.132: probe with driver hub failed with error -5 [ 502.561698][ T9] IPVS: starting estimator thread 0... [ 502.599825][ T944] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input23 [ 502.668852][T12101] IPVS: using max 42 ests per chain, 100800 per kthread [ 503.504834][T12113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.882568][ T5822] Bluetooth: hci0: command 0x0405 tx timeout [ 503.927411][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.936109][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.024032][T11896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.160920][T11896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 504.202529][T11896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.243771][ T30] audit: type=1400 audit(1749447675.027:567): avc: denied { map } for pid=12118 comm="syz.2.1070" path="socket:[40613]" dev="sockfs" ino=40613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.357502][ T30] audit: type=1400 audit(1749447675.027:568): avc: denied { accept } for pid=12118 comm="syz.2.1070" path="socket:[40613]" dev="sockfs" ino=40613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.389058][ T30] audit: type=1400 audit(1749447675.027:569): avc: denied { ioctl } for pid=12118 comm="syz.2.1070" path="socket:[40615]" dev="sockfs" ino=40615 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 504.421127][T12119] 8021q: VLANs not supported on xfrm0 [ 504.588940][T11896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.001247][T11896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.039764][T11896] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.170192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.177376][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.246287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.253717][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.286249][ T30] audit: type=1400 audit(1749447676.057:570): avc: denied { write } for pid=12138 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 505.293488][T11896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.856891][ T5885] usb 7-1: USB disconnect, device number 21 [ 505.904951][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1078'. [ 506.049010][ T5885] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 506.097570][T11896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.207489][T11896] veth0_vlan: entered promiscuous mode [ 506.231117][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.251148][T11896] veth1_vlan: entered promiscuous mode [ 506.263169][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.312429][ T5885] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 506.352681][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.370024][T11896] veth0_macvtap: entered promiscuous mode [ 506.473062][ T5885] usb 7-1: config 0 descriptor?? [ 506.498465][T11896] veth1_macvtap: entered promiscuous mode [ 506.533683][T11896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.552791][T11896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.565535][T11896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.581948][T11896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.593096][T11896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.603577][T11896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.734495][ T6434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.760103][ T6434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.845846][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.897466][ T5885] usbhid 7-1:0.0: can't add hid device: -71 [ 506.908961][ T5885] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 506.921378][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.049328][ T5885] usb 7-1: USB disconnect, device number 22 [ 507.438890][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1080'. [ 508.620370][T12208] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 508.812199][ T6434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.890686][ T5941] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 509.058918][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 509.087522][ T5941] usb 6-1: config 0 has an invalid interface number: 220 but max is 0 [ 509.141008][ T5941] usb 6-1: config 0 has no interface number 0 [ 509.167931][ T5941] usb 6-1: too many endpoints for config 0 interface 220 altsetting 126: 142, using maximum allowed: 30 [ 509.233562][ T5941] usb 6-1: config 0 interface 220 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 509.287523][ T5941] usb 6-1: config 0 interface 220 has no altsetting 0 [ 509.300734][ T5941] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 509.320117][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.328220][ T5941] usb 6-1: Product: syz [ 509.355080][ T5941] usb 6-1: Manufacturer: syz [ 509.368549][ T5941] usb 6-1: SerialNumber: syz [ 509.392007][ T5941] usb 6-1: config 0 descriptor?? [ 509.663177][ T6434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.728042][ T6434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.808529][ T5941] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 509.836023][ T5941] gspca_sonixj: reg_w1 err -71 [ 509.854265][ T6434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.865012][ T5941] sonixj 6-1:0.220: probe with driver sonixj failed with error -71 [ 509.882790][ T5941] usb 6-1: USB disconnect, device number 35 [ 510.045264][ T6434] bridge_slave_1: left allmulticast mode [ 510.051069][ T6434] bridge_slave_1: left promiscuous mode [ 510.056786][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.066364][ T6434] bridge_slave_0: left allmulticast mode [ 510.072753][ T6434] bridge_slave_0: left promiscuous mode [ 510.079036][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.295524][ T6434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.305841][ T6434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.318285][ T6434] bond0 (unregistering): Released all slaves [ 510.602771][ T6434] hsr_slave_0: left promiscuous mode [ 510.612588][ T6434] hsr_slave_1: left promiscuous mode [ 510.618478][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.627267][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.639027][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.646429][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.669712][ T6434] veth1_macvtap: left promiscuous mode [ 510.675242][ T6434] veth0_macvtap: left promiscuous mode [ 510.682069][ T6434] veth1_vlan: left promiscuous mode [ 510.687423][ T6434] veth0_vlan: left promiscuous mode [ 510.992801][ T6434] team0 (unregistering): Port device team_slave_1 removed [ 511.024238][ T6434] team0 (unregistering): Port device team_slave_0 removed [ 511.098641][ T30] audit: type=1400 audit(1749447681.877:571): avc: denied { write } for pid=12265 comm="syz.5.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 512.364511][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.374122][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.383369][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.394610][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.403147][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.542175][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 512.873760][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.031208][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.043319][T12274] veth0: entered promiscuous mode [ 513.059150][T12283] veth0: left promiscuous mode [ 513.087841][ T9] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 513.098276][T12280] lo speed is unknown, defaulting to 1000 [ 513.171208][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.303677][ T9] usb 6-1: config 0 descriptor?? [ 514.129109][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 514.135114][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 514.181255][ T9] usb 6-1: USB disconnect, device number 36 [ 514.519854][ T5827] Bluetooth: hci0: command tx timeout [ 515.220559][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1097'. [ 515.245490][T12310] macvlan0: entered promiscuous mode [ 515.263855][T12310] batadv_slave_1: entered promiscuous mode [ 515.281538][T12319] raw_sendmsg: syz.7.1097 forgot to set AF_INET. Fix it! [ 515.329005][T12280] chnl_net:caif_netlink_parms(): no params data found [ 515.593648][ T9] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 515.780753][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 515.781666][T12328] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1102'. [ 515.789179][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 515.825684][ T9] usb 3-1: config 0 has no interface number 0 [ 515.843405][T12331] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1102'. [ 515.968761][ T9] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 516.008723][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 516.036156][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 516.045643][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.231862][ T9] usb 3-1: config 0 descriptor?? [ 516.232402][T12280] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.238661][T12315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 516.280359][T12280] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.310294][T12280] bridge_slave_0: entered allmulticast mode [ 516.436255][T12280] bridge_slave_0: entered promiscuous mode [ 516.573542][T12280] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.608768][ T5827] Bluetooth: hci0: command tx timeout [ 516.646890][T12280] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.728565][T12280] bridge_slave_1: entered allmulticast mode [ 517.549835][T12280] bridge_slave_1: entered promiscuous mode [ 517.949164][ T9] usb 3-1: USB disconnect, device number 44 [ 517.981425][T12280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.546192][T12280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.694971][ T5827] Bluetooth: hci0: command tx timeout [ 518.719551][T12280] team0: Port device team_slave_0 added [ 518.732160][T12280] team0: Port device team_slave_1 added [ 518.824761][T12368] overlayfs: missing 'lowerdir' [ 518.930214][T12369] overlayfs: missing 'workdir' [ 519.301592][T12280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.308600][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.383385][T12280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.417118][T12280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.439012][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.487885][T12280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.680985][T12280] hsr_slave_0: entered promiscuous mode [ 519.687249][T12280] hsr_slave_1: entered promiscuous mode [ 520.763096][ T5827] Bluetooth: hci0: command tx timeout [ 520.768806][ T5901] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 520.948945][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 520.977588][T12399] veth0_vlan: entered allmulticast mode [ 520.986658][ T5901] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 521.001017][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.023017][ T5901] usb 7-1: Product: syz [ 521.027315][ T5901] usb 7-1: Manufacturer: syz [ 521.042214][ T5901] usb 7-1: SerialNumber: syz [ 521.208498][ T5901] r8152-cfgselector 7-1: Unknown version 0x0000 [ 521.283796][ T5901] r8152-cfgselector 7-1: config 0 descriptor?? [ 521.528654][T12399] veth0_vlan: left promiscuous mode [ 521.548270][T12399] veth0_vlan: entered promiscuous mode [ 522.396214][T12280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 522.415165][T12280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 522.556760][T12280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 522.679753][T12429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.036315][T12280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 523.210630][T12430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.264681][ T9] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 523.298183][ T5901] r8152-cfgselector 7-1: Unknown version 0x0000 [ 523.312132][ T5901] r8152-cfgselector 7-1: bad CDC descriptors [ 523.323246][T12280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.335330][ T5901] r8152-cfgselector 7-1: USB disconnect, device number 23 [ 523.414560][T12280] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.485836][T12439] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1120'. [ 523.500083][ T9] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 523.512429][ T9] usb 3-1: config 0 has no interface number 0 [ 523.524846][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 523.648632][T12439] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1120'. [ 523.711559][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.726552][ T9] usb 3-1: Product: syz [ 523.732807][ T9] usb 3-1: Manufacturer: syz [ 523.736541][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.737499][ T9] usb 3-1: SerialNumber: syz [ 523.744530][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.765413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.772571][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.780888][ T9] usb 3-1: config 0 descriptor?? [ 524.574167][ T30] audit: type=1400 audit(1749447695.317:572): avc: denied { getopt } for pid=12453 comm="syz.5.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 525.655503][ T30] audit: type=1400 audit(1749447696.437:573): avc: denied { connect } for pid=12421 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 525.832495][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 526.297005][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 526.318884][ T9] asix 3-1:0.251: probe with driver asix failed with error -71 [ 526.349750][ T9] usb 3-1: USB disconnect, device number 45 [ 526.673190][ T30] audit: type=1400 audit(1749447697.447:574): avc: denied { setopt } for pid=12480 comm="syz.6.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 527.083177][T12497] netlink: 'syz.5.1129': attribute type 10 has an invalid length. [ 527.097948][T12280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.138054][T12497] bond0: (slave wlan1): Opening slave failed [ 527.555779][T12280] veth0_vlan: entered promiscuous mode [ 527.577414][T12280] veth1_vlan: entered promiscuous mode [ 527.667367][T12511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.101655][T12280] veth0_macvtap: entered promiscuous mode [ 528.132088][T12280] veth1_macvtap: entered promiscuous mode [ 528.233002][T12280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.345651][T12280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.371053][T12280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.382828][T12280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.393455][T12280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.406880][T12280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.671114][ T6436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.679853][ T6457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.696217][ T6457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.705531][ T6436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.174661][ T3495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.369813][ T3495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.517690][ T3495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.739906][ T3495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.886275][ T3495] bridge_slave_1: left allmulticast mode [ 530.895683][ T3495] bridge_slave_1: left promiscuous mode [ 530.902883][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.920804][ T3495] bridge_slave_0: left allmulticast mode [ 530.926477][ T3495] bridge_slave_0: left promiscuous mode [ 530.934507][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.284717][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.299944][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.310126][ T3495] bond0 (unregistering): Released all slaves [ 531.567955][ T3495] hsr_slave_0: left promiscuous mode [ 531.578492][ T3495] hsr_slave_1: left promiscuous mode [ 531.588660][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.600865][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.610019][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.617417][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.641739][ T3495] veth1_macvtap: left promiscuous mode [ 531.647289][ T3495] veth0_macvtap: left promiscuous mode [ 531.654329][ T3495] veth1_vlan: left promiscuous mode [ 531.662130][ T3495] veth0_vlan: left promiscuous mode [ 531.718914][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.977845][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 532.011916][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 533.357449][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 534.039952][T12633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.221570][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.236820][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.245853][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.257659][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.265956][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.454214][T12642] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1141'. [ 534.480173][ T30] audit: type=1400 audit(1749447705.237:575): avc: denied { nlmsg_write } for pid=12617 comm="syz.7.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 534.775172][T12635] lo speed is unknown, defaulting to 1000 [ 536.412137][ T5822] Bluetooth: hci0: command tx timeout [ 538.339541][T12635] chnl_net:caif_netlink_parms(): no params data found [ 538.449510][ T5827] Bluetooth: hci0: command tx timeout [ 539.164077][ T5941] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 539.564515][T12703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.749444][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 539.761674][ T5941] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 539.778080][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.798558][ T5941] usb 6-1: Product: syz [ 539.830358][ T5941] usb 6-1: Manufacturer: syz [ 539.896691][ T5941] usb 6-1: SerialNumber: syz [ 539.910735][ T5941] r8152-cfgselector 6-1: Unknown version 0x0000 [ 539.917952][ T5941] r8152-cfgselector 6-1: config 0 descriptor?? [ 539.918925][T12713] trusted_key: encrypted_key: key user:syz not found [ 539.924448][ T944] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 540.129056][ T944] usb 3-1: Using ep0 maxpacket: 16 [ 540.197519][ T944] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 540.228867][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.237309][ T944] usb 3-1: Product: syz [ 540.245631][ T944] usb 3-1: Manufacturer: syz [ 540.253379][ T944] usb 3-1: SerialNumber: syz [ 540.272554][ T944] r8152-cfgselector 3-1: Unknown version 0x0000 [ 540.279102][ T944] r8152-cfgselector 3-1: config 0 descriptor?? [ 540.280138][T12635] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.519055][ T5827] Bluetooth: hci0: command tx timeout [ 540.562021][T12635] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.674706][T12635] bridge_slave_0: entered allmulticast mode [ 540.692538][T12635] bridge_slave_0: entered promiscuous mode [ 540.710600][T12635] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.727597][T12635] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.750400][T12635] bridge_slave_1: entered allmulticast mode [ 540.764493][T12635] bridge_slave_1: entered promiscuous mode [ 540.799733][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 540.844621][T12719] trusted_key: encrypted_key: key user:syz not found [ 541.158853][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 541.205254][T12635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.219167][ T9] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 541.241181][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.256617][T12635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.277109][ T9] usb 7-1: config 0 descriptor?? [ 541.311573][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 542.817996][ T5827] Bluetooth: hci0: command tx timeout [ 542.823848][ T5941] r8152-cfgselector 6-1: Unknown version 0x0000 [ 542.831289][ T944] r8152-cfgselector 3-1: Unknown version 0x0000 [ 542.837695][ T944] r8152-cfgselector 3-1: bad CDC descriptors [ 542.848969][ T5941] r8152-cfgselector 6-1: bad CDC descriptors [ 542.863965][ T5941] r8152-cfgselector 6-1: USB disconnect, device number 37 [ 542.875087][ T944] r8152-cfgselector 3-1: USB disconnect, device number 46 [ 543.091993][ T9] gspca_vc032x: reg_w err -71 [ 543.117417][ T30] audit: type=1400 audit(1749447713.897:576): avc: denied { getopt } for pid=12733 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 543.148942][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.594969][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.610428][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.615831][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.624414][T12635] team0: Port device team_slave_0 added [ 543.639407][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.675652][T12635] team0: Port device team_slave_1 added [ 543.702154][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.711177][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.716578][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.726208][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.740407][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.764128][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.795754][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.993998][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.009981][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.022139][T12635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.025195][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.106607][T12748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.502627][T12635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.528622][T12635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.545653][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.561200][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.566767][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 544.574374][ T9] gspca_vc032x: Unknown sensor... [ 544.579622][ T9] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 544.590553][T12635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.592148][ T9] usb 7-1: USB disconnect, device number 24 [ 544.619543][T12635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.953399][T12635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.175144][ T30] audit: type=1400 audit(1749447715.927:577): avc: denied { mounton } for pid=12756 comm="syz.6.1168" path="/191/file0" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 545.217981][ T30] audit: type=1400 audit(1749447715.937:578): avc: denied { setattr } for pid=12756 comm="syz.6.1168" name="file0" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 545.372519][T12635] hsr_slave_0: entered promiscuous mode [ 545.379326][T12635] hsr_slave_1: entered promiscuous mode [ 545.495734][ T30] audit: type=1400 audit(1749447715.937:579): avc: denied { write } for pid=12756 comm="syz.6.1168" name="file0" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 545.558092][ T30] audit: type=1400 audit(1749447715.937:580): avc: denied { open } for pid=12756 comm="syz.6.1168" path="/191/file0" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 546.311245][T12774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.333264][ T30] audit: type=1400 audit(1749447715.937:581): avc: denied { name_bind } for pid=12756 comm="syz.6.1168" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 547.410079][T12790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.496637][T12812] tipc: Started in network mode [ 549.501704][T12812] tipc: Node identity ac14140f, cluster identity 4711 [ 549.508931][T12812] tipc: New replicast peer: 172.30.1.8 [ 549.514508][T12812] tipc: Enabled bearer , priority 10 [ 550.509037][ T5941] tipc: Node number set to 2886997007 [ 551.453373][T12635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.549242][T12635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.570341][T12635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.716644][T12635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.203021][ T30] audit: type=1400 audit(1749447722.987:582): avc: denied { mounton } for pid=12853 comm="syz.5.1186" path="mnt:[4026533575]" dev="nsfs" ino=4026533575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 552.440425][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1187'. [ 552.449829][T12873] bridge_slave_1: left allmulticast mode [ 552.455536][T12873] bridge_slave_1: left promiscuous mode [ 552.461748][T12873] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.792726][T12873] bridge_slave_0: left allmulticast mode [ 552.798392][T12873] bridge_slave_0: left promiscuous mode [ 552.809647][T12873] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.849424][T12874] netlink: 'syz.5.1189': attribute type 1 has an invalid length. [ 553.052193][T12874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.082734][T12883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.106070][T12883] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 553.119694][T12883] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 553.465825][T12635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.524490][T12635] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.616673][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.623784][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.664432][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.671563][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.851678][T12907] random: crng reseeded on system resumption [ 553.898156][ T30] audit: type=1400 audit(1749447724.677:583): avc: denied { firmware_load } for pid=6434 comm="kworker/u8:11" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 553.902960][T12635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.293811][T12915] ip6t_srh: unknown srh match flags 4000 [ 554.550712][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 555.018786][ T30] audit: type=1400 audit(1749447725.777:584): avc: denied { listen } for pid=12923 comm="syz.6.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 555.112625][T12635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.260017][T12635] veth0_vlan: entered promiscuous mode [ 555.290490][T12635] veth1_vlan: entered promiscuous mode [ 555.485918][T12933] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 555.513406][T12635] veth0_macvtap: entered promiscuous mode [ 555.540689][T12635] veth1_macvtap: entered promiscuous mode [ 555.624770][T12635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.773429][T12635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.905991][T12940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.331876][T12635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.350684][T12635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.369521][T12635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.379903][T12635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.807128][T12949] batadv_slave_0: entered promiscuous mode [ 557.113373][ T30] audit: type=1400 audit(1749447727.887:585): avc: denied { accept } for pid=12950 comm="syz.5.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 557.121133][T12945] batadv_slave_0: left promiscuous mode [ 557.428226][ T30] audit: type=1400 audit(1749447728.207:586): avc: denied { ioctl } for pid=12955 comm="syz.6.1209" path="socket:[44996]" dev="sockfs" ino=44996 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 557.428273][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.509259][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 558.013215][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.021200][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.048819][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.094561][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1213'. [ 558.175085][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1212'. [ 558.221366][ T30] audit: type=1400 audit(1749447728.977:587): avc: denied { wake_alarm } for pid=12968 comm="syz.6.1213" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 559.364333][ T48] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 559.372662][T12991] ieee802154 phy0 wpan0: encryption failed: -22 [ 559.585329][ T6434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.682099][ T6434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.702257][ T48] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.722155][ T48] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 559.748429][ T48] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 559.786225][ T48] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 559.797381][ T6434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.806311][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.833628][T12987] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.856272][ T48] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.901412][ T6434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.048123][ T6434] bridge_slave_1: left allmulticast mode [ 560.057919][ T6434] bridge_slave_1: left promiscuous mode [ 560.065111][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.075401][ T6434] bridge_slave_0: left allmulticast mode [ 560.082184][ T6434] bridge_slave_0: left promiscuous mode [ 560.087912][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.118770][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 560.203984][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 560.737927][ T6434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.749062][ T6434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.759029][ T6434] bond0 (unregistering): Released all slaves [ 560.774282][T12996] veth0_to_team: entered promiscuous mode [ 560.780110][T12996] veth0_to_team: entered allmulticast mode [ 560.937782][ T6434] hsr_slave_0: left promiscuous mode [ 560.945379][ T6434] hsr_slave_1: left promiscuous mode [ 560.951469][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.959212][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.966984][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.975135][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.991319][ T6434] veth1_macvtap: left promiscuous mode [ 560.996903][ T6434] veth0_macvtap: left promiscuous mode [ 561.004428][ T6434] veth1_vlan: left promiscuous mode [ 561.009868][ T6434] veth0_vlan: left promiscuous mode [ 561.353197][ T6434] team0 (unregistering): Port device team_slave_1 removed [ 561.387536][ T6434] team0 (unregistering): Port device team_slave_0 removed [ 561.812663][T13005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.345742][ T975] usb 7-1: USB disconnect, device number 25 [ 562.447952][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.455650][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.570682][ T5959] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 562.870277][ T5959] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 562.878626][ T5959] usb 3-1: config 0 has no interface number 0 [ 563.241505][ T5959] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 563.261714][ T5959] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 563.301090][ T5959] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 563.314606][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 563.324977][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 563.333653][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 563.347983][ T5959] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 563.445941][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 563.462156][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 563.505036][ T5959] usb 3-1: Product: syz [ 563.512826][ T5959] usb 3-1: Manufacturer: syz [ 563.538379][ T5959] usb 3-1: SerialNumber: syz [ 563.540212][T13022] lo speed is unknown, defaulting to 1000 [ 563.565302][ T5959] usb 3-1: config 0 descriptor?? [ 563.580665][ T5959] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 563.646018][T13032] trusted_key: encrypted_key: key user:syz not found [ 563.749425][ T5959] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 563.964843][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.974809][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.642721][T13031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13031 comm=syz.7.1226 [ 565.021452][ T30] audit: type=1107 audit(1749447735.807:588): pid=13026 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 565.914044][ T5822] Bluetooth: hci0: command tx timeout [ 566.423838][ T5959] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 566.434095][ T5959] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 566.445368][ T5959] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 566.454933][ T5959] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 566.464955][ T5959] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 566.474563][ T5959] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 566.876774][ T5959] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 566.886285][ T5959] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 566.960528][ T5959] usb 3-1: USB disconnect, device number 47 [ 567.080678][ T5959] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 567.102351][ T5959] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 567.249884][ T5959] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 567.563861][ T5959] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 567.574331][ T5959] keyspan 3-1:0.107: device disconnected [ 567.658531][T13022] chnl_net:caif_netlink_parms(): no params data found [ 567.959051][ T5822] Bluetooth: hci0: command tx timeout [ 568.099677][T13022] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.109181][T13022] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.141590][T13022] bridge_slave_0: entered allmulticast mode [ 568.179743][T13022] bridge_slave_0: entered promiscuous mode [ 568.329416][T13022] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.363351][T13022] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.404720][T13022] bridge_slave_1: entered allmulticast mode [ 568.518151][T13022] bridge_slave_1: entered promiscuous mode [ 568.614841][T13022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.652091][T13022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.817005][T13022] team0: Port device team_slave_0 added [ 568.847153][T13022] team0: Port device team_slave_1 added [ 568.909640][T13022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.356626][T13022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.492060][T13022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.513885][T13022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.528858][T13022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.982530][T13022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.068791][ T5822] Bluetooth: hci0: command tx timeout [ 570.164769][T13097] batadv_slave_1: entered promiscuous mode [ 570.383170][T13022] hsr_slave_0: entered promiscuous mode [ 570.400809][T13022] hsr_slave_1: entered promiscuous mode [ 570.411286][T13096] batadv_slave_1: left promiscuous mode [ 570.440304][ T30] audit: type=1400 audit(1749447741.227:589): avc: denied { bind } for pid=13102 comm="syz.7.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 570.479983][ T30] audit: type=1400 audit(1749447741.267:590): avc: denied { getopt } for pid=13102 comm="syz.7.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 570.483274][ T5822] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 571.212086][T13022] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 571.671774][T13022] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 571.693220][T13022] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 571.705566][T13022] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 571.804758][T13022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.862847][T13022] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.158888][ T5822] Bluetooth: hci0: command tx timeout [ 572.264531][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.271624][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.335835][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.342952][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.898915][T13022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.209405][T13022] veth0_vlan: entered promiscuous mode [ 574.249320][T13022] veth1_vlan: entered promiscuous mode [ 574.277537][T13022] veth0_macvtap: entered promiscuous mode [ 574.290997][T13022] veth1_macvtap: entered promiscuous mode [ 574.314243][T13022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.333179][T13022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.661391][T13022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.674779][T13022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.683849][T13022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.692620][T13022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.354294][ T6434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.369511][ T6434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.401025][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.416322][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.799214][ T5898] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 576.350361][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.369657][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 576.384741][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 576.398726][ T5898] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 576.432637][ T5898] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 576.452482][ T5898] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 576.461048][ T5898] usb 7-1: Manufacturer: syz [ 576.478811][ T5898] usb 7-1: config 0 descriptor?? [ 577.021045][ T5898] rc_core: IR keymap rc-hauppauge not found [ 577.027524][ T5898] Registered IR keymap rc-empty [ 577.034907][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 577.072623][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 577.100455][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 577.912905][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input24 [ 577.918785][T13194] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 577.918785][T13194] program syz.6.1260 not setting count and/or reply_len properly [ 577.942387][ T30] audit: type=1400 audit(1749447748.697:591): avc: denied { ioctl } for pid=13165 comm="syz.6.1260" path="/dev/sg0" dev="devtmpfs" ino=763 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 577.981926][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.020465][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.038970][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 578.046848][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.068944][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.088917][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.108868][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.129078][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.148895][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.172015][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.198962][ T5898] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 578.207677][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.221147][ T5898] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 578.230516][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 578.241898][ T5898] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 578.252087][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 578.267539][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.268987][ T5898] usb 7-1: USB disconnect, device number 26 [ 578.290938][T13188] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 578.299036][ T30] audit: type=1400 audit(1749447749.087:592): avc: denied { create } for pid=13197 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 578.329414][ T30] audit: type=1400 audit(1749447749.087:593): avc: denied { ioctl } for pid=13197 comm="syz.2.1268" path="socket:[46720]" dev="sockfs" ino=46720 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 578.355707][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.385085][ T30] audit: type=1400 audit(1749447749.087:594): avc: denied { bind } for pid=13197 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 578.508066][ T5941] usb 6-1: USB disconnect, device number 38 [ 578.595121][ T5827] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 578.676452][ T6436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.133681][ T6436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.197687][ T6436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.252304][ T6436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.363919][ T6436] bridge_slave_1: left allmulticast mode [ 579.371411][ T6436] bridge_slave_1: left promiscuous mode [ 579.377101][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.385717][ T6436] bridge_slave_0: left allmulticast mode [ 579.391637][ T6436] bridge_slave_0: left promiscuous mode [ 579.397266][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.636071][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.646245][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.659621][ T6436] bond0 (unregistering): Released all slaves [ 579.931765][ T6436] hsr_slave_0: left promiscuous mode [ 579.937490][ T6436] hsr_slave_1: left promiscuous mode [ 579.943319][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.950764][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.961170][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.961485][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 579.968546][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.994124][ T6436] veth1_macvtap: left promiscuous mode [ 579.999764][ T6436] veth0_macvtap: left promiscuous mode [ 580.005271][ T6436] veth1_vlan: left promiscuous mode [ 580.010583][ T6436] veth0_vlan: left promiscuous mode [ 580.295743][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 580.327265][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 583.190000][T13231] 9pnet_fd: Insufficient options for proto=fd [ 583.206847][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 583.345591][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 583.360745][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 583.838806][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.019588][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.249893][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.327735][T13235] lo speed is unknown, defaulting to 1000 [ 584.960983][T13255] dummy0: entered promiscuous mode [ 586.022404][T13235] chnl_net:caif_netlink_parms(): no params data found [ 586.531597][ T5827] Bluetooth: hci0: command tx timeout [ 586.771700][T13270] Bluetooth: MGMT ver 1.23 [ 691.788623][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 691.795684][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6436/1:b..l [ 691.804058][ C0] rcu: (detected by 0, t=10504 jiffies, g=61565, q=173 ncpus=2) [ 691.811771][ C0] task:kworker/u8:12 state:R running task stack:24856 pid:6436 tgid:6436 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 691.825851][ C0] Workqueue: bat_events batadv_nc_worker [ 691.831498][ C0] Call Trace: [ 691.834772][ C0] [ 691.837702][ C0] __schedule+0x116a/0x5de0 [ 691.842214][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.848033][ C0] ? __pfx___schedule+0x10/0x10 [ 691.852884][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 691.858091][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.863904][ C0] ? mark_held_locks+0x49/0x80 [ 691.868673][ C0] preempt_schedule_irq+0x51/0x90 [ 691.873699][ C0] irqentry_exit+0x36/0x90 [ 691.878114][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.884088][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 691.889379][ C0] Code: 0f c1 05 58 89 34 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 6d 47 34 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 691.908981][ C0] RSP: 0018:ffffc9000d0ffae0 EFLAGS: 00000206 [ 691.915040][ C0] RAX: baeaed356eafec00 RBX: ffffffff8e5c4840 RCX: ffffc9000d0ffaec [ 691.923006][ C0] RDX: 0000000000000002 RSI: ffffffff8ddf3a91 RDI: ffffffff8c157060 [ 691.930970][ C0] RBP: 00000000000002ab R08: 0000000000000001 R09: 0000000000000000 [ 691.938932][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8b4cf265 [ 691.946894][ C0] R13: 0000000000000206 R14: ffff88807d5e8000 R15: 0000000000000003 [ 691.954860][ C0] ? batadv_nc_worker+0x895/0x1030 [ 691.959987][ C0] batadv_nc_worker+0x89a/0x1030 [ 691.964926][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.970736][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 691.976118][ C0] ? rcu_is_watching+0x12/0xc0 [ 691.980883][ C0] process_one_work+0x9cf/0x1b70 [ 691.985828][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 691.991199][ C0] ? __pfx_process_one_work+0x10/0x10 [ 691.996576][ C0] ? assign_work+0x1a0/0x250 [ 692.001172][ C0] worker_thread+0x6c8/0xf10 [ 692.005770][ C0] ? __pfx_worker_thread+0x10/0x10 [ 692.010875][ C0] kthread+0x3c5/0x780 [ 692.014941][ C0] ? __pfx_kthread+0x10/0x10 [ 692.019525][ C0] ? rcu_is_watching+0x12/0xc0 [ 692.024289][ C0] ? __pfx_kthread+0x10/0x10 [ 692.028882][ C0] ret_from_fork+0x5d4/0x6f0 [ 692.033475][ C0] ? __pfx_kthread+0x10/0x10 [ 692.038057][ C0] ret_from_fork_asm+0x1a/0x30 [ 692.042829][ C0] [ 692.045841][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g61565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 692.058156][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=41490 [ 692.066032][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g61565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 692.077397][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 692.087357][ C0] rcu: RCU grace-period kthread stack dump: [ 692.093232][ C0] task:rcu_preempt state:I stack:28200 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 692.105156][ C0] Call Trace: [ 692.108427][ C0] [ 692.111358][ C0] __schedule+0x116a/0x5de0 [ 692.115872][ C0] ? __lock_acquire+0x622/0x1c90 [ 692.120821][ C0] ? __pfx___schedule+0x10/0x10 [ 692.125677][ C0] ? find_held_lock+0x2b/0x80 [ 692.130352][ C0] ? schedule+0x2d7/0x3a0 [ 692.134684][ C0] schedule+0xe7/0x3a0 [ 692.138751][ C0] schedule_timeout+0x123/0x290 [ 692.143599][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 692.148972][ C0] ? __pfx_process_timeout+0x10/0x10 [ 692.154260][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 692.160072][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 692.165535][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 692.170311][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 692.175600][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 692.180800][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 692.185736][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 692.190594][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 692.196401][ C0] rcu_gp_kthread+0x270/0x380 [ 692.201083][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 692.206287][ C0] ? rcu_is_watching+0x12/0xc0 [ 692.211048][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 692.216251][ C0] ? __kthread_parkme+0x19e/0x250 [ 692.221285][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 692.226490][ C0] kthread+0x3c5/0x780 [ 692.230554][ C0] ? __pfx_kthread+0x10/0x10 [ 692.235140][ C0] ? rcu_is_watching+0x12/0xc0 [ 692.239902][ C0] ? __pfx_kthread+0x10/0x10 [ 692.244490][ C0] ret_from_fork+0x5d4/0x6f0 [ 692.249078][ C0] ? __pfx_kthread+0x10/0x10 [ 692.253661][ C0] ret_from_fork_asm+0x1a/0x30 [ 692.258434][ C0] [ 692.261465][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 692.267781][ C0] Sending NMI from CPU 0 to CPUs 1: [ 692.272978][ C1] NMI backtrace for cpu 1 [ 692.272989][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 692.273005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.273013][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 692.273033][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 db 5c a9 f5 cc [ 692.273046][ C1] RSP: 0018:ffffc90000a08d30 EFLAGS: 00000002 [ 692.273057][ C1] RAX: ffff88801e6c2f30 RBX: ffff888023ad3300 RCX: ffffc90000a08d44 [ 692.273066][ C1] RDX: 0000000000000001 RSI: ffff888023ad3300 RDI: ffff88801e6c2f30 [ 692.273074][ C1] RBP: ffff88804ba24400 R08: 0000000000000004 R09: 0000000000000002 [ 692.273083][ C1] R10: 0000000000000002 R11: 0000000000000001 R12: ffffffff8992790b [ 692.273091][ C1] R13: 0000000000000002 R14: ffff88801e6c2440 R15: 0000000000000001 [ 692.273099][ C1] FS: 0000000000000000(0000) GS:ffff888124854000(0000) knlGS:0000000000000000 [ 692.273112][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.273121][ C1] CR2: 000000110c269fc9 CR3: 000000003124b000 CR4: 00000000003526f0 [ 692.273130][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 692.273138][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 692.273146][ C1] Call Trace: [ 692.273151][ C1] [ 692.273155][ C1] lock_release+0xe4/0x2f0 [ 692.273177][ C1] _raw_spin_unlock+0x16/0x50 [ 692.273192][ C1] advance_sched+0x62b/0xc80 [ 692.273216][ C1] ? __pfx_advance_sched+0x10/0x10 [ 692.273232][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 692.273250][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 692.273264][ C1] ? read_tsc+0x9/0x20 [ 692.273282][ C1] hrtimer_interrupt+0x397/0x8e0 [ 692.273303][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 692.273324][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 692.273342][ C1] [ 692.273346][ C1] [ 692.273351][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 692.273366][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 692.273383][ C1] Code: bb 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 50 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 692.273396][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 692.273406][ C1] RAX: 0000000001ff6357 RBX: 0000000000000001 RCX: ffffffff8b7fbc99 [ 692.273415][ C1] RDX: 0000000000000000 RSI: ffffffff8de18f75 RDI: ffffffff8c157060 [ 692.273423][ C1] RBP: ffffed1003cd8488 R08: 0000000000000001 R09: ffffed10170a6645 [ 692.273432][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 692.273441][ C1] R13: ffff88801e6c2440 R14: ffffffff90a80c50 R15: 0000000000000000 [ 692.273453][ C1] ? ct_kernel_exit+0x139/0x190 [ 692.273474][ C1] default_idle+0x13/0x20 [ 692.273486][ C1] default_idle_call+0x6d/0xb0 [ 692.273498][ C1] do_idle+0x391/0x510 [ 692.273514][ C1] ? __pfx_do_idle+0x10/0x10 [ 692.273529][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 692.273548][ C1] cpu_startup_entry+0x4f/0x60 [ 692.273564][ C1] start_secondary+0x21d/0x2b0 [ 692.273579][ C1] ? __pfx_start_secondary+0x10/0x10 [ 692.273597][ C1] common_startup_64+0x13e/0x148 [ 692.273614][ C1]