last executing test programs: 2m18.021789973s ago: executing program 1 (id=3159): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001100000008000000000000000ffffff03000000000100000001"], 0x0, 0x4e}, 0x20) 2m17.766577408s ago: executing program 1 (id=3161): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="34000000000000000000000007000000832304"], 0x38}}], 0x2, 0x80) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030105a0090904000000010100000a2401f7ff0702010209240303000303030b05240506070904010000010200000904010101010200000924020182040910ca0c24020109040706f7e04239090501090004ffc803072501000405000904020000010200000904020101010200000b240201060408013a388207240101c0021009058209500005084107250182fe0700333f11c80af0b8cc0bf9ab61"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x402}}]}) 2m14.887101347s ago: executing program 1 (id=3169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) (rerun: 32) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0xf000, 0xdddd1000, 0xc, 0x0, 0x1}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f0b0000800ac1a1935aa8ffffffff00000000a8f09ac3f69780e1dfa04b1f6b2f67d4a78f8e3ab995823e170200f57ebee7a8c40124fd41af8aa0791e3ad284357ff27652f4f19d883826e5fc5be0b3"], 0x0}, 0x0) 2m14.785690986s ago: executing program 1 (id=3171): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f0000000480)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xe, 0x0, 0x0, "023d2134"}, 0x0, 0x100c, {0x0}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8) 2m14.626733742s ago: executing program 1 (id=3174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$inet6(0xa, 0x3, 0x6) (async, rerun: 64) r6 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff3d, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x54}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r8 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) (async) ftruncate(r8, 0x200) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2m13.290242052s ago: executing program 1 (id=3177): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) r2 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) listen(r0, 0x5) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m58.002011809s ago: executing program 32 (id=3177): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) r2 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) listen(r0, 0x5) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11.922488064s ago: executing program 3 (id=3531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x76, 0x76, 0x8, [@var={0x10, 0x0, 0x0, 0xe, 0x4, 0x2}, @datasec={0xd, 0x6, 0x0, 0xf, 0x2, [{0x5, 0x0, 0xffff}, {0x2, 0x8, 0x2}, {0x1, 0x5, 0x7bb}, {0x3, 0x559e, 0x9}, {0x4, 0x6, 0x1}, {0x2, 0x67, 0x400}], "72f2"}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x3}]}, {0x0, [0x2e, 0x61, 0x0, 0x30, 0x5f, 0x0]}}, &(0x7f0000000500)=""/58, 0x98, 0x3a, 0x0, 0x9e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000000000007800000001080000", @ANYRES32=r1, @ANYBLOB="000100"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="040000000300f71a4c9531816a41967c45ebc2b2bf73000009000000000000000000f383147ac6107929a53c0614000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={@private1, @dev={0xac, 0x14, 0x14, 0x3d}, 0x1e, 0x1}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000040), 0x49, 0xc10) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040f0400000604359ffe5b09bfb320f2deb299fd34e1edc25d473a20095d3f3ed0385b184ba30b46ffa8f73282f78044bfcbccadec91afb777772383db9d09283815b2d72b78b06a587e45bb8c4ce8f4d8b1760790b8273f29cd8f6b2cfc82cc8495fb0fb9b191678b2dc08a6f0b"], 0x7) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421, 0x0, 0x6, 0x2}) 10.979157875s ago: executing program 3 (id=3535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000500)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_tables_matches\x00') 10.6604965s ago: executing program 3 (id=3536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="20003300d0000000080211000001080211000000505050505050000008"], 0x3c}}, 0xd0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') recvfrom$inet(r3, 0x0, 0x0, 0x40010100, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x6, "53d738bca5a7f8590e6b30c12ab47d386c5abaf3916ad6a530f8c7a2e3fa071b"}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 9.362221457s ago: executing program 3 (id=3538): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = openat(0xffffffffffffff9c, 0x0, 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa107b, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0xd, 0x19, "e9cda3cfc9f761d28ac8d095bebddaafc99be0fa41683edd4e98269a0369c598cdce8b85d9ba88249a4b5e560d66d1357ee049c09acf781f4f1ec61749a0e313", "345c396dcc623e26c9d9a860fd3bdc1a127468d4e5782d243a2e27454aa22e936c5fc554d39011026108f3c8c2f97a1761cdf7535d49b305523fa487a1d8994a", "0683a9ee88256bb69e0de8e6ef4704e716f38ad06bb2b71046acd130eeb0778a", [0x0, 0x12fe]}) (async) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x0, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x8500, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0x4, 0x8049]}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r1, &(0x7f0000000140)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f0000000000)='jfs\x00', 0x1) socket(0x1, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (rerun: 64) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0xe52d, @loopback, 0x9}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @local}, 0x5}]}, &(0x7f0000000100)=0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 8.914663011s ago: executing program 5 (id=3540): bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000000c0)=0x1, 0x6, 0x2) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/74, 0x4a}], 0x1}, 0x7ff}], 0x1, 0x2, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x9) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') (rerun: 32) r3 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x85e) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) (rerun: 64) 8.049199745s ago: executing program 5 (id=3541): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x199002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) dup2(r2, r1) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x200000000, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r5, @ANYRESHEX=r6, @ANYRESOCT=r0, @ANYRES32=r4, @ANYRES16=r6, @ANYRES8=r5, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x30, 0x3000000003, 0xf}, &(0x7f0000000240)=0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000002c0)="0f01ca660f388010660f38824b08650fc5df01640f062e260f01c865f30fa7d07bbdf0006d5b66b8004000000f23c80f21f86635040050000f23f8", 0x3b}], 0x1, 0x11, 0x0, 0x2d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES8=r8], 0xf0) r12 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f00000000c0)={0xf0f03c, 0x4}) 7.625913628s ago: executing program 2 (id=3546): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020b404a1bc00000000000109022405000000000009040000010300000009210000040122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000400)={0x0, 0x21, 0x29, {0x29, 0xf, "aba3e211a6dcedd40e5ab37b37fc06cd5ce667d6f28d771807e09d722dff219c12afe41bae802f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_UID={0x8}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x3c}}, 0x0) (async) syz_usb_connect(0x3, 0x4f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x71, 0xe0, 0x32, 0x10, 0x1199, 0x17, 0xee6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x3, 0x6, 0xe0, 0x1, [{{0x9, 0x4, 0x43, 0x34, 0x4, 0x1f, 0xed, 0x80, 0x9, [], [{{0x9, 0x5, 0x7, 0x4, 0x40, 0x83, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7ff}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0xc0, 0x8, 0xa}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2, 0x7, 0x1}}]}}]}}]}}, 0x0) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x4, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x6, 0x2}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x3, 0xf6, 0xbf, 0x8, 0xf}, 0xb2, &(0x7f0000000100)={0x5, 0xf, 0xb2, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "44a35dba1835c6f768da467ec204fc24"}, @ssp_cap={0x14, 0x10, 0xa, 0xdb, 0x2, 0x400, 0xf0f, 0x0, [0x30, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2af46a42d0e1e905c919e9d2d238efa5"}, @generic={0x64, 0x10, 0xb, "73f0191f5756d5dcaa5f50b74daf55b48d976566879a8ed0fd030b16f609458becd84f1704ab82a437721d4bdcc0c4a2ab10578bddda7a1447665bea62cc180763801e18ad454b29b591bff36a18ad8104d53d4169617a370cea1f95118b0bc590"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x76, 0x5, 0x4}]}, 0x2, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "ab962113057a9f044c8bef2390742d8ad17090b6535b8d7060d8c8e5c0f6c1816366c33ed3be5b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x441}}]}) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000540)={0x16, 0x98, 0xfa00, {&(0x7f0000000480), 0x1, r3, 0xc, 0x1, @in6={0xa, 0x4e24, 0xa785, @rand_addr=' \x01\x00', 0x40}}}, 0xa0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x800) 6.155928428s ago: executing program 2 (id=3549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000900095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 5.594811577s ago: executing program 2 (id=3550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x6, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="6e8419c3e9e7e4964a26eea4451208ffa13f3a906b68889351f17e1e30f347a7359d33ae6e25141c55bd3ac2b93d256f3663116ce8e3ed123c40dbae834e20f8172563a8a84528e28b077d5b1c9957d77e31ad080e80bd07a72d485453da82d853c4517a68566bbcda98d93e7afdfafeb645e86acbd335", 0x77}, {&(0x7f0000000340)="69777200146a6171f7895b09edd900dbadfb63e8", 0x14}, {&(0x7f0000000380)="54a4414f731ae3679379120c55da4ef5b23c772809a82fae4f7d662b5546dd71deca470b07783e7ac831a2a5dfa47cf0dec80ba836773536a97a687a14cdf85cb67f", 0x42}, {&(0x7f0000000400)="646925e073f27ecd68834e40701815585a9ac6a9e11c143738ebc0275c95f9b5987cb7b377331d7bb143937525f51c02f18c9622333799c4b72f3ae28c5e90321b0d884e7bca99ab1ffe6af8b26be9cb83c354e63e799853121cdce58f38740004f1763b8afdef143917ac585d305f7424ca58bbeee61547588c5e9d99aec36ff4897aa6b85c", 0x86}, {&(0x7f0000000640)="9abbdc14ef0bfe44db7cd3fa897384b09deedd831784ca877ba4c998c68d6afe15b748154d5e21402188d7fd73ebb058f4f955def273dcac071782da34b39b72dbcd63b30e2aa032c0a98747dc1d47b68d9930ac0e95af7e034ac8ec35de4ed1fc5079dc080e0b3e9d533db070edf822a58bce2a288c1dd9c70faf3e94125835c81f8829a1b87f6455e2b6406f397c3ff57b9aaa9ab18ba3797a61a37008fac12eac97ae901cd18b70f7cef194d5d2c9247f7f40398a422cc4005bc11973db44c980d8ca7ef0981b7784f5191885b4818cb2176e7bddb9b250b73d92d9871b68e2ba566215819d4f60", 0xe9}, {&(0x7f0000000500)="67cf3bf32a7c98ebf70b0dcee239777d2ecf45bfc71178608395a8063eaf694bfe6ea5218adaf66d8057939195ccfa", 0x2f}], 0x6}, 0x4000) 5.539703617s ago: executing program 0 (id=3551): clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x8000000000001, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x3b9ac9ff, 0x81, 0x4}) 5.060371993s ago: executing program 2 (id=3552): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc3, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) 4.994723818s ago: executing program 0 (id=3553): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) timerfd_gettime(r0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x29f3]}, &(0x7f00000001c0), &(0x7f0000000140), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x2, 0x3, {{0x20, 0x4, 0x0, 0x14, 0x80, 0x68, 0x0, 0x81, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x6c, 0xcd, 0x3, 0x1, [{@loopback, 0x80000001}, {@local, 0xcec}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}, {@empty, 0x1}, {@local}, {@empty, 0x8}, {@empty, 0x1}, {@multicast1, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast2, 0xffffffa3}, {@private=0xa010102, 0x180000}, {@remote, 0x1400}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x20, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000009000000000000009d040000852000000300000018000000049a0000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000aa0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000094d000040000000182b0000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x7fff0, 0x0, 0x0, 0x41000, 0x52, '\x00', r3, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x6, 0x91c, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000840)=[0x1], &(0x7f0000000880)=[{0x5, 0x3, 0xf, 0x2}], 0x10, 0x80}, 0x94) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimensat(r2, &(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {r4, r5/1000+10000}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7, 0xa08a, 0x80000001, 0x20000, r0, 0xb, '\x00', 0x0, r2, 0x4, 0x3}, 0x50) 4.992843271s ago: executing program 0 (id=3554): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x24, r3, r1}) 4.932357499s ago: executing program 4 (id=3555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x5}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002a80)={0x3d0, 0x0, 0x0, [{{0x6, 0x1, 0x5, 0x9e8, 0x0, 0x3, {0x5, 0x7f, 0x7, 0x2, 0x9, 0x78b, 0x800, 0x0, 0xdbaf, 0xc000, 0x7, 0x0, 0x0, 0x6, 0x80000000}}, {0x3, 0x4, 0x3, 0x2d484071, '[%]'}}, {{0x6, 0x1, 0x10001, 0x4, 0x4048, 0x10, {0x4, 0x0, 0x5, 0xb, 0x2, 0x1c52000000, 0x5, 0x7, 0x4, 0x8000, 0xfff, 0x0, 0x0, 0x7, 0x1000}}, {0x0, 0xffffffffffffffa2, 0x1, 0xfffffc01, '^'}}, {{0x6, 0x1, 0x100, 0xcf4e, 0x6, 0xfff, {0x2, 0x5, 0xa, 0x4, 0xffffffffffffffff, 0x7, 0x6, 0x1, 0x3, 0x6000, 0x2009, 0x0, 0x0, 0x9, 0x7}}, {0x2, 0x10, 0x2, 0x5, ',,'}}, {{0x4, 0x3, 0x0, 0x7, 0x26b, 0x6, {0x0, 0x7, 0x800, 0x8, 0x9, 0x57f6, 0xf, 0x8, 0xfffffffe, 0x8000, 0xc, 0x0, 0x0, 0x7, 0x5e}}, {0x1, 0x7, 0xa, 0x4, '/dev/cec#\x00'}}, {{0x0, 0x2, 0x62, 0x1, 0x8000, 0x7, {0x4, 0xffffffffffffff0f, 0x1ff, 0x3, 0x80000001, 0x7ff, 0x0, 0x10, 0x8001, 0x9000, 0x3, 0xffffffffffffffff, 0xee00, 0x2, 0x8000}}, {0x2, 0x70, 0x0, 0x103}}, {{0x5, 0x0, 0xffffffffffff82a0, 0x5, 0xd2c3, 0x4, {0x1, 0x2, 0x9, 0x6, 0x9, 0x4, 0x8, 0x3, 0x1, 0x8000, 0x6, 0x0, 0x0, 0x3ff, 0x3}}, {0x1, 0x3, 0x2, 0x81, '*)'}}]}, 0x3d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) pread64(r4, 0x0, 0x0, 0x2000000000000036) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x0) 4.888471327s ago: executing program 0 (id=3556): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'pimreg0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000000)=0xe6, 0x0, 0x4) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_sa={0x2, 0x1a, 0x0, 0x0, 0x0, 0x7, 0xc, 0xe0000000}]}, 0x20}, 0x1, 0x7}, 0x24000010) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000400)=[@clear_death={0x400c630e}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x4) 4.653676392s ago: executing program 5 (id=3557): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002001200000000000000000b0200000000000000000000011000000080000000000000000000000c"], 0x0, 0x4e}, 0x28) 4.106507639s ago: executing program 5 (id=3558): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close(r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x8, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 4.056846868s ago: executing program 0 (id=3559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x2, &(0x7f00000001c0)=""/13, 0xd}}, {{&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000840)=""/247, 0xf7}], 0x2, &(0x7f0000000440)=""/4, 0x4}, 0xf9}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000009c0)=""/84, 0x54}, {&(0x7f0000000a40)=""/198, 0xc6}], 0x2, &(0x7f0000000b40)=""/115, 0x73}}, {{&(0x7f0000000bc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/190, 0xbe}, {&(0x7f0000000e00)=""/254, 0xfe}, {&(0x7f0000000f00)=""/222, 0xde}, {&(0x7f0000001000)=""/106, 0x6a}, {&(0x7f0000001080)=""/2, 0x2}, {&(0x7f00000010c0)=""/191, 0xbf}, {&(0x7f0000001180)=""/75, 0x4b}, {&(0x7f0000001200)=""/75, 0x4b}], 0x9}, 0x8}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001340)=""/147, 0x93}], 0x1}, 0x2}, {{&(0x7f0000001440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000014c0)}, {&(0x7f0000002600)=""/151, 0x97}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000001500)=""/111, 0x6f}, {&(0x7f00000036c0)=""/169, 0xa9}, {&(0x7f0000003780)=""/110, 0x6e}, {&(0x7f0000003800)=""/59, 0x3b}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/123, 0x7b}, {&(0x7f0000003900)=""/246, 0xf6}], 0xa, &(0x7f0000003ac0)=""/176, 0xb0}, 0xc5}, {{&(0x7f0000003b80)=@un=@abs, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003c00)=""/134, 0x86}, {&(0x7f0000003cc0)=""/254, 0xfe}, {&(0x7f0000003dc0)=""/142, 0x8e}], 0x3, &(0x7f0000003ec0)=""/162, 0xa2}, 0x9}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003f80)=""/16, 0x10}, {&(0x7f0000003fc0)=""/241, 0xf1}, {&(0x7f00000040c0)=""/38, 0x26}, {&(0x7f0000004100)=""/234, 0xea}, {&(0x7f0000004200)=""/112, 0x70}], 0x5, &(0x7f0000004300)=""/74, 0x4a}, 0x7}, {{&(0x7f0000004380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900)=[{&(0x7f0000004400)=""/68, 0x44}, {&(0x7f0000004480)=""/77, 0x4d}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/101, 0x65}, {&(0x7f0000005580)=""/98, 0x62}, {&(0x7f0000005600)=""/187, 0xbb}, {&(0x7f00000056c0)=""/34, 0x22}, {&(0x7f0000005700)=""/193, 0xc1}, {&(0x7f0000005800)=""/171, 0xab}, {&(0x7f00000058c0)=""/5, 0x5}], 0xa, &(0x7f00000059c0)=""/16, 0x10}, 0x1}], 0x9, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r7, 0x0, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 3.915716216s ago: executing program 4 (id=3560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000b00095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3.771060918s ago: executing program 3 (id=3561): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2(0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) close(r3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa430800450200780000e0008b1190780000009e0000000000244e22006490780200000004008000030000004bd3985fe13e3b3cf9e5f574d97d9dabe997744e388aacf4c421e77eec6d3c52e865081bd433ffffffffffffffff2f77a6c5bc0ea08e90567ad54a7c004a26d6"], 0x0) 3.147220984s ago: executing program 5 (id=3562): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x271) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x8, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b7e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dc5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0x6, 0xcbff, 0x0, {0x5, 0x7, 0x29000000000, 0x1af3, 0xa, 0x80000006, 0x5, 0x6, 0xfff, 0x4000, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) r1 = socket$inet6(0xa, 0x802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x100, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x61, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xe}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) setsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f0000000000)="ff0000000000000003feed18ffffff1f85e82db1f71ff200f500", 0x1a) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000fc00000000000000000000000000000018dc"], 0x28}}], 0x2, 0x0) 2.440654054s ago: executing program 4 (id=3563): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0xfffffffffffffed9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(r4, &(0x7f0000000180)='smaps_rollup\x00') setgroups(0x0, 0x0) lseek(r7, 0x10000000005, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a"], 0xd) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00'}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) 2.190777824s ago: executing program 3 (id=3564): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)="dbb0670c4c0ea50e8612291a9c8e49261b6001b5029ec8cb165c303577988ae5f661ac31eff1bf2c13d7d38ebd1cfbc45550240b6fc57312ed298ac55207cb114ac7df6ef8fcb17aca4ad1d0091a0fd371f798cb4f9e899742bf840519d92e4c3daa2f323adf8a44f1f32ebcd33d75ee713ab75360fb32444c84b758b42b6fceafdecdbd5bf0a6ff1a3e0dc0d751e460fade88113acea65f4ea34df4810978f2e0de849096224f91b8b7a42af11edaa963c6b7282d559d3ce5570c59a7de1bd6", 0xc0}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6c4, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000007, 0x1010, r1, 0x37f6000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, 0x0, 0x20000880) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00fb15030698bcceac1306000000a98df8e3e4f2ce"], 0x15, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000200)=[{0x9, 0x50, 0x1, 0x70, @time={0xae7d, 0x5}, {0xa, 0x2}, {0x4c, 0x48}, @quote={{0x35, 0x7c}, 0xeef}}, {0x5, 0x7, 0xfa, 0x81, @time={0x4}, {0x3, 0x1}, {0x5, 0xe}, @raw8={"a299a1188d22960773407c12"}}], 0x38) bind$can_j1939(r4, 0x0, 0x57) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r5, 0x2, {0x0, 0xf0}, 0xfe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) r9 = socket$netlink(0x10, 0x3, 0xf) write(r9, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r10 = socket(0xa, 0x3, 0x4) close_range(r7, r10, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.682857346s ago: executing program 5 (id=3565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)="00147167cc5745bf66c109b429963bf976a107a35753021bbb55e6bf0f33ba28fdbe58f595feefc4636d1d3006f26963e6248b47749d7d7bcab7ada59b7427976048040c059429fec135235e56d46527cbb6f6f7ee0462dcb36a2f84bdde34ec3e2f7d796b608f1dffc2b03324f7ae3f1a7365c06e8f5b6d289c3219f44171993468aa0fd8deee47314ebf101893ca30667a38bf4ec85b3d2a0b17cf9c2c", 0x9e, 0xfffffffffffffffd) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) socket$inet_sctp(0x2, 0x5, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x3, [@bcast, @default, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x10200300) 1.478024322s ago: executing program 4 (id=3566): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x24, r3, r1}) 1.248692916s ago: executing program 4 (id=3567): syz_open_dev$video(&(0x7f0000000200), 0x5, 0x2800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x5000, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x80) 962.521091ms ago: executing program 2 (id=3568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006e61740014000280080001400000001f08000340000000030900010073797a30000000000900020073797a3200000000140000001100010000000000008000000000000a"], 0x78}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x0, 0x56}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x6, 0x7fff, 0x0, @private0, @mcast1, 0x40, 0x8, 0x10, 0x9}}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000015c0)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000580)="b2d7e80e0e5660991c8359417c21c61543525e954801dc1d0f7414298767a0829323254506571f8e8533d436adf5964028adf0540e0abef42ec0705cb3165069c0a16ca2b312b239270d26955bcd51beb7ea17124df02d22050fa4c7da0d1a215e1efe7286ea2f3308b3c533ac1e4c0bba80213bd6b9fc870d52ba8d59edde37bee38d25ac9d", 0x86}, {&(0x7f0000000640)="d166cff87f652ac4e9cc6e3c2bbe910d6ea92963eaa4048cb07f1521bcb8024f5a5c9a92c6332beebe56981d21427cf2abd346d9550700c9f11d2f3b8e17db17f185d8781b26e99060521b61bbd1b92b451560327304c9e005e9a727519eac493d8a87eddada2d04d034fd5e6be5ebc7b716537174aabd16127c54c9c2e7bdbc6b654c1a4f79e6dff2a6c195fedd2e6f3f293d62a94fea2a5a0ca782c57c7bdda55b72a90772cc157fbfcb8a17f2146dc011cc336d45074997bc8220a5905111656e912f9d4f1f07c64beea1fd117850fc", 0xd1}, {&(0x7f0000000740)="11755396969567b347fa4dd6fb3382c2d1f10526a1d3fcb8e7491359ea215827dc29822f65fe669b94025ef073b56ba40de081a0d8b599ae3895f6913bdcced1f963fc8cb68ecc4408e974af67bd78963aca271d416009b866845fc10879569e8bbe1ab5b8afe16506725ea5aa3f5e0ff7b86857d271efec105d4e0e3cbd8ebf0ed0a006d708bf875544d14949b3e1bb4e56232d9745e5a99746a7fe98d3a8f9f742c29fdf82a5bbfeae2651f0709deac5968024c5666806ba067a", 0xbb}, {&(0x7f0000000380)}], 0x4, &(0x7f0000001000)=[@rights={{0x1c, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r5]}}, @rights={{0x28, 0x1, 0x1, [r8, r0, r5, r8, r3, r8]}}, @rights={{0x20, 0x1, 0x1, [r2, r4, r1, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="65315ddbf2c510f72a1c0f7d4a8077a2bfc6cec8b5226561f4ebc9271ad803742512e8c387ff675678d10f522a9d56872d797ff1c47bd4a21591f8918e923a3ac0f0f9ec140d6c18f27ac30355428226b1fb2635d2225bc1933ba77702ecaf775d1c2fa1134b5d6b048af3890b05cc775c6e379abcd0348fb2bb824022eaf4df62e81aaf25de9cd15d524f616a17517858ddda49072bf1df2facdb8924edd55194d3ae028305ebc1a2b62d3f33c31949e55fa0dad18eb4c890259d6a09fe648a1e6023a85ffbf19cc9ab849a27fcd211ae1cb9ee0d1cbe9a30b513130488371a2584591392746438597ccdf320463f38c69d3d8a8418c2f6", 0xf8}, {&(0x7f0000000880)="e7f38ae12d9d9d330f55b481dd78550e1b497cea23c24b866b11ac54121e3a22a2ad1a52", 0x24}, {&(0x7f000000a2c0)="620ca759eee56c284ee7d2a9124bb4e6219c000963f0199154969574c54af56119537ba90be5f5471301a580874ea991bb9749bfddce4fc6b3efbe0781caada584efbdf4c7ae9387c912018e61cdaecec49c064f9510eeb36ed65a396c3e16feeb7ebc0b743f2b55073b6143d195cbc94944de9ee4d0bbaca5b06fe591f2a1e2f81ea259cfe7ca2cfa4cd810664177edafaf5c379625959b44bb1b9d415cc41e3c94647f67d4148d3648d6c0fcd794ea62a839e987453ec49231ff3b8ab34454fe97c0b054c3776ec88081cf08cf402666aecb671caf9660b110e8026376ca8d744fbcdf23a44a0cc2d5e087d6ddb7f6b894aaefb1d281d39a0b1257922463662463811408e45bd558c5b33443d45ac5e0cc7c26ed10d69c94fd8e0620508af318888c27b242539fe47dbaac18cf91a7fd4c1ee43169923eb2626dd079ec7f076cae5d5ab607ea5f43fd6f35aa40917c6e39122355bb9a5caee3ea050386e097924c9b6ea60ee1fd069873b0c199b796efaff991ad8ad123e796cd9b7d9285c4b65e514ab7d74b7faffaf3f20b42eec718ca41fd1b632272a3fc398787c35ea78fc2fbb9a39ab0882450c1e7159ecafbb8f964990f198f96ce5933caa05fc0af9a8787d5bae5988d25fd4951b3e2911f9e05c3b290836f53f7ec6e56209ca3ef28eab4b628bf66c49fe5d4024b49d66a6746de70a8b3cae777cbd34412f43ddb9f188f9c8c7a7e056dc107e46941411c55328040ae389a6ee85d4eeb4f6858b3d87241e15f468ca48fb543ce3ee6eec77d9da04e1d794f7786d8089bdab56cc4b653009fc1a9bea15afbde58f43b3805727d5bb26cd5420c01f117c271a043f38915930008c1e4e944818dfd50b76c01339256ff5fbfa036949b0c39fbb6fbd1e96b590577a3d1e5248c1754e92723415cff1d2f18069efe6e6d0274bdb9e873b7d5bf08acaeeaeb84a48a9a5536922344961291c9914d1e5f7f892e252b9cb6797504d9d83a6f97d22f9c055f6b2909f379256ca576913e3e95e2db4455c5893d405f92995baf69a0d0fdd498988a529f85214adcbd5baa7fbb82165f0f6812feccc54545bc4100304d8cd01ca6dfa083d80216e2ca3e10376cfc9198ae963fb416e2d40326a662ee6a2c56ba908ebe62a4da5e91f6a73eb578b7a74409746217397cc3f36885124c665fde7891ac25586143b172427c58ac6d53717d57a25d69f4926396c7aa9ad2b5265a96cb6524bf053c8011df5d78e6d287ad4edaab858ac0b90942b25e85b34e4825088c5ef91d084f8a6e0ae28347925d9041682e90f0ba5ad4360366e1fbdea2adb54e3556adc9f914c4470b99cf6fa98e2035cd246fe004b8a0ab8f54b6d32f4bc7dcc28b667307b263aa5e572d9fca1a97e530df6745c3dc44f0f640393288ee1e331ddd547f3e7bf5bbcd5266d9588498f63f19159b3ec4e58c4680fa41a298b4290b210c6365d45fd453105a63182c2fdc567a270baebdfb7b57630d80beb07429cd344577c8725772799e4f5cc04cf35e7fb7a8165a021ef7ba4623897a03f11b73dca9f5aa2477be50fddd20ab71d3b66d4c3de7fdcf2cf148ea1ab351bcb2be74f78fe934409c303693f720a075c3ee7e3e9601e69bc79e83ed2e29a0c6943ca228222b0ed7829229e55dbbea22db7551144d1ea711342dab3d7f26eb51cb7a6ea10e4b6cc6a9780f68d313a0134df941be6c40ca01d6a830501a5c6dfa458d3700b6c6df637741e124efc30d2b02c3aeabf7bf787e56358f82e444f4b441bb268ddf8474dce3e2ef65ae3ba645a806a6d4b31387ea2ae0a752f7f174aebb2a1a83af272c075633aba5ff846fc8c451e08496113d3d0fcf6b253ff668789858e64af34d7854338db996f9f05b020539b20b74a50a61cd07dc1a6f4c3158e47db01f3cca6137c079a23a02a69fd913592e72a86f3befe1b8bf804b6af0c818b356f02440fee0996a017f561645ea6a48fe280d72bd3767439325fd23775b0552ade0e2706077926edc3865e6d0e5cf099fb9629fee023f08a4764cbc9a63b4879aa97690d01a53b18657aad39768a86dd7d795a0af038e5412e21df96e37dfb31d01c4a8c0dbe034211622a10abcd5f112c2c06fcf2216d6c6947338e816b760bccbb4464ae78939b8d71541d4361c704b16473958abe04ac4ea4350e95c94dd5d539dac284b32357977c1a17f95e4884e8a63b3dfccb2e68762792fd037a586dd46f79ec3a0e86d2699c50a10005dc9374d8fb62abc4529cdf2c881df7a352217078ab220001d9b5a43f3c8d1c94f2497c6ba7b8f46c406f99c7ba43e54031e7a3ad60e449ac434c819e463971fa56e2d7efcd2fdfa5bf1ce0f0015c7b913387d43a0d5e415aae0e1e382be706ab9850a56f73d737e6f4cb500c2e0eac10043e548af0dc466c090058296f82e6d1921d3d891745ffc0b9c9ba00bfc8f4a271d6467c1c9e14c33c4e70a02be6e31265df1b403ab43887a64214f40c3689ff8771935edcf4751b440bc23505d5ac48b097509e95c587f15347638fe01929fb08b115962b3ff0223f0b297fee4643755d69cc99467adfef3638693d42f9bc5221b8904504317570e930a7726865ad3fa5332d406701c1ad577f00addbabe52bb845616d204930e9f348e7c2e6fc78780dcf6ca1a119d4be0c5ed513468768cf369a846ede782e57a6facf921ea6d02a5e3a3114b134c5369305a080f4cdb2f778bb820cc742730871488c7005c17ccf3c643f1e9ab37b21c87fb512fb31755e86aa54620587433f71186b7a661b9fd1b2fb68eb7eafca51e801050ec86c046217012f8199054f9660d1cf2b750e6fa92254671d97e01488fc7eae52d791a7483d33ed4246322d5f6569d873510a938a898317cd4dbd2875959b708e0eac00e4b26b3ec9ab976ac309b8b210b95693b0c8863a6fa12b68e5636d2d0906c1b44ea72d8607155438e331479a835deeb71b635dd4a741f662e2ed4287daf0f9d1233b71fe61b5058a5538e4f064bb1f0dbc3069b9d502aaf7358641fd2cd17cb5b65de309476435dd0815a3caef3b4fd5a1441f40bfacdb335cb01d12628f2211288822a9aaf0fb434c190c91f12204d39f9afd848d7f7316c5a54075048e0d64def0acdcea409ab554d77caef19017c66797f305fc2b09f383af1ad025ce5b6bd1c95698c9cfb85c0d9e799f4b484a665b54eef0ecb168aafea341d1c077e0af9330f69e647be94ab2971aa6ca49de4d4fa8d2a361198e29222ac565f671fd2aa7b8de0e089984293175fdb4d000f58da2f1fff4460f9b68248cb3c961d9bdf915871ef2470dc5eea523e41d48fff9d41a2dc27dc0bb4ddbdf35464ba6c9e7de4e8d06acb19bc711b6eeaf879da09d3291ba9c1084273cf6ddacac74d07de51a166d460fe51502dd3630bfb1db6314e213201a7c4fc2441513307ed10de8f7a20769e46444f1224c2c9d678f7ad82c51c66bb56300bcc2989abb19aa6dad07308bd4fc6ab4c6b05d1a0e9d035bf0f685729e6d5e8e042558c1a3bc8ff57908d70d021c51e47449519a7e7eacfecc9e75ba1bfa7b4a0e84feff134f0a94190b41ef16e6fbb83f24711c472fc1d781f4bfec0770152917e71b03324c2da1fbbf2cc3ea0d44b8f85cbdaa3a863fdc1211dedd9321c98cb863e611327b0c8d4c156794b411718d5b4f31c8f64bef3e7039672b79ee2c8a37124eeb23d246e4ea9742115e0b04b402e8ad41490dc99ca16d6267c1a4d3fa7ec43cb7425f3d9649b181e50ce955bc2b91f000966ecd3e271195e29ca7b5b1008de830a35db8c89d27539940a62181940b37466adb023efc900315554e8bb64b5405396f25328064a94f8d485a1728163727d18fab7e658caac360f59ed16d6fcdf5e35c0bb9e4d8b6bcd355a7a4b2b3d12d6e656eabcb455eaa2b2c42dc0ebfb79611b790d12c10edc70decb5a56c4541c107fba5402c98ec9adcdcab646b3b45ea166ccc345fe4f6c3b098d45a65c3dd3be27fe13dcdb9c216c4b6fff96fb2ebd06cb51abc0e277de3a8343bfb89450471748ac1c644c7b270bc83a50e32f5f64de51ac81c672f1fdc98220852987371d4e5f5da9c80c327d6fae3f17c1e322c0ac806bf043b99dc152b35dfbd6d8e97f5a2a5073f4e8bc76483e5013f555783b67cc45fd096ec20272cf18eeec376ff231c24b0a6a8c27131815bbe66dcdf7fda6c9ca671dc16dade901c01f0277d6d0af3d8f6b2e32da73b0a1958ee3e551d14c48e048bec4aa6c120b6f573e6703d0426930dd72cf9cac9dcfdd1e77706c8e46ddd367c84b2e756140f9097cd210bd42389371ba95862b422b35fb6522eddec8c21a612ed33c9787fc947503b2b885ff8b3701835466a79621de7625e8b1c9edfaf0fd6b6c690df28d118e47db904865edb6209789cad37ff92af85fa0e43f384c39555df40199187937f6d3d5767129514ecafae5bdf0be40847317a8f8e850732238c983fffebc0f838aa647affc6355e468b265d78a9b84cff5c65c164a9282db1948b53e36c18a5568e8aa4895cacc8a39e40d0535b911b2e1915d5c5ea56ee6ba5814014829f8c606269c58cb1237a5643233979329034f00c6eebba144d53168cfc94af8c37e37f1519c0451dbb234b32b2fde0895dd86cb68464587da7844bd674445d540a732f538b723e1f4f38df757914c5fcbb529b46e32136353348bbb7805297fffc8cca77dc9946bf7c37900baf97f73a6e0e9ab4b009116bbbf47d54f0ec034dcf09c29a163fa87af44e4adb2c0570bbfb7bbd1794254f263defbc9e2a6663ab14a5480bcb4bdf4bef3a03b1fecbeae67e3307ea9883418d7f51493c84952f9f94c862acf547cb7104e87fe1365a56b492c0f1a86d404b6c8b400a44b2a43110dde43888a16a32e933f9e4066c3dd4afefbda3898470f26e7774d50abd60bcfb8da97dc68c97baabd0217afc78a9170f7690f87ea495d054b7e28e91ecff4ea4786fe26d8af6d16cc954825518c40923713912c46c9d86c1d21af3e21ee3251d8aecb7202d83977492683ae498f585debfb8ea0c32fb5c9abbf5aaab8c43e35618bd52b2c4402c2a1e3a0baed5278da219556b08cce9ae0b3d70b38c56465927e163728124ed0d37feb9dbaa5ebbb5d03ba0f13990ef2416583acacf8e136b84cb8c138a48aff972af64fb65e68d2a966e646b9a2a99286b6d854ce0f5c8345abfb583430620e33a30ff798e82ff0e81ad7c2ab12811e69b1004cf26b7d7298f95aba56f5171c6aa47ed5982e15fdc30b37d6a3296e55dc7acc95fc35675df6c435f1ae0e0eb938773541473669c6c90f3c4dae8460b1cc1ddf3ae132c7884e807bf3b6ce9a45c05a30e6da4ff5598f6f177cc582effa0099a7ae91db90c2011d8d7c7ad78f5fa238a75a944b2723ec638a8f5dd05e36dee530e1dbc24bd88156b102b53c1bfac70051238cde50586839b18c9b19e8e54797d24b7084384a3c585887a74d911f7693e78a3668a46dfb6f05e1a06f58d5ab4cc4a905feebc0fb0535af47cabdefe734f27a033d4540016e766d2f6ab7ee52ccb6b2c7bb88e8d171338ec48337158a4930d90ec78fcf2a2695a6a434c178c9f3ebe446a6a863cdd9b601630e0d08cdae95aefeb3c289324fb52c34984a097f48a048b83f944faf0e60b89257e66313cf1b08b4e9f315c4d9f5b39b374227902e8cc90a918862bf1696671d030017c11ba5de4e46d833d27b8f957a8ad3510d755bd431049207676eb29f07db261e8d3f38e81455b9dac0fcf8c615c2", 0x1000}, {&(0x7f0000000bc0)="1a85f8066a57f6dcc6fa67f8264b09f3e1fddfa86554bbd0ea6638edfe99204645283b415cd23b9fef38d7644b87feb2dce0f89dfcc4cb8150ea85ce7125fd3c974326ac249af6", 0x47}], 0x4, &(0x7f0000000d00), 0x0, 0x20000000}}, {{&(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001380)="36e4f2d772d3488659d039984843ae87b54fb3aa353e6dd8a05df949128f724687ecc91c7b8421e5b3531adebb8259b3116281ddf4d96471bb61ee7031abb194acb0ec8cd143e028915322fe2d11c8b0e1bc5e97a375f35d0b9d3730945861e78361cb5e7fec20ebe94c58405787aceaafeb2960122f09e3afe924199d925174b64ac632b1a7e197605667d65ea4760f6ab6846ccb599d4f4a33973b5087a7ef195e70664b0c55ebc0e259697fd69b278695d403339796b2647356d7adafd944d2b462891e119176", 0xc8}, {&(0x7f0000000f40)="89de174a0b4dba46665eb6d3f0379c8031aded719932ccb26a25eba2c11ecce158a7dbd951cfd74c5d081d3e1dd15c5773d88072d2c7cf429fc78c0880c1e0d5e227421318e2bbddf942c9c9244d543731bf934ca268b22f5c108afa3dc30695e747abb0b98cb0270a784ebfc1d4ec2b7f2a42810b90f25a1fd9b8a4e6c2a6e6bce257a9ee2cefd698b06b3925d1cdca0676d6e0e882b12f512cfbbe9f559f73aba713defc8d12fefe27", 0xaa}, {&(0x7f00000010c0)="792cedf2b3c4013c201c5bca7a4691124a77cd3fabbbab1ad60cb365a6dfc92fd8be1420c963396ec5fb5b0e9e2d5f05d732fd33ad51d6153f74a0174635872bd6d1cf292816b8cf9e1fec7b2444d54c48b98db214971df331f69e799b8b4b5337bbbd8d87248d15ab73dff7a0e02750870fddfacfcf573a5b9a64fc36df5cd0ee54b26dea4f18cede1bcb4fa40b7351bb16b220e909840b2c9c04601b7a3ca876af87a906a36142953e890b6a73eacf3d61fe238a97ab7476849141ccff2e3689a223", 0xc3}, {&(0x7f00000011c0)="062c30b8b3b1412eb1697840e985d36fca19661a652d4d987d8df58f0b431ab31fdfd31fc6486bf9f293f50b66134a255d9538365c658f99d45efc4fe8853a195a65e9572e7a8248e21a17930ba8750d77139ea2f94fa3dfb84d7439e8ffea5d4f57cbc29884a886075a82fabc413192141b2a2392ff83918b6aa20f62918b0f395a760bd3200367207177", 0x8b}, {&(0x7f0000001280)="b1d50167bac780feaa2d2785366dd32a44660bd43ef72950217c23aba99e911b32fd34f7cb2fdf", 0x27}, {&(0x7f00000012c0)="3071841f4b2e8277be7199cb01af088bca1cb247be314385765fb166d0977a124dd7c412ed5fd0c34d56bf8e262371adf1c53c203966c051afaffcdba4e7", 0x3e}], 0x6, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r2, r2]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c}}], 0xd0, 0x40000}}], 0x3, 0x8000) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd08, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r12, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r10, &(0x7f0000000440)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x400040, 0x80, 0x2, 0xfffffffb, 0x2, 0x0, 0x0, 0x0, 0x3}}, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r13, 0x928, 0x3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 336.291093ms ago: executing program 0 (id=3569): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f3066baf80cb8b58eb48aef66bafc0cec0fe72d16da0000c4c37d054e0000b93c090000b80000c0feba000000000f30df180f20583e650f01c9660fdcd42e0f78dc", 0x4e}], 0x1, 0x90, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001400"/18], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x402000, 0x0) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000180)=0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}}, 0x0, 0x3e}, 0x28) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x58}, 0x10) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) close(0x3) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000001680)={0x2020}, 0x2020) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x40004) 205.563043ms ago: executing program 4 (id=3570): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x9, 0x2, 0x7, "d171a6100600000009e49200", 0x802046, 0x200068e}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) listen(r1, 0xf) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r2], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4000) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) unshare(0x20000400) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000440), 0x21001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xad1, 0x0, 0xc}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r5, 0x60}], 0x2, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000008080), 0x1c3581, 0x0) 0s ago: executing program 2 (id=3571): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) connect(r2, &(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80) getpeername$netlink(r2, 0x0, &(0x7f00000000c0)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xfffffffb, 0x5, 0x7, 0x13}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) connect(r2, &(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80) (async) getpeername$netlink(r2, 0x0, &(0x7f00000000c0)) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xfffffffb, 0x5, 0x7, 0x13}) (async) kernel console output (not intermixed with test programs): ond2 [ 968.396291][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 968.396307][ T30] audit: type=1400 audit(968.366:847): avc: denied { write } for pid=18064 comm="syz.3.3009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 968.529446][ T30] audit: type=1400 audit(968.496:848): avc: denied { read } for pid=18064 comm="syz.3.3009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 968.714966][ T30] audit: type=1400 audit(968.536:849): avc: denied { bind } for pid=18064 comm="syz.3.3009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 968.737959][ T30] audit: type=1400 audit(968.536:850): avc: denied { ioctl } for pid=18064 comm="syz.3.3009" path="socket:[45263]" dev="sockfs" ino=45263 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 969.335332][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 969.341748][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 969.351415][ T5912] usb 4-1: USB disconnect, device number 14 [ 970.327875][ T30] audit: type=1400 audit(970.296:851): avc: denied { map } for pid=18106 comm="syz.1.3020" path="socket:[46133]" dev="sockfs" ino=46133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 970.566418][ T30] audit: type=1400 audit(970.536:852): avc: denied { map } for pid=18105 comm="syz.3.3019" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 970.720186][ T30] audit: type=1400 audit(970.536:853): avc: denied { execute } for pid=18105 comm="syz.3.3019" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 971.425681][ T30] audit: type=1400 audit(971.336:854): avc: denied { setopt } for pid=18123 comm="syz.4.3023" lport=47779 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 972.480970][ T30] audit: type=1400 audit(971.686:855): avc: denied { map } for pid=18130 comm="syz.3.3024" path="socket:[45318]" dev="sockfs" ino=45318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 972.511148][ T30] audit: type=1400 audit(971.686:856): avc: denied { accept } for pid=18130 comm="syz.3.3024" path="socket:[45318]" dev="sockfs" ino=45318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 972.746727][T18126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3023'. [ 972.892228][T18126] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3023'. [ 973.312676][T18141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=18141 comm=syz.3.3025 [ 974.644892][T18141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3025'. [ 975.224013][T18147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3028'. [ 975.233129][T18147] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3028'. [ 975.472457][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 975.620607][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 975.632261][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 975.641604][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 975.651228][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 975.658937][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 976.455282][T11703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.076852][T11703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.187749][T18159] chnl_net:caif_netlink_parms(): no params data found [ 977.331838][T11703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.782108][ T5848] Bluetooth: hci5: command tx timeout [ 978.404876][T11703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.815957][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 979.419468][T18159] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.459800][T18159] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.595334][T18159] bridge_slave_0: entered allmulticast mode [ 979.603609][T18159] bridge_slave_0: entered promiscuous mode [ 979.625640][T18159] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.637288][T18159] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.644858][T18159] bridge_slave_1: entered allmulticast mode [ 979.653118][T18159] bridge_slave_1: entered promiscuous mode [ 979.880940][ T5848] Bluetooth: hci5: command tx timeout [ 980.303508][T18159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.437697][T18159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.556654][T11703] 1{X: left promiscuous mode [ 980.568281][T11703] bridge0: port 3(31{X) entered disabled state [ 981.466130][T11703] bridge_slave_1: left allmulticast mode [ 981.479332][T11703] bridge_slave_1: left promiscuous mode [ 981.497567][T11703] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.530252][T11703] bridge_slave_0: left allmulticast mode [ 981.545496][T11703] bridge_slave_0: left promiscuous mode [ 981.558696][T11703] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.780093][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 981.780109][ T30] audit: type=1400 audit(981.746:858): avc: denied { mounton } for pid=18231 comm="syz.4.3049" path="/598/file0" dev="tmpfs" ino=3176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 981.940872][ T5848] Bluetooth: hci5: command tx timeout [ 982.699315][T11703] team0: Port device geneve1 removed [ 982.880204][T11703] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 982.900155][T11703] bridge1 (unregistering): left promiscuous mode [ 983.130009][T11703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.140634][T11703] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 983.153783][T11703] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 983.167189][T11703] bond0 (unregistering): Released all slaves [ 983.291739][T11703] bond1 (unregistering): Released all slaves [ 983.419126][T11703] bond2 (unregistering): Released all slaves [ 983.455459][T18159] team0: Port device team_slave_0 added [ 983.464141][T18236] tipc: Enabling of bearer rejected, failed to enable media [ 983.474146][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3050'. [ 983.476058][T18159] team0: Port device team_slave_1 added [ 983.540461][T18234] xfrm1: entered promiscuous mode [ 983.559488][T18234] xfrm1: entered allmulticast mode [ 983.566150][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3050'. [ 983.627459][T11703] tipc: Disabling bearer [ 983.644494][T11703] tipc: Left network mode [ 983.662606][T18159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.700149][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.737877][T18159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.750354][T18159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.758324][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.785673][T18159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.854387][ T30] audit: type=1400 audit(983.826:859): avc: denied { view } for pid=18247 comm="syz.3.3054" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 983.956625][T18159] hsr_slave_0: entered promiscuous mode [ 983.963945][T18159] hsr_slave_1: entered promiscuous mode [ 983.973260][T18159] debugfs: 'hsr0' already exists in 'hsr' [ 983.979266][T18159] Cannot create hsr debugfs directory [ 984.020904][ T5848] Bluetooth: hci5: command tx timeout [ 984.350947][T16997] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 984.504176][T16997] usb 4-1: Using ep0 maxpacket: 8 [ 984.545968][T16997] usb 4-1: config 162 has an invalid interface number: 116 but max is 0 [ 984.570960][T16997] usb 4-1: config 162 has no interface number 0 [ 984.597659][T16997] usb 4-1: config 162 interface 116 has no altsetting 0 [ 984.634435][T11703] hsr_slave_0: left promiscuous mode [ 984.637531][T16997] usb 4-1: New USB device found, idVendor=0499, idProduct=13b3, bcdDevice=f0.d3 [ 984.654116][T11703] hsr_slave_1: left promiscuous mode [ 984.660037][T11703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.660961][T16997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.689071][T11703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.196534][T11703] veth1_macvtap: left promiscuous mode [ 985.208455][T11703] veth0_macvtap: left promiscuous mode [ 985.225122][T11703] veth1_vlan: left promiscuous mode [ 985.237704][T11703] veth0_vlan: left promiscuous mode [ 985.340042][T16997] usb 4-1: Product: syz [ 985.344294][T16997] usb 4-1: Manufacturer: syz [ 985.348984][T16997] usb 4-1: SerialNumber: syz [ 985.637585][T16997] usb 4-1: USB disconnect, device number 15 [ 985.656529][T11703] pim6reg (unregistering): left allmulticast mode [ 987.001022][ T841] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 987.260887][ T841] usb 4-1: Using ep0 maxpacket: 16 [ 987.326300][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.453144][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.465136][ T841] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 987.480162][ T841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.490180][ T841] usb 4-1: config 0 descriptor?? [ 987.616446][ T30] audit: type=1326 audit(987.496:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 987.640533][ T30] audit: type=1326 audit(987.496:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 987.776995][ T30] audit: type=1326 audit(987.496:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 987.849079][ T30] audit: type=1326 audit(987.496:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 987.941909][ T30] audit: type=1326 audit(987.496:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 988.146925][ T841] mcp2221 0003:04D8:00DD.0005: item fetching failed at offset 1/5 [ 988.160911][ T841] mcp2221 0003:04D8:00DD.0005: can't parse reports [ 988.167603][ T841] mcp2221 0003:04D8:00DD.0005: probe with driver mcp2221 failed with error -22 [ 988.180481][ T30] audit: type=1326 audit(987.546:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 988.207061][ T30] audit: type=1326 audit(987.546:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 988.241158][ T30] audit: type=1326 audit(987.546:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 988.279041][ T30] audit: type=1326 audit(987.546:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 988.306271][ T30] audit: type=1326 audit(987.546:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6f8eec9 code=0x7ffc0000 [ 988.391838][T11703] team0 (unregistering): Port device team_slave_1 removed [ 988.412356][ T5969] usb 4-1: USB disconnect, device number 16 [ 988.548271][T11703] team0 (unregistering): Port device C removed [ 991.277727][T18314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3069'. [ 991.941106][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3071'. [ 992.842101][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.851591][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.901077][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 997.984195][T18159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 998.009916][T18159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 998.036587][T18159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 998.077181][T18159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 998.245652][T18375] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3086'. [ 998.346184][T18159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.384532][T18159] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.415219][T11626] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.422392][T11626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.479415][T11626] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.486623][T11626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.913082][T18159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.206195][T18159] veth0_vlan: entered promiscuous mode [ 999.334335][T18159] veth1_vlan: entered promiscuous mode [ 999.421707][T18159] veth0_macvtap: entered promiscuous mode [ 999.442551][T18159] veth1_macvtap: entered promiscuous mode [ 999.526767][T18159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.583823][T18159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.640386][ T2909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.667428][ T2909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.689823][ T2909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.709373][T11701] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.908554][T11626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.923858][T11626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.993622][T11701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.013391][T11701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.650915][T17200] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1000.939288][T17200] usb 2-1: config 2 has an invalid descriptor of length 97, skipping remainder of the config [ 1000.951530][T17200] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1000.965088][T17200] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1000.980103][T17200] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1000.995334][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1001.008773][T17200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.018518][T17200] usb 2-1: Product: syz [ 1001.023800][T17200] usb 2-1: Manufacturer: syz [ 1001.028601][T17200] usb 2-1: SerialNumber: syz [ 1001.481013][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1001.489709][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1001.501603][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1001.509311][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1001.738133][T17200] usb 2-1: USB disconnect, device number 8 [ 1002.056378][T18401] chnl_net:caif_netlink_parms(): no params data found [ 1002.164118][T18416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3092'. [ 1002.623586][T17200] usb 1-1: USB disconnect, device number 16 [ 1002.649009][T18401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.170674][T18401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.192138][T17200] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1003.287686][T18401] bridge_slave_0: entered allmulticast mode [ 1003.331618][T17200] cyberjack 1-1:0.69: device disconnected [ 1003.560942][ T5848] Bluetooth: hci4: command tx timeout [ 1003.671012][T18401] bridge_slave_0: entered promiscuous mode [ 1003.679676][T18401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.692987][T18401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.703196][T18401] bridge_slave_1: entered allmulticast mode [ 1003.719624][T18401] bridge_slave_1: entered promiscuous mode [ 1003.755239][ T2909] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1003.792055][ T2909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.858374][T18401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.004407][T18401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.983445][ T2909] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1005.051073][ T2909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.127907][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3098'. [ 1005.137085][T18448] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3098'. [ 1005.362730][ T2909] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1005.371462][T18454] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 1005.375418][ T2909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.414982][T18401] team0: Port device team_slave_0 added [ 1005.425705][T18401] team0: Port device team_slave_1 added [ 1005.595733][ T2909] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1006.060088][ T5848] Bluetooth: hci4: command tx timeout [ 1006.064341][ T2909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.107773][T18401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.161392][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.191033][T18401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.209431][T18477] netlink: 'syz.3.3105': attribute type 10 has an invalid length. [ 1006.330260][T18477] team0: Port device dummy0 added [ 1006.417083][T18401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.427493][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.456735][T18401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.436339][T18401] hsr_slave_0: entered promiscuous mode [ 1007.444439][T18401] hsr_slave_1: entered promiscuous mode [ 1007.464199][T18401] debugfs: 'hsr0' already exists in 'hsr' [ 1007.498088][T18401] Cannot create hsr debugfs directory [ 1008.050658][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 1008.103329][ T5848] Bluetooth: hci4: command tx timeout [ 1008.708901][T18513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3109'. [ 1009.382775][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1010.155653][ T2909] bond0 (unregistering): Released all slaves [ 1010.180906][ T5848] Bluetooth: hci4: command tx timeout [ 1010.194204][ T2909] bond1 (unregistering): Released all slaves [ 1010.340219][ T2909] bond2 (unregistering): Released all slaves [ 1010.647353][T18521] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1010.702398][T18521] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1010.775590][T18521] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1010.877300][T18529] IPv6: NLM_F_CREATE should be specified when creating new route [ 1010.885133][T18529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1010.892340][T18529] IPv6: NLM_F_CREATE should be set when creating new route [ 1010.899538][T18529] IPv6: NLM_F_CREATE should be set when creating new route [ 1010.918928][T18529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=18529 comm=syz.3.3112 [ 1010.931774][T18529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=18529 comm=syz.3.3112 [ 1010.944520][T18529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18529 comm=syz.3.3112 [ 1010.957067][T18529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1012.445976][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3120'. [ 1012.946381][T18579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3122'. [ 1013.011250][T18576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1013.324176][ T2909] batadv_slave_1: left promiscuous mode [ 1013.329831][ T2909] veth1_macvtap: left promiscuous mode [ 1013.369011][ T2909] veth0_macvtap: left promiscuous mode [ 1013.388124][ T2909] veth1_vlan: left promiscuous mode [ 1013.396528][ T2909] veth0_vlan: left promiscuous mode [ 1014.472704][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'. [ 1015.767600][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1015.815447][ T30] audit: type=1400 audit(1015.737:924): avc: denied { write } for pid=18615 comm="syz.1.3132" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1017.379602][T18401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1017.399879][T18401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1017.424582][T18401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1017.440372][T18401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1018.301917][T18401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.324002][T18401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.348222][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.355385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.396407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.403613][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.154098][T18401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1019.559256][T18671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1020.127324][T18401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.200585][T18401] veth0_vlan: entered promiscuous mode [ 1020.211875][T18401] veth1_vlan: entered promiscuous mode [ 1020.238267][T18401] veth0_macvtap: entered promiscuous mode [ 1020.314747][T18401] veth1_macvtap: entered promiscuous mode [ 1020.393561][T18401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.442661][T18401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.478259][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.503518][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.524982][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.574567][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.701097][T16997] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1020.729397][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.756303][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.800667][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.816438][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.865836][T16997] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1020.912248][T16997] usb 2-1: not running at top speed; connect to a high speed hub [ 1021.055789][T16997] usb 2-1: config 56 has an invalid interface number: 216 but max is 0 [ 1021.078825][T16997] usb 2-1: config 56 has no interface number 0 [ 1021.550309][T16997] usb 2-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 1021.561841][T16997] usb 2-1: config 56 interface 216 altsetting 224 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 1021.574671][T16997] usb 2-1: config 56 interface 216 has no altsetting 0 [ 1021.590670][T16997] usb 2-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 1021.601416][T16997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.729481][T16997] usb 2-1: Product: syz [ 1021.733816][T16997] usb 2-1: Manufacturer: syz [ 1021.740946][T16997] usb 2-1: SerialNumber: syz [ 1021.749208][T18686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.275776][T18713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.288023][T18713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.301209][ T30] audit: type=1400 audit(1022.197:925): avc: denied { bind } for pid=18684 comm="syz.1.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1023.345846][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1023.355510][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1023.365010][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1023.372770][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1023.385502][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1023.802737][T18725] chnl_net:caif_netlink_parms(): no params data found [ 1023.840891][T16997] hub 2-1:56.216: bad descriptor, ignoring hub [ 1023.853502][T16997] hub 2-1:56.216: probe with driver hub failed with error -5 [ 1023.878617][T16997] option 2-1:56.216: GSM modem (1-port) converter detected [ 1024.035178][T16997] usb 2-1: USB disconnect, device number 9 [ 1024.514495][T16997] option 2-1:56.216: device disconnected [ 1025.436026][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'. [ 1025.476754][ T50] Bluetooth: hci1: command tx timeout [ 1025.984960][T18725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.994874][T18725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.029083][T18725] bridge_slave_0: entered allmulticast mode [ 1026.095455][T18725] bridge_slave_0: entered promiscuous mode [ 1026.151070][ T54] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1026.185850][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.200682][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1026.241332][T18725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.355604][T18725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.369992][T18725] bridge_slave_1: entered allmulticast mode [ 1026.378441][ T54] usb 2-1: not running at top speed; connect to a high speed hub [ 1026.387489][ T54] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1026.398388][ T54] usb 2-1: config 1 has no interface number 1 [ 1026.859535][ T54] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1026.891693][T18725] bridge_slave_1: entered promiscuous mode [ 1026.903157][ T54] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.917933][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.948791][ T12] bridge0: port 3(netdevsim2) entered disabled state [ 1026.967408][ T54] usb 2-1: Product: syz [ 1026.972041][ T54] usb 2-1: Manufacturer: syz [ 1026.977052][ T54] usb 2-1: SerialNumber: syz [ 1027.042863][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode [ 1027.174787][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): left promiscuous mode [ 1027.349853][ T12] bridge0: port 3(netdevsim2) entered disabled state [ 1027.363566][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.375405][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1027.409303][ T54] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1027.441118][ T54] usb 2-1: failed to enable PITCH for EP 0x82 [ 1027.457137][T18725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.540851][ T50] Bluetooth: hci1: command tx timeout [ 1027.545162][ T54] usb 2-1: USB disconnect, device number 10 [ 1027.572877][T18787] netlink: 'syz.2.3166': attribute type 10 has an invalid length. [ 1027.590062][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.592412][T18787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3166'. [ 1027.614763][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1027.640353][T18725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.656436][T18787] team0: Port device geneve0 added [ 1027.804749][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 1027.824517][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.838669][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1027.986313][ T2909] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.000870][ T2909] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.522310][T11622] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.532943][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.567543][T18725] team0: Port device team_slave_0 added [ 1028.598471][T18725] team0: Port device team_slave_1 added [ 1028.651254][ T24] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1028.679359][T18725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.689659][T18725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.737189][T18725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.772848][T18725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.779866][T18725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.880925][T18725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.893247][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1028.920852][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 1028.941535][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1029.019168][ T24] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1029.130983][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.145810][ T24] usb 1-1: Product: syz [ 1029.190896][ T24] usb 1-1: Manufacturer: syz [ 1029.222793][ T24] usb 1-1: SerialNumber: syz [ 1029.231823][ T24] usb 1-1: config 0 descriptor?? [ 1029.237325][T18777] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1029.266827][ T24] option 1-1:0.0: GSM modem (1-port) converter detected [ 1029.375945][T18725] hsr_slave_0: entered promiscuous mode [ 1029.391847][T18725] hsr_slave_1: entered promiscuous mode [ 1029.398095][T18725] debugfs: 'hsr0' already exists in 'hsr' [ 1029.422197][T18725] Cannot create hsr debugfs directory [ 1029.468422][ T24] usb 1-1: USB disconnect, device number 17 [ 1029.478183][ T24] option 1-1:0.0: device disconnected [ 1029.627329][ T50] Bluetooth: hci1: command tx timeout [ 1029.641114][ T12] bridge_slave_1: left allmulticast mode [ 1029.646774][ T12] bridge_slave_1: left promiscuous mode [ 1029.666020][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.688321][ T12] bridge_slave_0: left promiscuous mode [ 1029.698605][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.137262][T18835] SELinux: Context system_u:object is not valid (left unmapped). [ 1031.208707][ T30] audit: type=1400 audit(1031.177:926): avc: denied { relabelto } for pid=18834 comm="syz.3.3178" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1031.246604][T18836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1031.330367][ T12] bond2 (unregistering): (slave gretap0): Releasing active interface [ 1031.365019][ T12] gretap0 (unregistering): left promiscuous mode [ 1031.371769][ T30] audit: type=1400 audit(1031.237:927): avc: denied { associate } for pid=18834 comm="syz.3.3178" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 1031.416784][ T12] gretap0 (unregistering): left allmulticast mode [ 1031.700879][ T50] Bluetooth: hci1: command tx timeout [ 1033.306746][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.318765][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.553150][ T12] bond0 (unregistering): Released all slaves [ 1033.584483][ T12] bond1 (unregistering): Released all slaves [ 1033.786686][ T12] bond2 (unregistering): Released all slaves [ 1033.819379][ T12] bond3 (unregistering): Released all slaves [ 1034.959429][ T12] hsr_slave_0: left promiscuous mode [ 1034.978716][ T12] hsr_slave_1: left promiscuous mode [ 1036.048759][ T30] audit: type=1400 audit(1036.007:928): avc: denied { read } for pid=18897 comm="syz.0.3193" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1036.099947][ T30] audit: type=1400 audit(1036.007:929): avc: denied { open } for pid=18897 comm="syz.0.3193" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1037.254371][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1037.330049][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1039.247617][ T12] lo (unregistering): left allmulticast mode [ 1039.481738][T18940] 9p: Unknown access argument 18446744073709551615: -34 [ 1040.318054][T18950] netlink: 'syz.3.3206': attribute type 5 has an invalid length. [ 1040.361078][ T30] audit: type=1400 audit(1040.307:930): avc: denied { ioctl } for pid=18944 comm="syz.3.3206" path="/86/file0" dev="tmpfs" ino=487 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1040.582753][T18954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1040.592360][T18954] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1040.605536][ T12] IPVS: stop unused estimator thread 0... [ 1040.765844][T18725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1040.787812][T18725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1040.817272][T18725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1040.844550][T18725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1040.993105][T18725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.033867][T18725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.067313][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.074480][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.158134][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.165251][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.520214][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 1042.341386][T17200] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1042.408269][T18725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.522756][T17200] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1042.533339][T17200] usb 1-1: not running at top speed; connect to a high speed hub [ 1042.551958][T17200] usb 1-1: config 3 has an invalid interface number: 106 but max is 0 [ 1042.560689][T17200] usb 1-1: config 3 has no interface number 0 [ 1042.580944][T17200] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1042.601208][T17200] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1042.619119][T17200] usb 1-1: config 3 interface 106 has no altsetting 0 [ 1042.633849][T17200] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 1042.643145][T17200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.660842][T17200] usb 1-1: Product: syz [ 1042.665028][T17200] usb 1-1: Manufacturer: syz [ 1042.669639][T17200] usb 1-1: SerialNumber: syz [ 1042.693767][T18970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1042.702690][T18970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1042.743137][T18725] veth0_vlan: entered promiscuous mode [ 1042.759086][T18725] veth1_vlan: entered promiscuous mode [ 1042.810654][T18725] veth0_macvtap: entered promiscuous mode [ 1042.830617][T18725] veth1_macvtap: entered promiscuous mode [ 1042.904572][T18725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.948329][T17200] kobil_sct 1-1:3.106: KOBIL USB smart card terminal converter detected [ 1042.961951][T18725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.985206][T17200] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1042.999322][T17200] usb 1-1: USB disconnect, device number 18 [ 1043.069420][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.074354][T17200] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1043.098670][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.125793][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.156701][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.194499][T17200] kobil_sct 1-1:3.106: device disconnected [ 1043.331645][T11701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.362391][T11701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.433548][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.451652][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.910254][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1045.930299][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1045.940636][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1045.964500][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1045.973913][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1046.093609][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.180228][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.392371][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.464895][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1046.494076][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1046.510443][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1046.518908][T19034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3222'. [ 1046.529647][T19034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3222'. [ 1046.545583][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1046.561497][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1046.654212][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.461031][T16997] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1047.610971][T16997] usb 1-1: device descriptor read/64, error -71 [ 1047.719709][ T30] audit: type=1400 audit(1047.687:931): avc: denied { shutdown } for pid=19047 comm="syz.3.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1047.755847][ T30] audit: type=1400 audit(1047.687:932): avc: denied { accept } for pid=19047 comm="syz.3.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1047.871213][T16997] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1047.895534][ T12] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1047.935486][ T12] team0: Port device geneve0 removed [ 1048.011931][T16997] usb 1-1: device descriptor read/64, error -71 [ 1048.032488][ T50] Bluetooth: hci0: command tx timeout [ 1048.048366][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.058040][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.067900][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1048.079844][ T12] bond0 (unregistering): Released all slaves [ 1048.122048][T16997] usb usb1-port1: attempt power cycle [ 1048.184084][ T12] bond1 (unregistering): Released all slaves [ 1048.280243][ T12] bond2 (unregistering): Released all slaves [ 1048.369532][ T12] bond3 (unregistering): Released all slaves [ 1048.386471][T19026] chnl_net:caif_netlink_parms(): no params data found [ 1048.483508][T16997] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1048.531387][T16997] usb 1-1: device descriptor read/8, error -71 [ 1048.600167][T19061] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3227'. [ 1048.664777][ T50] Bluetooth: hci2: command tx timeout [ 1048.813950][T19026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.838636][T19026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.858100][T19026] bridge_slave_0: entered allmulticast mode [ 1048.878359][T19026] bridge_slave_0: entered promiscuous mode [ 1048.906894][T19026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.929251][T19026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.961065][T16997] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1048.967444][T19026] bridge_slave_1: entered allmulticast mode [ 1049.005458][T16997] usb 1-1: device descriptor read/8, error -71 [ 1049.020250][T19026] bridge_slave_1: entered promiscuous mode [ 1049.044614][T19030] chnl_net:caif_netlink_parms(): no params data found [ 1049.127690][T16997] usb usb1-port1: unable to enumerate USB device [ 1049.341910][T19026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.416011][T19026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.592083][T19026] team0: Port device team_slave_0 added [ 1049.616027][T19030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.634807][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.654701][T19030] bridge_slave_0: entered allmulticast mode [ 1049.670561][T19030] bridge_slave_0: entered promiscuous mode [ 1049.695744][T19026] team0: Port device team_slave_1 added [ 1049.709443][T19030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.729966][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.747743][T19030] bridge_slave_1: entered allmulticast mode [ 1049.764370][T19030] bridge_slave_1: entered promiscuous mode [ 1049.969648][T19026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.048418][T19026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.114519][T19026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.205389][ T50] Bluetooth: hci0: command tx timeout [ 1050.341566][T19026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.375031][T19026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.400933][ C0] vkms_vblank_simulate: vblank timer overrun [ 1050.505822][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 1050.667318][T19026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.716170][T19030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.740956][ T5848] Bluetooth: hci2: command tx timeout [ 1050.766339][T19030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.777570][ T12] tipc: Left network mode [ 1051.187526][T19030] team0: Port device team_slave_0 added [ 1051.195908][T19030] team0: Port device team_slave_1 added [ 1051.207209][T19026] hsr_slave_0: entered promiscuous mode [ 1051.213963][T19026] hsr_slave_1: entered promiscuous mode [ 1051.220116][T19026] debugfs: 'hsr0' already exists in 'hsr' [ 1051.232078][T19026] Cannot create hsr debugfs directory [ 1051.471341][T19030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.478297][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.824355][T19030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.869918][T19030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.888056][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.965465][T19030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.197169][T19030] hsr_slave_0: entered promiscuous mode [ 1052.216540][T19030] hsr_slave_1: entered promiscuous mode [ 1052.223271][T19030] debugfs: 'hsr0' already exists in 'hsr' [ 1052.229069][T19030] Cannot create hsr debugfs directory [ 1052.345864][ T5848] Bluetooth: hci0: command tx timeout [ 1052.640914][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1052.875036][ T50] Bluetooth: hci2: command tx timeout [ 1053.037250][ T12] hsr_slave_0: left promiscuous mode [ 1053.047962][ T12] hsr_slave_1: left promiscuous mode [ 1054.257876][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.264625][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.425346][ T30] audit: type=1400 audit(1054.387:933): avc: denied { setopt } for pid=19108 comm="syz.4.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1054.446040][ T50] Bluetooth: hci0: command tx timeout [ 1054.537352][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1054.600245][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1054.901084][ T50] Bluetooth: hci2: command tx timeout [ 1056.008458][T19119] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1056.348976][ T12] IPVS: stop unused estimator thread 0... [ 1056.958846][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.039316][T19026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1057.099819][T19026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1057.206037][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.242273][T19026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1057.317987][T19026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1057.423089][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.535087][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.549559][T19030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1059.020587][T19148] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3244'. [ 1059.029836][T19148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3244'. [ 1059.351351][T19030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1059.532392][T19030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1059.579353][T19030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1060.447074][ T30] audit: type=1400 audit(1059.657:934): avc: denied { shutdown } for pid=19152 comm="syz.0.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1061.276675][T19030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.373250][T19163] 9pnet_fd: Insufficient options for proto=fd [ 1061.981885][T19026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.988696][T19026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.097792][T19030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.115829][T18977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.115925][T18977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.117858][T18977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.117910][T18977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.118875][T18977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.118923][T18977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.333953][T19026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1062.333970][T19026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1062.375693][T19175] syz.3.3248 (19175): drop_caches: 2 [ 1062.557901][T18977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.557997][T18977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.605131][T19030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1062.643167][ T12] bridge_slave_1: left allmulticast mode [ 1062.643220][ T12] bridge_slave_1: left promiscuous mode [ 1062.643377][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.664559][ T12] bridge_slave_0: left allmulticast mode [ 1062.664581][ T12] bridge_slave_0: left promiscuous mode [ 1062.664780][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.970041][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3250'. [ 1063.658453][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.668896][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.679682][ T12] bond0 (unregistering): Released all slaves [ 1064.238288][T19026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.358436][T19030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.419379][ T12] hsr_slave_0: left promiscuous mode [ 1064.444979][ T12] hsr_slave_1: left promiscuous mode [ 1064.468200][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.512839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.608841][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.688948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.907990][ T12] veth1_macvtap: left promiscuous mode [ 1064.913763][ T12] veth0_macvtap: left promiscuous mode [ 1064.919756][ T12] veth1_vlan: left promiscuous mode [ 1064.935084][ T12] veth0_vlan: left promiscuous mode [ 1065.742842][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1066.107154][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1066.745077][T19026] veth0_vlan: entered promiscuous mode [ 1066.815184][T19026] veth1_vlan: entered promiscuous mode [ 1066.897246][ T30] audit: type=1400 audit(1066.867:935): avc: denied { write } for pid=19221 comm="syz.3.3258" path="socket:[52409]" dev="sockfs" ino=52409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1067.010190][T19225] openvswitch: netlink: IP tunnel dst address not specified [ 1067.459386][T19219] nbd4: detected capacity change from 0 to 1024 [ 1067.522549][T19226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1067.538164][T19026] veth0_macvtap: entered promiscuous mode [ 1067.561638][T19224] nbd4: detected capacity change from 1024 to 67108884 [ 1067.597791][T19219] block nbd4: shutting down sockets [ 1067.647262][T19026] veth1_macvtap: entered promiscuous mode [ 1067.688750][T19030] veth0_vlan: entered promiscuous mode [ 1067.726315][T19030] veth1_vlan: entered promiscuous mode [ 1067.758797][T19026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.804536][T19026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.855984][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.865114][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.886007][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.898822][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.933009][T19030] veth0_macvtap: entered promiscuous mode [ 1067.951622][T19030] veth1_macvtap: entered promiscuous mode [ 1067.963904][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 1068.011991][T11626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.017669][T19030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.028875][T11626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.057064][T19231] erspan1: entered allmulticast mode [ 1068.069003][T19030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.077884][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.087318][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.108954][T11626] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.123144][T11626] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.136108][T11626] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.148905][T11626] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.311040][ T5969] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1068.335996][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.351048][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.428575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.442041][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.550889][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 1068.567959][ T5969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1068.586595][ T5969] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1068.600287][ T5969] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1069.122501][ T5969] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.141312][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1069.169890][ T5969] usb 5-1: SerialNumber: syz [ 1069.313328][T19231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1069.535183][ T5969] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1069.645697][T19260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 1069.662978][ T5969] usb 5-1: USB disconnect, device number 7 [ 1071.573488][T19280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3271'. [ 1071.647865][T19282] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1071.965419][T19282] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1071.967280][ T30] audit: type=1400 audit(1071.937:936): avc: denied { connect } for pid=19267 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1071.976161][T19282] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1072.114692][T19289] Bluetooth: MGMT ver 1.23 [ 1072.221425][ T841] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1072.584085][ T841] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1072.597474][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.620790][ T841] usb 6-1: Product: syz [ 1072.633099][ T841] usb 6-1: Manufacturer: syz [ 1072.637744][ T841] usb 6-1: SerialNumber: syz [ 1072.741982][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1072.750716][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 1072.761087][ T5848] Bluetooth: hci3: hardware error 0x00 [ 1074.784299][T19314] Sensor B: ================= START STATUS ================= [ 1074.792100][T19314] Sensor B: Test Pattern: 75% Colorbar [ 1074.799008][T19314] Sensor B: Show Information: All [ 1074.807847][T19314] Sensor B: Vertical Flip: false [ 1074.815099][T19314] Sensor B: Horizontal Flip: false [ 1074.820512][T19314] Sensor B: Brightness: 128 [ 1074.825833][T19314] Sensor B: Contrast: 128 [ 1074.830272][T19314] Sensor B: Hue: 0 [ 1074.834552][T19314] Sensor B: Saturation: 128 [ 1074.839884][T19314] Sensor B: ================== END STATUS ================== [ 1074.923764][ T5848] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1075.673267][ T841] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1075.714868][ T841] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1075.727797][ T841] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1075.748343][ T841] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1075.789564][ T841] usb 6-1: USB disconnect, device number 2 [ 1076.093143][ T5947] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1076.652407][ T5947] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1076.661638][ T5947] usb 4-1: config 0 has no interface number 0 [ 1076.667786][ T5947] usb 4-1: config 0 interface 159 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1076.750912][ T5848] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1076.753528][ T5947] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=86.50 [ 1076.760041][ T5848] Bluetooth: hci4: Injecting HCI hardware error event [ 1076.762696][ T5848] Bluetooth: hci4: hardware error 0x00 [ 1076.835361][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.855987][ T5947] usb 4-1: Product: syz [ 1076.861755][ T5947] usb 4-1: Manufacturer: syz [ 1076.866857][ T5947] usb 4-1: SerialNumber: syz [ 1076.884678][ T5947] usb 4-1: config 0 descriptor?? [ 1076.896899][ T5947] HFC-S_USB 4-1:0.159: probe with driver HFC-S_USB failed with error -5 [ 1077.051237][T16997] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1077.169340][ T5969] usb 4-1: USB disconnect, device number 17 [ 1077.220059][T16997] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1077.229913][T16997] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1077.249581][T16997] usb 1-1: Product: syz [ 1077.333450][T16997] usb 1-1: Manufacturer: syz [ 1077.338473][T16997] usb 1-1: SerialNumber: syz [ 1077.649795][T16997] usb 1-1: config 0 descriptor?? [ 1077.657107][T16997] ch341 1-1:0.0: ch341-uart converter detected [ 1078.147906][T19338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3286'. [ 1078.157085][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3286'. [ 1078.775215][ T5969] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1078.832107][ T5848] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1078.955919][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.974201][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.985250][T16997] usb 1-1: failed to send control message: -110 [ 1078.991801][T16997] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1079.000928][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1079.017133][ T5969] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1079.026280][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.044428][ T5969] usb 5-1: config 0 descriptor?? [ 1079.467629][T19371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=19371 comm=syz.4.3290 [ 1079.544088][ T5969] usbhid 5-1:0.0: can't add hid device: -71 [ 1079.550118][ T5969] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1079.579556][ T5969] usb 5-1: USB disconnect, device number 8 [ 1079.997878][T19363] team0: No ports can be present during mode change [ 1080.008182][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.015847][T19370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.030344][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.041577][T19370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.523198][ T5912] usb 1-1: USB disconnect, device number 23 [ 1081.542179][ T5912] ch341 1-1:0.0: device disconnected [ 1081.780963][ T841] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1082.144579][T19401] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1082.144621][T19401] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1082.144633][T19401] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1082.200866][ T841] usb 4-1: Using ep0 maxpacket: 8 [ 1082.554934][ T841] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1082.554973][ T841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.557296][ T841] usb 4-1: config 0 descriptor?? [ 1083.046861][ T841] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1083.851486][ T841] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1083.922188][ T841] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1083.936364][ T841] usb 4-1: USB disconnect, device number 18 [ 1084.471302][ T841] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1084.519249][ T30] audit: type=1400 audit(1084.487:937): avc: denied { map } for pid=19421 comm="syz.2.3305" path="socket:[53096]" dev="sockfs" ino=53096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1084.598529][ T30] audit: type=1400 audit(1084.487:938): avc: denied { read } for pid=19421 comm="syz.2.3305" path="socket:[53096]" dev="sockfs" ino=53096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1084.656286][ T841] usb 1-1: Using ep0 maxpacket: 16 [ 1084.752432][ T841] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1085.009474][ T841] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1085.047055][ T841] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1085.160248][ T841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.182858][ T30] audit: type=1400 audit(1085.147:939): avc: denied { read } for pid=19430 comm="syz.4.3308" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1085.224012][T19443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3309'. [ 1085.489296][ T841] usb 1-1: config 0 descriptor?? [ 1085.516717][ T30] audit: type=1400 audit(1085.147:940): avc: denied { open } for pid=19430 comm="syz.4.3308" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1086.255231][ T30] audit: type=1400 audit(1085.227:941): avc: denied { setopt } for pid=19437 comm="syz.3.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1087.047666][ T841] zydacron 0003:13EC:0006.0006: item fetching failed at offset 2/3 [ 1087.055760][ T30] audit: type=1326 audit(1086.587:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75078eec9 code=0x7ffc0000 [ 1087.079521][ T841] zydacron 0003:13EC:0006.0006: parse failed [ 1087.087810][ T841] zydacron 0003:13EC:0006.0006: probe with driver zydacron failed with error -22 [ 1087.143557][ T30] audit: type=1326 audit(1086.587:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75078eec9 code=0x7ffc0000 [ 1087.196746][ T30] audit: type=1326 audit(1086.587:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb75078eec9 code=0x7ffc0000 [ 1087.234630][ T30] audit: type=1326 audit(1086.587:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75078eec9 code=0x7ffc0000 [ 1087.260885][ T30] audit: type=1326 audit(1086.597:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19423 comm="syz.0.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75078eec9 code=0x7ffc0000 [ 1087.430884][ T5969] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1087.650910][ T5969] usb 6-1: Using ep0 maxpacket: 8 [ 1087.659760][ T5969] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1087.672848][ T5969] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1087.683583][ T5969] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1087.695698][ T5969] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1087.707616][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.717124][ T5969] usb 6-1: Product: syz [ 1087.721774][ T5969] usb 6-1: Manufacturer: syz [ 1087.726984][ T5969] usb 6-1: SerialNumber: syz [ 1087.741997][T19452] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1087.956167][ T5969] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 1088.021760][ T5969] usb 6-1: USB disconnect, device number 3 [ 1088.069155][ T5969] usblp0: removed [ 1088.190591][ T5912] usb 1-1: USB disconnect, device number 24 [ 1088.645241][T19480] veth0_to_bridge: entered promiscuous mode [ 1088.750920][ T841] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1089.664487][T19478] veth0_to_bridge: left promiscuous mode [ 1089.850990][ T841] usb 1-1: Using ep0 maxpacket: 16 [ 1089.858393][ T841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 187, changing to 7 [ 1089.887619][ T841] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1090.072638][ T841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.081515][ T841] usb 1-1: Product: syz [ 1090.085691][ T841] usb 1-1: Manufacturer: syz [ 1090.092452][ T841] usb 1-1: SerialNumber: syz [ 1090.332074][ T841] usb 1-1: config 0 descriptor?? [ 1090.343671][ T841] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1090.355243][ T841] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 1091.334534][ T841] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1091.429867][ T841] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1091.560987][ T841] em28xx 1-1:0.0: board has no eeprom [ 1091.630785][ T841] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1091.658174][ T841] em28xx 1-1:0.0: dvb set to isoc mode. [ 1091.671131][ T24] em28xx 1-1:0.0: Binding DVB extension [ 1091.696511][ T841] usb 1-1: USB disconnect, device number 25 [ 1091.810910][ T5969] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1091.816047][ T24] em28xx 1-1:0.0: Registering input extension [ 1091.824832][ T841] em28xx 1-1:0.0: Disconnecting em28xx [ 1091.840264][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3329'. [ 1091.841106][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3329'. [ 1091.854464][ T841] em28xx 1-1:0.0: Closing input extension [ 1092.001511][ T841] em28xx 1-1:0.0: Freeing device [ 1092.196857][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 1092.203855][ T5969] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1092.217925][ T5969] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1092.230987][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.238992][ T5969] usb 3-1: Product:  [ 1092.723371][ T5969] usb 3-1: Manufacturer: ꊨ찻ট擫娔ᕥ雑熶籈䌰ᠯၳ쭉ݵ闀傇䲎跴蔁䟻 [ 1092.733986][ T5969] usb 3-1: SerialNumber: syz [ 1092.742255][T19517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1092.761530][ T841] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1093.715510][ T841] usb 5-1: device descriptor read/64, error -71 [ 1093.811050][T19516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.840097][T19516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.891786][ T5969] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1093.973174][ T5969] usb 3-1: USB disconnect, device number 36 [ 1094.032929][ T5969] usblp0: removed [ 1094.068406][ T841] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1094.345157][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3337'. [ 1094.390926][ T841] usb 5-1: device descriptor read/64, error -71 [ 1094.578790][ T841] usb usb5-port1: attempt power cycle [ 1094.665867][ T30] kauditd_printk_skb: 301 callbacks suppressed [ 1094.665883][ T30] audit: type=1400 audit(1094.637:1248): avc: denied { getopt } for pid=19564 comm="syz.3.3340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1094.694303][T19565] netlink: 'syz.3.3340': attribute type 12 has an invalid length. [ 1094.766157][ T30] audit: type=1400 audit(1094.737:1249): avc: denied { append } for pid=19566 comm="syz.3.3341" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1094.792530][ T5969] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1095.010961][ T841] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1095.071479][ T841] usb 5-1: device descriptor read/8, error -71 [ 1095.092084][ T5969] usb 3-1: not running at top speed; connect to a high speed hub [ 1095.101289][ T5969] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1095.114673][ T5969] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1095.129944][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.160915][ T5969] usb 3-1: Product: з [ 1095.178935][ T5969] usb 3-1: Manufacturer: a [ 1095.209468][ T5969] usb 3-1: SerialNumber: ь [ 1095.237601][ T5969] usb 3-1: can't set config #1, error -71 [ 1095.253751][ T5969] usb 3-1: USB disconnect, device number 37 [ 1096.558351][T19617] input: syz0 as /devices/virtual/input/input16 [ 1096.961009][ T30] audit: type=1800 audit(1096.917:1250): pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3351" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1097.243790][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1097.556313][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1097.580304][ T24] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1097.592572][ T24] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1097.604099][ T24] usb 5-1: config 0 has no interface number 0 [ 1097.615529][ T24] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1097.650076][ T24] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1097.684167][ T24] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1097.710018][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1097.722312][ T24] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1097.741732][ T24] usb 5-1: Product: syz [ 1097.756890][ T24] usb 5-1: config 0 descriptor?? [ 1097.767818][T19624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1098.135714][T19641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19641 comm=syz.3.3359 [ 1098.209367][T19643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3358'. [ 1098.231927][T19646] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 1098.292773][T19646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1098.518459][T19651] program syz.4.3353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1098.810940][ T5942] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1098.870855][T16997] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1099.010923][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 1099.017524][ T5942] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1099.030795][ T5942] usb 1-1: config 0 has no interface number 0 [ 1099.030795][T16997] usb 4-1: Using ep0 maxpacket: 32 [ 1099.032564][T16997] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 1099.039744][ T5942] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1099.064307][T16997] usb 4-1: config 0 has no interface number 0 [ 1099.072952][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.084952][ T5942] usb 1-1: Product: syz [ 1099.089311][ T5942] usb 1-1: Manufacturer: syz [ 1099.094378][ T5942] usb 1-1: SerialNumber: syz [ 1099.100690][ T5942] usb 1-1: config 0 descriptor?? [ 1099.109123][T16997] usb 4-1: too many endpoints for config 0 interface 230 altsetting 2: 210, using maximum allowed: 30 [ 1099.121352][ T5942] quatech2 1-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 1099.148039][T16997] usb 4-1: config 0 interface 230 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 210 [ 1099.192488][T16997] usb 4-1: config 0 interface 230 has no altsetting 0 [ 1099.225148][T16997] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1099.259575][T16997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.295840][T16997] usb 4-1: Product: syz [ 1099.308375][T16997] usb 4-1: Manufacturer: syz [ 1099.326977][T16997] usb 4-1: SerialNumber: syz [ 1099.333223][ T5942] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1099.343116][T16997] usb 4-1: config 0 descriptor?? [ 1099.361025][T16997] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 1099.369547][ T5942] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1099.398753][T16997] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1099.684513][T16997] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 1100.103334][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1100.108072][T16997] usb 4-1: USB disconnect, device number 19 [ 1100.126784][ T5942] usb 1-1: USB disconnect, device number 26 [ 1100.134954][ T24] usb 5-1: USB disconnect, device number 13 [ 1100.159492][ T5942] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1100.181286][ T5942] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1100.201475][ T5942] quatech2 1-1:0.1: device disconnected [ 1100.285168][T19671] batadv0: entered promiscuous mode [ 1100.362814][T19671] macvtap1: entered promiscuous mode [ 1100.369866][T19671] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1100.394279][T19671] batadv0: left promiscuous mode [ 1100.459243][T19674] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3367'. [ 1100.810853][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1100.881734][T19677] 9pnet_fd: Insufficient options for proto=fd [ 1101.038699][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1101.051506][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.065827][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.076429][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1101.084782][ T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1101.094348][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.123719][ T24] usb 4-1: config 0 descriptor?? [ 1101.393174][T19700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.416487][T19700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.032837][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 1102.061009][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1102.073076][ T24] usb 4-1: USB disconnect, device number 20 [ 1103.033205][ T30] audit: type=1400 audit(1103.007:1251): avc: denied { load_policy } for pid=19715 comm="syz.5.3379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1103.033616][T19716] SELinux: policydb string Sg nux does not match my string SE Linux [ 1103.177264][T19716] SELinux: failed to load policy [ 1103.259885][ T30] audit: type=1400 audit(1103.227:1252): avc: denied { read write } for pid=19729 comm="syz.2.3382" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1103.565430][T19736] netlink: 'syz.0.3381': attribute type 12 has an invalid length. [ 1103.589431][ T30] audit: type=1400 audit(1103.257:1253): avc: denied { open } for pid=19729 comm="syz.2.3382" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1103.636847][T19736] netlink: 'syz.0.3381': attribute type 29 has an invalid length. [ 1103.656549][T19736] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3381'. [ 1103.666938][T19736] netlink: 'syz.0.3381': attribute type 2 has an invalid length. [ 1103.676125][T19736] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3381'. [ 1103.710873][ T30] audit: type=1400 audit(1103.507:1254): avc: denied { ioctl } for pid=19729 comm="syz.2.3382" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1104.370889][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1104.381031][T16997] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1104.561713][T16997] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1104.580058][T16997] usb 6-1: not running at top speed; connect to a high speed hub [ 1104.598484][T16997] usb 6-1: config 1 has an invalid interface number: 186 but max is 0 [ 1104.612835][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1104.628123][T16997] usb 6-1: config 1 has no interface number 0 [ 1104.640452][ T24] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=94.17 [ 1104.646899][T16997] usb 6-1: config 1 interface 186 has no altsetting 0 [ 1104.682410][T16997] usb 6-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=1a.ea [ 1104.693784][T16997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.702008][T16997] usb 6-1: Product: syz [ 1104.708573][T16997] usb 6-1: Manufacturer: syz [ 1104.720950][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.728282][T16997] usb 6-1: SerialNumber: syz [ 1104.729011][ T24] usb 1-1: Product: syz [ 1104.943838][ T24] usb 1-1: Manufacturer: syz [ 1104.948548][ T24] usb 1-1: SerialNumber: syz [ 1105.028646][T19754] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1105.055417][T19754] CIFS mount error: No usable UNC path provided in device string! [ 1105.055417][T19754] [ 1105.065875][T19754] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1105.465608][ T24] usb 1-1: config 0 descriptor?? [ 1105.472828][T16997] usb 6-1: Found UVC 0.00 device syz (0408:4035) [ 1105.485110][T16997] usb 6-1: Forcing UVC version to 1.0a [ 1105.498530][T16997] usb 6-1: No valid video chain found. [ 1105.528256][T16997] usb 6-1: USB disconnect, device number 4 [ 1105.790075][T19757] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1105.867923][T19757] overlayfs: failed to set xattr on upper [ 1105.928268][T19757] overlayfs: ...falling back to redirect_dir=nofollow. [ 1106.125178][T19757] overlayfs: ...falling back to index=off. [ 1106.133747][T19757] overlayfs: ...falling back to uuid=null. [ 1106.410220][T19757] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1107.468555][T17200] usb 1-1: USB disconnect, device number 27 [ 1107.943695][T19791] CIFS mount error: No usable UNC path provided in device string! [ 1107.943695][T19791] [ 1107.953756][T19791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1107.965283][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1108.201103][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1108.263379][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1108.340325][ T24] usb 5-1: config 0 has no interface number 0 [ 1108.477175][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.488944][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 1108.498797][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.512861][T16997] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1108.513535][ T24] usb 5-1: config 0 descriptor?? [ 1108.652028][T19795] nvme_fabrics: missing parameter 'transport=%s' [ 1108.659223][T19795] nvme_fabrics: missing parameter 'nqn=%s' [ 1108.719710][T16997] usb 4-1: Using ep0 maxpacket: 16 [ 1108.758283][T16997] usb 4-1: config 0 interface 0 altsetting 220 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 1108.759471][T19778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.780369][T16997] usb 4-1: config 0 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.851328][T16997] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1108.891147][T16997] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1108.891604][T19778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.911388][T16997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.932694][T16997] usb 4-1: config 0 descriptor?? [ 1108.999181][ T24] usbhid 5-1:0.8: can't add hid device: -71 [ 1109.006523][ T24] usbhid 5-1:0.8: probe with driver usbhid failed with error -71 [ 1109.023120][ T24] usb 5-1: USB disconnect, device number 14 [ 1109.274773][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 1109.790100][T16997] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0007/input/input18 [ 1109.883525][T16997] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v5.f2 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 1109.999788][ T30] audit: type=1800 audit(1109.967:1255): pid=19783 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3394" name="bus" dev="overlay" ino=728 res=0 errno=0 [ 1110.062118][T19827] 9p: Unknown Cache mode or invalid value l [ 1110.192336][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3404'. [ 1110.351862][T16997] usb 4-1: USB disconnect, device number 21 [ 1111.169929][T19844] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1111.178815][T19844] overlayfs: missing 'lowerdir' [ 1113.036661][T19865] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1113.046708][T19865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1114.742166][T19881] openvswitch: netlink: IP tunnel dst address not specified [ 1115.639213][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.648651][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.550904][ T5969] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1116.592301][T16997] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1116.605316][ T30] audit: type=1400 audit(1116.577:1256): avc: denied { read } for pid=19901 comm="syz.3.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1116.765847][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3424'. [ 1116.774969][T19908] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3424'. [ 1117.873666][T16997] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1117.887519][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1117.899003][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.909304][T16997] usb 3-1: not running at top speed; connect to a high speed hub [ 1117.917347][ T5969] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1117.927827][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.936649][T16997] usb 3-1: config 23 has an invalid interface number: 37 but max is 0 [ 1117.945021][T16997] usb 3-1: config 23 has no interface number 0 [ 1117.953806][ T5969] usb 6-1: config 0 descriptor?? [ 1118.013150][T16997] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=f1.7c [ 1118.036375][T16997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.047660][T16997] usb 3-1: Product: syz [ 1118.055036][T16997] usb 3-1: Manufacturer: syz [ 1118.059763][T16997] usb 3-1: SerialNumber: syz [ 1118.230261][T19920] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3429'. [ 1118.260807][T19920] unsupported nlmsg_type 40 [ 1118.821632][ T24] usb 3-1: USB disconnect, device number 38 [ 1119.092890][ T5969] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 1119.206474][T19938] openvswitch: netlink: IP tunnel dst address not specified [ 1119.544410][T19896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.553217][T19896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.450490][ T5947] usb 6-1: USB disconnect, device number 5 [ 1120.530830][ T5942] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1120.658329][T19953] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1120.674611][T19953] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1120.715239][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 1120.724124][ T5942] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1120.733835][T19953] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1120.743482][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.867301][ T5942] usb 5-1: config 0 descriptor?? [ 1120.894978][ T5942] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1121.393267][T19937] tipc: Started in network mode [ 1121.410860][T19937] tipc: Node identity 6a6b52de8c7, cluster identity 4711 [ 1121.419113][T19937] tipc: Enabled bearer , priority 0 [ 1121.475453][ T5942] gspca_sq930x: reg_r 001f failed -71 [ 1121.487284][ T5942] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1121.526155][ T5942] usb 5-1: USB disconnect, device number 15 [ 1121.664364][T19967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1121.670895][T19967] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1121.680955][T19967] vhci_hcd vhci_hcd.0: Device attached [ 1121.819188][T19968] vhci_hcd: connection closed [ 1121.819459][T18977] vhci_hcd: stop threads [ 1121.835257][T18977] vhci_hcd: release socket [ 1121.861465][T18977] vhci_hcd: disconnect device [ 1122.055756][T19937] tipc: Disabling bearer [ 1122.661198][T19981] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3442'. [ 1123.093306][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1123.812401][T20004] input: syz1 as /devices/virtual/input/input19 [ 1124.662508][T20007] netlink: 'syz.0.3446': attribute type 5 has an invalid length. [ 1125.297655][T20015] Invalid source name [ 1125.313612][T20007] ip6erspan0: entered promiscuous mode [ 1125.497225][ T30] audit: type=1400 audit(1125.467:1257): avc: denied { setattr } for pid=20020 comm="syz.2.3454" name="CAN_J1939" dev="sockfs" ino=56407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1125.522178][ T30] audit: type=1400 audit(1125.467:1258): avc: denied { listen } for pid=20020 comm="syz.2.3454" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1125.610911][T16997] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1125.690849][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1125.720896][T11177] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1125.775653][T16997] usb 5-1: Using ep0 maxpacket: 8 [ 1125.794991][T16997] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.814617][T16997] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1125.830765][T16997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1125.842871][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.852972][T16997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1125.853001][T16997] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1125.864838][T16997] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1125.889784][T16997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1125.898378][T16997] usb 5-1: Product: syz [ 1125.907764][T11177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.920108][T16997] usb 5-1: Manufacturer: syz [ 1125.925403][T11177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.940636][T16997] usb 5-1: SerialNumber: syz [ 1125.947354][T11177] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1125.950824][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1125.960112][T16997] usb 5-1: config 0 descriptor?? [ 1125.974040][T11177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.995983][ T24] usb 6-1: config 1 has no interface number 0 [ 1125.996683][T11177] usb 4-1: config 0 descriptor?? [ 1126.016297][ T24] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.032106][T11177] usbhid 4-1:0.0: can't add hid device: -22 [ 1126.038098][T11177] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1126.065377][ T24] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1126.077046][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1126.086552][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.094804][ T24] usb 6-1: Product: syz [ 1126.099127][ T24] usb 6-1: Manufacturer: syz [ 1126.104481][ T24] usb 6-1: SerialNumber: syz [ 1126.198970][T16997] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1126.220914][T16997] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1126.254650][T11177] usb 4-1: USB disconnect, device number 22 [ 1126.406698][T20038] CIFS mount error: No usable UNC path provided in device string! [ 1126.406698][T20038] [ 1126.416794][T20038] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1126.774846][T16997] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1126.793335][T16997] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1126.805944][T16997] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1126.820150][T16997] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1127.383208][T20044] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3459'. [ 1127.469085][ T30] audit: type=1400 audit(1127.437:1259): avc: denied { getopt } for pid=20043 comm="syz.0.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1127.569068][ T24] cdc_ncm 6-1:1.1: bind() failure [ 1127.769219][T16997] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1127.779844][T16997] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1127.820490][ T24] usb 6-1: USB disconnect, device number 6 [ 1128.597543][T16997] usb 5-1: USB disconnect, device number 16 [ 1128.902655][ T30] audit: type=1400 audit(1128.867:1260): avc: denied { create } for pid=20055 comm="syz.3.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1130.255097][T20078] netlink: 'syz.3.3468': attribute type 4 has an invalid length. [ 1130.821557][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1130.915499][T20094] openvswitch: netlink: IP tunnel dst address not specified [ 1131.398865][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1131.478267][ T24] usb 6-1: config 0 has no interfaces? [ 1131.563420][ T30] audit: type=1400 audit(1131.527:1261): avc: denied { map } for pid=20088 comm="syz.2.3471" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1131.611014][ T30] audit: type=1400 audit(1131.527:1262): avc: denied { execute } for pid=20088 comm="syz.2.3471" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1131.644493][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1131.671457][T20096] fuse: Unknown parameter '000000000000000000000040x00000000000000040000000000000000000300000000000000000000' [ 1131.692952][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.710770][ T24] usb 6-1: Product: syz [ 1131.715068][ T24] usb 6-1: Manufacturer: syz [ 1131.719665][ T24] usb 6-1: SerialNumber: syz [ 1131.729812][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3472'. [ 1131.775713][ T24] usb 6-1: config 0 descriptor?? [ 1132.138451][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1134.303568][T20126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1134.654884][T20135] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3481'. [ 1134.695625][T16997] usb 6-1: USB disconnect, device number 7 [ 1134.946826][ T30] audit: type=1400 audit(1134.917:1263): avc: denied { shutdown } for pid=20140 comm="syz.5.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1135.030909][ T5947] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1135.180875][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 1135.182187][ T5947] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1135.182207][ T5947] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1135.182221][ T5947] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1135.183214][ T5947] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1135.183231][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1135.183243][ T5947] usb 1-1: SerialNumber: syz [ 1135.185847][T20131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1136.421039][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 1136.428859][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1136.634872][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3487'. [ 1137.104269][T20167] input: syz1 as /devices/virtual/input/input20 [ 1137.342948][T11177] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1137.607717][ T5947] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1137.723764][ T5947] usb 1-1: USB disconnect, device number 28 [ 1137.738594][T11177] usb 3-1: Using ep0 maxpacket: 16 [ 1137.758148][T11177] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1137.879425][T11177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.892183][T20174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3493'. [ 1137.903003][T11177] usb 3-1: Product: syz [ 1137.907263][T11177] usb 3-1: Manufacturer: syz [ 1138.356278][T11177] usb 3-1: SerialNumber: syz [ 1138.452238][T11177] usb 3-1: config 0 descriptor?? [ 1138.474686][T11177] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1138.494792][T11177] usb 3-1: Detected FT232H [ 1138.740582][T11177] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1140.078150][T20204] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.3498'. [ 1140.349064][ T30] audit: type=1400 audit(1140.317:1264): avc: denied { map } for pid=20198 comm="syz.4.3499" path="socket:[57636]" dev="sockfs" ino=57636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1140.372287][ C0] vkms_vblank_simulate: vblank timer overrun [ 1140.740473][ T30] audit: type=1400 audit(1140.707:1265): avc: denied { unmount } for pid=18401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1141.661805][T11177] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1141.700996][T11177] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1142.928311][T11177] usb 3-1: USB disconnect, device number 39 [ 1143.011522][T11177] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1143.021203][T11177] ftdi_sio 3-1:0.0: device disconnected [ 1144.780952][T16997] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1145.231034][ T24] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1145.942806][T20236] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1146.062645][T16997] usb 5-1: device not accepting address 17, error -71 [ 1146.063163][ T30] audit: type=1400 audit(1145.887:1266): avc: denied { map } for pid=20234 comm="syz.4.3508" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1146.063198][ T30] audit: type=1400 audit(1145.887:1267): avc: denied { execute } for pid=20234 comm="syz.4.3508" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1146.141915][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 1146.142777][ T24] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 1146.142793][ T24] usb 3-1: config 95 has no interface number 0 [ 1146.142812][ T24] usb 3-1: config 95 interface 1 has no altsetting 0 [ 1146.144536][ T24] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1146.144563][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.144583][ T24] usb 3-1: Product: syz [ 1146.144593][ T24] usb 3-1: Manufacturer: syz [ 1146.144602][ T24] usb 3-1: SerialNumber: syz [ 1146.190583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1146.243132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1146.300022][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3511'. [ 1146.939159][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1148.148105][ T24] usb 3-1: USB disconnect, device number 40 [ 1148.677260][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 1148.713584][ T30] audit: type=1400 audit(1148.687:1268): avc: denied { ioctl } for pid=20264 comm="syz.2.3518" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1148.738221][ C0] vkms_vblank_simulate: vblank timer overrun [ 1149.003432][T11177] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1149.380934][T11177] usb 6-1: Using ep0 maxpacket: 16 [ 1149.388613][T11177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.400857][T11177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.410951][T11177] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1149.424008][T11177] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1149.451857][T11177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.515765][T11177] usb 6-1: config 0 descriptor?? [ 1149.953448][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.188854][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.234597][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.260871][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.288047][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.450836][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.918996][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.926368][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.933704][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.940982][T11177] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1150.953473][T11177] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input21 [ 1151.288093][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1151.469911][T11177] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1151.667714][T20280] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3520'. [ 1151.840948][T17200] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1152.060824][T17200] usb 1-1: Using ep0 maxpacket: 32 [ 1152.357936][T17200] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1152.372847][T17200] usb 1-1: config 0 has no interface number 0 [ 1152.384772][T17200] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1152.418492][T17200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.428891][T17200] usb 1-1: Product: syz [ 1152.436068][T17200] usb 1-1: Manufacturer: syz [ 1152.445274][T17200] usb 1-1: SerialNumber: syz [ 1152.457827][T17200] usb 1-1: config 0 descriptor?? [ 1152.553413][T17200] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1152.563212][T17200] usb 1-1: selecting invalid altsetting 1 [ 1152.568943][T17200] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1152.661685][T17200] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1152.686175][T17200] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1152.861499][T17200] usb 1-1: media controller created [ 1153.098009][T11177] usb 6-1: USB disconnect, device number 8 [ 1153.627312][T17200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.212208][T20349] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1154.234920][T20359] comedi: valid board names for 8255 driver are: [ 1154.255398][T20359] 8255 [ 1154.258444][T20359] comedi: valid board names for vmk80xx driver are: [ 1154.267404][T17200] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1154.487894][T20359] vmk80xx [ 1154.530967][T20359] comedi: valid board names for usbduxsigma driver are: [ 1154.537952][T20359] usbduxsigma [ 1154.542875][T20359] comedi: valid board names for usbduxfast driver are: [ 1154.560964][T20359] usbduxfast [ 1154.564266][T20359] comedi: valid board names for usbdux driver are: [ 1154.571555][T17200] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1154.579255][T17200] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1154.584504][T20359] usbdux [ 1154.594608][T20359] comedi: valid board names for ni6501 driver are: [ 1154.614462][T20359] ni6501 [ 1154.624756][T20359] comedi: valid board names for dt9812 driver are: [ 1155.292475][T20359] dt9812 [ 1155.303785][T20359] comedi: valid board names for ni_labpc_cs driver are: [ 1155.321391][T20359] ni_labpc_cs [ 1155.332098][T20359] comedi: valid board names for ni_daq_700 driver are: [ 1155.345626][T20359] ni_daq_700 [ 1155.349225][T20359] comedi: valid board names for labpc_pci driver are: [ 1155.357956][T20359] labpc_pci [ 1155.361450][T20359] comedi: valid board names for adl_pci9118 driver are: [ 1155.368433][T20359] pci9118dg [ 1155.374682][T20359] pci9118hg [ 1155.374839][T17200] usb 1-1: USB disconnect, device number 29 [ 1155.377880][T20359] pci9118hr [ 1155.377890][T20359] comedi: valid board names for 8255_pci driver are: [ 1155.377898][T20359] 8255_pci [ 1155.377904][T20359] comedi: valid board names for s526 driver are: [ 1155.377913][T20359] s526 [ 1155.377919][T20359] comedi: valid board names for multiq3 driver are: [ 1155.377928][T20359] multiq3 [ 1155.511232][T20359] comedi: valid board names for pcmuio driver are: [ 1155.517761][T20359] pcmuio48 [ 1155.559662][T20359] pcmuio96 [ 1155.635433][T20359] comedi: valid board names for pcmmio driver are: [ 1155.654497][T20359] pcmmio [ 1155.657473][T20359] comedi: valid board names for pcmda12 driver are: [ 1155.670635][T20359] pcmda12 [ 1155.683792][T20359] comedi: valid board names for pcmad driver are: [ 1155.691786][T20380] 9pnet_fd: Insufficient options for proto=fd [ 1155.695197][T20359] pcmad12 [ 1155.809446][T20359] pcmad16 [ 1155.813365][T20359] comedi: valid board names for ni_labpc driver are: [ 1155.820162][T20359] lab-pc-1200 [ 1155.823605][T20359] lab-pc-1200ai [ 1155.827154][T20359] lab-pc+ [ 1155.830175][T20359] comedi: valid board names for atmio16 driver are: [ 1155.836947][T20359] atmio16 [ 1155.840055][T20359] atmio16d [ 1155.850788][T20359] comedi: valid board names for ni_at_ao driver are: [ 1155.857478][T20359] at-ao-6 [ 1155.860494][T20359] at-ao-10 [ 1155.882883][T20385] sctp: [Deprecated]: syz.5.3541 (pid 20385) Use of int in maxseg socket option. [ 1155.882883][T20385] Use struct sctp_assoc_value instead [ 1156.063733][T20359] comedi: valid board names for ni_at_a2150 driver are: [ 1156.341620][T20359] ni_at_a2150 [ 1156.345078][T20359] comedi: valid board names for adq12b driver are: [ 1156.352612][T20359] adq12b [ 1156.358587][T20359] comedi: valid board names for mpc624 driver are: [ 1156.365479][T20359] mpc624 [ 1156.368506][T20359] comedi: valid board names for c6xdigio driver are: [ 1156.379245][T20359] c6xdigio [ 1156.391453][T20359] comedi: valid board names for aio_iiro_16 driver are: [ 1156.404389][T20359] aio_iiro_16 [ 1156.408213][T20359] comedi: valid board names for aio_aio12_8 driver are: [ 1156.415400][T20359] aio_aio12_8 [ 1156.419191][T20359] aio_ai12_8 [ 1156.429142][T20359] aio_ao12_4 [ 1156.434000][T20359] comedi: valid board names for fl512 driver are: [ 1156.443746][T20359] fl512 [ 1156.446636][T20359] comedi: valid board names for dmm32at driver are: [ 1156.453564][T20359] dmm32at [ 1156.456797][T20359] comedi: valid board names for dt282x driver are: [ 1156.465210][T20359] dt2821 [ 1156.472581][T20359] dt2821-f [ 1156.476553][T20359] dt2821-g [ 1156.482516][T20359] dt2823 [ 1156.485564][T20359] dt2824-pgh [ 1156.489021][T20359] dt2824-pgl [ 1156.492483][T20359] dt2825 [ 1156.513899][T20359] dt2827 [ 1156.518049][T20359] dt2828 [ 1156.522562][T20359] dt2829 [ 1156.525545][T20359] dt21-ez [ 1156.530128][T20359] dt23-ez [ 1156.538891][T20359] dt24-ez [ 1156.601614][T20359] dt24-ez-pgl [ 1156.605427][T20359] comedi: valid board names for dt2817 driver are: [ 1156.620088][T20359] dt2817 [ 1156.636063][T20359] comedi: valid board names for dt2815 driver are: [ 1156.644853][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1156.715741][T20359] dt2815 [ 1156.718697][T20359] comedi: valid board names for dt2814 driver are: [ 1156.844249][T20359] dt2814 [ 1156.847219][T20359] comedi: valid board names for dt2811 driver are: [ 1156.857433][T20359] dt2811-pgh [ 1156.882831][T20359] dt2811-pgl [ 1156.886123][T20359] comedi: valid board names for dt2801 driver are: [ 1156.894709][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1156.900010][T20359] dt2801 [ 1156.921649][T20359] comedi: valid board names for das6402 driver are: [ 1156.929249][ T24] usb 3-1: config index 0 descriptor too short (expected 1316, got 36) [ 1156.939671][T20359] das6402-12 [ 1156.944720][T20359] das6402-16 [ 1156.948001][T20359] comedi: valid board names for das1800 driver are: [ 1156.955565][ T24] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1156.973159][T20359] das-1701st [ 1156.990948][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1156.999999][T20359] das-1701st-da [ 1157.022043][T20359] das-1702st [ 1157.029843][T20359] das-1702st-da [ 1157.035633][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.049107][T20359] das-1702hr [ 1157.052865][T20359] das-1702hr-da [ 1157.056457][T20359] das-1701ao [ 1157.059835][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.070564][T20359] das-1702ao [ 1157.074176][T20359] das-1801st [ 1157.077502][T20359] das-1801st-da [ 1157.081555][ T24] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1157.090666][T20359] das-1802st [ 1157.095161][T20359] das-1802st-da [ 1157.099881][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.108013][T20359] das-1802hr [ 1157.112484][T20359] das-1802hr-da [ 1157.116082][T20359] das-1801hc [ 1157.124583][ T24] usb 3-1: config 0 descriptor?? [ 1157.129625][T20359] das-1802hc [ 1157.135600][T20359] das-1801ao [ 1157.139060][T20359] das-1802ao [ 1157.146677][T20359] comedi: valid board names for das800 driver are: [ 1157.153736][T20359] das-800 [ 1157.156852][T20359] cio-das800 [ 1157.160191][T20359] das-801 [ 1157.166611][T20359] cio-das801 [ 1157.169984][T20359] das-802 [ 1157.234363][T20359] cio-das802 [ 1157.237670][T20359] cio-das802/16 [ 1157.241697][T20359] comedi: valid board names for isa-das08 driver are: [ 1157.250156][T20359] isa-das08 [ 1157.255822][T20359] das08-pgm [ 1157.259023][T20359] das08-pgh [ 1157.285706][T20359] das08-pgl [ 1157.288959][T20359] das08-aoh [ 1157.368967][T20359] das08-aol [ 1157.372642][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1157.378603][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1157.393103][ T24] usb 3-1: USB disconnect, device number 41 [ 1157.404732][T20359] das08-aom [ 1157.407938][T20359] das08/jr-ao [ 1157.420686][T20359] das08jr-16-ao [ 1157.424496][T20359] pc104-das08 [ 1157.427854][T20359] das08jr/16 [ 1157.432136][T20359] comedi: valid board names for das16m1 driver are: [ 1157.438787][T20359] das16m1 [ 1157.450689][T20359] comedi: valid board names for dac02 driver are: [ 1157.464225][T20359] dac02 [ 1157.467131][T20359] comedi: valid board names for rti802 driver are: [ 1157.521203][T20359] rti802 [ 1157.766491][T20359] comedi: valid board names for rti800 driver are: [ 1157.818732][T20359] rti800 [ 1157.828801][T20359] rti815 [ 1157.835592][T20359] comedi: valid board names for pcm3724 driver are: [ 1157.845728][T20359] pcm3724 [ 1157.848747][T20359] comedi: valid board names for pcl818 driver are: [ 1157.965558][T20359] pcl818l [ 1157.968603][T20359] pcl818h [ 1157.980684][T20359] pcl818hd [ 1157.984324][T20359] pcl818hg [ 1157.987745][T20359] pcl818 [ 1158.032916][T20419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3550'. [ 1158.097092][T20359] pcl718 [ 1158.104263][T20359] pcm3718 [ 1158.107280][T20359] comedi: valid board names for pcl816 driver are: [ 1158.140769][T20359] pcl816 [ 1158.147932][T20359] pcl814b [ 1158.434249][T20359] comedi: valid board names for pcl812 driver are: [ 1158.441331][T20359] pcl812 [ 1158.444272][T20359] pcl812pg [ 1158.447369][T20359] acl8112pg [ 1158.450548][T20359] acl8112dg [ 1158.476439][T20359] acl8112hg [ 1158.479637][T20359] a821pgl [ 1158.537183][T20359] a821pglnda [ 1158.552803][T20359] a821pgh [ 1158.560916][T20359] a822pgl [ 1158.563952][T20359] a822pgh [ 1158.566964][T20359] a823pgl [ 1158.608405][T20359] a823pgh [ 1158.618187][T20359] pcl813 [ 1158.627039][T20359] pcl813b [ 1158.635613][T20359] acl8113 [ 1158.643431][T20359] iso813 [ 1158.663174][T20359] acl8216 [ 1158.680551][T20359] a826pg [ 1158.693313][T20359] comedi: valid board names for pcl730 driver are: [ 1158.709505][T20359] pcl730 [ 1158.712570][T20359] iso730 [ 1158.715593][T20359] acl7130 [ 1158.718682][T20359] pcm3730 [ 1158.724918][T20359] pcl725 [ 1158.727927][T20359] p8r8dio [ 1158.851072][T20359] acl7225b [ 1158.854247][T20359] p16r16dio [ 1159.020277][T20437] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1159.032984][T20437] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1159.061816][T20437] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1159.074582][T20437] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1159.093152][T20437] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1159.113931][T20437] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1159.123619][T20437] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1159.239777][T20359] pcl733 [ 1159.244446][T20359] pcl734 [ 1159.247697][T20359] opmm-1616-xt [ 1159.254798][T20359] pearl-mm-p [ 1159.258396][T20359] ir104-pbf [ 1159.268860][T20359] comedi: valid board names for pcl726 driver are: [ 1159.283832][T20359] pcl726 [ 1159.287253][T20359] pcl727 [ 1159.290514][T20359] pcl728 [ 1159.294679][T20359] acl6126 [ 1159.298132][T20359] acl6128 [ 1159.304780][T20359] comedi: valid board names for pcl724 driver are: [ 1159.319037][T20359] pcl724 [ 1159.325609][T20359] pcl722 [ 1159.330915][T17200] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1159.331828][T20359] pcl731 [ 1159.350014][T20359] acl7122 [ 1159.355352][T20359] acl7124 [ 1159.363888][T20359] pet48dio [ 1159.372462][T20359] pcmio48 [ 1159.376412][T20359] onyx-mm-dio [ 1159.380077][T20359] comedi: valid board names for pcl711 driver are: [ 1159.387233][T20359] pcl711 [ 1159.390463][T20359] pcl711b [ 1159.425848][T20359] acl8112hg [ 1159.443149][T20359] acl8112dg [ 1159.450816][T20359] comedi: valid board names for amplc_pc263 driver are: [ 1159.458170][T20359] pc263 [ 1159.461573][T20359] comedi: valid board names for amplc_pc236 driver are: [ 1159.471910][T20359] pc36at [ 1159.477043][T20359] comedi: valid board names for amplc_dio200 driver are: [ 1159.489419][T20359] pc212e [ 1159.494623][T20359] pc214e [ 1159.621826][T20359] pc215e [ 1159.640773][T20359] pc218e [ 1159.647926][T20359] pc272e [ 1159.656386][T20359] comedi: valid board names for comedi_parport driver are: [ 1159.666652][T20359] comedi_parport [ 1159.670350][T20359] comedi: valid board names for comedi_test driver are: [ 1159.677842][T20359] comedi_test [ 1159.681459][T20359] comedi: valid board names for comedi_bond driver are: [ 1159.688584][T20359] comedi_bond [ 1159.756603][T17200] usb 3-1: Using ep0 maxpacket: 32 [ 1159.770494][T17200] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1159.818759][T17200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.329957][T17200] usb 3-1: config 0 descriptor?? [ 1160.647514][T20467] CIFS mount error: No usable UNC path provided in device string! [ 1160.647514][T20467] [ 1160.657681][T20467] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1161.003761][T17200] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1161.017250][T17200] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1161.034435][T17200] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1161.042549][T17200] usb 3-1: media controller created [ 1161.068508][T20466] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1161.090841][T17200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1161.126213][T20470] syz_tun: entered allmulticast mode [ 1161.375710][T17200] DVB: Unable to find symbol dib7000p_attach() [ 1161.392993][T17200] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1161.563866][T20475] dvmrp8: entered allmulticast mode [ 1161.580806][ T50] Bluetooth: hci1: connection err: -111 [ 1161.850979][T17200] rc_core: IR keymap rc-dib0700-rc5 not found [ 1161.858244][T17200] Registered IR keymap rc-empty [ 1161.864916][T17200] dvb-usb: could not initialize remote control. [ 1161.873354][T17200] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1161.909397][T17200] usb 3-1: USB disconnect, device number 42 [ 1161.918470][T20481] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 1161.918470][T20481] program syz.3.3564 not setting count and/or reply_len properly [ 1162.123437][T17200] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1162.639471][T20493] openvswitch: netlink: IP tunnel dst address not specified [ 1163.256630][T20497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1163.266441][T20497] block device autoloading is deprecated and will be removed. [ 1163.287271][ T30] audit: type=1400 audit(1163.217:1269): avc: denied { read } for pid=20491 comm="syz.2.3568" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1163.408644][T20499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3569'. [ 1163.540629][ T30] audit: type=1400 audit(1163.217:1270): avc: denied { open } for pid=20491 comm="syz.2.3568" path="/61/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1163.583309][ T30] audit: type=1400 audit(1163.247:1271): avc: denied { ioctl } for pid=20491 comm="syz.2.3568" path="/61/file0/file0" dev="fuse" ino=2 ioctlcmd=0x928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1163.607094][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.791210][T20503] sp0: Synchronizing with TNC [ 1164.032986][ T30] audit: type=1400 audit(1164.007:1272): avc: denied { listen } for pid=20500 comm="syz.4.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1164.033286][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1164.076357][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1164.076388][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1164.076401][ T50] Workqueue: hci1 hci_rx_work [ 1164.076428][ T50] Call Trace: [ 1164.076435][ T50] [ 1164.076443][ T50] dump_stack_lvl+0x16c/0x1f0 [ 1164.076470][ T50] sysfs_warn_dup+0x7f/0xa0 [ 1164.076496][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 1164.076518][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1164.076540][ T50] ? find_held_lock+0x2b/0x80 [ 1164.076567][ T50] ? do_raw_spin_unlock+0x172/0x230 [ 1164.076591][ T50] kobject_add_internal+0x2c4/0x9b0 [ 1164.076666][ T50] kobject_add+0x16e/0x240 [ 1164.076692][ T50] ? __pfx_kobject_add+0x10/0x10 [ 1164.076717][ T50] ? do_raw_spin_unlock+0x172/0x230 [ 1164.076737][ T50] ? kobject_put+0xab/0x5a0 [ 1164.076770][ T50] device_add+0x288/0x1aa0 [ 1164.076796][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 1164.076814][ T50] ? __pfx_device_add+0x10/0x10 [ 1164.076841][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 1164.076866][ T50] hci_conn_add_sysfs+0x17e/0x230 [ 1164.076889][ T50] le_conn_complete_evt+0x1260/0x2150 [ 1164.076914][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1164.076933][ T50] ? hci_event_packet+0x459/0x11c0 [ 1164.076957][ T50] hci_le_conn_complete_evt+0x23c/0x370 [ 1164.076980][ T50] hci_le_meta_evt+0x354/0x5e0 [ 1164.077000][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1164.077021][ T50] hci_event_packet+0x685/0x11c0 [ 1164.077040][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1164.077061][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1164.077082][ T50] ? kcov_remote_start+0x3c9/0x6d0 [ 1164.077104][ T50] ? lockdep_hardirqs_on+0x7c/0x110 [ 1164.077137][ T50] hci_rx_work+0x2c5/0x16b0 [ 1164.077160][ T50] ? rcu_is_watching+0x12/0xc0 [ 1164.077189][ T50] process_one_work+0x9cc/0x1b70 [ 1164.077223][ T50] ? __pfx_process_one_work+0x10/0x10 [ 1164.077255][ T50] ? assign_work+0x1a0/0x250 [ 1164.077278][ T50] worker_thread+0x6c8/0xf10 [ 1164.077310][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1164.077333][ T50] kthread+0x3c2/0x780 [ 1164.077353][ T50] ? __pfx_kthread+0x10/0x10 [ 1164.077377][ T50] ? rcu_is_watching+0x12/0xc0 [ 1164.077404][ T50] ? __pfx_kthread+0x10/0x10 [ 1164.077424][ T50] ret_from_fork+0x56a/0x730 [ 1164.077439][ T50] ? __pfx_kthread+0x10/0x10 [ 1164.077456][ T50] ret_from_fork_asm+0x1a/0x30 [ 1164.077492][ T50] [ 1164.077520][ T50] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1164.330862][ T50] Bluetooth: hci1: failed to register connection device [ 1164.356150][ T50] ================================================================== [ 1164.364217][ T50] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80 [ 1164.372122][ T50] Read of size 8 at addr ffff888047eb0480 by task kworker/u9:0/50 [ 1164.379906][ T50] [ 1164.382216][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1164.382240][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1164.382254][ T50] Workqueue: hci1 hci_rx_work [ 1164.382278][ T50] Call Trace: [ 1164.382284][ T50] [ 1164.382292][ T50] dump_stack_lvl+0x116/0x1f0 [ 1164.382318][ T50] print_report+0xcd/0x630 [ 1164.382340][ T50] ? __virt_addr_valid+0x81/0x610 [ 1164.382365][ T50] ? __phys_addr+0xe8/0x180 [ 1164.382390][ T50] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1164.382408][ T50] kasan_report+0xe0/0x110 [ 1164.382430][ T50] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1164.382452][ T50] l2cap_connect_cfm+0xdb9/0xf80 [ 1164.382474][ T50] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1164.382495][ T50] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1164.382515][ T50] le_conn_complete_evt+0x1ba3/0x2150 [ 1164.382538][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1164.382557][ T50] ? hci_event_packet+0x459/0x11c0 [ 1164.382580][ T50] hci_le_conn_complete_evt+0x23c/0x370 [ 1164.382603][ T50] hci_le_meta_evt+0x354/0x5e0 [ 1164.382624][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1164.382646][ T50] hci_event_packet+0x685/0x11c0 [ 1164.382665][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1164.382687][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1164.382708][ T50] ? kcov_remote_start+0x3c9/0x6d0 [ 1164.382729][ T50] ? lockdep_hardirqs_on+0x7c/0x110 [ 1164.382756][ T50] hci_rx_work+0x2c5/0x16b0 [ 1164.382778][ T50] ? rcu_is_watching+0x12/0xc0 [ 1164.382804][ T50] process_one_work+0x9cc/0x1b70 [ 1164.382830][ T50] ? __pfx_process_one_work+0x10/0x10 [ 1164.382859][ T50] ? assign_work+0x1a0/0x250 [ 1164.382878][ T50] worker_thread+0x6c8/0xf10 [ 1164.382904][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1164.382925][ T50] kthread+0x3c2/0x780 [ 1164.382944][ T50] ? __pfx_kthread+0x10/0x10 [ 1164.382963][ T50] ? rcu_is_watching+0x12/0xc0 [ 1164.382986][ T50] ? __pfx_kthread+0x10/0x10 [ 1164.383005][ T50] ret_from_fork+0x56a/0x730 [ 1164.383023][ T50] ? __pfx_kthread+0x10/0x10 [ 1164.383041][ T50] ret_from_fork_asm+0x1a/0x30 [ 1164.383071][ T50] [ 1164.383077][ T50] [ 1164.590511][ T50] Allocated by task 50: [ 1164.594643][ T50] kasan_save_stack+0x33/0x60 [ 1164.599307][ T50] kasan_save_track+0x14/0x30 [ 1164.603966][ T50] __kasan_kmalloc+0xaa/0xb0 [ 1164.608538][ T50] l2cap_chan_create+0x44/0x920 [ 1164.613375][ T50] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 1164.619165][ T50] l2cap_sock_new_connection_cb+0x101/0x240 [ 1164.625047][ T50] l2cap_connect_cfm+0x4c7/0xf80 [ 1164.629969][ T50] le_conn_complete_evt+0x1ba3/0x2150 [ 1164.635321][ T50] hci_le_conn_complete_evt+0x23c/0x370 [ 1164.640867][ T50] hci_le_meta_evt+0x354/0x5e0 [ 1164.645617][ T50] hci_event_packet+0x685/0x11c0 [ 1164.650534][ T50] hci_rx_work+0x2c5/0x16b0 [ 1164.655017][ T50] process_one_work+0x9cc/0x1b70 [ 1164.659938][ T50] worker_thread+0x6c8/0xf10 [ 1164.664508][ T50] kthread+0x3c2/0x780 [ 1164.668558][ T50] ret_from_fork+0x56a/0x730 [ 1164.673126][ T50] ret_from_fork_asm+0x1a/0x30 [ 1164.677875][ T50] [ 1164.680176][ T50] Freed by task 20501: [ 1164.684216][ T50] kasan_save_stack+0x33/0x60 [ 1164.688878][ T50] kasan_save_track+0x14/0x30 [ 1164.693533][ T50] kasan_save_free_info+0x3b/0x60 [ 1164.698543][ T50] __kasan_slab_free+0x60/0x70 [ 1164.703288][ T50] kfree+0x2b4/0x4d0 [ 1164.707169][ T50] l2cap_chan_put+0x216/0x2c0 [ 1164.711833][ T50] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 1164.717365][ T50] l2cap_sock_release+0x69/0x250 [ 1164.722299][ T50] __sock_release+0xb0/0x270 [ 1164.726878][ T50] sock_close+0x1c/0x30 [ 1164.731017][ T50] __fput+0x402/0xb70 [ 1164.734984][ T50] task_work_run+0x150/0x240 [ 1164.739555][ T50] do_exit+0x86f/0x2bf0 [ 1164.743727][ T50] do_group_exit+0xd3/0x2a0 [ 1164.748218][ T50] get_signal+0x2673/0x26d0 [ 1164.752706][ T50] arch_do_signal_or_restart+0x8f/0x7d0 [ 1164.758237][ T50] exit_to_user_mode_loop+0x84/0x110 [ 1164.763504][ T50] do_syscall_64+0x41c/0x4e0 [ 1164.768082][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.773952][ T50] [ 1164.776255][ T50] The buggy address belongs to the object at ffff888047eb0000 [ 1164.776255][ T50] which belongs to the cache kmalloc-2k of size 2048 [ 1164.790295][ T50] The buggy address is located 1152 bytes inside of [ 1164.790295][ T50] freed 2048-byte region [ffff888047eb0000, ffff888047eb0800) [ 1164.804252][ T50] [ 1164.806557][ T50] The buggy address belongs to the physical page: [ 1164.812967][ T50] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47eb0 [ 1164.821718][ T50] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1164.830193][ T50] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1164.838248][ T50] page_type: f5(slab) [ 1164.842211][ T50] raw: 00fff00000000040 ffff88801b842000 0000000000000000 dead000000000001 [ 1164.850801][ T50] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1164.859365][ T50] head: 00fff00000000040 ffff88801b842000 0000000000000000 dead000000000001 [ 1164.868014][ T50] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1164.876667][ T50] head: 00fff00000000003 ffffea00011fac01 00000000ffffffff 00000000ffffffff [ 1164.885403][ T50] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1164.894059][ T50] page dumped because: kasan: bad access detected [ 1164.900452][ T50] page_owner tracks the page as allocated [ 1164.906144][ T50] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7238, tgid 7235 (syz.0.254), ts 174540863550, free_ts 18043669400 [ 1164.927315][ T50] post_alloc_hook+0x1c0/0x230 [ 1164.932087][ T50] get_page_from_freelist+0x132b/0x38e0 [ 1164.937614][ T50] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1164.943494][ T50] alloc_pages_mpol+0x1fb/0x550 [ 1164.948326][ T50] new_slab+0x247/0x330 [ 1164.952496][ T50] ___slab_alloc+0xcf2/0x1750 [ 1164.957162][ T50] __slab_alloc.constprop.0+0x56/0xb0 [ 1164.962522][ T50] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1164.967794][ T50] br_vlan_add+0x113/0xb20 [ 1164.972195][ T50] __vlan_add+0xfeb/0x2d80 [ 1164.976611][ T50] nbp_vlan_add+0x261/0x410 [ 1164.981100][ T50] br_vlan_info+0x159/0x3d0 [ 1164.985592][ T50] br_process_vlan_info+0x435/0xa10 [ 1164.990857][ T50] br_afspec+0x573/0x650 [ 1164.995092][ T50] br_setlink+0x374/0x630 [ 1164.999400][ T50] rtnl_bridge_setlink+0x56d/0x740 [ 1165.004494][ T50] page last free pid 1 tgid 1 stack trace: [ 1165.010272][ T50] __free_frozen_pages+0x7d5/0x10f0 [ 1165.015456][ T50] free_contig_range+0x183/0x4b0 [ 1165.020382][ T50] destroy_args+0x794/0xc10 [ 1165.024862][ T50] debug_vm_pgtable+0x1a32/0x3640 [ 1165.029866][ T50] do_one_initcall+0x120/0x6e0 [ 1165.034621][ T50] kernel_init_freeable+0x5c2/0x910 [ 1165.039810][ T50] kernel_init+0x1c/0x2b0 [ 1165.044117][ T50] ret_from_fork+0x56a/0x730 [ 1165.048688][ T50] ret_from_fork_asm+0x1a/0x30 [ 1165.053435][ T50] [ 1165.055735][ T50] Memory state around the buggy address: [ 1165.061341][ T50] ffff888047eb0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1165.069379][ T50] ffff888047eb0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1165.077415][ T50] >ffff888047eb0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1165.085448][ T50] ^ [ 1165.089489][ T50] ffff888047eb0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1165.097527][ T50] ffff888047eb0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1165.105560][ T50] ================================================================== [ 1165.120822][ T50] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1165.128037][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1165.137315][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1165.147366][ T50] Workqueue: hci1 hci_rx_work [ 1165.152042][ T50] Call Trace: [ 1165.155297][ T50] [ 1165.158202][ T50] dump_stack_lvl+0x3d/0x1f0 [ 1165.162771][ T50] vpanic+0x6e8/0x7a0 [ 1165.166728][ T50] ? __pfx_vpanic+0x10/0x10 [ 1165.171199][ T50] ? __pfx_vprintk_emit+0x10/0x10 [ 1165.176201][ T50] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1165.181284][ T50] panic+0xca/0xd0 [ 1165.184979][ T50] ? __pfx_panic+0x10/0x10 [ 1165.189364][ T50] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1165.194446][ T50] ? preempt_schedule_common+0x44/0xc0 [ 1165.199876][ T50] ? preempt_schedule_thunk+0x16/0x30 [ 1165.205223][ T50] check_panic_on_warn+0xab/0xb0 [ 1165.210132][ T50] end_report+0x107/0x170 [ 1165.214435][ T50] kasan_report+0xee/0x110 [ 1165.218825][ T50] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1165.223922][ T50] l2cap_connect_cfm+0xdb9/0xf80 [ 1165.228833][ T50] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1165.234265][ T50] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1165.239700][ T50] le_conn_complete_evt+0x1ba3/0x2150 [ 1165.245051][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1165.250743][ T50] ? hci_event_packet+0x459/0x11c0 [ 1165.255827][ T50] hci_le_conn_complete_evt+0x23c/0x370 [ 1165.261345][ T50] hci_le_meta_evt+0x354/0x5e0 [ 1165.266080][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1165.272119][ T50] hci_event_packet+0x685/0x11c0 [ 1165.277027][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1165.282299][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1165.287641][ T50] ? kcov_remote_start+0x3c9/0x6d0 [ 1165.292725][ T50] ? lockdep_hardirqs_on+0x7c/0x110 [ 1165.297910][ T50] hci_rx_work+0x2c5/0x16b0 [ 1165.302387][ T50] ? rcu_is_watching+0x12/0xc0 [ 1165.307139][ T50] process_one_work+0x9cc/0x1b70 [ 1165.312052][ T50] ? __pfx_process_one_work+0x10/0x10 [ 1165.317395][ T50] ? assign_work+0x1a0/0x250 [ 1165.321968][ T50] worker_thread+0x6c8/0xf10 [ 1165.326534][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1165.331632][ T50] kthread+0x3c2/0x780 [ 1165.335685][ T50] ? __pfx_kthread+0x10/0x10 [ 1165.340264][ T50] ? rcu_is_watching+0x12/0xc0 [ 1165.345005][ T50] ? __pfx_kthread+0x10/0x10 [ 1165.349577][ T50] ret_from_fork+0x56a/0x730 [ 1165.354148][ T50] ? __pfx_kthread+0x10/0x10 [ 1165.358708][ T50] ret_from_fork_asm+0x1a/0x30 [ 1165.363451][ T50] [ 1165.366686][ T50] Kernel Offset: disabled [ 1165.370986][ T50] Rebooting in 86400 seconds..