last executing test programs: 10m15.434138787s ago: executing program 32 (id=359): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 9m54.380329136s ago: executing program 1 (id=589): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in={{0x2, 0x4e23, @empty}}}, 0x90) 9m54.325440025s ago: executing program 1 (id=590): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000040)) 9m53.858255387s ago: executing program 1 (id=594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)="e834bf02ee452ccc16e64ed65019e82352547be4f793f7d4d54fb147c6a96fd025cc5408519a6cfd418a0d8201efbdb675fa27afffb426d3220b1c4371b90469c57c56796ba11c", 0x47}], 0x1}, 0x44000) recvmmsg(r1, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/236, 0xec}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x200}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 9m53.79538166s ago: executing program 1 (id=596): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) 9m53.51432606s ago: executing program 1 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x0) 9m53.359208586s ago: executing program 1 (id=602): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080)) 9m37.275659432s ago: executing program 33 (id=602): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080)) 6m39.104038533s ago: executing program 3 (id=2647): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) 6m38.930814125s ago: executing program 3 (id=2651): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x1000100, 0x300, 0x0, 0x0, 0x54}, 0x9c) 6m38.636338854s ago: executing program 3 (id=2654): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) 6m38.144341738s ago: executing program 3 (id=2662): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) unshare(0x6020400) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) 6m37.990522505s ago: executing program 3 (id=2665): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="cb", 0x1, 0x24004090, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b147614a", 0x4, 0x4000, 0x0, 0x0) 6m36.681686881s ago: executing program 3 (id=2688): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r2, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) 6m36.476125685s ago: executing program 34 (id=2688): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r2, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) 3m56.662195118s ago: executing program 7 (id=3937): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) 3m56.413406651s ago: executing program 7 (id=3938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 3m55.311436634s ago: executing program 7 (id=3942): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) 3m54.705857064s ago: executing program 7 (id=3944): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m53.742506379s ago: executing program 7 (id=3949): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x54) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x3c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) 3m51.914711807s ago: executing program 7 (id=3958): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3m51.565675561s ago: executing program 35 (id=3958): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3m38.994189258s ago: executing program 6 (id=4022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r0}, 0x38) 3m37.133339878s ago: executing program 6 (id=4032): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) 3m36.089211277s ago: executing program 6 (id=4038): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 3m34.945369885s ago: executing program 6 (id=4043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000140000000000, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m34.529675873s ago: executing program 6 (id=4048): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) stat(&(0x7f0000000080)='./file1\x00', 0x0) 3m34.387813683s ago: executing program 6 (id=4050): openat$dsp(0xffffff9c, 0x0, 0x480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020) 3m17.99862844s ago: executing program 36 (id=4050): openat$dsp(0xffffff9c, 0x0, 0x480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020) 2m12.674258934s ago: executing program 9 (id=4450): setrlimit(0x8, 0x0) r0 = fanotify_init(0x200, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x800, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000002800)=""/116, 0x74) 2m11.525736222s ago: executing program 9 (id=4458): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ff9, 0x32c, 0x0, r2}, &(0x7f0000000800)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 2m9.259568854s ago: executing program 9 (id=4466): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 2m7.08653636s ago: executing program 9 (id=4475): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(r0) r3 = socket(0x10, 0x3, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) 2m3.271653578s ago: executing program 9 (id=4490): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m3.224087972s ago: executing program 9 (id=4491): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) socket$kcm(0x29, 0x5, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) 1m46.916339668s ago: executing program 37 (id=4491): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) socket$kcm(0x29, 0x5, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) 13.42162967s ago: executing program 2 (id=4882): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.906281416s ago: executing program 2 (id=4888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff"], 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 11.685735648s ago: executing program 2 (id=4890): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000005000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61143c00000000001d430000000000007a0a00fe00581c1f61145d0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845"], 0x0}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x18, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.770673059s ago: executing program 2 (id=4893): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x3ff, 0xfad, 0x3, 0x0, 0x6, r4}) 8.806113043s ago: executing program 4 (id=4900): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r3, 0x2007ffb) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 8.805272421s ago: executing program 0 (id=4910): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 8.652879524s ago: executing program 0 (id=4902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000000000)={'dummy0\x00', @ifru_hwaddr}) 7.829654879s ago: executing program 8 (id=4903): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07eeffff7e00000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r6, 0x1, 0x70bd2c, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 7.604225417s ago: executing program 0 (id=4904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xffffffffffff0bfe, 0x1, 0x2, 0x101, 0x81, 0x2, "98f2604727f5c9f5f0113175c573e7c9", 0x4, 0x4, 0x5, 0x0, 0x93, 0x5, 0x7}) 7.490678214s ago: executing program 8 (id=4905): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_vif\x00') read$rfkill(r3, &(0x7f0000000040), 0x8) 6.037634156s ago: executing program 0 (id=4906): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x11, 0x0, &(0x7f0000001040)) 5.3852412s ago: executing program 8 (id=4908): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x6}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.925445858s ago: executing program 2 (id=4911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x8000000000000029}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x23, 0x4000000000000000, &(0x7f0000000700)="0a1398f8668babb9862aa1c9ea0380d18dafd06547dd62179ba79df1971b787788d854"}) 4.705453125s ago: executing program 2 (id=4912): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0xf, 0x2, 'o*'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.63706472s ago: executing program 4 (id=4913): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RSTATu(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="330200007d02000005f2000000040000000001000000050000000000000000000000000000000000000000000000000000001b00046e6f6465767b48766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233) 3.942911035s ago: executing program 5 (id=4914): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) sendto$inet6(r3, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0x2000c7, @local}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 3.793535105s ago: executing program 5 (id=4915): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.650911401s ago: executing program 4 (id=4916): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000006001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) 3.596568411s ago: executing program 5 (id=4917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 2.613510128s ago: executing program 4 (id=4918): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ff9, 0x32c, 0x0, r2}, &(0x7f0000000800)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 2.612698763s ago: executing program 0 (id=4919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x40, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0x73, 0x4, 0x3}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.321872181s ago: executing program 5 (id=4920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.31889258s ago: executing program 8 (id=4921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_TSC(0x1a, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x5760, 0x0) 2.25386s ago: executing program 0 (id=4922): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.347855672s ago: executing program 8 (id=4923): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') readv(r3, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000300)=""/41, 0x29}], 0x2) 1.266675293s ago: executing program 5 (id=4924): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) 509.881544ms ago: executing program 4 (id=4925): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 266.735695ms ago: executing program 8 (id=4926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @local}, 0x4, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000400)='veth1_to_bridge\x00', 0x48b, 0x7, 0xffff}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 210.927017ms ago: executing program 5 (id=4927): poll(0x0, 0x0, 0x7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 0s ago: executing program 4 (id=4928): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x810) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x22, 0x2a}, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000164, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r4, 0x154e, 0xffffffff, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ith an up link [ 424.240491][T13487] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.271463][T13487] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.305752][T13487] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.379348][T13487] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.445033][T16009] hsr0: left promiscuous mode [ 424.459270][T16009] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 424.480441][T16009] bond1: left promiscuous mode [ 424.485219][T16009] erspan1: left promiscuous mode [ 424.503228][T16009] bond1: left allmulticast mode [ 424.504799][T16010] futex_wake_op: syz.5.3629 tries to shift op by -1; fix this program [ 424.543908][T16009] erspan1: left allmulticast mode [ 424.565344][T16009] bond2: left promiscuous mode [ 424.579649][T16009] bond2: left allmulticast mode [ 424.610139][T16009] bond4: left promiscuous mode [ 424.635731][ T4158] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.648391][ T4158] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.665057][ T4158] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.682273][T15728] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.474413][ T5137] Bluetooth: hci0: unexpected event for opcode 0x042c [ 426.550227][ T5137] Bluetooth: hci4: command 0x0406 tx timeout [ 427.373508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.859432][T16074] ipip0: left promiscuous mode [ 427.885017][T16074] bond1: left promiscuous mode [ 427.899224][T16074] erspan1: left promiscuous mode [ 427.915293][T16074] bond1: left allmulticast mode [ 427.934294][T16074] erspan1: left allmulticast mode [ 427.978271][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 427.978283][ T30] audit: type=1326 audit(1768785007.920:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7fc00000 [ 428.061997][T16074] bridge4: left promiscuous mode [ 428.078886][T16074] bridge4: left allmulticast mode [ 428.108080][T16074] veth8: left promiscuous mode [ 428.123679][T16074] veth8: left allmulticast mode [ 428.203384][T16074] ip6gre1: left promiscuous mode [ 428.215161][T16074] ip6gre1: left allmulticast mode [ 428.229473][ T3558] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.268784][ T3558] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.299999][ T3558] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.339639][ T3558] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.358041][ T3558] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.378024][ T3558] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.401750][ T3558] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.420117][ T3558] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.566781][ T3558] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.770944][ T3558] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.947401][ T3558] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.985717][T16139] netlink: 'syz.5.3665': attribute type 6 has an invalid length. [ 430.074803][ T3558] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.281703][ T3558] bridge_slave_1: left allmulticast mode [ 430.292669][ T3558] bridge_slave_1: left promiscuous mode [ 430.309117][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.319076][ T3558] bridge_slave_0: left allmulticast mode [ 430.324783][ T3558] bridge_slave_0: left promiscuous mode [ 430.331523][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.644384][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.655035][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.665657][ T3558] bond0 (unregistering): Released all slaves [ 431.531179][T16159] netlink: 'syz.6.3669': attribute type 1 has an invalid length. [ 431.688287][T16162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3670'. [ 431.825411][T16166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16166 comm=syz.0.3670 [ 432.151369][T16159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.165255][T16160] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 432.223872][T16164] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 432.271060][T15742] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.280156][T15742] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 432.415327][T15742] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.429140][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3678'. [ 432.441691][T15742] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 432.450648][T15742] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.472941][T15742] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 432.495935][T13485] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 432.507371][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3678'. [ 432.518108][T15742] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.529523][T15742] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 432.552857][ T30] audit: type=1400 audit(1768785012.204:687): avc: denied { connect } for pid=16176 comm="syz.6.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 432.586874][T16183] syzkaller0: entered promiscuous mode [ 432.596795][T16183] syzkaller0: entered allmulticast mode [ 432.636526][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.668841][ T3558] hsr_slave_0: left promiscuous mode [ 432.688082][ T3558] hsr_slave_1: left promiscuous mode [ 432.697324][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.710232][ T30] audit: type=1400 audit(1768785012.354:688): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.751606][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.759278][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.759747][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.804635][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.830133][ T30] audit: type=1400 audit(1768785012.354:689): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.854828][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.870261][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.880435][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.931624][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.959490][ T30] audit: type=1400 audit(1768785012.354:690): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.988794][ T3558] veth1_macvtap: left promiscuous mode [ 433.003556][ T3558] veth0_macvtap: left promiscuous mode [ 433.009410][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.027390][ T3558] veth1_vlan: left promiscuous mode [ 433.039366][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.051114][ T3558] veth0_vlan: left promiscuous mode [ 433.083340][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.346800][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 434.937081][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 435.599610][ T30] audit: type=1400 audit(1768785015.048:691): avc: denied { append } for pid=16225 comm="syz.6.3689" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 437.850145][ T148] net_ratelimit: 186 callbacks suppressed [ 437.850164][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.926262][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 437.971098][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.015516][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.053411][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.078007][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.117614][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.150263][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.181859][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.213594][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 439.110644][T16269] netlink: 584 bytes leftover after parsing attributes in process `syz.5.3697'. [ 439.811833][T16276] overlayfs: failed to clone upperpath [ 441.063785][ T30] audit: type=1326 audit(1768785020.165:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.6.3706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09e1d8f749 code=0x0 [ 441.196085][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3707'. [ 441.289038][T16300] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 441.322454][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3707'. [ 441.365937][T16300] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 441.395818][T16300] bond4 (unregistering): Released all slaves [ 441.848428][T16084] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 442.042961][T16084] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.070764][T16084] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 442.094642][T16084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.128375][T16084] usb 8-1: config 0 descriptor?? [ 442.389971][T16084] usbhid 8-1:0.0: can't add hid device: -71 [ 442.409794][T16084] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 442.472393][T16084] usb 8-1: USB disconnect, device number 8 [ 442.556181][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3717'. [ 442.613297][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3717'. [ 442.899828][T16328] overlayfs: upper fs does not support file handles, falling back to index=off. [ 442.961088][T16084] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 443.082223][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3724'. [ 443.107840][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3724'. [ 443.206067][T16084] usb 8-1: Using ep0 maxpacket: 32 [ 443.212452][T16084] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.238164][T16084] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 443.247196][T16084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.281295][T16084] usb 8-1: config 0 descriptor?? [ 443.297659][T16084] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 443.307011][ T148] net_ratelimit: 127 callbacks suppressed [ 443.307023][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.333915][ T148] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 443.346621][T16084] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 443.505717][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.550796][ T148] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 443.708627][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.746181][T15732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 443.845336][ T30] audit: type=1400 audit(1768785022.765:693): avc: denied { view } for pid=16314 comm="syz.7.3711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 443.904121][T16084] usb 8-1: USB disconnect, device number 9 [ 443.911671][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.944915][T15748] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 443.964713][T16084] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 444.072876][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.097895][T15748] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 445.811455][T16403] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3743'. [ 445.893396][T16403] netlink: 'syz.7.3743': attribute type 10 has an invalid length. [ 445.963480][T16403] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 446.763236][ T30] audit: type=1400 audit(1768785025.497:694): avc: denied { watch watch_reads } for pid=16417 comm="syz.4.3750" path="/687/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 446.948352][T16090] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 447.614717][T16090] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.634002][T16090] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 447.671858][T16090] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 447.708763][T16090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.746112][T16090] usb 7-1: config 0 descriptor?? [ 447.767055][T16090] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 447.786860][T16090] dvb-usb: bulk message failed: -22 (3/0) [ 447.818208][T16090] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 447.906422][T16090] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 448.002361][T16090] usb 7-1: media controller created [ 448.020324][T16422] dvb-usb: bulk message failed: -22 (2/0) [ 448.027215][T16090] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.043207][T16090] dvb-usb: bulk message failed: -22 (6/0) [ 448.092549][T16090] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 448.153705][T16090] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30 [ 448.539838][T16090] dvb-usb: schedule remote query interval to 150 msecs. [ 448.567315][T16448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=16448 comm=syz.6.3748 [ 448.591079][T16090] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 448.659557][ T148] net_ratelimit: 71 callbacks suppressed [ 448.659571][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.710803][T16090] usb 7-1: USB disconnect, device number 24 [ 448.731488][ T148] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 448.775291][T16090] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 448.893777][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.929996][T15732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 449.053898][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.074661][T15742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 449.246407][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.254748][T15748] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 449.374697][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.388438][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 451.832927][T16514] Bluetooth: MGMT ver 1.23 [ 453.231682][T16092] libceph: connect (1)[c::]:6789 error -101 [ 453.257635][T16092] libceph: mon0 (1)[c::]:6789 connect error [ 453.322257][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3791'. [ 453.501167][T16545] ceph: No mds server is up or the cluster is laggy [ 454.111907][T15735] net_ratelimit: 63 callbacks suppressed [ 454.111936][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.126750][T15735] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.252972][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.260904][T15735] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.378671][T13487] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.442163][T13487] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.538950][T16568] binder: 16566:16568 ioctl c0306201 200000000280 returned -14 [ 454.559562][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.577541][ T30] audit: type=1400 audit(1768785032.802:695): avc: denied { setopt } for pid=16570 comm="syz.6.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 454.578578][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 454.730597][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3799'. [ 454.763229][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.814083][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.887465][ T30] audit: type=1400 audit(1768785033.092:696): avc: denied { ioctl } for pid=16580 comm="syz.7.3802" path="socket:[64651]" dev="sockfs" ino=64651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.889216][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3802'. [ 455.299446][ T30] audit: type=1400 audit(1768785033.485:697): avc: denied { getopt } for pid=16579 comm="syz.4.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 455.338285][T16084] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 455.543214][T16084] usb 8-1: Using ep0 maxpacket: 16 [ 455.549943][T16084] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 455.582141][T16084] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.615113][T16084] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.690400][T16084] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.880011][T16084] usb 8-1: Product: syz [ 455.904837][T16084] usb 8-1: Manufacturer: syz [ 455.923089][T16084] usb 8-1: SerialNumber: syz [ 455.970344][ T30] audit: type=1400 audit(1768785034.102:698): avc: denied { create } for pid=16612 comm="syz.6.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 456.017009][T16092] IPVS: starting estimator thread 0... [ 456.030869][ T30] audit: type=1400 audit(1768785034.130:699): avc: denied { write } for pid=16612 comm="syz.6.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 456.131079][T16614] IPVS: using max 44 ests per chain, 105600 per kthread [ 456.203359][T16591] smc: net device bond0 applied user defined pnetid SYZ2 [ 456.221803][T16591] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3804'. [ 456.291976][T16619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.329260][T16619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.354078][T16621] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3812'. [ 456.473842][T16623] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16623 comm=syz.6.3812 [ 456.553922][T16591] smc: removing net device bond0 with user defined pnetid SYZ2 [ 456.570729][T16591] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 456.627465][T16591] bond0 (unregistering): Released all slaves [ 456.779466][T16084] usb 8-1: 0:2 : does not exist [ 456.805286][T16084] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 456.855121][T16084] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 456.882896][T16084] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 456.909081][T16084] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 456.919348][T16633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3816'. [ 456.928524][T16633] netlink: 'syz.4.3816': attribute type 2 has an invalid length. [ 456.936710][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3816'. [ 456.964240][T16084] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 457.004714][T16084] usb 8-1: USB disconnect, device number 10 [ 457.181373][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3822'. [ 457.875495][T16660] netlink: 'syz.7.3824': attribute type 4 has an invalid length. [ 458.387598][T16090] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 459.440631][T16090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.466509][T16090] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 459.475538][T16090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.508314][ T3558] net_ratelimit: 75 callbacks suppressed [ 459.508329][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.526349][T16090] usb 5-1: config 0 descriptor?? [ 459.548069][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.567586][T16090] pwc: Askey VC010 type 2 USB webcam detected. [ 459.701978][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.721261][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.879114][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.916759][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 459.943746][T16697] netlink: 'syz.5.3839': attribute type 4 has an invalid length. [ 459.966434][T16697] netlink: 'syz.5.3839': attribute type 4 has an invalid length. [ 460.002571][T16090] pwc: recv_control_msg error -32 req 02 val 2b00 [ 460.019662][T16090] pwc: recv_control_msg error -32 req 02 val 2700 [ 460.037330][T16090] pwc: recv_control_msg error -32 req 02 val 2c00 [ 460.054623][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.063897][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 460.064749][T16090] pwc: recv_control_msg error -32 req 04 val 1000 [ 460.081649][T16090] pwc: recv_control_msg error -32 req 04 val 1300 [ 460.089742][T16090] pwc: recv_control_msg error -32 req 04 val 1400 [ 460.098688][T16090] pwc: recv_control_msg error -32 req 02 val 2000 [ 460.107249][T16090] pwc: recv_control_msg error -32 req 02 val 2100 [ 460.194050][T15728] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.203795][T15728] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 460.329599][T16090] pwc: recv_control_msg error -71 req 02 val 2500 [ 460.339073][T16090] pwc: recv_control_msg error -71 req 02 val 2400 [ 460.351085][T16090] pwc: recv_control_msg error -71 req 02 val 2600 [ 460.358717][T16090] pwc: recv_control_msg error -71 req 02 val 2900 [ 460.366155][T16090] pwc: recv_control_msg error -71 req 02 val 2800 [ 460.376419][T16090] pwc: recv_control_msg error -71 req 04 val 1100 [ 460.383623][T16090] pwc: recv_control_msg error -71 req 04 val 1200 [ 460.409488][T16090] pwc: Registered as video103. [ 460.440393][T16090] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 460.485378][T16090] usb 5-1: USB disconnect, device number 33 [ 460.922449][T16713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 460.964695][T16713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16713 comm=syz.4.3845 [ 460.990109][T16090] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 461.177108][T16090] usb 8-1: Using ep0 maxpacket: 32 [ 461.310147][T16090] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.343343][T16090] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.355002][T16090] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 461.364724][T16090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.417784][T16090] usb 8-1: config 0 descriptor?? [ 461.438035][T16721] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3847'. [ 461.548375][T16727] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3851'. [ 461.627825][T16727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16727 comm=syz.6.3851 [ 461.916145][T16090] usbhid 8-1:0.0: can't add hid device: -71 [ 461.933153][T16090] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 461.965799][T16090] usb 8-1: USB disconnect, device number 11 [ 462.224865][ T30] audit: type=1326 audit(1768785039.958:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.4.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7fc00000 [ 462.272729][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.279409][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.346680][ T30] audit: type=1326 audit(1768785039.958:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.4.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa9fb8f749 code=0x7fc00000 [ 462.496519][ T30] audit: type=1326 audit(1768785039.958:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.4.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7fc00000 [ 462.525241][ T30] audit: type=1326 audit(1768785039.958:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.4.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7fc00000 [ 462.549665][ T30] audit: type=1326 audit(1768785039.958:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.4.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7fc00000 [ 462.574049][ T30] audit: type=1326 audit(1768785039.958:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.4.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7fc00000 [ 462.887781][ T30] audit: type=1400 audit(1768785040.575:706): avc: denied { ioctl } for pid=16761 comm="syz.6.3864" path="socket:[64925]" dev="sockfs" ino=64925 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 462.935322][T16764] overlayfs: failed to clone upperpath [ 463.183965][ T30] audit: type=1400 audit(1768785040.856:707): avc: denied { create } for pid=16774 comm="syz.0.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 463.330651][T16779] kvm: pic: non byte write [ 463.828442][T16084] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 464.000569][T16084] usb 8-1: Using ep0 maxpacket: 16 [ 464.013217][T16084] usb 8-1: config 0 has no interfaces? [ 464.021586][T16084] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 464.030962][T16084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.065983][T16084] usb 8-1: config 0 descriptor?? [ 464.537198][T16084] usb 8-1: USB disconnect, device number 12 [ 464.640079][T13485] bond0 (unregistering): left promiscuous mode [ 464.654592][T16793] netlink: 'syz.4.3873': attribute type 1 has an invalid length. [ 464.662678][T13485] bond_slave_0: left promiscuous mode [ 464.668084][T16793] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3873'. [ 464.677620][T13485] bond_slave_1: left promiscuous mode [ 464.685526][T13485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.699927][T13485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.711178][T13485] bond0 (unregistering): Released all slaves [ 464.725990][T13485] bond1 (unregistering): Released all slaves [ 464.741613][T13485] bond2 (unregistering): (slave lo): Releasing backup interface [ 464.763226][T13485] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 464.800050][T13485] bond2 (unregistering): Released all slaves [ 464.869141][T15735] net_ratelimit: 130 callbacks suppressed [ 464.869156][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.925168][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.966060][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.015006][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.163422][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.211896][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.452946][T16806] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3877'. [ 465.495171][T15742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 465.555630][T16806] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3877'. [ 465.645723][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.678010][T15742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 465.795642][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.862138][T13485] team0: left promiscuous mode [ 466.491757][T13485] team_slave_1: left promiscuous mode [ 466.550868][T13485] hsr_slave_0: left promiscuous mode [ 466.578559][T13485] hsr_slave_1: left promiscuous mode [ 466.608645][T13485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.637253][T13485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.666471][T13485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.234675][T13485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.344819][T13485] veth1_macvtap: left promiscuous mode [ 467.372211][T13485] veth0_macvtap: left promiscuous mode [ 467.403163][T13485] veth1_vlan: left promiscuous mode [ 467.429187][T13485] veth0_vlan: left promiscuous mode [ 467.443398][T16837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3888'. [ 467.565384][T16839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16839 comm=syz.6.3888 [ 468.819519][T13485] team0 (unregistering): Port device team_slave_1 removed [ 469.133345][T16870] netlink: 'syz.0.3897': attribute type 39 has an invalid length. [ 469.565575][T16870] syz_tun (unregistering): left allmulticast mode [ 469.955226][ T30] audit: type=1400 audit(1768785047.198:708): avc: denied { ioctl } for pid=16885 comm="syz.6.3902" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 470.222045][ T3558] net_ratelimit: 153 callbacks suppressed [ 470.222076][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.464976][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.507315][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 470.640159][ T30] audit: type=1400 audit(1768785047.834:709): avc: denied { create } for pid=16893 comm="syz.4.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 470.949471][ T30] audit: type=1400 audit(1768785048.105:710): avc: denied { accept } for pid=16882 comm="syz.0.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 471.001723][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.020254][T15742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 471.151399][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.159146][T15735] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 471.322783][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.365235][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.569080][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.825253][T16923] batman_adv: batadv0: Adding interface: macsec1 [ 472.834756][T16923] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.861200][T16923] batman_adv: batadv0: Interface activated: macsec1 [ 473.590821][ T30] audit: type=1326 audit(1768785050.593:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.7.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bb18f749 code=0x7ffc0000 [ 473.624885][ T30] audit: type=1326 audit(1768785050.603:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.7.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f20bb18f749 code=0x7ffc0000 [ 473.648873][ T30] audit: type=1326 audit(1768785050.612:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.7.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bb18f749 code=0x7ffc0000 [ 473.735124][ T30] audit: type=1326 audit(1768785050.612:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.7.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f20bb18f749 code=0x7ffc0000 [ 473.854521][ T30] audit: type=1326 audit(1768785050.621:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.7.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bb18f749 code=0x7ffc0000 [ 473.899205][ T30] audit: type=1326 audit(1768785050.621:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.7.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bb18f749 code=0x7ffc0000 [ 473.953313][ T30] audit: type=1326 audit(1768785050.621:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.7.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f20bb18f749 code=0x7ffc0000 [ 475.798674][T15743] net_ratelimit: 300 callbacks suppressed [ 475.798686][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.830442][T15743] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 475.962879][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.988528][T15743] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.152509][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.176243][T15743] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.323603][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 476.323617][ T30] audit: type=1326 audit(1768785053.147:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16984 comm="syz.0.3931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb366b8f749 code=0x0 [ 476.385462][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.411145][T15743] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.539533][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.547525][T15735] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 476.797074][ T30] audit: type=1400 audit(1768785053.596:723): avc: denied { ioctl } for pid=16990 comm="syz.7.3932" path="socket:[65772]" dev="sockfs" ino=65772 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 480.118378][T17047] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3946'. [ 481.157842][ T148] net_ratelimit: 80 callbacks suppressed [ 481.157858][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.200522][ T36] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.243482][T13506] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.266001][T13506] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 481.403737][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.585317][ T148] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 481.703099][T13506] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.769438][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.787276][T15732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 481.974241][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.847475][T15743] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 483.238461][ T5137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 483.255356][ T5137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 483.258865][ T30] audit: type=1326 audit(1768785059.639:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.287149][ T5137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 483.289499][ T30] audit: type=1326 audit(1768785059.639:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.319599][ T5137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 483.320043][ T30] audit: type=1326 audit(1768785059.639:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.352130][ T5137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 483.352160][ T30] audit: type=1326 audit(1768785059.639:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.359518][T15743] bond3 (unregistering): (slave geneve2): Releasing active interface [ 483.423002][ T30] audit: type=1326 audit(1768785059.667:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.447142][ T30] audit: type=1326 audit(1768785059.667:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.471426][ T30] audit: type=1326 audit(1768785059.667:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.497347][ T30] audit: type=1326 audit(1768785059.667:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.522258][ T30] audit: type=1326 audit(1768785059.667:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.549397][ T30] audit: type=1326 audit(1768785059.667:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.0.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 483.673799][T15743] bond1 (unregistering): Released all slaves [ 483.741109][T17104] sctp: [Deprecated]: syz.4.3967 (pid 17104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.741109][T17104] Use struct sctp_sack_info instead [ 483.747345][T15742] Bluetooth: hci1: Frame reassembly failed (-84) [ 483.824384][T15743] bond2 (unregistering): Released all slaves [ 483.836029][T15743] bond3 (unregistering): Released all slaves [ 484.560571][T17093] chnl_net:caif_netlink_parms(): no params data found [ 484.603140][T17117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3969'. [ 484.612851][T15743] hsr_slave_0: left promiscuous mode [ 484.620333][T15743] hsr_slave_1: left promiscuous mode [ 484.627830][T17119] tmpfs: Bad value for 'mpol' [ 484.631172][T15743] batman_adv: batadv0: Interface deactivated: macsec1 [ 484.639442][T15743] batman_adv: batadv0: Removing interface: macsec1 [ 485.335383][T17121] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 485.453396][T17093] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.463439][T17093] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.470871][T17093] bridge_slave_0: entered allmulticast mode [ 485.478918][T17093] bridge_slave_0: entered promiscuous mode [ 485.486912][T17093] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.494309][T17093] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.501651][T17093] bridge_slave_1: entered allmulticast mode [ 485.536477][T17093] bridge_slave_1: entered promiscuous mode [ 485.612393][T17093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.626475][ T5824] Bluetooth: hci0: command tx timeout [ 485.633421][T17093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.688022][T17093] team0: Port device team_slave_0 added [ 485.699862][T17093] team0: Port device team_slave_1 added [ 485.799664][T17093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.830011][T17093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.904381][T17093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.917000][T17093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.923928][T17093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.954587][T17093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.968638][ T5824] Bluetooth: hci1: command 0x1003 tx timeout [ 485.968849][ T5137] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 486.055795][T17093] hsr_slave_0: entered promiscuous mode [ 486.061778][T17093] hsr_slave_1: entered promiscuous mode [ 486.171710][T16091] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 486.353434][T16091] usb 7-1: Using ep0 maxpacket: 16 [ 486.712249][T15728] net_ratelimit: 147 callbacks suppressed [ 486.712321][T15728] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.731603][T16091] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 486.752729][T16091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.760789][T15728] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.771006][T16091] usb 7-1: config 0 descriptor?? [ 486.800245][T16091] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 486.817172][T15728] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.846097][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.877520][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.911241][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.931517][T15743] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 487.010483][T17093] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 487.028817][T17093] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 487.043832][T17093] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 487.057388][T17093] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 487.064396][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.145709][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.178414][T15743] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.349740][T17093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.392860][T17093] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.408949][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.416060][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.465742][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.472815][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.600698][T17093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.840198][ T5137] Bluetooth: hci0: command tx timeout [ 487.982108][T17093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.873437][T17093] veth0_vlan: entered promiscuous mode [ 488.897540][T17093] veth1_vlan: entered promiscuous mode [ 488.957659][T17093] veth0_macvtap: entered promiscuous mode [ 488.972096][T17093] veth1_macvtap: entered promiscuous mode [ 489.002808][T17093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.026794][T17093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.048075][T15743] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.120595][T15743] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.166762][T15743] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.175504][T15743] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.218103][T17215] binder_alloc: 17214: pid 17214 spamming oneway? 1 buffers allocated for a total size of 4096 [ 489.391500][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.431762][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.455029][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 489.528835][T15732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.558331][T15732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.627409][T17237] syz_tun: entered allmulticast mode [ 489.662303][T17237] dvmrp8: entered allmulticast mode [ 489.669731][T16091] gspca_sonixj: reg_w1 err -71 [ 489.681478][T17236] syz_tun: left allmulticast mode [ 489.694732][T16091] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 489.713470][T16091] usb 7-1: USB disconnect, device number 25 [ 490.360971][ T5137] Bluetooth: hci0: command tx timeout [ 490.400206][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 490.400218][ T30] audit: type=1400 audit(1768785066.280:942): avc: denied { getopt } for pid=17244 comm="syz.8.3959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 492.116980][ T3558] net_ratelimit: 77 callbacks suppressed [ 492.116997][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.382635][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 492.521933][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.529668][ T148] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 492.543963][ T5137] Bluetooth: hci0: command tx timeout [ 492.662800][ T30] audit: type=1400 audit(1768785068.431:943): avc: denied { read } for pid=17278 comm="syz.4.4009" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 492.689702][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.708414][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 492.737479][ T30] audit: type=1400 audit(1768785068.431:944): avc: denied { open } for pid=17278 comm="syz.4.4009" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 492.842930][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.850674][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 493.592273][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 493.606813][ T3558] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 494.126262][ T30] audit: type=1400 audit(1768785069.806:945): avc: denied { open } for pid=17294 comm="syz.8.4018" path="/dev/ptyr5" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 494.160383][T17295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.168017][T17295] IPv6: NLM_F_CREATE should be set when creating new route [ 494.255822][ T30] audit: type=1400 audit(1768785069.928:946): avc: denied { create } for pid=17300 comm="syz.6.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 494.571721][T17295] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.579295][T17295] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.546096][T17295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.592562][T17295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.359342][T15742] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.397883][T15742] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.447857][T15742] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.506928][T15742] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.482362][ T36] net_ratelimit: 113 callbacks suppressed [ 497.482378][ T36] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.564522][ T36] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.727664][ T36] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.769052][ T36] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 497.920851][ T36] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.951292][ T36] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.081059][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 498.099202][T15742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 498.221787][ T30] audit: type=1400 audit(1768785073.623:947): avc: denied { firmware_load } for pid=17359 comm="syz.0.4035" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 498.246635][ T36] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 498.273492][T17360] syz.0.4035 (17360) used greatest stack depth: 19688 bytes left [ 498.305562][ T36] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.325649][T17373] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4039'. [ 502.872025][T15735] net_ratelimit: 67 callbacks suppressed [ 502.872063][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.945715][T15735] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 503.116582][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.135341][T15732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 503.266124][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.287443][T15732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 503.415650][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.428108][T15742] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 503.554608][T15732] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.574365][T15732] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 504.169113][T17466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4066'. [ 504.202461][T17466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.215381][T17466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4066'. [ 504.260585][T17466] bond0: entered promiscuous mode [ 504.270860][T17466] bond0: entered allmulticast mode [ 504.307233][T17466] dummy0: entered promiscuous mode [ 504.355639][T17466] dummy0: entered allmulticast mode [ 504.379494][T17466] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 504.722817][T17486] netlink: 'syz.5.4073': attribute type 1 has an invalid length. [ 504.774640][T17486] gre3: entered promiscuous mode [ 504.779786][T17486] bond5: (slave gre3): The slave device specified does not support setting the MAC address [ 504.790044][T17486] bond5: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 504.801235][T17486] bond5: (slave gre3): making interface the new active one [ 504.820010][T17486] bond5: (slave gre3): Enslaving as an active interface with an up link [ 504.833149][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4073'. [ 504.844945][T17486] bond5 (unregistering): (slave gre3): Releasing backup interface [ 504.856795][T17486] bond5 (unregistering): Released all slaves [ 504.961716][ T30] audit: type=1400 audit(1768785079.937:948): avc: denied { bind } for pid=17494 comm="syz.5.4076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 505.010271][ T5137] Bluetooth: min 0 < 6 [ 505.128868][ T30] audit: type=1400 audit(1768785080.096:949): avc: denied { write } for pid=17501 comm="syz.8.4079" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 506.441064][T16083] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 507.167995][ T5137] Bluetooth: hci2: command 0x0406 tx timeout [ 507.574248][T16083] usb 9-1: Using ep0 maxpacket: 16 [ 507.764806][T16083] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 507.776854][T16083] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 507.787891][ T30] audit: type=1400 audit(1768785082.584:950): avc: denied { connect } for pid=17529 comm="syz.5.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 507.787908][T16083] usb 9-1: Product: syz [ 507.787960][T16083] usb 9-1: Manufacturer: syz [ 507.838110][ T30] audit: type=1400 audit(1768785082.621:951): avc: denied { write } for pid=17529 comm="syz.5.4089" path="socket:[68789]" dev="sockfs" ino=68789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 507.863108][T16083] usb 9-1: SerialNumber: syz [ 507.889709][T16083] usb 9-1: config 0 descriptor?? [ 508.352412][T15748] net_ratelimit: 63 callbacks suppressed [ 508.352427][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.945493][T15748] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.000929][T16091] usb 9-1: USB disconnect, device number 2 [ 509.211674][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.228407][T15748] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.302281][T17554] binder: 17553:17554 unknown command 0 [ 509.316867][T17554] binder: 17553:17554 ioctl c0306201 200000000080 returned -22 [ 509.380983][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.388736][ T148] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.726343][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.774740][ T148] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 509.947650][ T9115] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.971437][ T9115] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 513.416557][T17629] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 513.710841][ T148] net_ratelimit: 56 callbacks suppressed [ 513.710858][ T148] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.760325][ T148] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 513.913944][T15748] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.962819][T15748] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 514.106419][ T9115] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.114162][ T9115] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 514.245223][ T9115] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.257652][ T9115] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 514.379171][T15735] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.387099][T15735] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 514.401647][T17655] bridge0: entered allmulticast mode [ 514.662351][ T30] audit: type=1326 audit(1768785089.001:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 514.713486][ T30] audit: type=1326 audit(1768785089.001:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 514.760691][ T30] audit: type=1326 audit(1768785089.038:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 514.836648][ T30] audit: type=1326 audit(1768785089.038:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 514.929493][ T30] audit: type=1326 audit(1768785089.038:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 514.983262][ T30] audit: type=1326 audit(1768785089.038:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 515.047149][ T30] audit: type=1326 audit(1768785089.038:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 515.089869][ T30] audit: type=1326 audit(1768785089.038:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 515.138421][ T30] audit: type=1326 audit(1768785089.038:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 515.163001][ T30] audit: type=1326 audit(1768785089.038:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb366b8f749 code=0x7ffc0000 [ 515.224441][T17672] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 516.655115][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 516.665792][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 516.679281][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 516.754782][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 516.762089][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 517.726949][T15748] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.759926][T15748] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.036357][T15748] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.177172][T15748] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.810289][T15748] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.826740][T15748] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.915302][T15748] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.970454][ T5824] Bluetooth: hci1: command tx timeout [ 518.971347][T15748] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.033399][T17708] chnl_net:caif_netlink_parms(): no params data found [ 519.077419][ T3558] net_ratelimit: 126 callbacks suppressed [ 519.077432][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.154379][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.195695][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.217846][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.266214][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.324426][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.377281][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.398090][ T3558] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.419474][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.441063][T15742] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.509809][T17708] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.532436][T17708] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.558526][T17708] bridge_slave_0: entered allmulticast mode [ 519.577977][T17708] bridge_slave_0: entered promiscuous mode [ 519.631899][T17708] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.658864][T17708] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.686873][T17708] bridge_slave_1: entered allmulticast mode [ 519.815857][T17708] bridge_slave_1: entered promiscuous mode [ 519.872404][T15748] bridge_slave_1: left allmulticast mode [ 519.878154][T15748] bridge_slave_1: left promiscuous mode [ 519.903368][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.380506][T15748] bridge_slave_0: left allmulticast mode [ 520.392355][T15748] bridge_slave_0: left promiscuous mode [ 520.398185][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.196510][ T5824] Bluetooth: hci1: command tx timeout [ 521.631497][T15748] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 521.809597][T17790] overlayfs: failed to clone upperpath [ 522.754360][T15748] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 522.769033][T15748] bridge2 (unregistering): left promiscuous mode [ 523.145244][T15748] bond1 (unregistering): Released all slaves [ 523.242475][T15748] bond2 (unregistering): Released all slaves [ 523.336267][T15748] bond3 (unregistering): Released all slaves [ 523.416098][T15748] bond0 (unregistering): Released all slaves [ 523.422127][ T5824] Bluetooth: hci1: command tx timeout [ 523.432599][T15748] bond4 (unregistering): Released all slaves [ 523.461206][T17708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.483076][T17708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.563999][T17708] team0: Port device team_slave_0 added [ 523.639368][T17807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4175'. [ 523.649485][T17708] team0: Port device team_slave_1 added [ 523.734202][T17813] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 523.747477][T17708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.801417][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.858518][T17807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4175'. [ 523.911927][T17708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.039349][T17807] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 524.063634][T17807] bond6 (unregistering): Released all slaves [ 524.160195][T17708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.202454][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.347142][T17708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.050896][T15748] hsr_slave_0: left promiscuous mode [ 525.067366][T15748] hsr_slave_1: left promiscuous mode [ 525.087144][T15748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.107780][T15748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.130779][T15748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.154679][T15748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.215449][T15748] veth1_macvtap: left promiscuous mode [ 525.245898][T15748] veth0_macvtap: left allmulticast mode [ 525.268040][T15748] veth0_macvtap: left promiscuous mode [ 525.273638][T15748] veth1_vlan: left promiscuous mode [ 525.352941][T15748] veth0_vlan: left promiscuous mode [ 525.643259][ T5824] Bluetooth: hci1: command tx timeout [ 525.991677][T15748] team0 (unregistering): Port device team_slave_1 removed [ 526.236929][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'. [ 526.331581][T17708] hsr_slave_0: entered promiscuous mode [ 526.338206][T17708] hsr_slave_1: entered promiscuous mode [ 526.344285][T17708] debugfs: 'hsr0' already exists in 'hsr' [ 526.351730][T17708] Cannot create hsr debugfs directory [ 526.395995][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4188'. [ 526.408838][T17849] syzkaller0: entered promiscuous mode [ 526.431825][T17849] syzkaller0: entered allmulticast mode [ 527.955368][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.854784][T17708] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 528.865163][T17708] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 528.873859][T17708] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 528.883510][T17708] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 528.916774][T15748] IPVS: stop unused estimator thread 0... [ 528.947607][T17708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.970682][T17708] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.984240][T15735] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.991374][T15735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.004882][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.011968][T13485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.231789][T17708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.365208][T17708] veth0_vlan: entered promiscuous mode [ 529.375325][T17708] veth1_vlan: entered promiscuous mode [ 529.393203][T17708] veth0_macvtap: entered promiscuous mode [ 529.401647][T17708] veth1_macvtap: entered promiscuous mode [ 529.417747][T17708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.429492][T17708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.440668][T15735] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.449758][T15735] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.459590][T15735] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.469257][T15735] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.527658][T15735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.538899][T15735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.559417][T15735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.568066][T15735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.703274][T17931] Bluetooth: MGMT ver 1.23 [ 531.710202][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4193'. [ 531.741583][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4193'. [ 531.973650][T17939] syzkaller0: entered promiscuous mode [ 531.979125][T17939] syzkaller0: entered allmulticast mode [ 532.044170][T17941] syzkaller0: entered promiscuous mode [ 532.051356][T17941] syzkaller0: entered allmulticast mode [ 534.944751][T17967] geneve3: entered promiscuous mode [ 534.950000][T17967] geneve3: entered allmulticast mode [ 534.956629][T15748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 534.969516][T15748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 534.978592][T15748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 534.987900][T15748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 535.413882][T17981] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4205'. [ 535.679767][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 535.679787][ T30] audit: type=1400 audit(1768785108.663:986): avc: denied { rename } for pid=17972 comm="syz.4.4208" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 536.522474][ T30] audit: type=1400 audit(1768785109.393:987): avc: denied { bpf } for pid=17977 comm="syz.8.4206" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 536.634748][ T30] audit: type=1400 audit(1768785109.393:988): avc: denied { perfmon } for pid=17977 comm="syz.8.4206" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 537.638506][ T30] audit: type=1400 audit(1768785110.506:989): avc: denied { block_suspend } for pid=18010 comm="syz.8.4218" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 538.992908][T18031] netlink: 584 bytes leftover after parsing attributes in process `syz.8.4220'. [ 540.330336][T16090] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 540.519838][T16090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.568430][T16090] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 540.604379][T16090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.657959][T16090] usb 9-1: config 0 descriptor?? [ 540.914470][T16090] usbhid 9-1:0.0: can't add hid device: -71 [ 540.942107][T16090] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 541.376238][T16090] usb 9-1: USB disconnect, device number 3 [ 541.762833][T16090] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 541.955261][T16090] usb 9-1: Using ep0 maxpacket: 32 [ 542.108970][T16090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.123444][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4235'. [ 542.143130][T16090] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 542.222034][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4235'. [ 542.232896][T16090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.306987][T16090] usb 9-1: config 0 descriptor?? [ 542.419638][T16090] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 542.512223][T16090] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 542.700262][ T30] audit: type=1326 audit(1768785115.239:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18077 comm="syz.4.4236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x0 [ 542.778564][T18079] netlink: 584 bytes leftover after parsing attributes in process `syz.9.4234'. [ 543.286903][T16086] usb 9-1: USB disconnect, device number 4 [ 543.301114][T16086] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 544.012046][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4250'. [ 544.058347][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4250'. [ 544.171284][T18091] overlayfs: upper fs does not support file handles, falling back to index=off. [ 545.007856][T16090] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 545.207356][T16090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.318158][T16090] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 545.354629][T16090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.406903][T16090] usb 5-1: config 0 descriptor?? [ 546.150577][T16090] usbhid 5-1:0.0: can't add hid device: -71 [ 546.171752][T16090] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 546.190294][T16090] usb 5-1: USB disconnect, device number 34 [ 546.756298][ T5875] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 546.940581][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 546.961393][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.974828][ T5875] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 546.986358][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.003273][ T5875] usb 5-1: config 0 descriptor?? [ 547.021276][ T5875] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 547.046229][ T5875] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 547.491504][ T5875] usb 5-1: USB disconnect, device number 35 [ 547.509359][ T5875] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 547.590357][ T30] audit: type=1326 audit(1768785119.813:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18134 comm="syz.9.4255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa3518f749 code=0x0 [ 547.592620][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4254'. [ 547.693430][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4254'. [ 550.018865][T18193] v: renamed from dummy0 (while UP) [ 550.068868][T18196] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4273'. [ 550.079921][T18196] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.087968][T18196] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.105352][T16086] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 550.143208][T18196] netlink: 'syz.9.4273': attribute type 10 has an invalid length. [ 550.154794][T18196] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.161981][T18196] bridge0: port 2(bridge_slave_1) entered listening state [ 550.169221][T18196] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.176316][T18196] bridge0: port 1(bridge_slave_0) entered listening state [ 550.234409][T18196] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 550.246100][T18200] overlayfs: failed to clone upperpath [ 550.310804][T16086] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.332479][T16086] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.343250][T16086] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 550.374191][T16086] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.391913][T16086] usb 9-1: config 0 descriptor?? [ 550.840481][T16086] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 550.856365][T16086] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 550.879261][T16086] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 550.900900][T16086] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 550.923794][T16086] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 550.953451][T16086] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 551.493374][T18191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.520019][T18191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.791156][T16086] input: HID 054c:0df2 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:0DF2.0017/input/input32 [ 551.848056][T16086] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:0DF2.0017/input/input33 [ 551.945864][T16086] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:0DF2.0017/input/input34 [ 552.013134][T16086] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:0DF2.0017/input/input35 [ 552.758556][T16086] playstation 0003:054C:0DF2.0017: Registered DualSense controller hw_version=0xe8f2453f fw_version=0xa9ff1c9c [ 553.619471][T16086] usb 9-1: USB disconnect, device number 5 [ 554.677089][ T5875] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 554.880229][ T5875] usb 10-1: Using ep0 maxpacket: 16 [ 554.897689][ T5875] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 554.930048][ T5875] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 554.971324][ T5875] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 555.031973][ T5875] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 555.073898][ T5875] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 555.082858][ T5875] usb 10-1: config 0 has no interface number 0 [ 555.136767][ T5875] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 555.186969][ T5875] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 555.226422][ T5875] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 555.245788][ T5875] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 555.275739][ T5875] usb 10-1: config 0 interface 125 has no altsetting 0 [ 555.299042][ T5875] usb 10-1: config 0 interface 125 has no altsetting 2 [ 555.377416][T18275] syzkaller0: entered promiscuous mode [ 555.386385][T18275] syzkaller0: entered allmulticast mode [ 555.409782][ T5875] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 555.419760][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.428016][ T5875] usb 10-1: Product: syz [ 555.432301][ T5875] usb 10-1: Manufacturer: syz [ 555.437239][ T5875] usb 10-1: SerialNumber: syz [ 555.448218][ T5875] usb 10-1: config 0 descriptor?? [ 555.457960][ T5875] usb 10-1: selecting invalid altsetting 2 [ 556.805409][ T5875] usb 10-1: USB disconnect, device number 2 [ 557.027629][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4308'. [ 558.943782][T18317] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4316'. [ 559.347484][T18328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4318'. [ 560.730910][T18363] netlink: 'syz.4.4328': attribute type 6 has an invalid length. [ 560.784029][ T30] audit: type=1400 audit(1768785132.141:992): avc: denied { read } for pid=18364 comm="syz.9.4329" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 560.836418][ T30] audit: type=1400 audit(1768785132.141:993): avc: denied { open } for pid=18364 comm="syz.9.4329" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 561.066861][ T30] audit: type=1326 audit(1768785132.403:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18352 comm="syz.5.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68c78f749 code=0x7fc00000 [ 562.565071][ T30] audit: type=1400 audit(1768785133.816:995): avc: denied { append } for pid=18398 comm="syz.4.4339" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 562.653774][T16092] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 562.858193][T16092] usb 10-1: Using ep0 maxpacket: 16 [ 562.867664][T18407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=18407 comm=syz.5.4340 [ 562.877037][T16092] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 562.902542][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4342'. [ 562.917291][T16092] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.961297][T16092] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.013878][T16092] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.030168][T16092] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.051377][T16092] usb 10-1: Product: syz [ 563.065016][T16092] usb 10-1: Manufacturer: syz [ 563.074461][T16092] usb 10-1: SerialNumber: syz [ 563.589784][T16092] usb 10-1: 0:2 : does not exist [ 564.996794][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4350'. [ 565.039601][T18433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4350'. [ 565.231750][T18446] netlink: 'syz.0.4354': attribute type 1 has an invalid length. [ 565.306547][T18446] 8021q: adding VLAN 0 to HW filter on device bond6 [ 565.323043][T18449] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 565.537942][T16092] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 565.610415][T16092] usb 10-1: USB disconnect, device number 3 [ 566.267486][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 566.275289][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 568.663032][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4369'. [ 568.705219][T18503] netlink: 'syz.4.4369': attribute type 11 has an invalid length. [ 568.752346][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4369'. [ 568.808686][T18503] netlink: 'syz.4.4369': attribute type 11 has an invalid length. [ 568.995244][T18505] input: syz1 as /devices/virtual/input/input36 [ 570.600223][T18538] netlink: 'syz.9.4379': attribute type 1 has an invalid length. [ 570.689287][T18538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.763950][T18542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.800168][T18542] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 570.837013][T18542] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 570.884530][T18549] net_ratelimit: 35 callbacks suppressed [ 570.884547][T18549] Set syz0 is full, maxelem 0 reached [ 570.911643][T18550] netlink: 548 bytes leftover after parsing attributes in process `syz.5.4381'. [ 570.944658][T18538] ip6erspan0: entered promiscuous mode [ 570.986052][T18538] bond1: (slave ip6erspan0): making interface the new active one [ 571.002112][T18538] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 571.011534][T18544] netlink: 'syz.5.4381': attribute type 29 has an invalid length. [ 571.040905][T18547] netlink: 'syz.5.4381': attribute type 29 has an invalid length. [ 571.429401][T16090] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 571.643951][T16090] usb 10-1: Using ep0 maxpacket: 8 [ 571.700669][T16090] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 571.745506][T16090] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.792765][T16090] usb 10-1: Product: syz [ 571.799434][T16090] usb 10-1: Manufacturer: syz [ 571.828243][T16090] usb 10-1: SerialNumber: syz [ 571.845918][T16090] usb 10-1: config 0 descriptor?? [ 571.887433][T16090] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 573.963299][T16091] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 574.129650][T16091] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 574.139683][T16091] usb 5-1: config 0 has no interface number 0 [ 574.156608][T16091] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 574.185066][T16091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.223970][T16091] usb 5-1: config 0 descriptor?? [ 574.457194][ T5824] Bluetooth: hci4: adv larger than maximum supported [ 574.457243][ T5824] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 574.464209][ T5824] Bluetooth: hci4: Malformed LE Event: 0x0d [ 574.484886][T16091] usb 5-1: string descriptor 0 read error: -71 [ 574.499331][T16091] usb-storage 5-1:0.168: USB Mass Storage device detected [ 574.511202][T16090] gspca_sonixj: reg_w1 err -71 [ 574.565651][T16091] usb-storage 5-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 574.577563][T16090] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 574.735838][T16090] usb 10-1: USB disconnect, device number 4 [ 574.806798][T16091] usb 5-1: USB disconnect, device number 36 [ 574.933030][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4413'. [ 576.773678][T18667] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 582.697265][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.704507][ C0] bridge0: topology change detected, propagating [ 582.711142][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.718342][ C0] bridge0: topology change detected, propagating [ 582.794049][ T30] audit: type=1400 audit(1768785152.748:996): avc: denied { setopt } for pid=18784 comm="syz.8.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 583.828692][T18807] syzkaller0: entered promiscuous mode [ 583.848392][T18807] syzkaller0: entered allmulticast mode [ 584.593778][ T30] audit: type=1400 audit(1768785154.357:997): avc: denied { write } for pid=18827 comm="syz.8.4461" name="cgroup.subtree_control" dev="cgroup2" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 584.874699][ T30] audit: type=1400 audit(1768785154.357:998): avc: denied { open } for pid=18827 comm="syz.8.4461" path="" dev="cgroup2" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 587.354600][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4474'. [ 587.401761][T18867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4474'. [ 587.711319][T16082] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 587.882112][T16082] usb 10-1: Using ep0 maxpacket: 8 [ 587.910604][T16082] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 587.939324][T16082] usb 10-1: config 0 has no interface number 0 [ 587.975670][T16082] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.052500][T16082] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 588.111169][T16082] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 588.193486][T16082] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 588.360950][T16082] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 588.374467][T16082] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.396623][T16082] usb 10-1: config 0 descriptor?? [ 588.883921][T16082] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 590.156948][ T5875] usb 10-1: USB disconnect, device number 5 [ 590.156996][ C0] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 590.218414][ T5875] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 590.225439][T18870] ldusb: No device or device unplugged -19 [ 590.581967][T18916] netlink: 'syz.0.4500': attribute type 1 has an invalid length. [ 590.749346][T18916] bond7: entered promiscuous mode [ 590.757305][T18916] 8021q: adding VLAN 0 to HW filter on device bond7 [ 590.774110][T18918] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 590.786525][T18918] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 590.821996][T18918] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 593.640871][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.655879][ T30] audit: type=1326 audit(1768785162.907:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18947 comm="syz.8.4497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f004fd8f749 code=0x0 [ 596.417181][T18972] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 597.258811][ T30] audit: type=1326 audit(1768785166.274:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 597.336460][ T30] audit: type=1326 audit(1768785166.274:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 597.430242][ T30] audit: type=1326 audit(1768785166.302:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 597.490731][T19002] netlink: 'syz.4.4515': attribute type 1 has an invalid length. [ 597.498947][ T30] audit: type=1326 audit(1768785166.302:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 597.552620][ T30] audit: type=1326 audit(1768785166.302:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 597.598481][T19004] gre2: entered promiscuous mode [ 597.612350][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4515'. [ 597.632379][T19004] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 597.642336][T19004] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 597.662533][ T30] audit: type=1326 audit(1768785166.312:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 597.718253][T19004] bond2: (slave gre2): making interface the new active one [ 597.725744][T19004] bond2: (slave gre2): Enslaving as an active interface with an up link [ 597.739553][ T30] audit: type=1326 audit(1768785166.312:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 597.785669][T19002] bond2 (unregistering): (slave gre2): Releasing backup interface [ 597.835591][T19002] bond2 (unregistering): Released all slaves [ 597.841811][ T30] audit: type=1326 audit(1768785166.312:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 597.908446][ T30] audit: type=1326 audit(1768785166.321:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18993 comm="syz.4.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9fb8f749 code=0x7ffc0000 [ 600.970285][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4525'. [ 601.012245][T19032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.034324][T19032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4525'. [ 601.043969][T19032] bond2: entered promiscuous mode [ 601.049050][T19032] bond2: entered allmulticast mode [ 603.907372][T16082] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 603.919174][T16088] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 604.089238][T16082] usb 5-1: Using ep0 maxpacket: 8 [ 604.096020][T16082] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 604.108584][T16082] usb 5-1: config 0 has no interface number 0 [ 604.114787][T16082] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.127114][T16088] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 604.160424][T16088] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 604.170694][T16082] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 604.185425][T16088] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.200674][T16082] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 604.218069][T16088] usb 9-1: config 0 descriptor?? [ 604.224122][T19067] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 604.231308][T16082] usb 5-1: Product: syz [ 604.253085][T16082] usb 5-1: config 0 descriptor?? [ 604.274263][T16082] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 604.494112][ C1] iowarrior 5-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 604.504232][T16092] usb 5-1: USB disconnect, device number 37 [ 604.674937][T16088] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 604.687755][T16088] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 604.694520][T16088] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 604.719893][T16088] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 604.726677][T16088] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 604.743488][T16088] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 604.895991][T16092] usb 9-1: USB disconnect, device number 6 [ 605.022278][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 605.022292][ T30] audit: type=1326 audit(1768785173.533:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19086 comm="syz.5.4544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff68c78f749 code=0x0 [ 605.098371][T19089] netlink: 'syz.0.4542': attribute type 8 has an invalid length. [ 606.205993][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 607.830131][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.840909][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.855729][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.866372][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.875210][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.909395][T19129] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4556'. [ 608.448746][T15735] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.507604][T19125] chnl_net:caif_netlink_parms(): no params data found [ 608.585626][T15735] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.736500][T15735] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.894948][T15735] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.924684][T19125] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.932227][T19125] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.939486][T19125] bridge_slave_0: entered allmulticast mode [ 608.952756][T19125] bridge_slave_0: entered promiscuous mode [ 608.962709][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.974320][T19125] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.982128][T19125] bridge_slave_1: entered allmulticast mode [ 608.990644][T19125] bridge_slave_1: entered promiscuous mode [ 609.062014][T19125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.158617][T19125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.868904][T19125] team0: Port device team_slave_0 added [ 609.985293][T19125] team0: Port device team_slave_1 added [ 610.027015][T15735] bridge_slave_1: left allmulticast mode [ 610.060772][ T5824] Bluetooth: hci5: command tx timeout [ 611.059453][T15735] bridge_slave_1: left promiscuous mode [ 611.079289][T15735] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.681754][T15735] bridge_slave_0: left allmulticast mode [ 611.687420][T15735] bridge_slave_0: left promiscuous mode [ 611.711956][T15735] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.460069][T15735] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 612.581010][T15735] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 612.731732][T15735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.742454][T15735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.752162][T15735] bond0 (unregistering): Released all slaves [ 612.830947][T15735] bond1 (unregistering): Released all slaves [ 612.898695][T19125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.928275][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.001103][T19125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.069866][T19194] syz_tun: entered allmulticast mode [ 613.135256][T19193] syz_tun: left allmulticast mode [ 613.219023][ T5824] Bluetooth: hci5: command tx timeout [ 613.285002][T19125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.410073][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.570196][T19125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.727900][T19125] hsr_slave_0: entered promiscuous mode [ 613.747961][T19125] hsr_slave_1: entered promiscuous mode [ 613.775805][T19125] debugfs: 'hsr0' already exists in 'hsr' [ 613.797641][T19125] Cannot create hsr debugfs directory [ 614.355746][T15735] hsr_slave_0: left promiscuous mode [ 614.361941][T15735] hsr_slave_1: left promiscuous mode [ 614.371818][T15735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.381027][T15735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.393082][T15735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.401565][T15735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.449548][T15735] veth1_macvtap: left promiscuous mode [ 614.455477][T15735] veth0_macvtap: left promiscuous mode [ 614.464911][T15735] veth1_vlan: left promiscuous mode [ 614.471094][T15735] veth0_vlan: left promiscuous mode [ 615.046968][T16082] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 615.442608][ T5824] Bluetooth: hci5: command tx timeout [ 615.445364][T15735] team0 (unregistering): Port device team_slave_1 removed [ 615.496552][T16082] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.527441][T16082] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 615.559351][T16082] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 615.579807][T16082] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.608629][T16082] usb 9-1: config 0 descriptor?? [ 615.620067][T15735] team0 (unregistering): Port device team_slave_0 removed [ 615.633103][T16082] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 615.648460][T16082] dvb-usb: bulk message failed: -22 (3/0) [ 615.668111][T16082] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 615.681851][T16082] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 615.699523][T16082] usb 9-1: media controller created [ 615.713629][T16082] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 615.755847][T16082] dvb-usb: bulk message failed: -22 (6/0) [ 615.772363][T16082] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 615.787859][T16082] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input37 [ 615.819650][T16082] dvb-usb: schedule remote query interval to 150 msecs. [ 615.826639][T16082] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 615.990475][T16082] dvb-usb: bulk message failed: -22 (1/0) [ 616.007028][T16082] dvb-usb: error while querying for an remote control event. [ 616.028872][T19222] dvb-usb: bulk message failed: -22 (2/0) [ 616.160271][T19241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=19241 comm=syz.8.4587 [ 616.191042][T16086] dvb-usb: bulk message failed: -22 (1/0) [ 616.197808][T16086] dvb-usb: error while querying for an remote control event. [ 616.235511][T16088] usb 9-1: USB disconnect, device number 7 [ 616.272360][T16088] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 616.480671][ T30] audit: type=1326 audit(1768785184.253:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19234 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb366b8f749 code=0x7fc00000 [ 616.925908][T19125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 616.935382][T19125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 616.944162][T19125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 616.952774][T19125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 616.995826][T19125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.009525][T19125] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.021433][T15735] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.028489][T15735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.040234][T15748] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.047290][T15748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.155532][T19125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.183895][T19125] veth0_vlan: entered promiscuous mode [ 617.194861][T19125] veth1_vlan: entered promiscuous mode [ 617.213904][T19125] veth0_macvtap: entered promiscuous mode [ 617.222065][T19125] veth1_macvtap: entered promiscuous mode [ 617.236131][T19125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.246956][T19125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.259397][T15748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.268415][T15748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.278053][T15748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.287748][T15748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.339710][T15742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.351937][T15742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.371448][T15742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.380936][T15742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.668073][ T5137] Bluetooth: hci5: command tx timeout [ 617.758459][ T5137] Bluetooth: hci0: command 0x0406 tx timeout [ 618.151470][T19271] block device autoloading is deprecated and will be removed. [ 619.011105][T16082] libceph: connect (1)[c::]:6789 error -101 [ 619.017487][T16082] libceph: mon0 (1)[c::]:6789 connect error [ 619.157189][T19294] No source specified [ 619.465556][T19281] ceph: No mds server is up or the cluster is laggy [ 619.480053][T16082] libceph: connect (1)[c::]:6789 error -101 [ 619.499984][T16082] libceph: mon0 (1)[c::]:6789 connect error [ 622.325079][T19324] syzkaller0: entered promiscuous mode [ 622.356974][T19324] syzkaller0: entered allmulticast mode [ 622.437996][T19326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4611'. [ 622.469173][T19326] netlink: 'syz.5.4611': attribute type 7 has an invalid length. [ 622.494814][T19326] netlink: 'syz.5.4611': attribute type 8 has an invalid length. [ 622.526457][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4611'. [ 622.559123][T19326] syz_tun: entered promiscuous mode [ 622.568235][T19326] syz_tun: left promiscuous mode [ 623.971265][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4619'. [ 624.383740][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4619'. [ 624.462003][T16088] libceph: connect (1)[c::]:6789 error -101 [ 624.493700][T16088] libceph: mon0 (1)[c::]:6789 connect error [ 624.537378][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4623'. [ 624.594221][T19347] ceph: No mds server is up or the cluster is laggy [ 626.943707][T19390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4629'. [ 627.900093][ T30] audit: type=1326 audit(1768785194.935:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19395 comm="syz.8.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004fd8f749 code=0x7fc00000 [ 627.926940][ T30] audit: type=1326 audit(1768785194.963:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19395 comm="syz.8.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f004fd8f749 code=0x7fc00000 [ 628.023297][ T30] audit: type=1326 audit(1768785194.963:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19395 comm="syz.8.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004fd8f749 code=0x7fc00000 [ 628.074073][ T30] audit: type=1326 audit(1768785194.963:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19395 comm="syz.8.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004fd8f749 code=0x7fc00000 [ 628.101454][ T30] audit: type=1326 audit(1768785194.963:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19395 comm="syz.8.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004fd8f749 code=0x7fc00000 [ 628.216725][T16077] libceph: connect (1)[c::]:6789 error -101 [ 628.223063][T16077] libceph: mon0 (1)[c::]:6789 connect error [ 628.343697][T19409] ceph: No mds server is up or the cluster is laggy [ 629.073490][T19428] xt_hashlimit: max too large, truncated to 1048576 [ 629.112649][T19428] No such timeout policy "syz1" [ 631.677990][T19464] binder: 19462:19464 ioctl c0306201 200000000300 returned -11 [ 631.808727][ T30] audit: type=1400 audit(1768785198.583:1026): avc: denied { write } for pid=19466 comm="syz.2.4656" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 633.582374][T16088] libceph: connect (1)[c::]:6789 error -101 [ 633.687714][T16088] libceph: mon0 (1)[c::]:6789 connect error [ 633.837815][T16088] libceph: connect (1)[c::]:6789 error -101 [ 633.867715][T19481] ceph: No mds server is up or the cluster is laggy [ 633.904008][T16088] libceph: mon0 (1)[c::]:6789 connect error [ 636.169843][ T30] audit: type=1400 audit(1768785202.661:1027): avc: denied { append } for pid=19514 comm="syz.8.4668" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 636.448031][ T30] audit: type=1400 audit(1768785202.745:1028): avc: denied { write } for pid=19503 comm="syz.4.4666" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 636.589191][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4669'. [ 636.615186][ T30] audit: type=1400 audit(1768785202.961:1029): avc: denied { write } for pid=19514 comm="syz.8.4668" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 636.710194][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4670'. [ 637.348824][ T30] audit: type=1400 audit(1768785202.961:1030): avc: denied { ioctl } for pid=19514 comm="syz.8.4668" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 639.355867][T16092] libceph: connect (1)[c::]:6789 error -101 [ 639.652628][T16092] libceph: mon0 (1)[c::]:6789 connect error [ 639.956871][T16092] libceph: connect (1)[c::]:6789 error -101 [ 639.962790][T19537] ceph: No mds server is up or the cluster is laggy [ 639.990189][T16092] libceph: mon0 (1)[c::]:6789 connect error [ 640.110953][T19554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4676'. [ 642.060258][ T30] audit: type=1400 audit(1768785208.171:1031): avc: denied { create } for pid=19561 comm="syz.4.4680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 642.069594][T19565] overlayfs: failed to clone upperpath [ 642.210536][ T30] audit: type=1400 audit(1768785208.199:1032): avc: denied { write } for pid=19561 comm="syz.4.4680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 642.382945][ T5875] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 642.886980][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 642.912073][ T5875] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.389801][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 643.396463][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 643.406860][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.420524][ T5875] usb 5-1: config 0 descriptor?? [ 644.002628][ T5875] logitech-djreceiver 0003:046D:C52B.0019: unknown main item tag 0x0 [ 644.299746][ T5875] logitech-djreceiver 0003:046D:C52B.0019: unknown main item tag 0x0 [ 644.332671][ T5875] logitech-djreceiver 0003:046D:C52B.0019: unknown main item tag 0x0 [ 644.351809][ T5875] logitech-djreceiver 0003:046D:C52B.0019: unknown main item tag 0x0 [ 644.401366][ T5875] logitech-djreceiver 0003:046D:C52B.0019: unknown main item tag 0x0 [ 644.450484][ T5875] usb 5-1: USB disconnect, device number 38 [ 645.592662][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4691'. [ 653.047107][T19674] team0: Caught tx_queue_len zero misconfig [ 658.078538][T19731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=19731 comm=syz.0.4741 [ 659.020028][T19739] netlink: 'syz.4.4734': attribute type 10 has an invalid length. [ 659.771073][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.501440][T19758] syzkaller0: entered promiscuous mode [ 661.536075][T19758] syzkaller0: entered allmulticast mode [ 662.472646][T19762] SELinux: failed to load policy [ 662.495211][ T30] audit: type=1400 audit(1768785227.290:1033): avc: denied { mounton } for pid=19769 comm="syz.4.4740" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 662.532401][T19772] affs: No valid root block on device nullb0 [ 663.037603][ T5875] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 663.219666][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 663.246962][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.307061][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.341661][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 663.369284][ T5875] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 663.398903][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.429075][ T5875] usb 3-1: config 0 descriptor?? [ 663.905809][ T5875] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001A/input/input38 [ 664.059235][ T5875] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001A/input/input39 [ 664.181873][ T5875] kye 0003:0458:5011.001A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 665.154036][ C1] kye 0003:0458:5011.001A: usb_submit_urb(ctrl) failed: -1 [ 665.613726][T16077] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 665.987056][T16088] usb 3-1: USB disconnect, device number 5 [ 666.296024][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4763'. [ 666.699069][T19833] dvmrp0: entered allmulticast mode [ 666.704435][T16077] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.704464][T16077] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.704483][T16077] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.704519][T16077] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.704539][T16077] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.706305][T16077] usb 9-1: config 0 descriptor?? [ 667.553522][T16077] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 667.670788][T19843] bridge_slave_0: left allmulticast mode [ 667.676443][T19843] bridge_slave_0: left promiscuous mode [ 667.682079][T19843] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.692500][T19843] bridge_slave_1: left allmulticast mode [ 667.698124][T19843] bridge_slave_1: left promiscuous mode [ 667.703915][T19843] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.716448][T19843] bond0: (slave bond_slave_0): Releasing backup interface [ 667.738839][T19847] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4761'. [ 667.757684][T19843] bond0: (slave bond_slave_1): Releasing backup interface [ 667.768999][T19843] team0: Port device team_slave_0 removed [ 667.777757][T19843] team0: Port device team_slave_1 removed [ 667.784903][T19843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.792246][T19843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.800072][T19843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.807726][T19843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.815669][T19843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 667.858773][T19821] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 667.915002][T19850] team0: Mode changed to "loadbalance" [ 668.008773][T19821] CIFS mount error: No usable UNC path provided in device string! [ 668.008773][T19821] [ 668.019438][T19821] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 668.120606][T16088] usb 9-1: USB disconnect, device number 8 [ 668.133238][T19821] plantronics 0003:047F:FFFF.001B: usb_submit_urb(ctrl) failed: -19 [ 668.589866][T16086] IPVS: starting estimator thread 0... [ 668.704108][T19860] IPVS: using max 81 ests per chain, 194400 per kthread [ 669.664151][T19875] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 670.307583][T19896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4781'. [ 670.341430][T19896] netlink: 'syz.0.4781': attribute type 2 has an invalid length. [ 671.509677][T19913] netlink: 'syz.2.4787': attribute type 1 has an invalid length. [ 672.273999][T19913] bond1: entered promiscuous mode [ 672.279358][T19913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 675.974022][T19965] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4799'. [ 676.892847][ T30] audit: type=1400 audit(1768785240.751:1034): avc: denied { mount } for pid=19975 comm="syz.8.4804" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 677.279985][ T30] audit: type=1400 audit(1768785240.798:1035): avc: denied { unmount } for pid=19975 comm="syz.8.4804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 679.277879][T20001] input: syz1 as /devices/virtual/input/input40 [ 681.391703][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4817'. [ 685.661722][T20069] 9p: Bad value for 'source' [ 686.866571][T16077] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 687.039474][T16077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 687.051042][T16077] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 687.062346][T16077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.075474][T16077] usb 3-1: config 0 descriptor?? [ 687.088043][T20085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 687.629490][T16077] elan 0003:04F3:0755.001C: unknown main item tag 0x0 [ 687.645755][T16077] elan 0003:04F3:0755.001C: unknown main item tag 0x0 [ 687.661077][T20100] overlayfs: failed to clone upperpath [ 687.663927][T16077] elan 0003:04F3:0755.001C: unknown main item tag 0x0 [ 687.678506][T16077] elan 0003:04F3:0755.001C: unknown main item tag 0x0 [ 688.463643][T16077] elan 0003:04F3:0755.001C: unknown main item tag 0x0 [ 688.480943][T16077] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 688.521626][T16077] usb 3-1: USB disconnect, device number 6 [ 688.757731][T20107] fido_id[20107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 691.221189][T20145] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 694.556806][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4851'. [ 695.419021][T16077] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 696.114254][T16077] usb 3-1: Using ep0 maxpacket: 32 [ 696.131989][T16077] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 696.141262][T16077] usb 3-1: config 0 has no interface number 0 [ 696.185715][T16077] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 696.205384][T16077] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 696.213449][T16077] usb 3-1: Product: syz [ 696.217773][T16077] usb 3-1: Manufacturer: syz [ 696.372808][T16077] usb 3-1: config 0 descriptor?? [ 696.396462][T20186] trusted_key: encrypted_key: hex blob is missing [ 696.534136][T20191] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 696.633873][T20196] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 696.690803][T20196] netlink: 'syz.8.4859': attribute type 1 has an invalid length. [ 697.131570][ T30] audit: type=1400 audit(1768785259.674:1036): avc: denied { ioctl } for pid=20201 comm="syz.0.4856" path="socket:[79641]" dev="sockfs" ino=79641 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 697.176707][T20202] netlink: 'syz.0.4856': attribute type 10 has an invalid length. [ 698.873982][T16084] usb 3-1: USB disconnect, device number 7 [ 702.669452][T20288] bridge1: entered allmulticast mode [ 702.697659][T20288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4888'. [ 702.858405][T20292] kvm: pic: single mode not supported [ 702.858423][T20292] kvm: pic: level sensitive irq not supported [ 702.870695][T20292] kvm: pic: single mode not supported [ 702.876773][T20292] kvm: pic: level sensitive irq not supported [ 702.894398][T20292] kvm: pic: single mode not supported [ 702.900481][T20292] kvm: pic: level sensitive irq not supported [ 702.919431][T20292] kvm: pic: single mode not supported [ 702.925547][T20292] kvm: pic: level sensitive irq not supported [ 702.938706][T20292] kvm: pic: single mode not supported [ 702.944784][T20292] kvm: pic: level sensitive irq not supported [ 704.442947][ T30] audit: type=1400 audit(1768785266.446:1037): avc: denied { bind } for pid=20302 comm="syz.8.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 706.040008][T20335] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4901'. [ 706.080507][T20335] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4901'. [ 707.210544][T20346] 9pnet_virtio: no channels available for device syz [ 707.226864][T20346] overlayfs: failed to clone lowerpath [ 708.554901][ T30] audit: type=1800 audit(1768785270.375:1038): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4900" name="bus" dev="ramfs" ino=80422 res=0 errno=0 [ 709.124505][ T30] audit: type=1400 audit(1768785270.899:1039): avc: denied { create } for pid=20352 comm="syz.5.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 710.075804][T16077] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 710.671043][T16077] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 710.715957][T16077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.880988][T16077] usb 3-1: Product: syz [ 710.902672][T16077] usb 3-1: Manufacturer: syz [ 710.939924][T16077] usb 3-1: SerialNumber: syz [ 711.979888][T20394] tipc: Enabling of bearer rejected, failed to enable media [ 712.041685][T16077] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 712.178854][T16077] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 712.716344][ C1] hrtimer: interrupt took 25819 ns [ 714.048850][T16077] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 714.936825][T16077] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 714.951890][T16077] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 714.964213][T16077] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 714.974025][T16077] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 827.234131][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 827.241096][ C1] rcu: 0-...!: (0 ticks this GP) idle=d8d4/1/0x4000000000000000 softirq=160066/160066 fqs=0 [ 827.252290][ C1] rcu: (detected by 1, t=10505 jiffies, g=101649, q=97 ncpus=2) [ 827.259998][ C1] Sending NMI from CPU 1 to CPUs 0: [ 827.260023][ C0] NMI backtrace for cpu 0 [ 827.260036][ C0] CPU: 0 UID: 0 PID: 20429 Comm: syz.5.4927 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.260053][ C0] Tainted: [L]=SOFTLOCKUP [ 827.260057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 827.260065][ C0] RIP: 0010:match_held_lock+0x0/0xb0 [ 827.260086][ C0] Code: c2 92 aa 8d 67 48 0f b9 3a 90 31 db eb c4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <53> 48 89 fb 48 39 77 10 74 55 66 83 7f 22 1f 76 65 48 8b 46 08 48 [ 827.260098][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00000097 [ 827.260108][ C0] RAX: 0000000000000005 RBX: ffff88802c078b58 RCX: 0000000000000001 [ 827.260116][ C0] RDX: 0000000000000000 RSI: ffff8880345d82c0 RDI: ffff88802c078b58 [ 827.260124][ C0] RBP: ffff8880345d82c0 R08: 0000000000000005 R09: 0000000000000000 [ 827.260131][ C0] R10: 0000000000000001 R11: ffff88802c078b30 R12: ffff88802c078000 [ 827.260139][ C0] R13: ffff88802c078b30 R14: 00000000ffffffff R15: 0000000000000001 [ 827.260147][ C0] FS: 00007ff68a9d56c0(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 827.260160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.260168][ C0] CR2: 00007ff68a9d4f98 CR3: 0000000079b67000 CR4: 00000000003526f0 [ 827.260176][ C0] Call Trace: [ 827.260181][ C0] [ 827.260185][ C0] lock_is_held_type+0xb0/0x150 [ 827.260205][ C0] ? __pfx_advance_sched+0x10/0x10 [ 827.260223][ C0] advance_sched+0x721/0xc80 [ 827.260239][ C0] ? find_held_lock+0x2b/0x80 [ 827.260259][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 827.260276][ C0] ? __pfx_advance_sched+0x10/0x10 [ 827.260292][ C0] __hrtimer_run_queues+0x202/0xc40 [ 827.260312][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 827.260329][ C0] ? read_tsc+0x9/0x20 [ 827.260349][ C0] hrtimer_interrupt+0x397/0x8e0 [ 827.260365][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 827.260381][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 827.260397][ C0] [ 827.260401][ C0] [ 827.260406][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.260419][ C0] RIP: 0010:smp_call_function_many_cond+0xe02/0x15e0 [ 827.260435][ C0] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 45 5f 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 827.260446][ C0] RSP: 0018:ffffc9000435fa18 EFLAGS: 00000287 [ 827.260456][ C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffc9001c57b000 [ 827.260464][ C0] RDX: 0000000000080000 RSI: ffffffff81b2a04b RDI: 0000000000000005 [ 827.260471][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 827.260478][ C0] R10: 0000000000000001 R11: ffff88802c078b30 R12: dffffc0000000000 [ 827.260486][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 827.260497][ C0] ? smp_call_function_many_cond+0xdfb/0x15e0 [ 827.260513][ C0] ? smp_call_function_many_cond+0xdfb/0x15e0 [ 827.260528][ C0] ? __pfx_retrigger_next_event+0x10/0x10 [ 827.260548][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 827.260562][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 827.260579][ C0] ? find_held_lock+0x2b/0x80 [ 827.260596][ C0] ? mark_held_locks+0x49/0x80 [ 827.260609][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 827.260625][ C0] clock_was_set+0x639/0x860 [ 827.260639][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 827.260652][ C0] do_adjtimex+0x221/0x330 [ 827.260668][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 827.260689][ C0] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 827.260706][ C0] __do_sys_clock_adjtime+0x175/0x290 [ 827.260723][ C0] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 827.260744][ C0] ? find_held_lock+0x2b/0x80 [ 827.260769][ C0] ? do_user_addr_fault+0x843/0x1370 [ 827.260788][ C0] ? rcu_is_watching+0x12/0xc0 [ 827.260800][ C0] do_syscall_64+0xcd/0xf80 [ 827.260818][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.260830][ C0] RIP: 0033:0x7ff68c78f749 [ 827.260841][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.260851][ C0] RSP: 002b:00007ff68a9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 827.260863][ C0] RAX: ffffffffffffffda RBX: 00007ff68c9e6090 RCX: 00007ff68c78f749 [ 827.260871][ C0] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 827.260879][ C0] RBP: 00007ff68c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 827.260887][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.260894][ C0] R13: 00007ff68c9e6128 R14: 00007ff68c9e6090 R15: 00007fff04788778 [ 827.260908][ C0] [ 827.261017][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g101649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 827.733201][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=49421 [ 827.741072][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g101649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 827.752510][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 827.762458][ C1] rcu: RCU grace-period kthread stack dump: [ 827.768324][ C1] task:rcu_preempt state:I stack:28296 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 827.780227][ C1] Call Trace: [ 827.783491][ C1] [ 827.786409][ C1] ? __schedule+0x10b9/0x5ee0 [ 827.791078][ C1] __schedule+0x1138/0x5ee0 [ 827.795570][ C1] ? __lock_acquire+0x436/0x2890 [ 827.800510][ C1] ? __pfx___schedule+0x10/0x10 [ 827.805346][ C1] ? find_held_lock+0x2b/0x80 [ 827.810019][ C1] ? schedule+0x2d7/0x3a0 [ 827.814341][ C1] schedule+0xe7/0x3a0 [ 827.818402][ C1] schedule_timeout+0x123/0x290 [ 827.823240][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 827.828602][ C1] ? __pfx_process_timeout+0x10/0x10 [ 827.833877][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 827.839671][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 827.845124][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 827.849882][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 827.855161][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 827.860350][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 827.865273][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 827.870117][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 827.875917][ C1] rcu_gp_kthread+0x26d/0x380 [ 827.880582][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 827.885768][ C1] ? rcu_is_watching+0x12/0xc0 [ 827.890517][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 827.895708][ C1] ? __kthread_parkme+0x19e/0x250 [ 827.900720][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 827.905906][ C1] kthread+0x3c5/0x780 [ 827.909967][ C1] ? __pfx_kthread+0x10/0x10 [ 827.914550][ C1] ? rcu_is_watching+0x12/0xc0 [ 827.919300][ C1] ? __pfx_kthread+0x10/0x10 [ 827.923879][ C1] ret_from_fork+0x983/0xb10 [ 827.928460][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 827.933561][ C1] ? __switch_to+0x7af/0x10d0 [ 827.938227][ C1] ? __pfx_kthread+0x10/0x10 [ 827.942808][ C1] ret_from_fork_asm+0x1a/0x30 [ 827.947577][ C1]